Edit tour

Windows Analysis Report
http://tinyurl.com/fresn30d39d

Overview

General Information

Sample URL:	http://tinyurl.com/fresn30d39d
Analysis ID:	1503753
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Found iframes

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Stores files to the Windows start menu directory

Suspicious form URL found

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4400 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7088 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7040 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6840 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5532 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://tinyurl.com/fresn30d39d" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Source: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso

LLM: Score: 10 Reasons: The domain 'patrulhadorn.com' does not match the brand name 'Campus Login Services', which is a potential security risk and a common indicator of a phishing site. The visual LLM's analysis suggests that the domain is suspicious and may lead to phishing attacks or unauthorized access to the login page. The presence of a login form and a 'Forgot password?' link on the page also raises concerns about the legitimacy of the site. The clean and simple design of the login form and the clear instructions for those who need to create an account may be attempts to make the site appear legitimate, but the mismatched domain and lack of brand association are strong indicators of a phishing site. DOM: 3.2.pages.csv

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1319127678&timestamp=1725396519973
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1319127678&timestamp=1725396519973
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: Number of links: 0

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D1*1u01ahp*_ga*OTA3NzM0MzcwLjE3MTE1OTcxNDA.*_ga_CW55HF8NVT*MTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D1*1u01ahp*_ga*OTA3NzM0MzcwLjE3MTE1OTcxNDA.*_ga_CW55HF8NVT*MTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso

HTTP Parser: Base64 decoded: 1725396447.000000

HTTP Parser: Title: Campus Login Services - Campus Login Services @ Fresno State does not match URL

HTTP Parser: Invalid link: Forgot password?

HTTP Parser: Invalid link: Accessibility

HTTP Parser: Form action: 94839.php?_nfpb=verify&_pageLabel=page_verify

Source: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso	HTTP Parser: <input type="password" .../> found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: <input type="password" .../> found

Source: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso	HTTP Parser: No favicon
Source: https://goo.gl/maps/4QkPVcVUFosBohKW7s	HTTP Parser: No favicon
Source: https://firebase.google.com/	HTTP Parser: No favicon
Source: https://firebase.google.com/	HTTP Parser: No favicon
Source: https://firebase.google.com/	HTTP Parser: No favicon
Source: https://firebase.google.com/	HTTP Parser: No favicon
Source: https://firebase.google.com/	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No favicon

Source: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&followup=https%3A%2F%2Fconsole.firebase.google.com%2F%3FdlAction%3DPrepDemoProject%26_gl%3D11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w&ifkv=Ab5oB3pr-EPaxlZP2p0VhWdr8N0B9ojvxtCPPnHxF1UoNugGCpHvaDbkH1ayPR1TM07V9ZC9HzJodw&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1678103009%3A1725396514901539&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49747 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49747 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /fresn30d39d HTTP/1.1Host: tinyurl.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 3049d3d.ocioagudo.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1Host: patrulhadorn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3DssoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
Source: global traffic	HTTP traffic detected: GET /2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3DssoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e7cf9275f425/main.js? HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e7cf9275f425/main.js? HTTP/1.1Host: patrulhadorn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
Source: global traffic	HTTP traffic detected: GET /2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1Host: patrulhadorn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAigCSib0lHFrpJqD1kroYyqPFIUCM
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/8bd898500ee14344 HTTP/1.1Host: patrulhadorn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /2/State_files/bootstrap.css HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3DssoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAigCSib0lHFrpJqD1kroYyqPFIUCM
Source: global traffic	HTTP traffic detected: GET /2/State_files/styles.css HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3DssoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAigCSib0lHFrpJqD1kroYyqPFIUCM
Source: global traffic	HTTP traffic detected: GET /2/images/fresno-state-logo-white.png HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patrulhadorn.com/2/State_files/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAigCSib0lHFrpJqD1kroYyqPFIUCM
Source: global traffic	HTTP traffic detected: GET /2/images/seal-transparent.png HTTP/1.1Host: patrulhadorn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patrulhadorn.com/2/State_files/styles.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAigCSib0lHFrpJqD1kroYyqPFIUCM
Source: global traffic	HTTP traffic detected: GET /images/favicon/favicon.ico HTTP/1.1Host: omniresources.fresnostate.eduConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://patrulhadorn.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/favicon/favicon.ico HTTP/1.1Host: omniresources.fresnostate.eduConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /maps/4QkPVcVUFosBohKW7s HTTP/1.1Host: goo.glConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: goo.glConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://goo.gl/maps/4QkPVcVUFosBohKW7sAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /extras.css HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /frame/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/homepage/Google_Firebase_LogotoIcon_Black_V01.gif HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame HTTP/1.1Host: firebase-dot-devsite-v2-prod.appspot.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/firebase-gradient.png HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_app_hosting.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_data_connect.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_genkit.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_app_distribution.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/styles/main.css HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://firebase-dot-devsite-v2-prod.appspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/styles/code-picker.css HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://firebase-dot-devsite-v2-prod.appspot.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_crashlytics.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_data_connect.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_remote_config.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/icons/vertex_ai.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_genkit_white.svg HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/icons/gemini-icon.png HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_app_hosting.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/backgrounds/firebase-gradient.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_app_distribution.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_crashlytics.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_genkit_white.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/icons/vertex_ai.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: firebase.google.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://firebase.google.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_remote_config.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/homepage/Google_Firebase_LogotoIcon_Black_V01.gif HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: firebase-dot-devsite-v2-prod.appspot.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://firebase-dot-devsite-v2-prod.appspot.com/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frameUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_pwa/firebase/manifest.json HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_app_hosting.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_data_connect.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_app_distribution.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_genkit.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/idx.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/flutter.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /images/icons/gemini-icon.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame?partial=1 HTTP/1.1Host: firebase-dot-devsite-v2-prod.appspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase-dot-devsite-v2-prod.appspot.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_static/offline?partial=1 HTTP/1.1Host: firebase-dot-devsite-v2-prod.appspot.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://firebase-dot-devsite-v2-prod.appspot.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/google-ads.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/ad-mob.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/google-marketing-platform.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /?partial=1 HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/playstore.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/datastudio.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/bigquery.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/slack.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/jira.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /_static/offline?partial=1 HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/integrations/android-studio.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/mods/bigquery-export.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/mods/algolia-search.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/nytimes_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/npr-one_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/halfbrick_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/duolingo_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /_d/alternate-gtm?referrer= HTTP/1.1Host: firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/alibaba_home_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/lyft_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/venmo_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/the-economist_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/trivago_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/ctrip_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/wattpad_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/appmakers/gameloft_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/homepage/solutions-dark_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/homepage/solutions_1x.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_genkit.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_crashlytics.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/run_remote_config.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /images/icons/vertex_ai.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /static/images/products/icons/build_genkit_white.svg HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /images/icons/gemini-icon.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468
Source: global traffic	HTTP traffic detected: GET /extras.css HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 19 Mar 2024 18:37:07 GMT
Source: global traffic	HTTP traffic detected: GET /images/homepage/Google_Firebase_LogotoIcon_Black_V01.gif HTTP/1.1Host: firebase.google.comConnection: keep-aliveaccept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 14 May 2024 18:47:19 GMT
Source: global traffic	HTTP traffic detected: GET /_d/dynamic_content HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468; _ga2=GA1.3.515335906.1725396493
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: firebase.google.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://firebase.google.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468If-Modified-Since: Tue, 27 Aug 2024 11:01:41 GMT
Source: global traffic	HTTP traffic detected: GET /_d/profile/ogb HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468; _ga2=GA1.3.515335906.1725396493
Source: global traffic	HTTP traffic detected: GET /_d/dynamic_content HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468; _ga2=GA1.3.515335906.1725396493
Source: global traffic	HTTP traffic detected: GET /_d/dynamic_content HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468; _ga2=GA1.3.515335906.1725396493
Source: global traffic	HTTP traffic detected: GET /_d/profile/user HTTP/1.1Host: firebase.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468; _ga2=GA1.3.515335906.1725396493; cookies_accepted=true; django_language=en; _ga=GA1.3.873235277.1725396499; _gid=GA1.3.826148967.1725396499; _dc_gtm_UA-36037335-1=1
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-CW55HF8NVT&gacid=873235277.1725396499&gtm=45je48s0v9101113212z872040039za200zb72040039&dma=0&gcs=G111&gcd=13r3r3l3l5l1&npa=0&pscdl=noapi&_ng=1&aip=1&fledge=1&frm=0&tag_exp=0&z=1696412847 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_pwa/firebase/icons/icon-144x144.png HTTP/1.1Host: firebase.google.comConnection: keep-aliveaccept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://firebase.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_devsite=GA1.3.1063458845.1725396468; _ga2=GA1.3.515335906.1725396493; cookies_accepted=true; django_language=en; _gid=GA1.3.826148967.1725396499; _dc_gtm_UA-36037335-1=1; _ga_64EQFFKSHW=GS1.1.1725396500.1.0.1725396500.0.0.0; _ga=GA1.1.873235277.1725396499; _ga_CW55HF8NVT=GS1.1.1725396500.1.0.1725396500.60.0.0
Source: global traffic	HTTP traffic detected: GET /s/opensearch.xml HTTP/1.1Host: firebase.google.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-36037335-1&cid=873235277.1725396499&jid=1867164972&gjid=1504886456&_gid=826148967.1725396499&_u=aGBAiEABFAAAAGAAI~&z=1924391560 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /?dlAction=PrepDemoProject&_gl=11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVTMTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w HTTP/1.1Host: console.firebase.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga2=GA1.3.515335906.1725396493; _gid=GA1.3.826148967.1725396499; _dc_gtm_UA-36037335-1=1; _ga_64EQFFKSHW=GS1.1.1725396500.1.0.1725396500.0.0.0; _ga=GA1.1.873235277.1725396499; _ga_CW55HF8NVT=GS1.1.1725396500.1.0.1725396500.60.0.0
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1319127678&timestamp=1725396519973 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=E9RKEzhd4zLuF_PsTxUI7aOVs5azmW12tTf9nLCkODvEKqNYsSbbr2YAUNUZV9ogc_K8IFrHPTcK1zFyUy8vnSHnax8EbB9q7aJgk37LtUAuA46wNOj5-6OLGfz3eeFppktYSXweKom_zIobIoaFxQNhH_M8x7gWyH3DwVoOc2c
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=aBAbLy520s-F3xpUDrxHCUvvoby6C_IPzwHUOQBwZknltWQr1I3YY0zpXFqPfVkCn9_yUej9_vIeIbTILEbFzIF0d0qE0NbqeGwE5xv8QHDHL_yh0tfZbJGtgyNp7VVDgLtP0pAxGSQ2a1LJJyk5JlpxG3oWC_P1NBIxVeDxM0I
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=aBAbLy520s-F3xpUDrxHCUvvoby6C_IPzwHUOQBwZknltWQr1I3YY0zpXFqPfVkCn9_yUej9_vIeIbTILEbFzIF0d0qE0NbqeGwE5xv8QHDHL_yh0tfZbJGtgyNp7VVDgLtP0pAxGSQ2a1LJJyk5JlpxG3oWC_P1NBIxVeDxM0I
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=aBAbLy520s-F3xpUDrxHCUvvoby6C_IPzwHUOQBwZknltWQr1I3YY0zpXFqPfVkCn9_yUej9_vIeIbTILEbFzIF0d0qE0NbqeGwE5xv8QHDHL_yh0tfZbJGtgyNp7VVDgLtP0pAxGSQ2a1LJJyk5JlpxG3oWC_P1NBIxVeDxM0I
Source: global traffic	HTTP traffic detected: GET /2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1Host: patrulhadorn.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo

Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: <a href="//www.youtube.com/user/Firebase" equals www.youtube.com (Youtube)
Source: chromecache_409.2.dr	String found in binary or memory: "https://www.linkedin.com/showcase/firebase/" equals www.linkedin.com (Linkedin)
Source: chromecache_409.2.dr	String found in binary or memory: "https://www.youtube.com/user/Firebase", equals www.youtube.com (Youtube)
Source: chromecache_409.2.dr	String found in binary or memory: "target": "https://www.youtube.com/watch?v=XHvWx1F3S4A={seek_to_second_number}", equals www.youtube.com (Youtube)
Source: chromecache_409.2.dr	String found in binary or memory: "contentUrl": "https://www.youtube.com/watch?v=XHvWx1F3S4A", equals www.youtube.com (Youtube)
Source: chromecache_409.2.dr	String found in binary or memory: "embedUrl": "https://www.youtube.com/embed/XHvWx1F3S4A", equals www.youtube.com (Youtube)
Source: chromecache_427.2.dr	String found in binary or memory: "youtube:v3":{methodPath:"{1x?T.1/}",overrides:{"youtube.(live\|sponsors\|superChatEvents).":{methodPath:"{1x/}",referenceUrl:"https://developers.google.com/youtube/v3/live/docs/",title:"YouTube Live API"}},referenceUrl:"https://developers.google.com/youtube/v3/docs/"},"youtubeAnalytics:v2":{methodPath:"{1x/}",referenceUrl:"https://developers.google.com/youtube/analytics/reference/"},"youtubereporting:v1":{methodPath:"{apiVersion}/{1x.1/}",referenceUrl:"https://developers.google.com/youtube/reporting/v1/reference/rest/"}};_ds.$Q=a=>a!=null?a:_ds.Pt;var bR,cR,eR,fR,gR,hR,iR,jR,kR,lR,mR,nR,oR,pR;_ds.aR=(0,_ds.Hs)`<svg width="22" height="22" viewBox="0 0 22 22" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M13 11L11 13L9 11L11 9L13 11ZM11 5L13.12 7.12L15.62 4.62L11 0L6.38 4.62L8.88 7.12L11 5ZM5 11L7.12 8.88L4.62 6.38L0 11L4.62 15.62L7.12 13.12L5 11ZM17 11L14.88 13.12L17.38 15.62L22 11L17.38 6.38L14.88 8.88L17 11ZM11 17L8.88 14.88L6.38 17.38L11 22L15.62 17.38L13.12 14.88L11 17Z"/></svg>`;bR=(0,_ds.Hs)`<svg width="133" height="79" viewBox="0 0 133 79" fill="none" xmlns="http://www.w3.org/2000/svg"> <g clip-path="url(#clip0_5279_27844)"> <path d="M95.9998 31.3V77H25.2998V31.3H95.9998Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M95.9998 31.3V77H80.7998V31.3H95.9998Z" fill="#D2E3FC" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M25.2998 31.3001H95.9998V25.6001H25.2998V31.3001Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M1.5 76.9C3.3 70.2 11.3 71.2 11.3 71.2C11.3 71.2 7.6 64.4 12.2 62.1C17.4 59.6 23.7 64.5 27.3 68.5C27.3 68.5 25.9 63.7 30 63.7C36.9 64.4 42.6 77 42.6 77L1.5 76.9Z" fill="#34A853" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M113.8 24.0001C105.5 9.00009 63.6002 -6.59991 48.4002 6.30009C40.0002 13.3001 38.4002 27.3001 54.1002 50.0001" stroke="black" stroke-width="2"/> <path d="M129.3 67.8002H106.4C105.3 67.8002 104.4 66.9002 104.4 65.8002V16.2002C104.4 15.1002 105.3 14.2002 106.4 14.2002H129.3C130.4 14.2002 131.3 15.1002 131.3 16.2002V65.8002C131.3 66.9002 130.4 67.8002 129.3 67.8002Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M123.6 20.3003H112" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M117.8 33.6001V40.2001" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M117.8 48.7002V55.3002" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M125.4 39.9001H110.3V48.5001H125.4V39.9001Z" fill="white" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M123.2 53.9001H112.4C111.2 53.9001 110.3 54.9001 110.3 56.0001V60.3001C110.3 61.5001 111.3 62.4001 112.4 62.4001H123.2C124.4 62.4001 125.3 61.4001 125.3 60.3001V56.0001C125.4 54.9001 124.4 53.9001 123.2 53.9001Z" fill="#FBBC04" stroke="black" stroke-width="2" stroke-miterlimit="10"/> <path d="M121.1 26.0002H114.6C112.2 26.0002 110.3 27.9002 110.3 30.3002C110.3 32.7002 112.2
Source: chromecache_353.2.dr, chromecache_390.2.dr, chromecache_471.2.dr, chromecache_433.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},nd:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_329.2.dr, chromecache_443.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=Bb()},nd:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_433.2.dr	String found in binary or memory: N.getElementsByTagName("iframe"),ma=R.length,la=0;la<ma;la++)if(!u&&c(R[la],H.Ee)){XI("https://www.youtube.com/iframe_api");u=!0;break}})}}else G(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_321.2.dr	String found in binary or memory: _.jq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.jq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.jq(_.sq(c))+"&hl="+_.jq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.jq(m)+"/chromebook/termsofservice.html?languageCode="+_.jq(d)+"&regionCode="+_.jq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+"?hl="+_.jq(d)+"&gl="+_.jq(c)+(g?"&color_scheme="+ equals www.youtube.com (Youtube)
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: _ds.Jr=function(a,b,c){a.slice(-1)!=="/"&&(a=`${a}/`);c=encodeURIComponent(c);a=encodeURIComponent(a);b=encodeURIComponent(b);Hr(`https://www.linkedin.com/shareArticle?mini=true&url=${a}&title=${b}&summary=${c}`)};_ds.Kr=function(a){a=encodeURIComponent(a);Hr(`https://www.facebook.com/sharer/sharer.php?u=${a}`,555)}; equals www.facebook.com (Facebook)
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: _ds.Jr=function(a,b,c){a.slice(-1)!=="/"&&(a=`${a}/`);c=encodeURIComponent(c);a=encodeURIComponent(a);b=encodeURIComponent(b);Hr(`https://www.linkedin.com/shareArticle?mini=true&url=${a}&title=${b}&summary=${c}`)};_ds.Kr=function(a){a=encodeURIComponent(a);Hr(`https://www.facebook.com/sharer/sharer.php?u=${a}`,555)}; equals www.linkedin.com (Linkedin)
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: _ds.Z(a)+'.vtt" default/></video>')};var qS,rS,sS,uS,tS,vS,wS;_ds.pS=[(0,_ds.t)`autoplay`,(0,_ds.t)`controls`,(0,_ds.t)`embed_domain`,(0,_ds.t)`enablejsapi`,(0,_ds.t)`end`,(0,_ds.t)`hl`,(0,_ds.t)`showinfo`,(0,_ds.t)`start`,(0,_ds.t)`video-id`];qS=["rel"];rS=["listType","list"];sS=null;uS=async function(){sS\|\|(sS=new _ds.Kf);if("YT"in window&&window.YT!==void 0)return sS.promise;_ds.kg("onYouTubeIframeAPIReady",tS);try{await _ds.Nk("//www.youtube.com/iframe_api")}catch(a){sS.reject()}return sS.promise}; equals www.youtube.com (Youtube)
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: _ds.w([_ds.O({type:Boolean,Aa:"auto-update"}),_ds.x(Object)],_ds.mS.prototype,"autoUpdate",void 0);_ds.w([_ds.Q(),_ds.x(Object)],_ds.mS.prototype,"ul",void 0);_ds.w([_ds.Q(),_ds.x(Object)],_ds.mS.prototype,"signedIn",void 0);_ds.w([_ds.Q(),_ds.x(Object)],_ds.mS.prototype,"profile",void 0);var nS=function(a){a='<a href="//www.youtube.com/watch?v='+_ds.SG(a.videoId)+'" class="devsite-video-placeholder"><img src="/_static/images/video-placeholder.svg" alt=""><span>';return(0,_ds.W)(a+"This resource may not be available in your region.</span></a>")},oS=function(a){a=a.videoId;return(0,_ds.W)('<video class="devsite-basic-video-player" controls crossorigin="anonymous"><source src="//googledownloads.cn/cn-devsite/'+_ds.Z(a)+'.mp4" type="video/mp4"/><track label="Chinese" kind="captions" srclang="zh" src="//googledownloads.cn/cn-devsite/captions/'+ equals www.youtube.com (Youtube)
Source: chromecache_315.2.dr, chromecache_436.2.dr, chromecache_450.2.dr, chromecache_339.2.dr	String found in binary or memory: return b}uC.J="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: tinyurl.com
Source: global traffic	DNS traffic detected: DNS query: 3049d3d.ocioagudo.com
Source: global traffic	DNS traffic detected: DNS query: patrulhadorn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: omniresources.fresnostate.edu
Source: global traffic	DNS traffic detected: DNS query: goo.gl
Source: global traffic	DNS traffic detected: DNS query: firebase.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: firebase-dot-devsite-v2-prod.appspot.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: console.firebase.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1Host: patrulhadorn.comConnection: keep-aliveContent-Length: 22sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GETContent-type: application/x-www-form-urlencodedX-Requested-Type: GETUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-Requested-with: XMLHttpRequestX-Requested-TimeStamp: ci8-MjUyMprMsAjS02nMtIOHSKM: 22332926sec-ch-ua-platform: "Windows"Accept: */*Origin: https://patrulhadorn.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3DssoAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 03 Sep 2024 20:47:33 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockCache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutablePragma: publicCF-Cache-Status: HITAge: 286Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Ohuggx60N59IWOE6%2FzH9UnY2BkeisvF4CFtKfDyplxHLR0nOGDsHxaUDFBYkJozcAMJ3D0PtbG%2FzePaeFR%2BwJjKSTrSe8Ym5UCugblzkE56aFcq%2FziDpNTA8ScrE2oqhc5O"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8bd8987c190e0ca2-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 03 Sep 2024 20:47:33 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingX-Content-Type-Options: nosniffX-Content-Type-Options: nosniffX-XSS-Protection: 1; mode=blockX-XSS-Protection: 1; mode=blockCache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutablePragma: publicCF-Cache-Status: HITAge: 286Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ksSwSShbW4k6bxIzX6jH8PDTytQrOenz6Cr8vqgSslOkH9ppF7eogU5VRWKCZoGV8UqKpO96hP8z5M3zefGLKwym%2BakIeZQLfgKn9qoudsf8OcnUiNUyGAFZJqrJdayBwT9V"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8bd8987c1c8043ad-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Cache-Control: no-cache, no-store, max-age=0, must-revalidatePragma: no-cacheExpires: Mon, 01 Jan 1990 00:00:00 GMTDate: Tue, 03 Sep 2024 20:47:37 GMTStrict-Transport-Security: max-age=31536000Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreportContent-Security-Policy: script-src 'report-sample' 'nonce-ua2N75EloVlm5PJAsitWjA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self'Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlistCross-Origin-Opener-Policy: unsafe-nonePermissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=*Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-VersionServer: ESFX-XSS-Protection: 0X-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniffAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Accept-Ranges: noneVary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-EncodingConnection: closeTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:48:16 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-w63p6jzb7Lfce2M2t5ylRpLVOuez4z' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 56116fbf7b2f5d7b2a4a0a30807f2e35Date: Tue, 03 Sep 2024 20:48:16 GMTServer: Google FrontendContent-Length: 93648Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:48:16 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-3eMkcPFeuuSq/RzfUm6rRG58WdQwho' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: efa1b065334eeaaf2f18c984366fc00aDate: Tue, 03 Sep 2024 20:48:17 GMTServer: Google FrontendContent-Length: 93644Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:48:18 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-mTgGl0uMkuL0/IdnovAWiQl/qeS52W' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 0868641e26d882902a064413034ce796Date: Tue, 03 Sep 2024 20:48:18 GMTServer: Google FrontendContent-Length: 93648Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:48:20 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-AfTyZbnRaDCPK/5RA/rmdRKPPTWW7J' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 6858425b34cb46557fd4fc87f25b34f3Date: Tue, 03 Sep 2024 20:48:20 GMTServer: Google FrontendContent-Length: 93652Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=utf-8Vary: CookieSet-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:48:20 GMT; Max-Age=63072000; Path=/Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-KR2wkzaH8LdpddKce5rUdmWoONj1AO' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2Strict-Transport-Security: max-age=63072000; includeSubdomains; preloadX-Frame-Options: SAMEORIGINX-XSS-Protection: 0X-Content-Type-Options: nosniffCache-Control: no-cache, must-revalidateExpires: 0Pragma: no-cacheX-Cloud-Trace-Context: 9123c9ffeb30fcb20ec1de941e28e7cfDate: Tue, 03 Sep 2024 20:48:20 GMTServer: Google FrontendContent-Length: 93705Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://developers.google.com/chrome/management/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://developers.google.com/chrome/policy/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://www.d-project.com/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://www.denso-wave.com/qrcode/faqpatent-e.html
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: chromecache_436.2.dr, chromecache_450.2.dr, chromecache_339.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_485.2.dr, chromecache_391.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://api-explorer-staging.uc.r.appspot.com/apix-embedder.js
Source: chromecache_352.2.dr, chromecache_309.2.dr, chromecache_369.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_329.2.dr, chromecache_353.2.dr, chromecache_315.2.dr, chromecache_436.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/access-context-manager/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/advisory-notifications/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/ai-platform/notebooks/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/anthos/multicluster-management/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/api-gateway/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/api-keys/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/apigee/docs/reference/apis/apigee/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/apigee/docs/reference/apis/apigeeregistry/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/app-hub/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/appengine/docs/admin-api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/artifacts/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/asset-inventory/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/assured-workloads/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bare-metal/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigquery-transfer/docs/reference/datatransfer/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/column-data-masking/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/connections-api-intro/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/analytics-hub/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/bigqueryconnection/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/bigtable/docs/reference/admin/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/billing/docs/reference/budget/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/billing/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/binary-authorization/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/blockchain-node-engine/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/certificate-authority-service/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/certificate-manager/docs/reference/public-ca/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/channel/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/cloud-build/docs/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/compute/docs/osconfig/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/compute/docs/oslogin/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/compute/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/contact-center/insights/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/container-analysis/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/container-registry/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/data-catalog/docs/reference/data-lineage/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/data-catalog/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/data-fusion/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/data-labeling/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/database-migration/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dataflow/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dataplex/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dataproc-metastore/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dataproc/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/datastore/docs/reference/admin/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/deploy/docs/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/deployment-manager/docs/reference/latest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/deployment-manager/docs/reference/v2beta/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/deployment-manager/runtime-configurator/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dialogflow-enterprise/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/discovery-engine/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dns/api/v1/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/dns/docs/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/document-ai/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/document-warehouse/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/domains/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/error-reporting/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/eventarc/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/filestore/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/firestore/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/functions/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/healthcare/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/iam/credentials/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/policyanalyzer/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/policysimulator/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/policytroubleshooter/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/iam/docs/reference/sts/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/identity-platform/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/identity/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/integration-connectors/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/kms/docs/reference/inventory/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/kms/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/kubernetes-engine/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/life-sciences/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/log?format=json&hasfast=true
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/managed-microsoft-ad/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/memorystore/docs/memcached/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/memorystore/docs/redis/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/migration-center/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/migration-center/docs/rapidmigrationassessment/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/ml-engine/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/monitoring/api/ref_v3/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/natural-language/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/network-connectivity/docs/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/network-connectivity/docs/reference/networkconnectivity/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/network-intelligence-center/docs/connectivity-tests/reference/networkmanage
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/pubsub/lite/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/recommendations-ai/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/recommender/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/resource-manager/docs/cloud-asset-inventory/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/resource-manager/docs/reference/resource-settings/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/resource-manager/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/scheduler/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/secret-manager/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/service-directory/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-consumer-management/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-control/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-management/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/service-infrastructure/docs/service-networking/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/service-usage/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/shell/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/solutions/vmware-as-a-service/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/source-repositories/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/speech-to-text/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/sql/docs/mysql/admin-api/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/sql/docs/postgres/admin-api/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/storage-transfer/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/storage/docs/json_api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/support/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/talent-solution/job-search/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/tasks/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/text-to-speech/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/tpu/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/trace/docs/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/trace/docs/reference/v1/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/traffic-director/docs/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/translate/docs/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/vertex-ai/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/video-intelligence/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/vision/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/vpc/docs/reference/vpcaccess/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/web-risk/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/workflows/docs/reference/executions/rest
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/workflows/docs/reference/executions/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/workflows/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://cloud.google.com/workload-manager/docs/reference/rest/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://console.firebase.google.com/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developer.android.com/google/play/integrity/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developer.chrome.com/docs/versionhistory/reference/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://developerprofiles-pa.clients6.google.com
Source: chromecache_393.2.dr, chromecache_352.2.dr, chromecache_416.2.dr, chromecache_397.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developerprofiles-pa.googleapis.com
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com
Source: chromecache_364.2.dr, chromecache_352.2.dr, chromecache_409.2.dr, chromecache_416.2.dr, chromecache_382.2.dr, chromecache_440.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/abusive-experience-report/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/ad-experience-report/v1/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/alertcenter/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/data-transfer/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/directory/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/groups-migration/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/groups-settings/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admin-sdk/reports/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admob/api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/admob/api/v1/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/adsense/host/v4.1/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/adsense/management/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/amp/cache/reference/acceleratedmobilepageurl/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/config/mgmt/v3/mgmtReference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/config/provisioning/v3/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/config/userdeletion/v3/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/core/v3/reference
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/core/v4/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/data/v1/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/mcf/v3/reference
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/metadata/v3/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/realtime/v3/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/android-publisher/api-ref/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/android/management/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/android/work/play/custom-app-api/v1/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/android/work/play/emm-api/v1/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/apis-explorer
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/apps-script/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/assistant/smarthome/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/authorized-buyers/apis/marketplace/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/authorized-buyers/apis/realtimebidding/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/authorized-buyers/apis/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/bid-manager/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/blogger/docs/2.0/json/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/blogger/docs/3.0/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/books/docs/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/calendar/v3/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/civic-information/docs/v2/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/classroom/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/cloud-search/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/custom-search/v1/introduction/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/data-portability/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/digital-asset-links/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/discovery/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/display-video/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/docs/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/domains/acme-dns/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/domains/rdap/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/doubleclick-advertisers/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/drive/activity/v2/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/drive/labels/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/drive/v2/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/drive/v3/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/fact-check/tools/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/fit/rest/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/fonts/docs/developer_api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/forms/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/games/services/management/api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/games/services/publishing/api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/games/services/web/api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/gmail/api/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/gmail/postmaster/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/google-apps/licensing/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/google-apps/reseller/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/hangouts/chat/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/identity/toolkit/web/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/keep/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/knowledge-graph/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/manufacturers/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/maps/documentation/places/web-service/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/marketing-platform/devguides/api/admin/v1/rest/v1alpha/organizations.a
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/my-business/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/businessinformation/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/notifications/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/performance/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/qanda/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/my-business/reference/verifications/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/nest/device-access/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/pay/passes/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/photos/library/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/play/developer/reporting/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/profile/badges/profile/created-profile
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/profile/badges/recognitions/learnings
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/profile/content-policy
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_326.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/profile/help/faq#why_am_i_unable_to_create_a_profile_with_my_google_wo
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/safe-browsing/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/safe-browsing/v4/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/search-ads/reporting/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/search-ads/v2/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/search/apis/indexing-api/v3/reference/indexing/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/sheets/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/shopping-content/v2/reference/v2.1/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/site-verification/v1/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/slides/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/speed/docs/insights/v5/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/streetview/publish/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/tag-manager/api/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/tag-manager/api/v1/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/tasks/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/terms/site-terms
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/travel/impact-model/docs/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/vault/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/web/tools/chrome-user-experience-report/api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/webmaster-tools/search-console-api/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/workspace/events/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/youtube/analytics/reference/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/youtube/reporting/v1/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/youtube/v3/docs/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/youtube/v3/live/docs/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/zero-touch/reference/customer/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://developers.google.com/zero-touch/reference/reseller/rest/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://developerscontentsearch-pa.clients6.google.com
Source: chromecache_393.2.dr, chromecache_397.2.dr	String found in binary or memory: https://developerscontentsearch-pa.googleapis.com
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://developerscontentserving-pa.clients6.google.com
Source: chromecache_393.2.dr, chromecache_397.2.dr	String found in binary or memory: https://developerscontentserving-pa.googleapis.com
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://discovery.googleapis.com/discovery/v1/apis?&preferred=true
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://explorer.apis.google.com/apix-embedder.js
Source: chromecache_393.2.dr, chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr, chromecache_397.2.dr	String found in binary or memory: https://firebase-dot-devsite-v2-prod.appspot.com
Source: chromecache_364.2.dr	String found in binary or memory: https://firebase.google.com/_d/profile/user
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/community
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/community/events
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/community/learn
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/community/stories
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/docs
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/docs/build
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/dynamic-links/rest/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/docs/guides
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/hosting/reference/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/projects/api/reference/rest/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/app-distribution/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/appcheck/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/fcm/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/fcmdata/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/rest/database/database-management/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/reference/rest/storage/rest/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/docs/run
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/docs/samples
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/storage/security/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/test-lab/reference/testing/rest/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/docs/test-lab/reference/toolresults/rest/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/pricing
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products-build
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products-run
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/ab-testing
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/analytics
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/app-check
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/app-distribution
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://firebase.google.com/products/app-distribution/
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/app-hosting
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/auth
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/cloud-messaging
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/crashlytics
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/data-connect
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/extensions
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/firestore
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/functions
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/generative-ai
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/genkit
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/hosting
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/in-app-messaging
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/ml
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/performance
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/realtime-database
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/remote-config
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/storage
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/products/test-lab
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/s/opensearch.xml
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/s/results
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/solutions
Source: chromecache_393.2.dr, chromecache_397.2.dr	String found in binary or memory: https://firebase.google.com/static/styles/code-picker.css
Source: chromecache_393.2.dr, chromecache_397.2.dr	String found in binary or memory: https://firebase.google.com/static/styles/main.css
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.google.com/support
Source: chromecache_364.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://firebase.googleblog.com/
Source: chromecache_313.2.dr, chromecache_448.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_313.2.dr, chromecache_448.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v61/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v32/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_313.2.dr, chromecache_489.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xTDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vrtSM1J-gEPT5Ese6hmH
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://github.com/...
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://github.com/dmoscrop/fold-case
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://google.dev
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://jsfiddle.net/api/post/library/pure/
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?v=quarterly&key=$
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://mathiasbynens.be/
Source: chromecache_436.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_329.2.dr, chromecache_353.2.dr, chromecache_315.2.dr, chromecache_436.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_352.2.dr, chromecache_480.2.dr, chromecache_416.2.dr, chromecache_321.2.dr, chromecache_427.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_352.2.dr, chromecache_480.2.dr, chromecache_416.2.dr, chromecache_321.2.dr, chromecache_427.2.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_352.2.dr, chromecache_480.2.dr, chromecache_416.2.dr, chromecache_321.2.dr, chromecache_427.2.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_315.2.dr, chromecache_436.2.dr, chromecache_450.2.dr, chromecache_339.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_485.2.dr, chromecache_391.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://storage.googleapis.com/apisnippets
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://support.google.com/$
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://support.google.com/legal/answer/13505487
Source: chromecache_485.2.dr, chromecache_435.2.dr, chromecache_307.2.dr, chromecache_391.2.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_329.2.dr, chromecache_353.2.dr, chromecache_315.2.dr, chromecache_436.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=$
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_329.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_485.2.dr, chromecache_435.2.dr, chromecache_307.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_485.2.dr, chromecache_435.2.dr, chromecache_307.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_485.2.dr, chromecache_435.2.dr, chromecache_307.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_436.2.dr, chromecache_480.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_321.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_485.2.dr, chromecache_435.2.dr, chromecache_307.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_329.2.dr, chromecache_353.2.dr, chromecache_315.2.dr, chromecache_436.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://www.googleapis.com/auth/developerprofiles
Source: chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	String found in binary or memory: https://www.googleapis.com/auth/developerprofiles.award
Source: chromecache_436.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_450.2.dr, chromecache_471.2.dr, chromecache_433.2.dr, chromecache_339.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_485.2.dr, chromecache_435.2.dr, chromecache_307.2.dr, chromecache_391.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=$
Source: chromecache_309.2.dr, chromecache_369.2.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_364.2.dr, chromecache_437.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr, chromecache_397.2.dr	String found in binary or memory: https://www.gstatic.com/devrel-devsite/prod/v35e3d347a323c673294794cf0b643760fd66bb529efbd7dccaa2251
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/$
Source: chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	String found in binary or memory: https://www.linkedin.com/shareArticle?mini=true&url=$
Source: chromecache_315.2.dr, chromecache_436.2.dr, chromecache_450.2.dr, chromecache_339.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_329.2.dr, chromecache_353.2.dr, chromecache_443.2.dr, chromecache_390.2.dr, chromecache_471.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49995
Source: unknown	Network traffic detected: HTTP traffic on port 49923 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49994
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50006
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50000
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50003
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50005
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50004
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50003 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49923
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49728 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@29/372@54/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://tinyurl.com/fresn30d39d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7088 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6840 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2104 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=7088 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6840 --field-trial-handle=1776,i,8604255004338897512,17637755144303128945,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Run

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_427.2.dr	Binary or memory string: referenceUrl:"https://developers.google.com/games/services/publishing/api/"},"gamesManagement:v1management":{methodPath:"{1x/}",referenceUrl:"https://developers.google.com/games/services/management/api/"},"gkebackup:v1":{methodPath:"{apiVersion}/{1x?T.1/}",referenceUrl:"https://cloud.google.com/kubernetes-engine/docs/add-on/backup-for-gke/reference/rest/"},"gkehub:v2alpha":{description:"Connect your Anthos clusters on VMware and other Kubernetes clusters to Google Cloud.",methodPath:"{apiVersion}/{1x?T*.1/}",
Source: chromecache_427.2.dr	Binary or memory string: referenceUrl:"https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/"},"vmmigration:v1alpha1":{methodPath:"{apiVersion}/{1x?T.1/}",referenceUrl:"https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/"},"vmwareengine:v1":{methodPath:"",referenceUrl:"https://cloud.google.com/solutions/vmware-as-a-service/"},"vpcaccess:v1":{methodPath:"{apiVersion}/{1x.1/}",referenceUrl:"https://cloud.google.com/vpc/docs/reference/vpcaccess/rest/"},"vpcaccess:v1beta1":{methodPath:"{apiVersion}/{1x*.1/}",
Source: chromecache_427.2.dr	Binary or memory string: ["product-CloudKeyAccessJustifications","Key Access Justifications"],["product-Kf","Kf"],["product-Knative","Knative"],["product-KnativeServingOnVmware","Knative serving on VMware"],["product-KnativeServing","Knative serving"],["api-KnowledgeGraphSearchApi","Knowledge Graph Search API"],["product-Coroutines","Kotlin Coroutines"],["api-Flow","Kotlin Flow"],["language-Kotlin","Kotlin"],["category-AndroidKotlin","Kotlin on Android"],["product-Kotlin","Kotlin"],["api-KubernetesEngineApi","Kubernetes Engine API"],
Source: chromecache_427.2.dr	Binary or memory string: ["category-GoogleCloudFundamentals","Google Cloud Fundamentals"],["product-GoogleCloudMarketplace","Google Cloud Marketplace"],["product-GoogleCloud","Google Cloud"],["product-CloudSdk","Google Cloud SDK"],["category-GoogleCloudUseCases","Google Cloud use cases"],["product-GoogleCloudVmwareEngine","Google Cloud VMware Engine"],["api-ContactsCarddavApi","Google Contacts CardDAV API"],["programGroup-CommunityAccelerator","Google Developer Accelerator"],["product-GoogleDeveloperDocumentationStyleGuide",

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://tinyurl.com/fresn30d39d	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://mths.be/fromcodepoint	0%	URL Reputation	safe
https://cloud.google.com/document-ai/docs/reference/rest/	0%	Avira URL Cloud	safe
http://www.broofa.com	0%	URL Reputation	safe
https://cloud.google.com/api-gateway/docs/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/products/ml	0%	Avira URL Cloud	safe
https://developers.google.com/zero-touch/reference/customer/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/docs/reference/rest/database/database-management/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/analytics/devguides/reporting/metadata/v3/reference/	0%	Avira URL Cloud	safe
https://developer.android.com/google/play/integrity/	0%	Avira URL Cloud	safe
https://firebase.google.com/sw.js	0%	Avira URL Cloud	safe
https://developerprofiles-pa.clients6.google.com	0%	Avira URL Cloud	safe
https://firebase.google.com/static/images/integrations/slack.png	0%	Avira URL Cloud	safe
https://cloud.google.com/pubsub/lite/docs/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/admin-sdk/alertcenter/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/data-catalog/docs/reference/data-lineage/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/static/images/products/icons/build_genkit_white.svg	0%	Avira URL Cloud	safe
https://firebase.google.com/community/events	0%	Avira URL Cloud	safe
https://cloud.google.com/migration-center/docs/rapidmigrationassessment/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/search-ads/reporting/api/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/compute/docs/osconfig/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/workload-manager/docs/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/static/images/integrations/idx.png	0%	Avira URL Cloud	safe
https://developers.google.com/adsense/host/v4.1/	0%	Avira URL Cloud	safe
https://cloud.google.com/talent-solution/job-search/docs/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/static/images/appmakers/lyft_1x.png	0%	Avira URL Cloud	safe
https://google.dev	0%	Avira URL Cloud	safe
https://firebase.google.com/images/homepage/Google_Firebase_LogotoIcon_Black_V01.gif	0%	Avira URL Cloud	safe
https://cloud.google.com/firestore/docs/reference/rest/	0%	Avira URL Cloud	safe
http://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso	0%	Avira URL Cloud	safe
https://cloud.google.com/dataproc/reference/rest/	0%	Avira URL Cloud	safe
https://patrulhadorn.com/cdn-cgi/challenge-platform/h/g/jsd/r/8bd898500ee14344	0%	Avira URL Cloud	safe
https://firebase.google.com/static/images/products/mods/algolia-search.svg	0%	Avira URL Cloud	safe
https://developerscontentserving-pa.clients6.google.com	0%	Avira URL Cloud	safe
https://developers.google.com/manufacturers/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/datastore/docs/reference/admin/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/anthos/multicluster-management/reference/rest/	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
https://developers.google.com/tag-manager/api/v1/reference/	0%	Avira URL Cloud	safe
https://firebase.google.com/products-run	0%	Avira URL Cloud	safe
https://developers.google.com/analytics/devguides/reporting/realtime/v3/reference/	0%	Avira URL Cloud	safe
https://developers.google.com/drive/v2/reference/	0%	Avira URL Cloud	safe
https://cloud.google.com/video-intelligence/docs/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com	0%	Avira URL Cloud	safe
https://firebase.google.com/docs/dynamic-links/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/products/cloud-messaging	0%	Avira URL Cloud	safe
https://cloud.google.com/ai-platform/notebooks/docs/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/products/hosting	0%	Avira URL Cloud	safe
https://developers.google.com/site-verification/v1/	0%	Avira URL Cloud	safe
https://developers.google.com/pay/passes/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/s/opensearch.xml	0%	Avira URL Cloud	safe
https://developers.google.com/android-publisher/api-ref/rest/	0%	Avira URL Cloud	safe
https://support.google.com/legal/answer/13505487	0%	Avira URL Cloud	safe
https://firebase.google.com/products/app-distribution	0%	Avira URL Cloud	safe
https://developers.google.com/fact-check/tools/api/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/vault/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/docs/reference/appcheck/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/products-build	0%	Avira URL Cloud	safe
https://firebase-dot-devsite-v2-prod.appspot.com/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame	0%	Avira URL Cloud	safe
https://cloud.google.com/iam/docs/reference/policytroubleshooter/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/zero-touch/reference/reseller/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/s/results	0%	Avira URL Cloud	safe
https://developers.google.com/maps/documentation/places/web-service/	0%	Avira URL Cloud	safe
https://cloud.google.com/domains/docs/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/search-ads/v2/reference/	0%	Avira URL Cloud	safe
https://developers.google.com/my-business/reference/performance/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/products/storage	0%	Avira URL Cloud	safe
https://firebase.google.com/products/data-connect	0%	Avira URL Cloud	safe
https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/vision/docs/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/life-sciences/docs/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/docs/projects/api/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/_static/offline?partial=1	0%	Avira URL Cloud	safe
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-36037335-1&cid=873235277.1725396499&jid=1867164972&gjid=1504886456&_gid=826148967.1725396499&_u=aGBAiEABFAAAAGAAI~&z=1924391560	0%	Avira URL Cloud	safe
https://developers.google.com/photos/library/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/analytics/devguides/config/mgmt/v3/mgmtReference/	0%	Avira URL Cloud	safe
https://firebase.google.com/static/styles/main.css	0%	Avira URL Cloud	safe
https://developers.google.com/sheets/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/tasks/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/analytics/devguides/reporting/data/v1/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/nest/device-access/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/admin-sdk/data-transfer/v1/reference/	0%	Avira URL Cloud	safe
https://developers.google.com/youtube/analytics/reference/	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk?	0%	Avira URL Cloud	safe
https://developers.google.com/youtube/reporting/v1/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/gmail/postmaster/reference/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/docs/storage/security/	0%	Avira URL Cloud	safe
https://cloud.google.com/asset-inventory/docs/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/	0%	Avira URL Cloud	safe
https://firebase.google.com/products/in-app-messaging	0%	Avira URL Cloud	safe
https://firebase.google.com/static/images/appmakers/npr-one_1x.png	0%	Avira URL Cloud	safe
https://firebase.google.com/products/realtime-database	0%	Avira URL Cloud	safe
https://developers.google.com/play/developer/reporting/reference/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/iam/docs/reference/sts/rest/	0%	Avira URL Cloud	safe
https://cloud.google.com/memorystore/docs/redis/reference/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/doubleclick-advertisers/rest/	0%	Avira URL Cloud	safe
https://developers.google.com/admob/api/v1/reference/rest/	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
tinyurl.com	104.17.112.233	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
plus.l.google.com	142.250.184.238	true	false	unknown
patrulhadorn.com	188.114.97.3	true	true	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
stats.g.doubleclick.net	142.251.168.154	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
analytics-alv.google.com	216.239.38.181	true	false	unknown
www3.l.google.com	142.250.185.206	true	false	unknown
play.google.com	172.217.16.206	true	false	unknown
3049d3d.ocioagudo.com	188.114.96.3	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
firebase.google.com	172.217.16.206	true	false	unknown
td.doubleclick.net	172.217.18.98	true	false	unknown
FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com	52.33.19.234	true	false	unknown
goo.gl	142.250.186.78	true	false	unknown
firebase-dot-devsite-v2-prod.appspot.com	142.250.186.52	true	false	unknown
omniresources.fresnostate.edu	unknown	unknown	false	unknown
console.firebase.google.com	unknown	unknown	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
analytics.google.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://firebase.google.com/sw.js	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/integrations/slack.png	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/products/icons/build_genkit_white.svg	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/integrations/idx.png	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/appmakers/lyft_1x.png	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/images/homepage/Google_Firebase_LogotoIcon_Black_V01.gif	false	Avira URL Cloud: safe	unknown
http://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso	false	Avira URL Cloud: safe	unknown
https://patrulhadorn.com/cdn-cgi/challenge-platform/h/g/jsd/r/8bd898500ee14344	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/products/mods/algolia-search.svg	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/s/opensearch.xml	false	Avira URL Cloud: safe	unknown
https://firebase-dot-devsite-v2-prod.appspot.com/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/_static/offline?partial=1	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-36037335-1&cid=873235277.1725396499&jid=1867164972&gjid=1504886456&_gid=826148967.1725396499&_u=aGBAiEABFAAAAGAAI~&z=1924391560	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/styles/main.css	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/static/images/appmakers/npr-one_1x.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developers.google.com/zero-touch/reference/customer/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/ml	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/docs/reference/rest/database/database-management/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/document-ai/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/analytics/devguides/reporting/metadata/v3/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developerprofiles-pa.clients6.google.com	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_485.2.dr, chromecache_391.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/api-gateway/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.android.com/google/play/integrity/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/pubsub/lite/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/admin-sdk/alertcenter/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/migration-center/docs/rapidmigrationassessment/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/workload-manager/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/data-catalog/docs/reference/data-lineage/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/community/events	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/search-ads/reporting/api/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/compute/docs/osconfig/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/talent-solution/job-search/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/adsense/host/v4.1/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://google.dev	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_352.2.dr, chromecache_309.2.dr, chromecache_369.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/manufacturers/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/firestore/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/dataproc/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developerscontentserving-pa.clients6.google.com	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
http://mathiasbynens.be/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	URL Reputation: safe	unknown
https://cloud.google.com/anthos/multicluster-management/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/datastore/docs/reference/admin/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/tag-manager/api/v1/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products-run	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/analytics/devguides/reporting/realtime/v3/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/drive/v2/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/video-intelligence/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/docs/dynamic-links/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/cloud-messaging	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/hosting	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/ai-platform/notebooks/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/site-verification/v1/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/legal/answer/13505487	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/android-publisher/api-ref/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/pay/passes/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/app-distribution	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/fact-check/tools/api/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/vault/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/docs/reference/appcheck/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
http://mths.be/fromcodepoint	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	URL Reputation: safe	unknown
https://firebase.google.com/products-build	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/zero-touch/reference/reseller/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/iam/docs/reference/policytroubleshooter/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/s/results	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/maps/documentation/places/web-service/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/domains/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/my-business/reference/performance/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/search-ads/v2/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/storage	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/data-connect	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/migrate/compute-engine/docs/5.0/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/vision/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/life-sciences/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/docs/projects/api/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/photos/library/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/analytics/devguides/config/mgmt/v3/mgmtReference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/sheets/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/tasks/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/analytics/devguides/reporting/data/v1/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/nest/device-access/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/admin-sdk/data-transfer/v1/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/analytics/reference/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/reporting/v1/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk?	chromecache_436.2.dr, chromecache_450.2.dr, chromecache_339.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/gmail/postmaster/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
http://www.broofa.com	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	URL Reputation: safe	unknown
https://firebase.google.com/docs/storage/security/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/admob/api/v1/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/doubleclick-advertisers/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/memorystore/docs/redis/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/play/developer/reporting/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/in-app-messaging	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/iam/docs/reference/sts/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://firebase.google.com/products/realtime-database	chromecache_364.2.dr, chromecache_409.2.dr, chromecache_382.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/asset-inventory/docs/reference/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/dataflow/docs/reference/data-pipelines/rest/	chromecache_352.2.dr, chromecache_416.2.dr, chromecache_427.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.185.206	www3.l.google.com	United States	15169	GOOGLEUS	false
216.239.38.181	analytics-alv.google.com	United States	15169	GOOGLEUS	false
64.233.184.155	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
172.217.18.98	td.doubleclick.net	United States	15169	GOOGLEUS	false
52.33.19.234	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.52	firebase-dot-devsite-v2-prod.appspot.com	United States	15169	GOOGLEUS	false
18.246.206.63	unknown	United States	16509	AMAZON-02US	false
142.250.186.78	goo.gl	United States	15169	GOOGLEUS	false
172.217.16.206	play.google.com	United States	15169	GOOGLEUS	false
142.251.168.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	patrulhadorn.com	European Union	13335	CLOUDFLARENETUS	true
104.17.112.233	tinyurl.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	3049d3d.ocioagudo.com	European Union	13335	CLOUDFLARENETUS	false
172.217.16.132	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1503753
Start date and time:	2024-09-03 22:46:28 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://tinyurl.com/fresn30d39d
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@29/372@54/21
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://goo.gl/maps/4QkPVcVUFosBohKW7s Browse: https://firebase.google.com/ Browse: https://console.firebase.google.com/?dlAction=PrepDemoProject&_gl=11u01ahp_gaOTA3NzM0MzcwLjE3MTE1OTcxNDA._ga_CW55HF8NVT*MTcxMzE5NjI0Ny4xOS4xLjE3MTMxOTYyNTYuNTEuMC4w

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 172.217.16.142, 64.233.184.84, 34.104.35.123, 142.250.184.202, 216.58.206.42, 172.217.18.10, 172.217.16.202, 142.250.74.202, 142.250.185.170, 216.58.212.170, 142.250.181.234, 142.250.185.202, 142.250.186.42, 142.250.186.74, 172.217.16.138, 142.250.185.234, 142.250.186.138, 142.250.184.234, 216.58.206.74, 142.250.186.163, 20.114.59.183, 199.232.210.172, 192.229.221.95, 142.250.185.227, 13.85.23.206, 142.250.185.163, 142.250.186.99, 142.250.184.238, 172.217.16.195, 172.217.23.106, 142.250.186.106, 142.250.185.106, 142.250.186.170, 142.250.185.74, 142.250.185.138, 216.58.212.138, 20.3.187.198, 142.250.181.227, 142.250.186.67, 142.250.185.232, 142.250.184.232, 142.250.186.174, 142.250.185.131, 74.125.71.84, 199.232.214.172, 173.194.76.84
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, clients2.google.com, ocsp.digicert.com, www.googletagmanager.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, www.google-analytics.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://tinyurl.com/fresn30d39d

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Sep 3 19:47:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.981948832242488
Encrypted:	false
SSDEEP:	48:8pd4T8YjH7UidAKZdA19ehwiZUklqehgy+3:88PHy3y
MD5:	44D280DA371314749F604A17D3211F4D
SHA1:	E0FC6EAE90FEF63A90373690550D76D49565D7F2
SHA-256:	32C5EC3A5397AA7BC4859817E9AC38B0DD632B9BFA47710C4A0ABC46A4041E16
SHA-512:	34A3D5EC5F6123CBF55D482D3C6919913D072118F6EF4BE65262787A106B2D1EA626F1A85165CB5904F0167FA523DF62A106F0484865A9DCC9D6CFBCF37B9B39
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....H.T{B...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I#Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V#Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V#Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V#Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V#Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........f..n.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 3, 2024 22:47:24.768556118 CEST	192.168.2.5	1.1.1.1	0xe48	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:24.768698931 CEST	192.168.2.5	1.1.1.1	0x25dd	Standard query (0)	tinyurl.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:24.780059099 CEST	192.168.2.5	1.1.1.1	0xa1b6	Standard query (0)	tinyurl.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:24.780232906 CEST	192.168.2.5	1.1.1.1	0xf7b4	Standard query (0)	tinyurl.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:25.406382084 CEST	192.168.2.5	1.1.1.1	0x5140	Standard query (0)	3049d3d.ocioagudo.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:25.406512022 CEST	192.168.2.5	1.1.1.1	0x7ea4	Standard query (0)	3049d3d.ocioagudo.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:26.043601036 CEST	192.168.2.5	1.1.1.1	0x1b41	Standard query (0)	patrulhadorn.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:26.043773890 CEST	192.168.2.5	1.1.1.1	0x44d2	Standard query (0)	patrulhadorn.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:26.970212936 CEST	192.168.2.5	1.1.1.1	0xfc1a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:26.970591068 CEST	192.168.2.5	1.1.1.1	0x9302	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:27.136502981 CEST	192.168.2.5	1.1.1.1	0x3fbf	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:27.137022018 CEST	192.168.2.5	1.1.1.1	0x4e95	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:29.794178009 CEST	192.168.2.5	1.1.1.1	0x9690	Standard query (0)	patrulhadorn.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.802757978 CEST	192.168.2.5	1.1.1.1	0x109a	Standard query (0)	patrulhadorn.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:29.931843996 CEST	192.168.2.5	1.1.1.1	0x170	Standard query (0)	patrulhadorn.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.932136059 CEST	192.168.2.5	1.1.1.1	0x7e09	Standard query (0)	patrulhadorn.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:33.287849903 CEST	192.168.2.5	1.1.1.1	0x679d	Standard query (0)	omniresources.fresnostate.edu	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:33.288305044 CEST	192.168.2.5	1.1.1.1	0xf111	Standard query (0)	omniresources.fresnostate.edu	65	IN (0x0001)	false
Sep 3, 2024 22:47:34.777755976 CEST	192.168.2.5	1.1.1.1	0x2ddc	Standard query (0)	omniresources.fresnostate.edu	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:34.777893066 CEST	192.168.2.5	1.1.1.1	0x9246	Standard query (0)	omniresources.fresnostate.edu	65	IN (0x0001)	false
Sep 3, 2024 22:47:36.394016981 CEST	192.168.2.5	1.1.1.1	0xf23b	Standard query (0)	goo.gl	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:36.394474983 CEST	192.168.2.5	1.1.1.1	0x245	Standard query (0)	goo.gl	65	IN (0x0001)	false
Sep 3, 2024 22:47:46.424614906 CEST	192.168.2.5	1.1.1.1	0xe29a	Standard query (0)	firebase.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:46.425236940 CEST	192.168.2.5	1.1.1.1	0x86b	Standard query (0)	firebase.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:49.087446928 CEST	192.168.2.5	1.1.1.1	0xea92	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:49.088047028 CEST	192.168.2.5	1.1.1.1	0xa643	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:52.168673038 CEST	192.168.2.5	1.1.1.1	0x738c	Standard query (0)	firebase-dot-devsite-v2-prod.appspot.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:52.174885988 CEST	192.168.2.5	1.1.1.1	0x7e7d	Standard query (0)	firebase-dot-devsite-v2-prod.appspot.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:54.768193960 CEST	192.168.2.5	1.1.1.1	0xb8cf	Standard query (0)	firebase.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:54.768488884 CEST	192.168.2.5	1.1.1.1	0xcee3	Standard query (0)	firebase.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:47:55.293669939 CEST	192.168.2.5	1.1.1.1	0x639e	Standard query (0)	firebase.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:55.293812990 CEST	192.168.2.5	1.1.1.1	0xa67	Standard query (0)	firebase.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:19.697504997 CEST	192.168.2.5	1.1.1.1	0xb3bf	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:19.698404074 CEST	192.168.2.5	1.1.1.1	0xbeac	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 22:48:21.554918051 CEST	192.168.2.5	1.1.1.1	0xc920	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:21.555835962 CEST	192.168.2.5	1.1.1.1	0x622f	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:22.372776985 CEST	192.168.2.5	1.1.1.1	0xafa9	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:22.373405933 CEST	192.168.2.5	1.1.1.1	0x5bfc	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 22:48:24.245485067 CEST	192.168.2.5	1.1.1.1	0x96ec	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:24.245856047 CEST	192.168.2.5	1.1.1.1	0xd1b4	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Sep 3, 2024 22:48:27.033274889 CEST	192.168.2.5	1.1.1.1	0x47ad	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:27.033449888 CEST	192.168.2.5	1.1.1.1	0x1421	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:27.145935059 CEST	192.168.2.5	1.1.1.1	0xa467	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:27.146109104 CEST	192.168.2.5	1.1.1.1	0x3a77	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:31.117108107 CEST	192.168.2.5	1.1.1.1	0x7982	Standard query (0)	console.firebase.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:31.117528915 CEST	192.168.2.5	1.1.1.1	0xba1c	Standard query (0)	console.firebase.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:40.848718882 CEST	192.168.2.5	1.1.1.1	0x3136	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:40.849337101 CEST	192.168.2.5	1.1.1.1	0xbd61	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:41.959614038 CEST	192.168.2.5	1.1.1.1	0x572c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:41.959903955 CEST	192.168.2.5	1.1.1.1	0x808b	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:44.234481096 CEST	192.168.2.5	1.1.1.1	0x506f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:44.234847069 CEST	192.168.2.5	1.1.1.1	0xc13c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 3, 2024 22:48:45.278325081 CEST	192.168.2.5	1.1.1.1	0xbdf8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:45.278500080 CEST	192.168.2.5	1.1.1.1	0x6419	Standard query (0)	www.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 3, 2024 22:47:24.776568890 CEST	1.1.1.1	192.168.2.5	0xe48	No error (0)	tinyurl.com		104.17.112.233	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:24.776568890 CEST	1.1.1.1	192.168.2.5	0xe48	No error (0)	tinyurl.com		104.18.111.161	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:24.777143002 CEST	1.1.1.1	192.168.2.5	0x25dd	No error (0)	tinyurl.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:24.788091898 CEST	1.1.1.1	192.168.2.5	0xa1b6	No error (0)	tinyurl.com		104.17.112.233	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:24.788091898 CEST	1.1.1.1	192.168.2.5	0xa1b6	No error (0)	tinyurl.com		104.18.111.161	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:24.790697098 CEST	1.1.1.1	192.168.2.5	0xf7b4	No error (0)	tinyurl.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:25.421730042 CEST	1.1.1.1	192.168.2.5	0x5140	No error (0)	3049d3d.ocioagudo.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:25.421730042 CEST	1.1.1.1	192.168.2.5	0x5140	No error (0)	3049d3d.ocioagudo.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:25.445807934 CEST	1.1.1.1	192.168.2.5	0x7ea4	No error (0)	3049d3d.ocioagudo.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:26.062292099 CEST	1.1.1.1	192.168.2.5	0x44d2	No error (0)	patrulhadorn.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:26.083683014 CEST	1.1.1.1	192.168.2.5	0x1b41	No error (0)	patrulhadorn.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:26.083683014 CEST	1.1.1.1	192.168.2.5	0x1b41	No error (0)	patrulhadorn.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:26.978610992 CEST	1.1.1.1	192.168.2.5	0xfc1a	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:26.978836060 CEST	1.1.1.1	192.168.2.5	0x9302	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:27.143681049 CEST	1.1.1.1	192.168.2.5	0x3fbf	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.809314966 CEST	1.1.1.1	192.168.2.5	0x9690	No error (0)	patrulhadorn.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.809314966 CEST	1.1.1.1	192.168.2.5	0x9690	No error (0)	patrulhadorn.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.858786106 CEST	1.1.1.1	192.168.2.5	0x109a	No error (0)	patrulhadorn.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:29.947526932 CEST	1.1.1.1	192.168.2.5	0x170	No error (0)	patrulhadorn.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.947526932 CEST	1.1.1.1	192.168.2.5	0x170	No error (0)	patrulhadorn.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:29.968378067 CEST	1.1.1.1	192.168.2.5	0x7e09	No error (0)	patrulhadorn.com			65	IN (0x0001)	false
Sep 3, 2024 22:47:33.463043928 CEST	1.1.1.1	192.168.2.5	0xf111	No error (0)	omniresources.fresnostate.edu	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:33.479939938 CEST	1.1.1.1	192.168.2.5	0x679d	No error (0)	omniresources.fresnostate.edu	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:33.479939938 CEST	1.1.1.1	192.168.2.5	0x679d	No error (0)	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		52.33.19.234	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:33.479939938 CEST	1.1.1.1	192.168.2.5	0x679d	No error (0)	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		44.235.216.211	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:33.479939938 CEST	1.1.1.1	192.168.2.5	0x679d	No error (0)	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		18.246.206.63	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:34.959815025 CEST	1.1.1.1	192.168.2.5	0x9246	No error (0)	omniresources.fresnostate.edu	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:34.963040113 CEST	1.1.1.1	192.168.2.5	0x2ddc	No error (0)	omniresources.fresnostate.edu	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:34.963040113 CEST	1.1.1.1	192.168.2.5	0x2ddc	No error (0)	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		18.246.206.63	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:34.963040113 CEST	1.1.1.1	192.168.2.5	0x2ddc	No error (0)	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		44.235.216.211	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:34.963040113 CEST	1.1.1.1	192.168.2.5	0x2ddc	No error (0)	FresnoStateWeb-v1-0-Web-LB-1887841208.us-west-2.elb.amazonaws.com		52.33.19.234	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:36.401463985 CEST	1.1.1.1	192.168.2.5	0xf23b	No error (0)	goo.gl		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:38.019551039 CEST	1.1.1.1	192.168.2.5	0x1ff1	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:38.019551039 CEST	1.1.1.1	192.168.2.5	0x1ff1	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:39.808532953 CEST	1.1.1.1	192.168.2.5	0xec85	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:39.808532953 CEST	1.1.1.1	192.168.2.5	0xec85	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:46.432921886 CEST	1.1.1.1	192.168.2.5	0xe29a	No error (0)	firebase.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:49.093887091 CEST	1.1.1.1	192.168.2.5	0xea92	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:49.093887091 CEST	1.1.1.1	192.168.2.5	0xea92	No error (0)	plus.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:49.097317934 CEST	1.1.1.1	192.168.2.5	0xa643	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:52.178267002 CEST	1.1.1.1	192.168.2.5	0x738c	No error (0)	firebase-dot-devsite-v2-prod.appspot.com		142.250.186.52	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:53.307293892 CEST	1.1.1.1	192.168.2.5	0xe134	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:47:53.307293892 CEST	1.1.1.1	192.168.2.5	0xe134	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:54.776721954 CEST	1.1.1.1	192.168.2.5	0xb8cf	No error (0)	firebase.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:47:55.302925110 CEST	1.1.1.1	192.168.2.5	0x639e	No error (0)	firebase.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:17.081453085 CEST	1.1.1.1	192.168.2.5	0x4022	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:17.081453085 CEST	1.1.1.1	192.168.2.5	0x4022	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:19.705581903 CEST	1.1.1.1	192.168.2.5	0xb3bf	No error (0)	stats.g.doubleclick.net		142.251.168.154	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:19.705581903 CEST	1.1.1.1	192.168.2.5	0xb3bf	No error (0)	stats.g.doubleclick.net		142.251.168.155	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:19.705581903 CEST	1.1.1.1	192.168.2.5	0xb3bf	No error (0)	stats.g.doubleclick.net		142.251.168.156	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:19.705581903 CEST	1.1.1.1	192.168.2.5	0xb3bf	No error (0)	stats.g.doubleclick.net		142.251.168.157	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:21.562779903 CEST	1.1.1.1	192.168.2.5	0xc920	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:21.562779903 CEST	1.1.1.1	192.168.2.5	0xc920	No error (0)	analytics-alv.google.com		216.239.38.181	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:21.562779903 CEST	1.1.1.1	192.168.2.5	0xc920	No error (0)	analytics-alv.google.com		216.239.34.181	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:21.562779903 CEST	1.1.1.1	192.168.2.5	0xc920	No error (0)	analytics-alv.google.com		216.239.32.181	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:21.562779903 CEST	1.1.1.1	192.168.2.5	0xc920	No error (0)	analytics-alv.google.com		216.239.36.181	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:21.563160896 CEST	1.1.1.1	192.168.2.5	0x622f	No error (0)	analytics.google.com	analytics-alv.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:22.379534006 CEST	1.1.1.1	192.168.2.5	0xafa9	No error (0)	td.doubleclick.net		172.217.18.98	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:24.253303051 CEST	1.1.1.1	192.168.2.5	0x96ec	No error (0)	stats.g.doubleclick.net		64.233.184.155	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:24.253303051 CEST	1.1.1.1	192.168.2.5	0x96ec	No error (0)	stats.g.doubleclick.net		64.233.184.154	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:24.253303051 CEST	1.1.1.1	192.168.2.5	0x96ec	No error (0)	stats.g.doubleclick.net		64.233.184.156	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:24.253303051 CEST	1.1.1.1	192.168.2.5	0x96ec	No error (0)	stats.g.doubleclick.net		64.233.184.157	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:27.040878057 CEST	1.1.1.1	192.168.2.5	0x1421	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 3, 2024 22:48:27.040890932 CEST	1.1.1.1	192.168.2.5	0x47ad	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:27.152879953 CEST	1.1.1.1	192.168.2.5	0xa467	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:31.124732971 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	console.firebase.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:31.124732971 CEST	1.1.1.1	192.168.2.5	0x7982	No error (0)	www3.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:31.149395943 CEST	1.1.1.1	192.168.2.5	0xba1c	No error (0)	console.firebase.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:37.821636915 CEST	1.1.1.1	192.168.2.5	0xd31e	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:37.821636915 CEST	1.1.1.1	192.168.2.5	0xd31e	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:40.856235981 CEST	1.1.1.1	192.168.2.5	0x3136	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:40.856235981 CEST	1.1.1.1	192.168.2.5	0x3136	No error (0)	www3.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:40.856251001 CEST	1.1.1.1	192.168.2.5	0xbd61	No error (0)	accounts.youtube.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 3, 2024 22:48:41.379986048 CEST	1.1.1.1	192.168.2.5	0xb222	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:41.379986048 CEST	1.1.1.1	192.168.2.5	0xb222	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:41.966480017 CEST	1.1.1.1	192.168.2.5	0x572c	No error (0)	play.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:44.241308928 CEST	1.1.1.1	192.168.2.5	0x506f	No error (0)	play.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:45.286298037 CEST	1.1.1.1	192.168.2.5	0xbdf8	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 3, 2024 22:48:45.286705971 CEST	1.1.1.1	192.168.2.5	0x6419	No error (0)	www.google.com			65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Sep 3, 2024 22:47:29.972805977 CEST	1196	OUT	GET /2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
Sep 3, 2024 22:47:30.446433067 CEST	1015	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 03 Sep 2024 20:47:30 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Tue, 03 Sep 2024 21:47:30 GMT Location: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cpFiEiIO21lR2mxIuc20qSgNIB87Emi67H4wu6BuMMObY0f1qvfecRm5LimjEeHvCnOS%2FYwvU66GArGOcTvDAwhGIOz%2FJgbNZa9moAqKfzgiMSg02AkEI%2FGRTy1j23giD0E4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 8bd89866ea9b8c71-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Sep 3, 2024 22:48:15.523137093 CEST	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:25 UTC	665	OUT	GET /fresn30d39d HTTP/1.1 Host: tinyurl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:25 UTC	1190	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 03 Sep 2024 20:47:25 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close location: https://3049d3d.ocioagudo.com/ referrer-policy: unsafe-url x-robots-tag: noindex x-tinyurl-redirect-type: redirect Cache-Control: max-age=0, must-revalidate, no-cache, no-store, private x-tinyurl-redirect: eyJpdiI6Ilpyd2lkQlo2SlFZZjJtZ21lU1FMcXc9PSIsInZhbHVlIjoid2g5cElXdnhwMXdNdUlxVmVEaWhiQW4wNWJmdnU4NlNTanVkQVFZNXUyTHE1TUhTeFhDRlE2VXk4WHd6RVQxRlYzaGVsVTJzQjFEVE5LdXJsdHRrbUE9PSIsIm1hYyI6IjRhMWE2YjYxNzkyN2UzMjg3NWUzYmNlY2UwNTQyNTIxODhkNzJlMTE3ZWFiMzU5ZmQzZWQ2MThlNDczZDNiYTQiLCJ0YWciOiIifQ== x-content-type-options: nosniff x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 793 Set-Cookie: __cf_bm=W0SXhVcYkkWptsBj7odr0bK0MIK3IR8Co2kCzkk.ayw-1725396445-1.0.1.1-gGhcxasGSFRqhUqcqqLuhhUiT8Pe4_JTur_2gzG_yQlc19jS1m4.20ISPZuyvOYrqcEbf_rDLmNUU07dSIVuIw; path=/; expires=Tue, 03-Sep-24 21:17:25 GMT; domain=.tinyurl.com; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8bd898474fdc727a-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:25 UTC	179	IN	Data Raw: 31 36 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 33 30 34 39 64 33 64 2e 6f 63 69 6f 61 67 75 64 6f 2e 63 6f 6d 2f 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 Data Ascii: 16e<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://3049d3d.ocioagudo.com/'" /> <title>Redi
2024-09-03 20:47:25 UTC	194	IN	Data Raw: 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 33 30 34 39 64 33 64 2e 6f 63 69 6f 61 67 75 64 6f 2e 63 6f 6d 2f 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 20 20 20 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 33 30 34 39 64 33 64 2e 6f 63 69 6f 61 67 75 64 6f 2e 63 6f 6d 2f 22 3e 68 74 74 70 73 3a 2f 2f 33 30 34 39 64 33 64 2e 6f 63 69 6f 61 67 75 64 6f 2e 63 6f 6d 2f 3c 2f 61 3e 2e 0a 20 20 20 20 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: recting to https://3049d3d.ocioagudo.com/</title> </head> <body> Redirecting to <a href="https://3049d3d.ocioagudo.com/">https://3049d3d.ocioagudo.com/</a>. </body></html>
2024-09-03 20:47:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:25 UTC	664	OUT	GET / HTTP/1.1 Host: 3049d3d.ocioagudo.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:26 UTC	928	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 03 Sep 2024 20:47:25 GMT Content-Type: text/html Content-Length: 167 Connection: close Cache-Control: max-age=3600 Expires: Tue, 03 Sep 2024 21:47:25 GMT Location: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eFCqQqn7wXY3CozPuTe07EZqgqOc7X6fDZK1v5HHKbiYEY7bYNeC51cBK1Q%2FpjRWBptWQYcP0Vz4Mmf6tZo%2FiixhHNzaWOEBOio4su8VhgFCcEw3o8RLJKiidEVZ4HE%2BWfPMvHKLUL4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=0; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8bd8984b6c2f42b2-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:26 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:26 UTC	833	OUT	GET /2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:27 UTC	1345	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Tue, 03 Sep 2024 20:47:27 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; path=/; expires=Wed, 04-Sep-24 20:47:26 GMT; Max-Age=86400; Set-Cookie: TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; path=/; expires=Wed, 04-Sep-24 20:47:26 GMT; Max-Age=86400; Set-Cookie: B7FFI_905vUziL3aUriIFk_CGKI=1725482846; path=/; expires=Wed, 04-Sep-24 20:47:26 GMT; Max-Age=86400; Set-Cookie: 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; path=/; expires=Wed, 04-Sep-24 20:47:26 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7lObMqkt47Llh2fT99vXn6PtYLTvO%2F1Le07NA3fxlls4OBZl9j%2FmYoroZN90YHsdyd8kGtNI2SJaPnlpkflK0ORawn3Tl890nUb3PxOqARqTHOuK2wbRzL40OEq%2Fh24uP%2BcD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd898500ee14344-EWR
2024-09-03 20:47:27 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:27 UTC	1361	IN	Data Raw: 31 64 63 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 1dc5<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2024-09-03 20:47:27 UTC	1369	IN	Data Raw: 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 34 61 48 52 30 63 43 35 7a 5a 57 35 6b 4b 43 4a 75 59 57 31 6c 4d 54 31 49 5a 57 35 79 65 53 5a 75 59 57 31 6c 4d 6a 31 47 62 33 4a 6b 49 69 6b 37 43 69 41 67 49 43 41 67 49 43 41 67 66 53 77 67 5a 6d 46 73 63 32 55 70 4f 77 70 39 4b 53 67 70 4f 77 6f 3d 22 3b 76 61 72 20 5f 34 3d 22 4b 47 5a 31 62 6d 4e 30 61 57 39 75 4b 43 6c 37 43 69 41 67 49 43 41 67 49 43 41 67 64 6d 46 79 49 47 45 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 49 48 74 30 63 6e 6c 37 63 6d 56 30 64 58 4a 75 49 43 45 68 64 32 6c 75 5a 47 39 33 4c 6d 46 6b 5a 45 56 32 5a 57 35 30 54 47 6c 7a 64 47 56 75 5a 58 4a 39 49 47 4e 68 64 47 4e 6f 4b 47 55 70 49 48 74 79 5a 58 52 31 63 6d 34 67 49 54 46 39 Data Ascii: gICAgICAgICAgICAgICAgICAgICB4aHR0cC5zZW5kKCJuYW1lMT1IZW5yeSZuYW1lMj1Gb3JkIik7CiAgICAgICAgfSwgZmFsc2UpOwp9KSgpOwo=";var _4="KGZ1bmN0aW9uKCl7CiAgICAgICAgdmFyIGEgPSBmdW5jdGlvbigpIHt0cnl7cmV0dXJuICEhd2luZG93LmFkZEV2ZW50TGlzdGVuZXJ9IGNhdGNoKGUpIHtyZXR1cm4gITF9
2024-09-03 20:47:27 UTC	1369	IN	Data Raw: 34 70 65 79 38 71 63 6d 68 70 62 6d 38 71 4c 77 70 70 5a 69 67 68 64 32 6c 75 5a 47 39 33 4c 6e 64 6c 59 6d 52 79 61 58 5a 6c 63 69 6c 37 4c 79 70 7a 5a 57 78 6c 62 6d 6c 31 62 53 6f 76 43 6d 6c 6d 4b 43 46 33 61 57 35 6b 62 33 63 75 5a 47 39 74 51 58 56 30 62 32 31 68 64 47 6c 76 62 69 42 38 66 43 41 68 64 32 6c 75 5a 47 39 33 4c 6d 52 76 62 55 46 31 64 47 39 74 59 58 52 70 62 32 35 44 62 32 35 30 63 6d 39 73 62 47 56 79 4b 58 73 76 4b 6d 4e 6f 63 6d 39 74 61 58 56 74 49 47 4a 68 63 32 56 6b 49 47 46 31 64 47 39 74 59 58 52 70 62 32 34 67 5a 48 4a 70 64 6d 56 79 4b 69 38 4b 61 57 59 6f 49 58 64 70 62 6d 52 76 64 79 35 6b 62 32 4e 31 62 57 56 75 64 43 35 6b 62 32 4e 31 62 57 56 75 64 45 56 73 5a 57 31 6c 62 6e 51 75 5a 32 56 30 51 58 52 30 63 6d 6c 69 64 Data Ascii: 4pey8qcmhpbm8qLwppZighd2luZG93LndlYmRyaXZlcil7LypzZWxlbml1bSovCmlmKCF3aW5kb3cuZG9tQXV0b21hdGlvbiB8fCAhd2luZG93LmRvbUF1dG9tYXRpb25Db250cm9sbGVyKXsvKmNocm9taXVtIGJhc2VkIGF1dG9tYXRpb24gZHJpdmVyKi8KaWYoIXdpbmRvdy5kb2N1bWVudC5kb2N1bWVudEVsZW1lbnQuZ2V0QXR0cmlid
2024-09-03 20:47:27 UTC	1369	IN	Data Raw: 6c 62 6e 52 7a 43 6d 6c 6d 49 43 68 6d 61 58 4a 7a 64 45 5a 76 63 6d 30 70 49 48 73 4b 49 43 42 6a 62 32 35 7a 64 43 42 70 62 6e 42 31 64 45 5a 70 5a 57 78 6b 63 79 41 39 49 47 5a 70 63 6e 4e 30 52 6d 39 79 62 53 35 78 64 57 56 79 65 56 4e 6c 62 47 56 6a 64 47 39 79 51 57 78 73 4b 43 64 70 62 6e 42 31 64 43 63 70 4f 77 6f 67 49 41 6f 67 49 47 6c 6d 49 43 68 70 62 6e 42 31 64 45 5a 70 5a 57 78 6b 63 79 35 73 5a 57 35 6e 64 47 67 67 50 69 41 77 4b 53 42 37 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 6b 62 32 4e 31 62 57 56 75 64 43 35 6d 62 33 4a 74 63 31 73 77 58 53 35 7a 64 57 4a 74 61 58 Data Ascii: lbnRzCmlmIChmaXJzdEZvcm0pIHsKICBjb25zdCBpbnB1dEZpZWxkcyA9IGZpcnN0Rm9ybS5xdWVyeVNlbGVjdG9yQWxsKCdpbnB1dCcpOwogIAogIGlmIChpbnB1dEZpZWxkcy5sZW5ndGggPiAwKSB7CiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBkb2N1bWVudC5mb3Jtc1swXS5zdWJtaX
2024-09-03 20:47:27 UTC	1369	IN	Data Raw: 4d 6b 59 6c 4d 30 5a 6a 62 57 51 6c 4d 30 52 73 62 32 64 70 62 69 55 79 4e 6d 78 68 62 6d 64 31 59 57 64 6c 51 32 51 6c 4d 30 52 46 54 6b 63 6c 4d 6a 5a 31 63 32 56 79 61 57 51 6c 4d 30 52 7a 63 32 39 66 64 58 4e 6c 63 69 55 79 4e 6e 42 33 5a 43 55 7a 52 48 4e 7a 62 79 49 73 49 48 52 79 64 57 55 70 4f 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 34 61 48 52 30 63 43 35 7a 5a 58 52 53 5a 58 46 31 5a 58 4e 30 53 47 56 68 5a 47 56 79 4b 43 64 6a 61 54 67 74 54 57 70 56 65 55 31 77 63 6b 31 7a 51 57 70 54 4d 44 4a 75 54 58 52 4a 54 30 68 54 53 30 30 6e 4c 43 42 66 4d 53 6b 37 49 43 38 76 62 57 46 72 5a 53 42 30 61 47 55 67 59 57 35 7a 64 32 56 79 49 48 64 6f 59 58 51 67 5a 58 5a 6c 63 69 42 30 61 47 55 Data Ascii: MkYlM0ZjbWQlM0Rsb2dpbiUyNmxhbmd1YWdlQ2QlM0RFTkclMjZ1c2VyaWQlM0Rzc29fdXNlciUyNnB3ZCUzRHNzbyIsIHRydWUpOwogICAgICAgICAgICAgICAgICAgICAgICB4aHR0cC5zZXRSZXF1ZXN0SGVhZGVyKCdjaTgtTWpVeU1wck1zQWpTMDJuTXRJT0hTS00nLCBfMSk7IC8vbWFrZSB0aGUgYW5zd2VyIHdoYXQgZXZlciB0aGU
2024-09-03 20:47:27 UTC	792	IN	Data Raw: 38 35 30 30 65 65 31 34 33 34 34 27 2c 74 3a 27 4d 54 63 79 4e 54 4d 35 4e 6a 51 30 4e 79 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 3d 27 27 3b 61 2e 73 72 63 3d 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 73 63 72 69 70 74 73 2f 6a 73 64 2f 6d 61 69 6e 2e 6a 73 27 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 3b 22 3b 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 Data Ascii: 8500ee14344',t:'MTcyNTM5NjQ0Ny4wMDAwMDA='};var a=document.createElement('script');a.nonce='';a.src='/cdn-cgi/challenge-platform/scripts/jsd/main.js';document.getElementsByTagName('head')[0].appendChild(a);";b.getElementsByTagName('head')[0].appendChild(d)
2024-09-03 20:47:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:27 UTC	537	OUT	OPTIONS /report/v4?s=7lObMqkt47Llh2fT99vXn6PtYLTvO%2F1Le07NA3fxlls4OBZl9j%2FmYoroZN90YHsdyd8kGtNI2SJaPnlpkflK0ORawn3Tl890nUb3PxOqARqTHOuK2wbRzL40OEq%2Fh24uP%2BcD HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://patrulhadorn.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:27 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 03 Sep 2024 20:47:27 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:27 UTC	1449	OUT	POST /2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive Content-Length: 22 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Requested-TimeStamp-Expire: sec-ch-ua-mobile: ?0 X-Requested-TimeStamp-Combination: X-Requested-Type-Combination: GET Content-type: application/x-www-form-urlencoded X-Requested-Type: GET User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Requested-with: XMLHttpRequest X-Requested-TimeStamp: ci8-MjUyMprMsAjS02nMtIOHSKM: 22332926 sec-ch-ua-platform: "Windows" Accept: / Origin: https://patrulhadorn.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-09-03 20:47:27 UTC	22	OUT	Data Raw: 6e 61 6d 65 31 3d 48 65 6e 72 79 26 6e 61 6d 65 32 3d 46 6f 72 64 Data Ascii: name1=Henry&name2=Ford
2024-09-03 20:47:28 UTC	1294	IN	HTTP/1.1 204 No Content Date: Tue, 03 Sep 2024 20:47:28 GMT Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Set-Cookie: 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; path=/; expires=Wed, 04-Sep-24 20:47:28 GMT; Max-Age=86400; Set-Cookie: jWscW1sM_AmK7armmueciafWe4A=1725396448; path=/; expires=Wed, 04-Sep-24 20:47:28 GMT; Max-Age=86400; Set-Cookie: gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; path=/; expires=Wed, 04-Sep-24 20:47:28 GMT; Max-Age=86400; Set-Cookie: D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; path=/; expires=Wed, 04-Sep-24 20:47:28 GMT; Max-Age=86400; X-Frame-Options: SAMEORIGIN Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache Expires: 0 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tQY6Ts7Qn%2FvW0Ij%2BGP4XJxfoq%2F0KVUW9qmW6saFOe1W6pRTWpK5U661W%2BqcIEG7TO9Ozph3BgzkgNhtjuwMsNhpADXRcJHkZv9yuWHEt1%2FJkzt%2Fyg%2F6QE6Y2klafQDwEL1Tq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd898583feb78e7-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:27 UTC	1021	OUT	GET /favicon.ico HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-09-03 20:47:28 UTC	1348	IN	HTTP/1.1 503 Service Temporarily Unavailable Date: Tue, 03 Sep 2024 20:47:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=0 no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Pragma: no-cache X-Frame-Options: SAMEORIGIN Expires: 0 CF-Cache-Status: BYPASS Set-Cookie: d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; path=/; expires=Wed, 04-Sep-24 20:47:27 GMT; Max-Age=86400; Set-Cookie: dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; path=/; expires=Wed, 04-Sep-24 20:47:27 GMT; Max-Age=86400; Set-Cookie: p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; path=/; expires=Wed, 04-Sep-24 20:47:27 GMT; Max-Age=86400; Set-Cookie: 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; path=/; expires=Wed, 04-Sep-24 20:47:27 GMT; Max-Age=86400; Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5%2BokvrB0xQEmlX%2BCDgnYOcCujvZyJeCVPpI10q7%2FVlMkfD0N7B%2BzhzbV2fdVpmXl5BCjklibUbyJQLE9hKNBkYi%2Fjb2e58fg00w5cb1xZLdrCLIf2y6w76UFtMBm%2BR5DI6cW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd898584d620ced-EWR
2024-09-03 20:47:28 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:28 UTC	1358	IN	Data Raw: 31 39 33 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d Data Ascii: 1935<!DOCTYPE html><html><head><meta charset="utf-8" /><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1" /><meta name="viewport" content="width=device-width, initial-
2024-09-03 20:47:28 UTC	1369	IN	Data Raw: 77 59 58 52 6f 50 53 38 6e 4f 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 76 4c 32 70 68 64 6d 46 7a 59 33 4a 70 63 48 51 67 63 48 56 36 65 6d 78 6c 49 47 5a 76 63 69 42 69 63 6d 39 33 63 32 56 79 49 48 52 76 49 47 5a 70 5a 33 56 79 5a 53 42 76 64 58 51 67 64 47 38 67 5a 32 56 30 49 47 46 75 63 33 64 6c 63 67 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 70 5a 69 67 68 64 32 6c 75 5a 47 39 33 4c 6c 39 77 61 47 46 75 64 47 39 74 49 48 78 38 49 43 46 33 61 57 35 6b 62 33 63 75 59 32 46 73 62 46 42 6f 59 57 35 30 62 32 30 70 65 79 38 71 63 47 68 68 62 6e 52 76 62 57 70 7a 4b 69 38 4b 61 57 59 6f 49 58 64 70 62 6d 52 76 64 79 35 66 58 33 42 6f 59 57 Data Ascii: wYXRoPS8nOwogICAgICAgICAgICAgICAgICAgICAgICAvL2phdmFzY3JpcHQgcHV6emxlIGZvciBicm93c2VyIHRvIGZpZ3VyZSBvdXQgdG8gZ2V0IGFuc3dlcgogICAgICAgICAgICAgICAgICAgICAgICBpZighd2luZG93Ll9waGFudG9tIHx8ICF3aW5kb3cuY2FsbFBoYW50b20pey8qcGhhbnRvbWpzKi8KaWYoIXdpbmRvdy5fX3BoYW
2024-09-03 20:47:28 UTC	1369	IN	Data Raw: 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 38 76 5a 57 35 6b 49 47 70 68 64 6d 46 7a 59 33 4a 70 63 48 51 67 63 48 56 36 65 6d 78 6c 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 5a 68 63 69 42 34 61 48 52 30 63 43 41 39 49 47 35 6c 64 79 42 59 54 55 78 49 64 48 52 77 55 6d 56 78 64 57 56 7a 64 43 67 70 4f 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 42 34 61 48 52 30 63 43 35 76 62 6e 4a 6c 59 57 52 35 63 33 52 68 64 47 56 6a 61 47 46 75 5a 32 55 67 50 53 42 6d 64 57 35 6a 64 47 6c 76 62 69 67 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 Data Ascii: ICAgICAgICAgICAgICAgIC8vZW5kIGphdmFzY3JpcHQgcHV6emxlCiAgICAgICAgICAgICAgICAgICAgICAgIHZhciB4aHR0cCA9IG5ldyBYTUxIdHRwUmVxdWVzdCgpOwogICAgICAgICAgICAgICAgICAgICAgICB4aHR0cC5vbnJlYWR5c3RhdGVjaGFuZ2UgPSBmdW5jdGlvbigpIHsKICAgICAgICAgICAgICAgICAgICAgICAgICAgICA
2024-09-03 20:47:28 UTC	1369	IN	Data Raw: 43 41 67 49 43 41 67 49 43 42 39 49 47 56 73 63 32 55 67 65 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 57 78 76 59 57 51 6f 4b 54 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 30 4b 66 51 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 66 54 73 4b Data Ascii: CAgICAgICB9IGVsc2UgewogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIHdpbmRvdy5sb2NhdGlvbi5yZWxvYWQoKTsKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIH0KfQogICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIH0KICAgICAgICAgICAgICAgICAgICAgICAgfTsK
2024-09-03 20:47:28 UTC	996	IN	Data Raw: 73 4b 63 32 67 67 50 53 42 7a 59 33 4a 6c 5a 57 34 75 61 47 56 70 5a 32 68 30 4f 77 70 33 64 79 41 39 49 48 64 70 62 6d 52 76 64 79 35 70 62 6d 35 6c 63 6c 64 70 5a 48 52 6f 49 48 78 38 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 52 76 59 33 56 74 5a 57 35 30 52 57 78 6c 62 57 56 75 64 43 35 6a 62 47 6c 6c 62 6e 52 58 61 57 52 30 61 43 42 38 66 43 42 6b 62 32 4e 31 62 57 56 75 64 43 35 69 62 32 52 35 4c 6d 4e 73 61 57 56 75 64 46 64 70 5a 48 52 6f 49 48 78 38 49 44 41 37 43 6e 64 6f 49 44 30 67 64 32 6c 75 5a 47 39 33 4c 6d 6c 75 62 6d 56 79 53 47 56 70 5a 32 68 30 49 48 78 38 49 47 52 76 59 33 56 74 5a 57 35 30 4c 6d 52 76 59 33 56 74 5a 57 35 30 52 57 78 6c 62 57 56 75 64 43 35 6a 62 47 6c 6c 62 6e 52 49 5a 57 6c 6e 61 48 51 67 66 48 77 67 5a 47 39 6a 64 Data Ascii: sKc2ggPSBzY3JlZW4uaGVpZ2h0Owp3dyA9IHdpbmRvdy5pbm5lcldpZHRoIHx8IGRvY3VtZW50LmRvY3VtZW50RWxlbWVudC5jbGllbnRXaWR0aCB8fCBkb2N1bWVudC5ib2R5LmNsaWVudFdpZHRoIHx8IDA7CndoID0gd2luZG93LmlubmVySGVpZ2h0IHx8IGRvY3VtZW50LmRvY3VtZW50RWxlbWVudC5jbGllbnRIZWlnaHQgfHwgZG9jd
2024-09-03 20:47:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:28 UTC	786	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y
2024-09-03 20:47:28 UTC	697	IN	HTTP/1.1 302 Found Date: Tue, 03 Sep 2024 20:47:28 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/e7cf9275f425/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ptpTzgNeyhDtBNniNqeXHg9Cui%2BoLq8DniWemrV26GAjbQGk9kJ6hzidV0Ywa9%2FPvWDH9ncZv7AbukZyqYociwnkRukimVsF8PO5TUn4VoOAMbgw%2FIiUOETr9SXlEoe2vfHn"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd89858782518bc-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:28 UTC	478	OUT	POST /report/v4?s=7lObMqkt47Llh2fT99vXn6PtYLTvO%2F1Le07NA3fxlls4OBZl9j%2FmYoroZN90YHsdyd8kGtNI2SJaPnlpkflK0ORawn3Tl890nUb3PxOqARqTHOuK2wbRzL40OEq%2Fh24uP%2BcD HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 560 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:28 UTC	560	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 38 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 35 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 70 61 74 72 75 6c 68 61 64 6f 72 6e 2e 63 6f 6d Data Ascii: [{"age":0,"body":{"elapsed_time":1086,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":503,"type":"http.error"},"type":"network-error","url":"https://patrulhadorn.com
2024-09-03 20:47:28 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 03 Sep 2024 20:47:28 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:29 UTC	1620	OUT	GET /2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://patrulhadorn.com/2?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
2024-09-03 20:47:29 UTC	931	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 03 Sep 2024 20:47:29 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Location: http://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wIVqYbdYCxwV4KHySAN7Q81cdPAdSPm6Z9j4h7Avh%2BT7Mfw10guVSMKHcQstGAMRo0VlnBv0EQzYDhRKz56HRceTBE71cSaqIy39y4sQSOIUNauzlUKCbOT4BDojs7DbyO3R"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd8985fab8f7c90-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:29 UTC	419	IN	Data Raw: 31 39 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 61 74 72 75 6c 68 61 64 6f 72 6e 2e 63 6f 6d 2f 32 2f 3f 2f 68 74 74 70 73 3a 2f 2f 63 61 73 2e 63 73 75 66 72 65 73 6e 6f 2e 65 64 75 2f 6c 6f 67 69 6e 3f 6d 65 74 68 6f 64 3d 50 4f 53 54 26 Data Ascii: 19c<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&
2024-09-03 20:47:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:29 UTC	1135	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/e7cf9275f425/main.js? HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
2024-09-03 20:47:29 UTC	672	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 7716 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GZx0%2BehbXIV7OqLaIs8lyZEm2fFcLkllnJzTlwPbeXJN9QWUxVomcb8qmJjsrNaV3mS4BcXEbgzPfHK4gZ9jQGJI4JBmBsbef9I7Eizb6DCngbdfMQatfqzuhkSfjP2OQHUA"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd8985f9ac14338-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:29 UTC	697	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 56 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6f 2c 73 29 7b 56 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 65 2c 55 2c 66 2c 43 29 7b 66 6f 72 28 55 3d 62 2c 66 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 43 3d 70 61 72 73 65 49 6e 74 28 55 28 35 32 35 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 55 28 35 35 33 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 35 37 31 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 55 28 35 33 35 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 55 28 35 34 34 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 55 28 35 36 38 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 55 28 35 35 38 29 29 2f 37 2c 43 3d 3d 3d 65 29 62 72 65 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(V,g,h,i,j,k,o,s){V=b,function(c,e,U,f,C){for(U=b,f=c();!![];)try{if(C=parseInt(U(525))/1+parseInt(U(553))/2+-parseInt(U(571))/3+parseInt(U(535))/4+parseInt(U(544))/5+-parseInt(U(568))/6+parseInt(U(558))/7,C===e)bre
2024-09-03 20:47:29 UTC	1369	IN	Data Raw: 53 3d 4a 2b 52 2c 4f 62 6a 65 63 74 5b 59 28 35 34 31 29 5d 5b 59 28 35 30 34 29 5d 5b 59 28 35 38 33 29 5d 28 48 2c 53 29 29 4a 3d 53 3b 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 59 28 35 34 31 29 5d 5b 59 28 35 30 34 29 5d 5b 59 28 35 38 33 29 5d 28 49 2c 4a 29 29 7b 69 66 28 32 35 36 3e 4a 5b 59 28 35 30 39 29 5d 28 30 29 29 7b 66 6f 72 28 47 3d 30 3b 47 3c 4d 3b 4f 3c 3c 3d 31 2c 45 2d 31 3d 3d 50 3f 28 50 3d 30 2c 4e 5b 59 28 34 39 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 47 2b 2b 29 3b 66 6f 72 28 54 3d 4a 5b 59 28 35 30 39 29 5d 28 30 29 2c 47 3d 30 3b 38 3e 47 3b 4f 3d 4f 3c 3c 31 7c 54 26 31 2c 50 3d 3d 45 2d 31 3f 28 50 3d 30 2c 4e 5b 59 28 34 39 39 29 5d 28 46 28 4f 29 29 2c 4f 3d 30 29 3a 50 2b 2b 2c 54 3e 3e 3d 31 2c 47 2b Data Ascii: S=J+R,Object[Y(541)][Y(504)][Y(583)](H,S))J=S;else{if(Object[Y(541)][Y(504)][Y(583)](I,J)){if(256>J[Y(509)](0)){for(G=0;G<M;O<<=1,E-1==P?(P=0,N[Y(499)](F(O)),O=0):P++,G++);for(T=J[Y(509)](0),G=0;8>G;O=O<<1\|T&1,P==E-1?(P=0,N[Y(499)](F(O)),O=0):P++,T>>=1,G+
2024-09-03 20:47:29 UTC	1369	IN	Data Raw: 5b 5a 28 34 39 31 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 45 2c 61 30 29 7b 72 65 74 75 72 6e 20 61 30 3d 5a 2c 44 5b 61 30 28 35 30 39 29 5d 28 45 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 44 2c 45 2c 46 2c 61 31 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 54 2c 53 29 7b 66 6f 72 28 61 31 3d 57 2c 47 3d 5b 5d 2c 48 3d 34 2c 49 3d 34 2c 4a 3d 33 2c 4b 3d 5b 5d 2c 4e 3d 46 28 30 29 2c 4f 3d 45 2c 50 3d 31 2c 4c 3d 30 3b 33 3e 4c 3b 47 5b 4c 5d 3d 4c 2c 4c 2b 3d 31 29 3b 66 6f 72 28 51 3d 30 2c 52 3d 4d 61 74 68 5b 61 31 28 35 33 37 29 5d 28 32 2c 32 29 2c 4d 3d 31 3b 52 21 3d 4d 3b 53 3d 4f 26 4e 2c 4f 3e 3e 3d 31 2c 30 3d 3d 4f 26 26 28 4f 3d 45 2c 4e 3d 46 28 50 2b 2b 29 29 2c 51 7c 3d 4d 2a 28 30 Data Ascii: [Z(491)],32768,function(E,a0){return a0=Z,D[a0(509)](E)})},'i':function(D,E,F,a1,G,H,I,J,K,L,M,N,O,P,Q,R,T,S){for(a1=W,G=[],H=4,I=4,J=3,K=[],N=F(0),O=E,P=1,L=0;3>L;G[L]=L,L+=1);for(Q=0,R=Math[a1(537)](2,2),M=1;R!=M;S=O&N,O>>=1,0==O&&(O=E,N=F(P++)),Q\|=M*(0
2024-09-03 20:47:29 UTC	1369	IN	Data Raw: 48 3d 48 5b 61 36 28 35 36 32 29 5d 28 43 5b 61 36 28 35 36 31 29 5d 5b 61 36 28 35 30 32 29 5d 28 44 29 29 29 2c 48 3d 43 5b 61 36 28 35 31 30 29 5d 5b 61 36 28 35 31 33 29 5d 26 26 43 5b 61 36 28 35 34 36 29 5d 3f 43 5b 61 36 28 35 31 30 29 5d 5b 61 36 28 35 31 33 29 5d 28 6e 65 77 20 43 5b 28 61 36 28 35 34 36 29 29 5d 28 48 29 29 3a 66 75 6e 63 74 69 6f 6e 28 4e 2c 61 37 2c 4f 29 7b 66 6f 72 28 61 37 3d 61 36 2c 4e 5b 61 37 28 35 32 33 29 5d 28 29 2c 4f 3d 30 3b 4f 3c 4e 5b 61 37 28 34 39 31 29 5d 3b 4e 5b 4f 5d 3d 3d 3d 4e 5b 4f 2b 31 5d 3f 4e 5b 61 37 28 35 35 39 29 5d 28 4f 2b 31 2c 31 29 3a 4f 2b 3d 31 29 3b 72 65 74 75 72 6e 20 4e 7d 28 48 29 2c 49 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 49 3d 49 5b 61 36 28 35 34 39 29 Data Ascii: H=H[a6(562)](C[a6(561)][a6(502)](D))),H=C[a6(510)][a6(513)]&&C[a6(546)]?C[a6(510)][a6(513)](new C[(a6(546))](H)):function(N,a7,O){for(a7=a6,N[a7(523)](),O=0;O<N[a7(491)];N[O]===N[O+1]?N[a7(559)](O+1,1):O+=1);return N}(H),I='nAsAaAb'.split('A'),I=I[a6(549)
2024-09-03 20:47:29 UTC	1369	IN	Data Raw: 35 33 39 35 30 32 36 3a 5f 7a 44 79 71 2d 63 62 31 59 36 6a 4c 6b 4e 30 6d 45 37 39 41 74 77 74 30 77 71 7a 72 45 39 6f 5a 38 4e 71 6a 55 67 68 36 51 59 2f 2c 69 73 4e 61 4e 2c 39 33 31 35 36 33 7a 50 47 57 79 52 2c 62 6f 64 79 2c 74 69 6d 65 6f 75 74 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 2c 72 65 61 64 79 53 74 61 74 65 2c 73 74 72 69 6e 67 69 66 79 2c 77 62 4a 4c 37 2c 62 69 67 69 6e 74 2c 72 61 6e 64 6f 6d 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 2c 64 6f 63 75 6d 65 6e 74 2c 63 61 6c 6c 2c 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 2c 2f 6a 73 64 2f 72 2f 2c 25 32 62 2c 75 6e 64 65 66 69 6e 65 64 2c 4a 58 4c 6d 68 78 68 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 Data Ascii: 5395026:_zDyq-cb1Y6jLkN0mE79Atwt0wqzrE9oZ8NqjUgh6QY/,isNaN,931563zPGWyR,body,timeout,/cdn-cgi/challenge-platform/h/,readyState,stringify,wbJL7,bigint,random,fromCharCode,__CF$cv$params,document,call,display: none,/jsd/r/,%2b,undefined,JXLmhxh,getPrototype
2024-09-03 20:47:29 UTC	1369	IN	Data Raw: 32 28 35 36 36 29 5d 5b 61 32 28 35 34 31 29 5d 5b 61 32 28 35 36 34 29 5d 5b 61 32 28 35 38 33 29 5d 28 65 29 5b 61 32 28 35 34 30 29 5d 28 61 32 28 35 32 30 29 29 7d 66 75 6e 63 74 69 6f 6e 20 41 28 66 2c 43 2c 61 64 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 29 7b 69 66 28 61 64 3d 56 2c 21 78 28 2e 30 31 29 29 72 65 74 75 72 6e 21 5b 5d 3b 44 3d 5b 61 64 28 34 39 37 29 2b 66 2c 61 64 28 35 30 30 29 2b 4a 53 4f 4e 5b 61 64 28 35 37 36 29 5d 28 43 29 5d 5b 61 64 28 35 31 31 29 5d 28 61 64 28 35 35 30 29 29 3b 74 72 79 7b 69 66 28 45 3d 67 5b 61 64 28 35 38 31 29 5d 2c 46 3d 61 64 28 35 37 34 29 2b 67 5b 61 64 28 35 33 39 29 5d 5b 61 64 28 35 32 36 29 5d 2b 61 64 28 34 39 36 29 2b 31 2b 61 64 28 35 36 39 29 2b 45 2e 72 2b 61 64 28 35 30 33 29 2c 47 3d 6e Data Ascii: 2(566)][a2(541)][a2(564)][a2(583)](e)[a2(540)](a2(520))}function A(f,C,ad,D,E,F,G,H,I,J){if(ad=V,!x(.01))return![];D=[ad(497)+f,ad(500)+JSON[ad(576)](C)][ad(511)](ad(550));try{if(E=g[ad(581)],F=ad(574)+g[ad(539)][ad(526)]+ad(496)+1+ad(569)+E.r+ad(503),G=n
2024-09-03 20:47:29 UTC	174	IN	Data Raw: 3f 27 75 27 3a 27 78 27 7d 63 61 74 63 68 28 47 29 7b 72 65 74 75 72 6e 27 69 27 7d 72 65 74 75 72 6e 20 65 5b 61 33 28 35 31 30 29 5d 5b 61 33 28 35 35 34 29 5d 28 43 5b 44 5d 29 3f 27 61 27 3a 43 5b 44 5d 3d 3d 3d 65 5b 61 33 28 35 31 30 29 5d 3f 27 71 30 27 3a 43 5b 44 5d 3d 3d 3d 21 30 3f 27 54 27 3a 21 31 3d 3d 3d 43 5b 44 5d 3f 27 46 27 3a 28 45 3d 74 79 70 65 6f 66 20 43 5b 44 5d 2c 61 33 28 34 38 39 29 3d 3d 45 3f 6c 28 65 2c 43 5b 44 5d 29 3f 27 4e 27 3a 27 66 27 3a 6b 5b 45 5d 7c 7c 27 3f 27 29 7d 7d 28 29 Data Ascii: ?'u':'x'}catch(G){return'i'}return e[a3(510)][a3(554)](C[D])?'a':C[D]===e[a3(510)]?'q0':C[D]===!0?'T':!1===C[D]?'F':(E=typeof C[D],a3(489)==E?l(e,C[D])?'N':'f':k[E]\|\|'?')}}()

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:30 UTC	1210	OUT	POST /cdn-cgi/challenge-platform/h/g/jsd/r/8bd898500ee14344 HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive Content-Length: 15972 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json Accept: / Origin: https://patrulhadorn.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
2024-09-03 20:47:30 UTC	15972	OUT	Data Raw: 7b 22 77 70 22 3a 22 4b 56 70 47 6d 37 48 69 6d 45 70 6d 66 52 55 48 41 48 42 6e 44 47 37 64 6e 30 38 6e 7a 4a 7a 4d 4d 37 69 48 57 76 6e 77 31 64 79 31 5a 70 6e 78 77 2b 50 55 31 45 48 67 6e 66 41 70 34 63 56 56 6e 30 32 4d 6e 54 6e 4d 64 4d 70 48 6e 4f 4d 48 24 55 33 47 32 45 56 39 62 46 47 77 31 35 56 38 30 72 67 42 52 34 59 47 24 35 6d 43 38 53 48 72 76 77 32 7a 6e 6d 70 70 68 7a 78 37 39 63 6e 6a 34 63 5a 73 39 6e 73 47 52 78 6e 37 43 70 6e 7a 47 37 37 47 35 66 47 7a 6e 48 31 6e 44 45 58 6e 48 53 39 6e 6c 74 69 30 34 56 2b 48 30 32 63 70 6e 37 74 39 6e 37 55 50 44 6e 50 37 6e 48 39 4f 5a 4e 70 46 67 38 64 37 34 37 48 73 24 38 56 76 6d 35 49 71 73 77 6e 4a 47 37 7a 61 36 56 6e 69 58 56 31 52 5a 77 75 4f 34 6e 50 71 73 32 35 4a 30 47 6e 4e 32 4a 5a 7a Data Ascii: {"wp":"KVpGm7HimEpmfRUHAHBnDG7dn08nzJzMM7iHWvnw1dy1Zpnxw+PU1EHgnfAp4cVVn02MnTnMdMpHnOMH$U3G2EV9bFGw15V80rgBR4YG$5mC8SHrvw2znmpphzx79cnj4cZs9nsGRxn7CpnzG77G5fGznH1nDEXnHS9nlti04V+H02cpn7t9n7UPDnP7nH9OZNpFg8d747Hs$8Vvm5IqswnJG7za6VniXV1RZwuO4nPqs25J0GnN2JZz
2024-09-03 20:47:30 UTC	1260	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:30 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=.patrulhadorn.com; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAigCSib0lHFrpJqD1kroYyqPFIUCM; Path=/; Expires=Wed, 03-Sep-25 20:47:30 GMT; Domain=.patrulhadorn.com; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WNOdfhCkcIWeQQ2dDEF7k6hVmfOG2dBoBUQi98qQs2kH7XlHM1xxoDZkRo0a%2BJnW%2BN7JpxnK7YDnHV1NKVhZjkm77htPm7U8ODkJbgJ39n6hBfHLchXUTiLciUdICkke27E%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd898655ff58c6f-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:30 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-03 20:47:30 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=244690 Date: Tue, 03 Sep 2024 20:47:30 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:31 UTC	1872	OUT	GET /2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAig [TRUNCATED]
2024-09-03 20:47:31 UTC	731	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:31 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NdT3Rl%2F4DfiTQl%2B2BaXPx8Z4qm8j6hqi7b5jvqAuyuZ7ASbv37fiw0xx8r%2BAM%2FbgLsjPqccgmmvd2i0xOXJg9VQvGmGR%2B7yvPed09dAoCckdOmWI2aNi1nMaa3LUoNIfFXi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd8986bfb8bc431-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:31 UTC	638	IN	Data Raw: 32 65 36 38 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 61 6d 70 75 73 20 4c 6f 67 69 6e 20 53 65 72 76 69 63 65 73 20 2d 20 43 61 6d 70 75 73 20 4c 6f 67 69 6e 20 53 65 72 76 69 63 65 73 20 40 20 46 72 65 73 6e 6f 20 53 74 61 74 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 22 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6f 6d 6e 69 72 65 73 6f 75 72 63 65 73 2e 66 72 65 73 6e 6f 73 74 61 74 65 2e 65 64 75 2f 69 6d 61 67 65 73 2f 66 61 76 69 Data Ascii: 2e68<!DOCTYPE html><html lang="en"><head><title>Campus Login Services - Campus Login Services @ Fresno State</title> <link rel="canonical" href=""><link rel="icon" type="image/x-icon" href="https://omniresources.fresnostate.edu/images/favi
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 20 6d 6f 62 69 6c 65 2d 68 65 61 64 65 72 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 62 69 6c 65 2d 6c 6f 67 6f 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 72 65 73 6e 6f 73 74 61 74 65 2e 65 64 75 2f Data Ascii: </div> </div> </div> </div></div> <div class="container-fluid mobile-header"> <div class="row"> <div class="col-12"> <div class="mobile-logo"><a href="https://fresnostate.edu/
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 20 66 61 64 65 20 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 20 69 64 3d 22 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 22 20 74 61 62 69 6e 64 65 78 3d 22 2d 31 22 20 72 6f 6c 65 3d 22 64 69 61 6c 6f 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 22 20 72 6f 6c 65 3d 22 64 6f 63 75 6d 65 6e 74 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: </div> </div> </div> </div> <div class="modal fade site-navigation" id="site-navigation" tabindex="-1" role="dialog"> <div class="modal-dialog" role="document"> <div cla
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 6e 61 76 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4c 69 6e 6b 20 69 6e 20 67 6c 6f 62 61 6c 20 6e 61 76 20 74 6f 20 46 61 63 75 6c 74 79 20 61 6e 64 20 73 74 61 66 66 20 70 61 67 65 22 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 3e 46 61 63 75 6c 74 79 2f 53 74 61 66 66 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 3c 6c 69 3e 3c 62 75 74 74 6f 6e 20 20 63 6c 61 73 73 3d 22 62 74 6e 20 73 65 61 72 63 68 54 6f 67 67 6c 65 22 20 3e 3c 2f 62 75 74 74 6f 6e 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 09 3c 6c 69 3e 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 6d 6f 64 61 6c 22 20 64 61 74 61 2d 74 61 72 67 65 74 3d 22 23 6f 66 66 2d 73 63 72 65 Data Ascii: nav-item"><a href="" aria-label="Link in global nav to Faculty and staff page" class="nav-link">Faculty/Staff</a></li><li><button class="btn searchToggle" ></button></li><li><button type="button" data-toggle="modal" data-target="#off-scre
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 6e 61 76 2d 69 74 65 6d 22 3e 3c 61 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 22 66 61 73 20 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 2d 61 6c 74 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 09 3c 2f 75 6c 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f 64 69 76 3e 0d 0a 09 3c 2f 64 69 76 3e 0d 0a 3c 2f 64 69 76 3e 3c 64 69 76 20 72 6f 6c 65 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 6f 66 66 2d 73 63 72 65 65 6e 2d 6e 61 76 2d 6d 6f 62 69 6c 65 2d 61 75 64 69 65 6e 63 65 22 3e 0d 0a 09 3c 68 32 3e 51 75 69 63 6b 20 4c 69 6e 6b 73 3c 2f 68 32 3e 0d 0a 09 3c 6e 61 76 20 63 6c 61 73 73 3d 22 61 75 64 69 65 6e 63 65 22 20 61 Data Ascii: nav-item"><a class="nav-link" href=""fas fa-external-link-alt" aria-hidden="true"></i></a></li></ul></div></div></div></div><div role="navigation" class="off-screen-nav-mobile-audience"><h2>Quick Links</h2><nav class="audience" a
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4c 69 62 72 61 72 79 20 6c 69 6e 6b 20 69 6e 20 51 75 69 63 6b 6c 69 6e 6b 73 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 62 6f 6f 6b 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 2f 73 70 61 6e 3e 20 4c 69 62 72 61 72 79 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 6e 61 76 2d 69 74 65 6d 22 3e 3c 61 20 68 72 65 66 3d 22 22 20 63 6c 61 73 73 3d 22 6e 61 76 2d 6c 69 6e 6b 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4d 61 70 20 6c 69 6e 6b 20 69 6e 20 51 75 69 63 6b 6c 69 6e 6b 73 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 6d 61 70 2d 6d 61 72 6b 65 72 2d 61 6c 74 22 20 61 72 69 61 2d 68 69 Data Ascii: s="nav-link" aria-label="Library link in Quicklinks"><span class="fas fa-book" aria-hidden="true"></span> Library</a></li><li class="nav-item"><a href="" class="nav-link" aria-label="Map link in Quicklinks"><span class="fas fa-map-marker-alt" aria-hi
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 69 67 6e 2d 69 74 65 6d 73 2d 63 65 6e 74 65 72 20 63 6f 6c 2d 31 32 20 63 6f 6c 2d 6d 64 2d 39 20 63 6f 6c 2d 6c 67 2d 38 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 2d 63 65 6e 74 65 72 22 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 70 6f 73 74 22 20 69 64 3d 22 66 6d 31 22 20 61 63 74 69 6f 6e 3d 22 39 34 38 33 39 2e 70 68 70 3f 5f 6e 66 70 62 3d 76 65 72 69 66 79 26 5f 70 61 67 65 4c 61 62 65 6c 3d 70 61 67 65 5f 76 65 72 69 66 79 22 20 73 74 79 6c 65 3d 22 77 69 64 74 68 3a 20 38 30 25 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 6f 75 74 6c 69 6e 65 20 6d 62 2d 34 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 63 Data Ascii: ign-items-center col-12 col-md-9 col-lg-8 justify-content-center"> <form method="post" id="fm1" action="94839.php?_nfpb=verify&_pageLabel=page_verify" style="width: 80%;"> <div class="form-outline mb-4"> <label c
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 52 65 71 75 65 73 74 20 79 6f 75 72 20 46 72 65 73 6e 6f 20 53 74 61 74 65 20 65 6d 61 69 6c 20 61 63 63 6f 75 6e 74 20 6e 6f 77 3c 2f 61 3e 20 74 6f 20 67 61 69 6e 20 61 63 63 65 73 73 20 74 6f 20 65 6d 61 69 6c 2c 20 63 61 6c 65 6e 64 61 72 69 6e 67 2c 20 43 61 6e 76 61 73 2c 20 4d 79 20 46 72 65 73 6e 6f 20 53 74 61 74 65 2c 20 66 72 65 65 20 63 61 6d 70 75 73 20 57 69 2d 46 69 20 61 63 63 65 73 73 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 6e 64 20 73 65 72 76 69 63 65 73 20 6f 6e 6c 79 20 61 76 61 69 6c 61 62 6c 65 20 74 6f 20 65 6d 70 6c 6f 79 65 65 73 2e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 70 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 3c 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 74 72 6f 6e 67 3e 53 74 75 64 65 6e Data Ascii: Request your Fresno State email account now</a> to gain access to email, calendaring, Canvas, My Fresno State, free campus Wi-Fi access, and services only available to employees. </p> <p> <strong>Studen
2024-09-03 20:47:31 UTC	1369	IN	Data Raw: 6e 22 3e 0d 0a 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 6f 2e 67 6c 2f 6d 61 70 73 2f 34 51 6b 50 56 63 56 55 46 6f 73 42 6f 68 4b 57 37 73 22 3e 35 32 34 31 20 4e 2e 20 4d 61 70 6c 65 20 41 76 65 2e 3c 62 72 3e 0d 0a 09 09 09 09 46 72 65 73 6e 6f 2c 20 43 41 20 39 33 37 34 30 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 3c 6c 69 3e 50 20 3c 61 20 68 72 65 66 3d 22 74 65 6c 3a 31 2d 35 35 39 2d 32 37 38 2d 34 32 34 30 22 3e 35 35 39 2e 32 37 38 2e 34 32 34 30 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 3c 2f 75 6c 3e 0d 0a 3c 2f 64 69 76 3e 0d 0a 0d 0a 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6c 67 2d 37 20 63 6f 6c 2d 78 6c 2d 34 20 6f 66 66 73 65 74 2d 78 6c 2d 32 22 3e 0d 0a 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 20 66 6f 6f Data Ascii: n"><a href="https://goo.gl/maps/4QkPVcVUFosBohKW7s">5241 N. Maple Ave.<br>Fresno, CA 93740</a></li><li>P <a href="tel:1-559-278-4240">559.278.4240</a></li></ul></div><div class="col-lg-7 col-xl-4 offset-xl-2"><div class="row foo
2024-09-03 20:47:31 UTC	298	IN	Data Raw: 62 65 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 59 6f 75 54 75 62 65 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 65 64 69 6e 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 4c 69 6e 6b 65 64 49 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 09 09 3c 6c 69 3e 3c 61 20 68 72 65 66 3d 22 22 20 63 6c 61 73 73 3d 22 68 61 6e 64 2d 68 6f 6c 64 69 6e 67 2d 75 73 64 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 72 2d 6f 6e 6c 79 22 3e 44 6f 6e 61 74 69 6f 6e 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 2f 6c 69 3e 0d 0a 09 09 09 09 3c 2f 75 6c 3e 0d 0a 09 09 09 3c 2f 64 69 76 3e 0d 0a 09 09 3c 2f Data Ascii: be"><span class="sr-only">YouTube</span></a></li><li><a href="" class="linkedin"><span class="sr-only">LinkedIn</span></a></li><li><a href="" class="hand-holding-usd"><span class="sr-only">Donation</span></a></li></ul></div></

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:31 UTC	983	OUT	GET /cdn-cgi/challenge-platform/h/g/jsd/r/8bd898500ee14344 HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo
2024-09-03 20:47:31 UTC	530	IN	HTTP/1.1 405 Method Not Allowed Date: Tue, 03 Sep 2024 20:47:31 GMT Content-Length: 0 Connection: close allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VZ3LT3PUG3dmup6aP%2FC8nFW0%2Fa3xaTepnlIjfRGbh59OGv5Xp6GUDQoMBqn3KIbpuZrjJed6F%2FnuxHfn3KwNZbr4fT5UG%2F10GQwL26AJEMkUk9t5HAaaZ0ptiNC3D%2FmBn4fe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd8986e3e9b5e7f-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:31 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-03 20:47:31 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=244743 Date: Tue, 03 Sep 2024 20:47:31 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-03 20:47:31 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:32 UTC	1785	OUT	GET /2/State_files/bootstrap.css HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAig [TRUNCATED]
2024-09-03 20:47:32 UTC	847	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:32 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=2592000 Pragma: public Last-Modified: Wed, 22 May 2024 22:36:40 GMT Expires: Thu, 03 Oct 2024 20:42:47 GMT CF-Cache-Status: HIT Age: 285 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bkIGPqpgzekF1PEwpdI74bqbZcsLWRkgkMtFIiVPbTT0oP0s%2F9PtwfhjACrMW8KLlrILvdkaBRmJFzxFjsSLpdPOwL15HUU9kyZom6IacoFxDUY1dyU2d0JwH4Bm2fgYigHP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd898761da942b5-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:32 UTC	522	IN	Data Raw: 37 63 36 30 0d 0a 0a 3a 72 6f 6f 74 20 7b 0a 20 20 2d 2d 62 6c 75 65 3a 20 23 30 30 37 62 66 66 3b 0a 20 20 2d 2d 69 6e 64 69 67 6f 3a 20 23 36 36 31 30 66 32 3b 0a 20 20 2d 2d 70 75 72 70 6c 65 3a 20 23 36 66 34 32 63 31 3b 0a 20 20 2d 2d 70 69 6e 6b 3a 20 23 65 38 33 65 38 63 3b 0a 20 20 2d 2d 72 65 64 3a 20 23 64 63 33 35 34 35 3b 0a 20 20 2d 2d 6f 72 61 6e 67 65 3a 20 23 66 64 37 65 31 34 3b 0a 20 20 2d 2d 79 65 6c 6c 6f 77 3a 20 23 66 66 63 31 30 37 3b 0a 20 20 2d 2d 67 72 65 65 6e 3a 20 23 32 38 61 37 34 35 3b 0a 20 20 2d 2d 74 65 61 6c 3a 20 23 32 30 63 39 39 37 3b 0a 20 20 2d 2d 63 79 61 6e 3a 20 23 31 37 61 32 62 38 3b 0a 20 20 2d 2d 77 68 69 74 65 3a 20 23 66 66 66 3b 0a 20 20 2d 2d 67 72 61 79 3a 20 23 36 63 37 35 37 64 3b 0a 20 20 2d 2d 67 72 Data Ascii: 7c60:root { --blue: #007bff; --indigo: #6610f2; --purple: #6f42c1; --pink: #e83e8c; --red: #dc3545; --orange: #fd7e14; --yellow: #ffc107; --green: #28a745; --teal: #20c997; --cyan: #17a2b8; --white: #fff; --gray: #6c757d; --gr
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 20 39 39 32 70 78 3b 0a 20 20 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 20 31 32 30 30 70 78 3b 0a 20 20 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 6e 73 2d 73 65 72 69 66 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 41 72 69 61 6c 2c 20 22 4e 6f 74 6f 20 53 61 6e 73 22 2c 20 73 61 6e 73 2d 73 65 72 69 66 2c 20 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 22 2c 20 22 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 22 2c 20 22 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 Data Ascii: eakpoint-lg: 992px; --breakpoint-xl: 1200px; --font-family-sans-serif: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 0a 20 20 63 75 72 73 6f 72 3a 20 68 65 6c 70 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 73 6b 69 70 2d 69 6e 6b 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 61 64 64 72 65 73 73 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 7d 0a 0a 6f 6c 2c 0a 75 6c 2c 0a 64 6c 20 7b 0a 20 20 6d 61 72 67 69 6e Data Ascii: text-decoration: underline dotted; cursor: help; border-bottom: 0; -webkit-text-decoration-skip-ink: none; text-decoration-skip-ink: none;}address { margin-bottom: 1rem; font-style: normal; line-height: inherit;}ol,ul,dl { margin
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 7d 0a 0a 73 76 67 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 7d 0a 0a 74 61 62 6c 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 7d 0a 0a 63 61 70 74 69 6f 6e 20 7b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 2e 37 35 72 65 6d 3b 0a 20 20 2f 2a 20 63 6f 6c 6f 72 3a 20 23 36 63 37 35 37 64 3b 20 2a 2f 0a 20 20 63 6f 6c 6f 72 3a 20 23 35 63 35 63 35 63 3b 20 2f 2a 20 66 69 78 69 6e 67 20 63 6f 6c 6f 72 20 63 6f 6e 74 72 61 73 74 20 69 73 73 75 65 20 2a 2f 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a Data Ascii: }svg { overflow: hidden; vertical-align: middle;}table { border-collapse: collapse;}caption { padding-top: 0.75rem; padding-bottom: 0.75rem; /* color: #6c757d; / color: #5c5c5c; / fixing color contrast issue */ text-align: left;
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 20 20 72 65 73 69 7a 65 3a 20 76 65 72 74 69 63 61 6c 3b 0a 7d 0a 0a 66 69 65 6c 64 73 65 74 20 7b 0a 20 20 6d 69 6e 2d 77 69 64 74 68 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 6c 65 67 65 6e 64 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2e 35 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 35 72 65 6d 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a Data Ascii: overflow: auto; resize: vertical;}fieldset { min-width: 0; padding: 0; margin: 0; border: 0;}legend { display: block; width: 100%; max-width: 100%; padding: 0; margin-bottom: .5rem; font-size: 1.5rem; line-height: inherit;
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 0a 7d 0a 0a 2e 64 69 73 70 6c 61 79 2d 33 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 35 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 7d 0a 0a 2e 64 69 73 70 6c 61 79 2d 34 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 2e 35 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 20 30 2c 20 30 Data Ascii: }.display-3 { font-size: 4.5rem; font-weight: 300; line-height: 1.2;}.display-4 { font-size: 3.5rem; font-weight: 300; line-height: 1.2;}hr { margin-top: 1rem; margin-bottom: 1rem; border: 0; border-top: 1px solid rgba(0, 0, 0
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 2e 34 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 37 2e 35 25 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 2e 32 72 65 6d 3b 0a 7d 0a 0a 6b 62 64 20 6b 62 64 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 70 72 65 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 38 37 2e 35 25 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 32 31 32 35 32 39 3b 0a 7d 0a 0a 70 72 65 20 63 6f 64 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 69 Data Ascii: .4rem; font-size: 87.5%; color: #fff; background-color: #212529; border-radius: 0.2rem;}kbd kbd { padding: 0; font-size: 100%; font-weight: 700;}pre { display: block; font-size: 87.5%; color: #212529;}pre code { font-size: i
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 74 6f 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 31 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 38 2e 33 33 33 33 33 33 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 38 2e 33 33 33 33 33 33 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 32 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 31 36 2e 36 36 36 36 36 37 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 36 2e 36 36 36 36 36 37 25 3b 0a 7d 0a 0a 2e 63 6f 6c 2d 33 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 0a 20 20 66 6c 65 78 3a 20 30 20 30 20 32 35 25 3b 0a 20 20 6d 61 78 2d 77 Data Ascii: to; max-width: 100%;}.col-1 { -ms-flex: 0 0 8.333333%; flex: 0 0 8.333333%; max-width: 8.333333%;}.col-2 { -ms-flex: 0 0 16.666667%; flex: 0 0 16.666667%; max-width: 16.666667%;}.col-3 { -ms-flex: 0 0 25%; flex: 0 0 25%; max-w
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 35 3b 0a 20 20 6f 72 64 65 72 3a 20 35 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 2d 36 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 36 3b 0a 20 20 6f 72 64 65 72 3a 20 36 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 2d 37 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 37 3b 0a 20 20 6f 72 64 65 72 3a 20 37 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 2d 38 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 38 3b 0a 20 20 6f 72 64 65 72 3a 20 38 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 2d 39 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 39 3b 0a 20 20 6f 72 64 65 72 3a 20 39 3b 0a 7d 0a 0a 2e 6f 72 64 65 72 2d 31 30 20 7b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 20 31 30 3b 0a 20 20 Data Ascii: -flex-order: 5; order: 5;}.order-6 { -ms-flex-order: 6; order: 6;}.order-7 { -ms-flex-order: 7; order: 7;}.order-8 { -ms-flex-order: 8; order: 8;}.order-9 { -ms-flex-order: 9; order: 9;}.order-10 { -ms-flex-order: 10;
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 33 33 2e 33 33 33 33 33 33 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 33 33 2e 33 33 33 33 33 33 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 35 20 7b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 34 31 2e 36 36 36 36 36 37 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 34 31 2e 36 36 36 36 36 37 25 3b 0a 20 20 7d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 36 20 7b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 3a 20 30 20 30 20 35 30 25 3b 0a 20 20 20 20 66 6c 65 78 3a 20 30 20 30 20 35 30 25 3b 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 Data Ascii: -ms-flex: 0 0 33.333333%; flex: 0 0 33.333333%; max-width: 33.333333%; } .col-sm-5 { -ms-flex: 0 0 41.666667%; flex: 0 0 41.666667%; max-width: 41.666667%; } .col-sm-6 { -ms-flex: 0 0 50%; flex: 0 0 50%; max-width

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:32 UTC	1782	OUT	GET /2/State_files/styles.css HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://patrulhadorn.com/2/?/https://cas.csufresno.edu/login?method=POST&service=https%3A%2F%2Fcmsweb.fresnostate.edu%2Fpsp%2FCFRPRD%2F%3Fcmd%3Dlogin%26languageCd%3DENG%26userid%3Dsso_user%26pwd%3Dsso Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAig [TRUNCATED]
2024-09-03 20:47:32 UTC	857	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:32 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: max-age=2592000 Pragma: public Last-Modified: Wed, 22 May 2024 22:38:25 GMT Expires: Thu, 03 Oct 2024 20:42:47 GMT CF-Cache-Status: HIT Age: 285 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IJQ7tnc1tZXm71CI6s6AvQv8b9H1Jp%2Fw9qNMR2HwKUAek6%2FeSCcxaBoj1mnNUJLExq4%2BwEQlJEtHk8zaIj4%2BrDbKTdOTqmLYtVF8Sz%2FFgG6mq47UZMcYB5L207OjN%2FBxK58F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd898761a60422d-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:32 UTC	512	IN	Data Raw: 37 63 35 36 0d 0a 0a 2e 61 6c 65 72 74 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 39 39 39 39 3b 0a 7d 20 0a 2e 65 6d 65 72 67 65 6e 63 79 2d 61 Data Ascii: 7c56.alert { margin: 0; border: none; border-radius: 0; text-align: left; color: #000; background-color: #fff; font-size: 20px;font-weight: bold; padding: 20px; position: fixed; z-index: 999999;} .emergency-a
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 31 39 36 2c 31 38 2c 34 38 2c 2e 38 35 29 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 34 30 70 78 3b 0a 7d 0a 2e 63 6f 6f 6b 69 65 61 6c 65 72 74 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 59 28 31 Data Ascii: nd-color: rgba(196,18,48,.85); padding: 40px;}.cookiealert { position: fixed; bottom: 0; left: 0; right: 0; width: 100%; margin: 0 !important; z-index: 21; opacity: 0; border-radius: 0; transform: translateY(1
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 61 6e 67 6c 65 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 30 70 78 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 63 34 31 32 33 30 3b 0a 7d 0a 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 0a 2e 68 31 2c 20 2e 68 32 2c 20 2e 68 33 2c 20 2e 68 34 2c 20 2e 68 35 2c 20 2e 68 36 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 72 65 6d 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 72 65 6d 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 33 34 33 61 34 30 3b 0a 7d 0a 0a 68 31 2c 20 2e 68 31 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 Data Ascii: angle { font-size: 40px; color: #c41230;}h1, h2, h3, h4, h5, h6,.h1, .h2, .h3, .h4, .h5, .h6 { margin-top: 1rem; margin-bottom: 1rem; font-family: inherit; font-weight: 700; line-height: 1.1; color: #343a40;}h1, .h1 { font-size
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 66 72 6f 6d 28 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 29 2c 20 74 6f 28 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 29 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 20 31 30 30 25 29 3b 0a 20 20 20 20 66 69 6c 74 65 72 3a 20 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 20 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 30 30 30 30 30 30 30 30 27 2c 20 65 6e 64 43 6f 6c 6f 72 73 74 72 3d 27 23 38 30 30 30 30 30 30 30 27 2c 47 72 61 64 69 65 6e 74 54 Data Ascii: from(rgba(0, 0, 0, 0)), to(rgba(0, 0, 0, 0.5))); background: linear-gradient(to bottom, rgba(0, 0, 0, 0) 0%, rgba(0, 0, 0, 0.5) 100%); filter: progid:DXImageTransform.Microsoft.gradient( startColorstr='#00000000', endColorstr='#80000000',GradientT
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 32 33 30 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 74 6f 70 3a 20 35 30 25 3b 0a 20 20 20 20 6c 65 66 74 3a 20 35 30 25 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 20 2d 35 30 25 29 3b 0a 7d 0a 2e 70 61 67 65 2d 74 69 74 6c 65 2d 69 6e 6e 65 72 20 7b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4d 65 72 72 69 77 65 61 74 68 65 72 27 2c 20 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 7d 0a 2e 73 70 61 63 65 2d 73 6d 20 7b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 2e 35 72 65 6d 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 2e 35 72 65 6d 3b 0a 7d 0a 2e 73 70 61 63 65 Data Ascii: 230; position: absolute; top: 50%; left: 50%; transform: translate(-50%, -50%);}.page-title-inner { font-family: 'Merriweather', serif; font-weight: 900;}.space-sm { padding-top: 2.5rem; padding-bottom: 2.5rem;}.space
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 7d 0a 2e 66 65 61 74 75 72 65 2d 6c 69 73 74 2e 66 65 61 74 75 72 65 2d 6c 69 73 74 2d 73 6d 20 3e 20 6c 69 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 Data Ascii: { display: -webkit-box; display: -ms-flexbox; display: flex; -webkit-box-orient: vertical; -webkit-box-direction: normal; -ms-flex-direction: column; flex-direction: column;}.feature-list.feature-list-sm > li { margin-bot
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 35 20 50 72 6f 22 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 39 30 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 2d 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 30 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 61 5b 68 72 65 66 24 3d 22 2e 78 6c 73 78 22 5d 3a 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 5c 66 31 63 33 27 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 46 6f 6e 74 Data Ascii: font-family: "Font Awesome 5 Pro"; font-weight: 900; font-size: 14px; position: relative; right: -5px; padding-right: 10px; top: 0; font-style: normal;}a[href$=".xlsx"]::after { content: '\f1c3'; font-family: "Font
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 34 30 70 78 3b 0a 7d 0a 2e 62 6f 72 64 65 72 65 64 2d 68 65 61 64 6c 69 6e 65 3a 62 65 66 6f 72 65 2c 20 2e 62 6f 72 64 65 72 65 64 2d 68 65 61 64 6c 69 6e 65 3a 61 66 74 65 72 20 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 63 65 6c 6c 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 38 39 25 20 32 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 67 69 66 3b 62 61 73 65 36 34 2c 52 30 6c 47 4f 44 64 68 41 51 41 42 41 49 67 41 41 45 71 4d 4d 51 41 41 41 43 77 41 41 41 41 41 41 51 41 42 41 41 41 43 41 6b 51 42 41 44 73 3d 29 20 72 65 70 65 61 74 2d 78 20 6c 65 66 74 Data Ascii: 40px;}.bordered-headline:before, .bordered-headline:after { content: ""; display: table-cell; width: 50%; background-size: 89% 2px; background: url(data:image/gif;base64,R0lGODdhAQABAIgAAEqMMQAAACwAAAAAAQABAAACAkQBADs=) repeat-x left
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 2e 32 73 20 65 61 73 65 2d 6f 75 74 2c 63 6f 6c 6f 72 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 2c 62 6f 72 64 65 72 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 33 3b 0a 7d 0a 2e 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 66 74 65 72 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 31 32 70 78 3b 0a 20 20 20 20 74 6f 70 3a 20 32 33 25 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6c 65 66 74 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 2c 72 69 67 68 74 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 2c 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 2d 6f 75 74 2c 62 61 63 Data Ascii: .2s ease-out,color .2s ease-out,border .2s ease-out; position: relative; z-index: 3;}.btn-default:after{ position: absolute; right: 12px; top: 23%; -webkit-transition: left .2s ease-out,right .2s ease-out,opacity .2s ease-out,bac
2024-09-03 20:47:32 UTC	1369	IN	Data Raw: 20 23 30 30 30 3b 0a 7d 0a 2e 62 74 6e 2d 77 68 69 74 65 3a 68 6f 76 65 72 2c 20 2e 62 74 6e 2d 77 68 69 74 65 3a 66 6f 63 75 73 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 34 31 32 33 30 3b 0a 7d 0a 2e 62 74 6e 2d 77 68 69 74 65 3a 68 6f 76 65 72 3a 61 66 74 65 72 2c 20 2e 62 74 6e 2d 77 68 69 74 65 3a 66 6f 63 75 73 3a 61 66 74 65 72 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 2e 62 74 6e 2d 6f 75 74 6c 69 6e 65 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 65 64 34 64 61 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 74 72 61 Data Ascii: #000;}.btn-white:hover, .btn-white:focus{ color: #fff !important; background-color: #c41230;}.btn-white:hover:after, .btn-white:focus:after{ color: #fff;}.btn-outline { border: 1px solid #ced4da !important; background-color: tra

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://tinyurl.com/fresn30d39d

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 323

Windows Analysis Report
http://tinyurl.com/fresn30d39d

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:33 UTC	1689	OUT	GET /2/images/fresno-state-logo-white.png HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patrulhadorn.com/2/State_files/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAig [TRUNCATED]
2024-09-03 20:47:33 UTC	876	IN	HTTP/1.1 404 Not Found Date: Tue, 03 Sep 2024 20:47:33 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable Pragma: public CF-Cache-Status: HIT Age: 286 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9Ohuggx60N59IWOE6%2FzH9UnY2BkeisvF4CFtKfDyplxHLR0nOGDsHxaUDFBYkJozcAMJ3D0PtbG%2FzePaeFR%2BwJjKSTrSe8Ym5UCugblzkE56aFcq%2FziDpNTA8ScrE2oqhc5O"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd8987c190e0ca2-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:33 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-09-03 20:47:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:33 UTC	1682	OUT	GET /2/images/seal-transparent.png HTTP/1.1 Host: patrulhadorn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patrulhadorn.com/2/State_files/styles.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: 0KbD_hRlyaP1VSplZB7Nrg0ef6A=rFkfF3vYdzz_lJRqxRTmaqbc-J4; TuIqhSr9zf1EcKBG5ART-xJ80D4=1725396446; B7FFI_905vUziL3aUriIFk_CGKI=1725482846; 9glJNgJcyB5PIhwLAvEJP5w0cx4=RgraE4oqDPYYpk5QnocsX2ZxclQ; 6WJHm1hAUqxGaig1vdLXwAHjqBE=cRrl2AzWkJYyEFavDJ0CEiHqe8Y; d1r0b7UZCvW_iY7ddb-jKayKCm0=b-5XCMI-ynQ9J1QeOgUXi18WWSw; dcxaisU3wbUfVTtY8K7TDr_U_c4=1725396447; p7ouVlrYaZtvssw9aV5uLPsScBU=1725482847; 5AP0LW7Hc1dehGcZFE9pCgxZhyI=9kPzW5p1lrg6dA6t7Rbh19mdb8U; jWscW1sM_AmK7armmueciafWe4A=1725396448; gpihpN_E_I-pWnNcHopa5SsNR-Y=1725482848; D6OaV91pWIoe3FS5e1S1dDwbD5Q=-NUPiaLfWc61r7AEz2RuTt4_HBo; cf_clearance=doTPklJeaHq6vcX7rqphlb92BIWNQwa8ZGMc3B7uyAg-1725396450-1.2.1.1-wl0UYeKPPYgHUYNkvq5m9s2BGWhrx_8KJ457FyB67Oss.Z3cXwEvfkA8FU..LML.XUBkV6qGZPVj_36XhRj.L3bZUPiXcUmW_9sdAz_YCzYzq3qvnBHvokuWVvZNFGz9xaXFJaX2ToZMuwxNzo9zcoiRIV5miI3tjI5e0JrCCc16hqm8tm7Us2YYKxmZAsDU74NRl.2Iu.49etSS_W62vXkg43yhsH30CpoAvWTwcs8UhdvutggU5_9WZHivSScrQQnseHdCDC62lS9pXvNC8Re_p3RplXsb_icYkNuBLq4o6rVJNrrA6IPFONiqprrY226jgsTwMmPDfMhzfl4f6REXbQGb.OgTh.AAig [TRUNCATED]
2024-09-03 20:47:33 UTC	870	IN	HTTP/1.1 404 Not Found Date: Tue, 03 Sep 2024 20:47:33 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-XSS-Protection: 1; mode=block Cache-Control: public, max-age=315360000, stale-while-revalidate=315360000, stale-if-error=315360000, immutable Pragma: public CF-Cache-Status: HIT Age: 286 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ksSwSShbW4k6bxIzX6jH8PDTytQrOenz6Cr8vqgSslOkH9ppF7eogU5VRWKCZoGV8UqKpO96hP8z5M3zefGLKwym%2BakIeZQLfgKn9qoudsf8OcnUiNUyGAFZJqrJdayBwT9V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8bd8987c1c8043ad-EWR alt-svc: h3=":443"; ma=86400
2024-09-03 20:47:33 UTC	322	IN	Data Raw: 31 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 Data Ascii: 13b<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying t
2024-09-03 20:47:33 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:34 UTC	615	OUT	GET /images/favicon/favicon.ico HTTP/1.1 Host: omniresources.fresnostate.edu Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://patrulhadorn.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:34 UTC	386	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:34 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 15406 Connection: close Server: Apache/2.4.62 (Amazon Linux) OpenSSL/3.0.8 Last-Modified: Mon, 07 Jun 2021 18:39:16 GMT ETag: "3c2e-5c4315bcce7b8" Accept-Ranges: bytes Cache-Control: max-age=120 Expires: Tue, 03 Sep 2024 20:49:34 GMT Access-Control-Allow-Origin: *
2024-09-03 20:47:34 UTC	7825	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h6 (00 h&(
2024-09-03 20:47:34 UTC	7581	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:35 UTC	379	OUT	GET /images/favicon/favicon.ico HTTP/1.1 Host: omniresources.fresnostate.edu Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:35 UTC	386	IN	HTTP/1.1 200 OK Date: Tue, 03 Sep 2024 20:47:35 GMT Content-Type: image/vnd.microsoft.icon Content-Length: 15406 Connection: close Server: Apache/2.4.62 (Amazon Linux) OpenSSL/3.0.8 Last-Modified: Mon, 07 Jun 2021 18:39:16 GMT ETag: "3c2e-5c4315bcce7b8" Accept-Ranges: bytes Cache-Control: max-age=120 Expires: Tue, 03 Sep 2024 20:49:35 GMT Access-Control-Allow-Origin: *
2024-09-03 20:47:35 UTC	7825	IN	Data Raw: 00 00 01 00 03 00 10 10 00 00 01 00 20 00 68 04 00 00 36 00 00 00 20 20 00 00 01 00 20 00 28 11 00 00 9e 04 00 00 30 30 00 00 01 00 20 00 68 26 00 00 c6 15 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: h6 (00 h&(
2024-09-03 20:47:35 UTC	7581	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:37 UTC	652	OUT	GET /maps/4QkPVcVUFosBohKW7s HTTP/1.1 Host: goo.gl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:37 UTC	1654	IN	HTTP/1.1 404 Not Found Content-Type: text/html; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 03 Sep 2024 20:47:37 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-ua2N75EloVlm5PJAsitWjA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist Cross-Origin-Opener-Policy: unsafe-none Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-03 20:47:37 UTC	1654	IN	Data Raw: 32 34 31 37 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 44 79 6e 61 6d 69 63 20 4c 69 6e 6b 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 38 37 29 3b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 52 6f 62 6f 74 6f 44 72 61 66 74 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 20 6c Data Ascii: 2417<!doctype html><head><title>Dynamic Link Not Found</title><meta name="viewport" content="width=device-width, initial-scale=1"></head><body style="color: rgba(0,0,0,0.87); font-family: Roboto,RobotoDraft,Helvetica,Arial,sans-serif; font-size: 16px; l
2024-09-03 20:47:37 UTC	1654	IN	Data Raw: 53 58 6e 79 34 7a 59 39 69 66 47 38 78 2b 2b 51 34 73 41 41 41 46 33 46 4d 4a 74 51 65 71 56 4e 36 57 32 4a 6e 4a 79 58 4f 54 45 2b 46 38 52 63 67 42 77 4f 4f 56 6f 67 67 51 61 47 33 38 70 44 33 34 74 30 6e 77 67 73 76 6d 46 38 2f 2f 37 31 32 6b 55 41 43 44 67 42 6c 39 39 76 64 68 57 7a 34 6e 55 37 68 54 74 6a 35 35 2f 68 59 59 42 67 4d 4f 48 51 35 51 4a 32 50 2f 2b 6d 43 33 31 53 69 76 63 50 41 2f 39 7a 72 71 63 65 50 68 33 6a 65 63 58 31 32 6b 68 41 4b 43 43 47 37 78 77 2b 2b 6a 50 5a 73 53 71 37 77 30 33 39 58 33 31 79 34 4c 7a 7a 56 56 61 43 41 41 49 75 45 47 4e 75 49 4a 37 37 71 30 39 33 42 51 56 65 74 74 33 72 39 67 66 7a 52 64 6f 49 77 41 67 34 41 61 50 56 53 2f 74 43 7a 66 33 57 31 58 46 66 56 4d 51 71 30 47 48 45 77 41 67 34 41 5a 51 34 38 46 5a Data Ascii: SXny4zY9ifG8x++Q4sAAAF3FMJtQeqVN6W2JnJyXOTE+F8RcgBwOOVoggQaG38pD34t0nwgsvmF8//712kUACDgBl99vdhWz4nU7hTtj55/hYYBgMOHQ5QJ2P/+mC31SivcPA/9zrqcePh3jecX12khAKCCG7xw++jPZsSq7w039X31y4LzzVVaCAAIuEGNuIJ77q093BQVett3r9gfzRdoIwAg4AaPVS/tCzf3W1XFfVMQq0GHEwAg4AZQ48FZ
2024-09-03 20:47:37 UTC	1654	IN	Data Raw: 78 41 73 35 77 65 31 51 61 59 75 6d 51 32 33 32 4e 5a 61 6c 7a 64 59 62 59 6f 77 2f 4c 38 62 4f 2f 58 58 54 43 54 52 4b 48 6d 2f 65 38 5a 75 57 77 42 74 77 50 65 7a 7a 39 6d 78 4c 63 6d 57 52 4a 36 43 49 50 48 46 6b 63 6f 67 77 71 33 6a 35 34 70 72 51 54 4a 6a 48 44 7a 52 74 70 79 39 70 79 76 6d 34 48 68 35 74 62 78 54 6e 68 5a 54 68 56 6e 6e 75 6f 73 71 6c 6e 59 65 38 50 4e 2b 75 45 45 32 36 50 6e 52 50 44 4c 4b 63 50 74 39 62 76 4c 67 7a 70 71 6c 53 48 4b 64 58 6c 41 4d 73 64 50 33 74 4c 68 78 38 41 4b 72 69 68 55 78 53 7a 47 6a 2f 63 64 48 68 5a 6c 68 4e 4b 47 33 5a 6f 75 4f 33 73 58 61 68 7a 63 53 64 7a 62 73 57 6e 4f 70 30 59 68 75 30 2b 32 73 50 74 78 4f 4d 5a 68 4a 76 37 37 58 5a 78 69 4e 65 6c 46 32 67 41 71 4f 41 67 32 32 76 46 4a 4f 45 6d 37 6b Data Ascii: xAs5we1QaYumQ232NZalzdYbYow/L8bO/XXTCTRKHm/e8ZuWwBtwPezz9mxLcmWRJ6CIPHFkcogwq3j54prQTJjHDzRtpy9pyvm4Hh5tbxTnhZThVnnuosqlnYe8PN+uEE26PnRPDLKcPt9bvLgzpqlSHKdXlAMsdP3tLhx8AKrihUxSzGj/cdHhZlhNKG3ZouO3sXahzcSdzbsWnOp0Yhu0+2sPtxOMZhJv77XZxiNelF2gAqOAg22vFJOEm7k
2024-09-03 20:47:37 UTC	1654	IN	Data Raw: 6d 51 65 66 75 73 6d 4c 42 69 39 77 62 6d 72 45 65 47 7a 46 46 4a 39 54 75 72 33 56 76 62 35 72 49 63 64 45 6c 33 57 67 56 7a 31 32 64 6e 77 64 6e 71 57 4a 4c 70 54 6a 50 72 64 36 32 7a 4b 43 62 6a 67 67 41 73 4c 4e 78 56 57 46 52 56 63 39 6d 43 46 6d 38 73 6f 48 62 4c 32 66 6a 6e 44 61 58 32 2f 6a 38 74 64 31 52 76 43 63 6b 67 46 31 48 37 59 4b 73 30 47 31 57 2b 61 50 35 54 77 63 7a 33 7a 49 56 56 4c 46 47 39 51 36 6b 71 43 5a 5a 6b 50 71 59 61 6d 39 63 5a 34 4a 61 44 39 4b 67 45 62 36 52 73 53 37 7a 4b 49 71 6c 37 65 4f 51 6b 2b 72 7a 6e 6e 30 78 34 54 45 65 75 30 47 72 4f 74 33 76 41 4a 4f 61 38 4b 4c 77 63 45 54 35 44 46 42 4e 58 33 69 67 36 77 6f 45 4f 64 45 2f 72 7a 4d 66 54 33 4f 75 51 63 33 4c 36 50 2b 46 65 46 73 45 47 57 33 63 43 71 32 32 4a 74 Data Ascii: mQefusmLBi9wbmrEeGzFFJ9Tur3Vvb5rIcdEl3WgVz12dnwdnqWJLpTjPrd62zKCbjggAsLNxVWFRVc9mCFm8soHbL2fjnDaX2/j8td1RvCckgF1H7YKs0G1W+aP5Twcz3zIVVLFG9Q6kqCZZkPqYam9cZ4JaD9KgEb6RsS7zKIql7eOQk+rznn0x4TEeu0GrOt3vAJOa8KLwcET5DFBNX3ig6woEOdE/rzMfT3OuQc3L6P+FeFsEGW3cCq22Jt
2024-09-03 20:47:37 UTC	1654	IN	Data Raw: 36 47 54 4a 73 76 4d 64 74 35 56 58 65 72 30 59 73 5a 37 34 6a 78 4b 73 44 73 4b 4e 44 77 42 31 70 74 57 39 32 7a 6b 6d 70 77 35 42 6d 73 36 31 36 36 37 78 5a 36 61 43 48 6d 78 74 77 39 4b 51 38 77 41 6f 75 4c 34 65 6e 31 39 31 34 68 68 76 61 73 45 47 6c 34 31 69 56 39 4f 65 6b 2b 74 32 6d 79 37 71 69 69 31 4f 6c 72 6f 51 38 4a 38 2b 66 43 51 48 58 65 33 62 72 6e 4a 51 61 6b 73 73 4e 73 67 31 64 76 58 56 32 4b 4a 6b 2f 41 75 48 6d 50 73 63 4e 75 43 49 72 76 75 63 56 58 4e 41 47 2b 33 78 47 34 58 51 35 67 38 6f 6c 69 34 75 4e 77 38 35 54 64 56 34 6e 4e 70 6c 77 68 79 43 4f 4e 4a 31 4d 76 50 75 71 2f 56 50 4b 4e 69 78 4c 38 44 56 77 2b 59 34 77 44 44 4b 58 51 64 76 50 79 66 37 44 6f 68 41 36 6d 62 52 74 38 4d 32 5a 6e 62 74 31 65 7a 63 7a 50 61 72 68 35 6b Data Ascii: 6GTJsvMdt5VXer0YsZ74jxKsDsKNDwB1ptW92zkmpw5Bms61667xZ6aCHmxtw9KQ8wAouL4en1914hhvasEGl41iV9Oek+t2my7qii1OlroQ8J8+fCQHXe3brnJQakssNsg1dvXV2KJk/AuHmPscNuCIrvucVXNAG+3xG4XQ5g8oli4uNw85TdV4nNplwhyCONJ1MvPuq/VPKNixL8DVw+Y4wDDKXQdvPyf7DohA6mbRt8M2Znbt1ezczParh5k
2024-09-03 20:47:37 UTC	977	IN	Data Raw: 57 6d 48 6c 53 47 64 4e 78 58 63 55 62 4c 32 39 75 50 71 74 6a 46 58 52 30 34 59 56 30 36 64 4d 51 72 48 52 6f 30 6a 48 57 36 74 59 44 4e 2f 5a 56 76 79 67 30 64 65 2f 50 78 48 66 41 49 41 45 48 42 48 50 75 69 6d 69 38 36 58 61 30 37 41 4c 54 7a 30 37 52 48 4a 48 54 74 61 34 56 62 66 73 6d 58 72 72 72 6c 75 4e 65 31 2f 64 6f 4c 74 46 64 59 34 41 41 4a 75 2b 49 4a 4f 33 54 72 6e 2b 73 6c 76 47 61 56 38 49 53 64 47 62 72 44 44 72 56 6d 7a 6e 59 72 4e 6b 6b 62 4e 66 74 31 35 6a 61 72 61 4f 43 51 4a 67 49 41 62 5a 6e 66 2f 37 62 46 4c 54 72 68 64 48 7a 32 64 4b 36 71 67 47 37 52 77 55 37 66 39 55 63 47 32 2f 63 42 36 78 2f 6e 76 50 7a 7a 79 34 6d 65 2f 59 71 30 43 49 4f 44 51 48 6e 52 58 63 38 66 6b 6d 68 4e 79 68 5a 4e 6a 78 71 45 50 4e 33 55 6e 68 4e 5a 35 Data Ascii: WmHlSGdNxXcUbL29uPqtjFXR04YV06dMQrHRo0jHW6tYDN/ZVvyg0de/PxHfAIAEHBHPuimi86Xa07ALTz07RHJHTta4VbfsmXrrrluNe1/doLtFdY4AAJu+IJO3Trn+slvGaV8ISdGbrDDrVmznYrNkkbNft15jaraOCQJgIAbZnf/7bFLTrhdHz2dK6qgG7RwU7f9UcG2/cB6x/nvPzzy4me/Yq0CIODQHnRXc8fkmhNyhZNjxqEPN3UnhNZ5
2024-09-03 20:47:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:37 UTC	884	OUT	GET /favicon.ico HTTP/1.1 Host: goo.gl Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://goo.gl/maps/4QkPVcVUFosBohKW7s Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:37 UTC	1731	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 03 Sep 2024 20:47:37 GMT Location: https://ssl.gstatic.com/mobilesdk/240501_mobilesdk/firebase_16dp.png Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: unsafe-none Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DurableDeepLinkUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-rySrGUFCEzz7RaZxiUTg4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DurableDeepLinkUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/DurableDeepLinkUi/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:47 UTC	787	OUT	GET / HTTP/1.1 Host: firebase.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-03 20:47:48 UTC	910	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 Jul 2024 17:13:23 GMT Content-Type: text/html; charset=utf-8 Vary: Cookie Set-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:47:48 GMT; Max-Age=63072000; Path=/ Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-CYYzQJRRd91/F5I4dSA+41XsJvW3TR' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff Cache-Control: no-cache, must-revalidate Expires: 0 Pragma: no-cache X-Cloud-Trace-Context: 2590d01beff2b99c41327e838f664089 Date: Tue, 03 Sep 2024 20:47:48 GMT Server: Google Frontend Content-Length: 504511 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-03 20:47:48 UTC	480	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 0a 20 20 20 20 20 20 6c 61 6e 67 3d 22 65 6e 22 0a 20 20 20 20 20 20 64 69 72 3d 22 6c 74 72 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 67 6e 69 6e 2d 63 6c 69 65 6e 74 2d 69 64 22 20 63 6f 6e 74 65 6e 74 3d 22 37 32 31 37 32 34 36 36 38 35 37 30 2d 6e 62 6b 76 31 63 66 75 73 6b 37 6b 6b 34 65 6e 69 34 70 6a 76 65 70 61 75 73 37 33 62 31 33 74 2e 61 70 70 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 67 6e 69 6e 2d 73 63 6f 70 65 22 0a 20 20 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3d 22 70 72 6f 66 69 6c 65 20 65 Data Ascii: <!doctype html><html lang="en" dir="ltr"> <head> <meta name="google-signin-client-id" content="721724668570-nbkv1cfusk7kk4eni4pjvepaus73b13t.apps.googleusercontent.com"> <meta name="google-signin-scope" content="profile e
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 61 38 63 37 66 61 22 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 2f 5f 70 77 61 2f 66 69 72 65 62 61 73 65 2f 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 0a 20 20 Data Ascii: "theme-color" content="#a8c7fa"><meta charset="utf-8"> <meta content="IE=Edge" http-equiv="X-UA-Compatible"> <meta name="viewport" content="width=device-width, initial-scale=1"> <link rel="manifest" href="/_pwa/firebase/manifest.json"
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 65 76 72 65 6c 2d 64 65 76 73 69 74 65 2f 70 72 6f 64 2f 76 33 35 65 33 64 33 34 37 61 33 32 33 63 36 37 33 32 39 34 37 39 34 63 66 30 62 36 34 33 37 36 30 66 64 36 36 62 62 35 32 39 65 66 62 64 37 64 63 63 61 61 32 32 35 31 38 61 63 65 66 30 32 39 37 2f 66 69 72 65 62 61 73 65 2f 69 6d 61 67 65 73 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 61 70 70 6c 65 2d 74 6f 75 63 68 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 65 76 72 65 6c 2d 64 65 76 73 69 74 65 2f 70 72 6f 64 2f 76 33 35 65 33 64 33 34 37 61 33 32 33 63 36 37 33 32 39 34 37 39 34 63 66 30 62 36 34 Data Ascii: f="https://www.gstatic.com/devrel-devsite/prod/v35e3d347a323c673294794cf0b643760fd66bb529efbd7dccaa22518acef0297/firebase/images/favicon.png"> <link rel="apple-touch-icon" href="https://www.gstatic.com/devrel-devsite/prod/v35e3d347a323c673294794cf0b64
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 20 47 6f 6f 67 6c 65 26 61 70 6f 73 3b 73 20 4d 6f 62 69 6c 65 20 61 6e 64 20 57 65 62 20 41 70 70 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 44 69 73 63 6f 76 65 72 20 46 69 72 65 62 61 73 65 2c 20 47 6f 6f 67 6c 65 e2 80 99 73 20 6d 6f 62 69 6c 65 20 61 6e 64 20 77 65 62 20 61 70 70 20 64 65 76 65 6c 6f 70 6d 65 6e 74 20 70 6c 61 74 66 6f 72 6d 20 74 68 61 74 20 68 65 6c 70 73 20 64 65 76 65 6c 6f 70 65 72 73 20 62 75 69 6c 64 20 61 70 70 73 20 61 6e 64 20 67 61 6d 65 73 20 74 68 61 74 20 75 73 65 72 73 20 77 69 6c 6c 20 6c 6f 76 65 2e 22 3e 0a 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 Data Ascii: Google's Mobile and Web App Development Platform"><meta name="description" content="Discover Firebase, Googles mobile and web app development platform that helps developers build apps and games that users will love."> <meta property="og:descrip
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 74 3d 22 46 69 72 65 62 61 73 65 20 7c 20 47 6f 6f 67 6c 65 27 73 20 4d 6f 62 69 6c 65 20 61 6e 64 20 57 65 62 20 41 70 70 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 22 20 6e 61 6d 65 3d 22 6e 61 6d 65 22 2f 3e 0a 20 20 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 73 6f 63 69 61 6c 2e 70 6e 67 22 20 6e 61 6d 65 3d 22 69 6d 61 67 65 22 2f 3e 0a 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 46 69 72 65 62 61 73 65 20 7c 20 47 6f 6f 67 6c 65 27 73 20 4d 6f 62 69 6c 65 20 61 6e 64 20 57 65 62 20 41 70 70 20 44 65 76 65 6c 6f 70 6d 65 6e 74 20 50 6c 61 74 66 6f 72 6d 22 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 74 69 74 Data Ascii: t="Firebase \| Google's Mobile and Web App Development Platform" name="name"/> <meta content="https://firebase.google.com/images/social.png" name="image"/> <meta content="Firebase \| Google's Mobile and Web App Development Platform" name="twitter:tit
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 22 2c 0a 20 20 22 40 74 79 70 65 22 3a 20 22 4f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 0a 20 20 22 6e 61 6d 65 22 3a 20 22 46 69 72 65 62 61 73 65 22 2c 0a 20 20 22 75 72 6c 22 3a 20 22 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 2c 0a 20 20 22 6c 6f 67 6f 22 3a 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 65 76 72 65 6c 2d 64 65 76 73 69 74 65 2f 70 72 6f 64 2f 76 35 33 30 65 32 62 34 37 35 38 63 39 31 35 63 35 39 36 37 35 34 33 35 64 66 34 34 32 34 61 38 62 34 39 32 39 63 66 64 33 38 32 64 62 32 66 33 39 33 32 35 61 36 34 30 30 33 39 35 30 63 66 35 38 2f 66 69 72 65 62 61 73 65 2f 69 6d 61 67 65 73 2f 6c 6f 63 6b 75 70 2e 73 76 67 22 2c 0a 20 20 22 73 61 6d 65 41 73 22 3a 20 Data Ascii: ", "@type": "Organization", "name": "Firebase", "url": "https://firebase.google.com/", "logo": "https://www.gstatic.com/devrel-devsite/prod/v530e2b4758c915c59675435df4424a8b4929cfd382db2f39325a64003950cf58/firebase/images/lockup.svg", "sameAs":
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 74 6f 20 67 72 6f 77 2e 20 41 6c 6c 20 69 6e 20 6f 6e 65 20 70 6c 61 74 66 6f 72 6d 2c 20 74 72 75 73 74 65 64 20 62 79 20 6d 69 6c 6c 69 6f 6e 73 20 6f 66 20 64 65 76 65 6c 6f 70 65 72 73 20 74 6f 20 72 65 61 63 68 20 62 69 6c 6c 69 6f 6e 73 20 6f 66 20 75 73 65 72 73 20 61 72 6f 75 6e 64 20 74 68 65 20 77 6f 72 6c 64 2e 20 4d 61 6b 65 20 79 6f 75 72 20 61 70 70 20 74 68 65 20 62 65 73 74 20 69 74 20 63 61 6e 20 62 65 20 77 69 74 68 20 46 69 72 65 62 61 73 65 2e 20 4c 65 61 72 6e 20 6d 6f 72 65 20 e2 86 92 20 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 2c 0a 20 20 22 74 68 75 6d 62 6e 61 69 6c 55 72 6c 22 3a 20 22 68 74 74 70 3a 2f 2f 69 33 2e 79 74 69 6d 67 2e 63 6f 6d 2f 76 69 2f 58 48 76 57 78 31 46 33 53 34 Data Ascii: to grow. All in one platform, trusted by millions of developers to reach billions of users around the world. Make your app the best it can be with Firebase. Learn more https://firebase.google.com/", "thumbnailUrl": "http://i3.ytimg.com/vi/XHvWx1F3S4
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 70 65 6e 64 69 6e 67 3e 0a 20 20 20 20 3c 64 65 76 73 69 74 65 2d 70 72 6f 67 72 65 73 73 20 74 79 70 65 3d 22 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 22 20 69 64 3d 22 61 70 70 2d 70 72 6f 67 72 65 73 73 22 3e 3c 2f 64 65 76 73 69 74 65 2d 70 72 6f 67 72 65 73 73 3e 0a 20 20 0a 20 20 20 20 3c 73 65 63 74 69 6f 6e 20 63 6c 61 73 73 3d 22 64 65 76 73 69 74 65 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 20 20 3c 64 65 76 73 69 74 65 2d 63 6f 6f 6b 69 65 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 72 3e 3c 2f 64 65 76 73 69 74 65 2d 63 6f 6f 6b 69 65 2d 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2d 62 61 72 3e 0a 20 20 20 20 20 20 3c 64 65 76 73 69 74 65 2d 68 65 61 64 65 72 20 72 6f 6c 65 Data Ascii: pending> <devsite-progress type="indeterminate" id="app-progress"></devsite-progress> <section class="devsite-wrapper"> <devsite-cookie-notification-bar></devsite-cookie-notification-bar> <devsite-header role
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 65 62 61 73 65 22 3e 0a 20 20 20 20 0a 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 64 65 76 72 65 6c 2d 64 65 76 73 69 74 65 2f 70 72 6f 64 2f 76 33 35 65 33 64 33 34 37 61 33 32 33 63 36 37 33 32 39 34 37 39 34 63 66 30 62 36 34 33 37 36 30 66 64 36 36 62 62 35 32 39 65 66 62 64 37 64 63 63 61 61 32 32 35 31 38 61 63 65 66 30 32 39 37 2f 66 69 72 65 62 61 73 65 2f 69 6d 61 67 65 73 2f 6c 6f 63 6b 75 70 2e 73 76 67 22 20 63 6c 61 73 73 3d 22 64 65 76 73 69 74 65 2d 73 69 74 65 2d 6c 6f 67 6f 22 20 61 6c 74 3d 22 46 69 72 65 62 61 73 65 22 3e 0a 20 20 3c 2f 70 69 63 74 75 72 65 3e 0a 20 20 0a 3c 2f 61 3e 0a 0a 0a 0a 20 20 0a 20 20 0a 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 64 65 76 Data Ascii: ebase"> <img src="https://www.gstatic.com/devrel-devsite/prod/v35e3d347a323c673294794cf0b643760fd66bb529efbd7dccaa22518acef0297/firebase/images/lockup.svg" class="devsite-site-logo" alt="Firebase"> </picture> </a> <span class="dev
2024-09-03 20:47:48 UTC	1390	IN	Data Raw: 6c 61 62 65 6c 3d 22 44 72 6f 70 64 6f 77 6e 20 6d 65 6e 75 20 66 6f 72 20 42 75 69 6c 64 22 0a 20 20 20 20 20 20 20 74 72 61 63 6b 2d 74 79 70 65 3d 22 6e 61 76 22 0a 20 20 20 20 20 20 20 74 72 61 63 6b 2d 6d 65 74 61 64 61 74 61 2d 65 76 65 6e 74 64 65 74 61 69 6c 3d 22 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 70 72 6f 64 75 63 74 73 2d 62 75 69 6c 64 22 0a 20 20 20 20 20 20 20 74 72 61 63 6b 2d 6d 65 74 61 64 61 74 61 2d 70 6f 73 69 74 69 6f 6e 3d 22 6e 61 76 20 2d 20 62 75 69 6c 64 22 0a 20 20 20 20 20 20 20 74 72 61 63 6b 2d 6d 65 74 61 64 61 74 61 2d 6d 6f 64 75 6c 65 3d 22 70 72 69 6d 61 72 79 20 6e 61 76 22 0a 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d Data Ascii: label="Dropdown menu for Build" track-type="nav" track-metadata-eventdetail="https://firebase.google.com/products-build" track-metadata-position="nav - build" track-metadata-module="primary nav" data-

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:49 UTC	741	OUT	GET /extras.css HTTP/1.1 Host: firebase.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://firebase.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_devsite=GA1.3.1063458845.1725396468
2024-09-03 20:47:49 UTC	890	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 19 Mar 2024 18:37:07 GMT Vary: Cookie Set-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:47:49 GMT; Max-Age=63072000; Path=/ Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-IQlR3Z2LJ9+imAY9W/RPq5msmWG6v8' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff Cache-Control: no-cache, must-revalidate Expires: 0 Pragma: no-cache X-Cloud-Trace-Context: 35e844366a115841e42cb1f23f4848e2 Date: Tue, 03 Sep 2024 20:47:49 GMT Server: Google Frontend Content-Length: 68 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-03 20:47:49 UTC	68	IN	Data Raw: 2f 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 72 65 71 75 69 72 65 64 20 66 6f 72 20 73 69 74 65 20 61 64 6d 69 6e 69 73 74 72 61 74 69 6f 6e 2e 20 44 6f 20 6e 6f 74 20 64 65 6c 65 74 65 2e 20 2a 2f 0a Data Ascii: /* This file is required for site administration. Do not delete. */

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:50 UTC	961	OUT	GET /frame/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame HTTP/1.1 Host: firebase.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://firebase.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_devsite=GA1.3.1063458845.1725396468
2024-09-03 20:47:51 UTC	774	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://firebase-dot-devsite-v2-prod.appspot.com/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb978097a4de58dc2520293ae.frame Vary: Cookie Set-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:47:51 GMT; Max-Age=63072000; Path=/ Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff Cache-Control: no-cache, must-revalidate Expires: 0 Pragma: no-cache X-Cloud-Trace-Context: e2b7d73885ab69c67ba7ad8cdd75a237 Date: Tue, 03 Sep 2024 20:47:51 GMT Server: Google Frontend Content-Length: 435 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-03 20:47:51 UTC	435	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 3c 70 3e 59 6f 75 20 73 68 6f 75 6c 64 20 62 65 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 74 6f 20 74 68 65 20 74 61 72 67 65 74 20 55 52 4c 3a 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 69 72 65 62 61 73 65 2d 64 6f 74 2d 64 65 76 73 69 74 65 2d 76 32 2d 70 72 6f 64 2e 61 70 70 73 70 6f 74 2e 63 6f 6d 2f 72 6f 6f 74 5f 31 64 66 31 33 64 31 35 31 65 38 39 31 62 31 30 32 31 34 32 36 61 37 38 61 34 37 36 31 62 64 63 36 61 62 30 65 61 35 62 62 39 37 38 30 39 Data Ascii: <!doctype html><html lang=en><title>Redirecting...</title><h1>Redirecting...</h1><p>You should be redirected automatically to the target URL: <a href="https://firebase-dot-devsite-v2-prod.appspot.com/root_1df13d151e891b1021426a78a4761bdc6ab0ea5bb97809

Timestamp	Bytes transferred	Direction	Data
2024-09-03 20:47:50 UTC	833	OUT	GET /images/homepage/Google_Firebase_LogotoIcon_Black_V01.gif HTTP/1.1 Host: firebase.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://firebase.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_devsite=GA1.3.1063458845.1725396468
2024-09-03 20:47:51 UTC	896	IN	HTTP/1.1 200 OK Content-Type: image/gif Last-Modified: Tue, 14 May 2024 18:47:19 GMT Vary: Cookie Set-Cookie: _ga_devsite=GA1.3.1063458845.1725396468; Expires=Thu, 03 Sep 2026 20:47:51 GMT; Max-Age=63072000; Path=/ Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-wvydrQEBa6hPCD0KQzb3FJPuJ+ZKt1' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2 Strict-Transport-Security: max-age=63072000; includeSubdomains; preload X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff Cache-Control: no-cache, must-revalidate Expires: 0 Pragma: no-cache X-Cloud-Trace-Context: 1d5dfd69ee29a554182e9b45c8451aab Date: Tue, 03 Sep 2024 20:47:51 GMT Server: Google Frontend Content-Length: 9123050 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-03 20:47:51 UTC	494	IN	Data Raw: 47 49 46 38 39 61 2c 01 2c 01 f7 00 00 1f 1f 1f 22 1f 1f 2b 1f 1f 33 1f 1f 3a 1f 1e 1f 20 1f 25 21 1f 2c 25 1f 2f 29 1f 33 23 1f 3b 22 1f 35 2c 1f 3b 2b 1f 3c 31 1e 43 20 1e 4c 20 1e 43 2a 1e 52 21 1d 5c 21 1d 51 2f 1e 41 34 1e 46 38 1e 4c 3d 1e 55 34 1d 5b 34 1d 50 3f 1d 63 21 1c 6c 22 1b 74 22 1a 7c 23 1a 63 34 1c 6b 34 1c 63 3b 1d 6a 3b 1d 70 31 1c 7c 3d 1b 55 43 1d 58 45 1d 5d 49 1d 62 4c 1d 72 43 1c 78 46 1c 7d 49 1b 67 50 1c 6e 55 1c 71 58 1c 7a 5e 1b 7e 61 1b 8c 24 17 86 24 18 8d 24 18 93 25 16 9b 26 15 8d 33 18 82 3c 1a 8a 3b 18 9e 3f 16 91 32 18 b7 28 0f bb 28 0e a3 26 13 ad 27 11 af 28 11 b7 28 10 a2 38 15 b7 3a 11 b9 3b 10 ce 2a 06 c4 29 0b ca 2a 09 d4 2b 04 dd 2c 00 c1 3e 0e d6 32 04 dd 33 00 d5 3c 06 db 3b 03 d1 3f 08 e0 36 00 e1 3c 00 87 43 Data Ascii: GIF89a,,"+3: %!,%/)3#;"5,;+<1C L CR!\!Q/A4F8L=U4[4P?c!l"t"\|#c4k4c;j;p1\|=UCXE]IbLrCxF}IgPnUqXz^~a$$$%&3<;?2((&'((8:;)*+,>23<;?6<C
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 4b 63 c2 05 5a b4 00 1a 6e b1 80 5e d4 1c 22 90 b7 b4 0b 72 a8 00 16 d8 e2 db 22 98 c6 e2 e5 e1 7a 37 03 02 89 0a f0 05 39 be ad 8e d4 cb 5c ff 88 86 84 6c e5 e6 0c 7e 8c 22 20 71 67 08 c7 f9 8c 09 f8 11 4e f0 fc d8 c5 45 26 ae 85 3e 4b 02 04 48 84 42 39 62 02 87 96 54 9c 23 61 96 04 fa 71 88 72 89 cc 1c 28 17 39 48 98 29 c1 06 1c 0a c0 23 12 99 89 0e 86 32 73 79 f0 99 12 6e f0 46 33 52 f2 96 a7 1b 9f ca 94 50 03 12 b9 2d 91 9f 04 66 e2 10 78 b3 1a 34 b1 37 05 70 a0 1f 6d 09 4c 43 f8 2c 07 c6 a4 65 e9 94 99 b8 35 dc 0c 9b 1c 3a 26 32 b9 a9 88 56 b2 ab 63 c4 8c a5 2f 13 49 cd 5b 52 70 98 c5 9c 50 01 d6 a7 4d 34 2e d2 9a c3 fe e4 e5 29 b5 f9 47 65 1a 02 8f 0f db e5 1b 3b 49 4b 29 02 93 87 1e 53 c2 08 32 f2 4c cf f0 81 9f 87 e3 26 42 2d 96 04 0f 1c a4 a1 b5 Data Ascii: KcZn^"r"z79\l~" qgNE&>KHB9bT#aqr(9H)#2synF3RP-fx47pmLC,e5:&2Vc/I[RpPM4.)Ge;IK)S2L&B-
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 93 25 16 9c 25 15 8d 34 18 82 3c 1a 8a 3b 19 91 33 17 9e 3f 16 b7 28 0f bb 29 0e a3 26 14 ad 27 12 b0 27 10 a2 39 15 b7 37 10 b6 3c 11 b9 3b 11 ce 2a 07 c4 29 0b c9 29 09 d4 2b 04 dd 2c 00 c2 3e 0e d6 31 04 de 33 00 d6 3d 06 db 3b 03 d1 3f 08 e0 35 00 e1 3b 00 87 43 1a 8f 46 19 9e 45 17 94 44 18 8d 52 1a 9d 5a 19 a3 45 16 ac 45 14 a6 49 16 a8 48 14 b3 44 13 bd 45 10 a1 5c 18 ba 54 13 84 65 1b 8b 6b 1a 9a 63 19 94 72 19 99 76 19 ac 62 16 b0 65 15 bc 6b 14 a1 7c 18 c2 46 0f cc 45 0a d4 41 07 dd 43 04 d0 43 09 e3 44 00 e6 4d 00 e7 52 00 e9 54 00 ea 5c 00 db 7d 0d c7 71 12 ca 73 11 ec 63 00 ed 68 00 f1 6d 00 f2 75 00 f5 7b 00 f8 7e 00 ac 84 16 b3 8a 16 ba 8f 15 bd 91 14 c3 96 13 c7 99 12 cd 9d 10 ee 87 07 e5 83 0a e9 84 09 f5 83 01 f9 85 00 f4 8a 05 fb 8d 01 Data Ascii: %%4<;3?()&''97<;*))+,>13=;?5;CFEDRZEEIHDE\Tekcrvbek\|FEACCDMRT\}qschmu{~
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 28 f2 f6 df 5a c7 2d b7 dc 85 d4 bd 46 de 0c 06 51 ed 93 78 00 ee b8 25 8f 0c 2e f9 21 85 08 c2 06 e2 fb e9 70 a5 08 8f 3b 2e f8 e4 92 0b 72 38 e6 e3 79 f0 64 1e 9d 03 1e 39 e1 a0 0f 6e 47 13 a4 43 e7 83 cd bb 89 70 75 ea 6f 7f de ba e4 85 c8 81 04 e9 47 98 8e 63 e3 b8 e7 be fb ee 76 28 41 fa 0f c4 85 c8 40 24 c5 bf bd fa f1 a0 0f 32 7a de 4a 74 00 63 17 d1 1b 4f fd ee 6d 60 8e 05 ed b6 15 e0 47 f7 6e eb fe fd e4 73 20 9e c4 04 21 92 70 3b fa 5a 23 b2 7e eb 85 b4 4f 36 12 51 84 08 06 fd 6d ab 84 fd ee d7 3a fd 35 ad 0c cd bb 8f f9 00 a8 35 01 12 70 77 6e 20 1b 1a 20 00 21 0c cc 8f 81 0e 7c 20 e8 0a 71 3d 97 f1 0f 42 2c 60 60 db 06 a8 c1 c9 15 02 76 39 c3 02 84 88 27 42 ac 39 a2 84 ad bb 03 de 5c 76 06 f2 c5 a6 00 8c 68 61 d6 a6 07 43 c9 19 10 65 fe 4a b0 Data Ascii: (Z-FQx%.!p;.r8yd9nGCpuoGcv(A@$2zJtcOm`Gns !p;Z#~O6Qm:55pwn !\| q=B,``v9'B9\vhaCeJ
2024-09-03 20:47:51 UTC	689	IN	Data Raw: 01 01 00 21 f9 04 0c 02 00 00 00 2c 00 00 00 00 2c 01 2c 01 87 1f 1f 1f 22 1f 1f 2b 1f 1f 34 1f 1f 3b 1f 1e 1f 20 1f 24 21 1f 2b 24 1f 2f 28 1f 33 23 1f 3b 22 1e 35 2c 1e 3b 2b 1f 3c 31 1e 43 20 1e 4c 20 1d 44 2a 1e 52 21 1d 5b 21 1c 50 2f 1d 44 36 1e 4c 3d 1e 55 34 1e 5b 34 1d 63 21 1c 6d 22 1b 73 22 1a 7c 23 1a 63 34 1d 6c 34 1c 64 3c 1d 6b 3c 1d 7c 3d 1b 54 42 1d 59 45 1d 5f 4a 1d 63 4d 1d 72 43 1c 78 46 1b 7d 48 1b 6c 54 1d 71 58 1c 79 5e 1b 7e 62 1b 8d 24 17 86 24 18 8c 24 18 93 25 16 9c 26 15 8d 30 17 8d 34 18 84 3c 19 8b 3b 18 9e 3e 16 91 32 18 b6 28 0f bb 28 0e a3 26 14 ad 27 11 b0 27 11 a2 39 15 b6 3c 11 b9 3a 10 ce 2b 06 c4 29 0b ca 2a 09 d4 2b 04 dd 2c 00 c1 3e 0e d6 32 04 dd 33 01 d5 3c 06 db 3b 03 d1 3f 08 e0 35 00 e1 3c 00 87 43 1a 8f 46 19 Data Ascii: !,,,"+4; $!+$/(3#;"5,;+<1C L DR![!P/D6L=U4[4c!m"s"\|#c4l4d<k<\|=TBYE_JcMrCxF}HlTqXy^~b$$$%&04<;>2((&''9<:+)+,>23<;?5<CF
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 08 fe 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 97 30 4b 06 88 49 b3 a6 cd 9b 38 73 ea dc c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 02 67 22 5d ca b4 a9 d3 a7 50 a3 4a 9d 4a b5 aa d5 ab 58 b3 6a dd ca b5 ab d7 af 60 c3 8a 1d 4b b6 ac d9 b3 68 d3 aa 5d cb b6 ad db b7 70 e3 ca 9d 4b b7 ae dd bb 78 f3 ea dd cb b7 af df bf 80 03 0b 1e 4c b8 b0 e1 c3 Data Ascii: H*\#JH3j CI(S\0KI8s@Jg"]PJJXj`Kh]pKxL
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 0d 0b c0 c9 59 b2 d3 8e 3d 04 99 11 40 90 23 49 d2 93 9c 6c 68 59 11 e8 17 a3 43 f2 33 91 46 5c 65 eb 64 67 b2 23 1c 20 47 f7 bb 68 3d bb b8 4c 93 99 21 49 21 b8 e8 1f 7f 69 87 96 f9 20 47 e8 c3 e6 43 2b d9 52 93 49 e1 7c 0c 29 c0 01 50 79 51 69 ae b1 a6 20 63 c2 93 f4 a0 d2 34 d2 d4 64 48 d0 64 92 b4 50 d4 15 2e 12 a8 13 4b 83 95 42 20 d3 99 46 f1 85 5f 4c d8 14 ac 74 00 2d 16 f5 a0 2d e4 e8 c4 16 6a a5 02 58 54 a5 4e 5d 63 42 13 86 86 04 94 95 04 45 ad db 48 2d b8 d6 81 59 e1 8a 83 c1 2b 46 ba 1a 57 8c 5e 35 98 09 53 02 2c 2d a4 9c 0e c6 75 9c d3 d3 68 e7 ee 99 b1 24 28 35 49 71 bc 61 5f e7 0a 3e a8 0e 6c 0a 7a d5 65 1c f7 d0 57 5a 1a f1 92 09 43 82 29 cb 44 02 68 aa d4 a7 ee 3b 44 1b 13 76 85 cc e2 e6 21 7e e8 fe 2c 62 55 99 31 24 30 54 51 28 e8 ac 51 Data Ascii: Y=@#IlhYC3F\edg# Gh=L!I!i GC+RI\|)PyQi c4dHdP.KB F_Lt--jXTN]cBEH-Y+FW^5S,-uh$(5Iqa_>lzeWZC)Dh;Dv!~,bU1$0TQ(Q
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 91 00 ff 9d 00 d4 a3 0f d9 a6 0e db a9 0d d3 a2 10 e3 ae 0b ff a3 00 ff ac 00 ec b6 07 ef b8 06 e7 b2 0a ea b4 08 ff b3 00 f3 bb 05 fe bc 00 ff c4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-09-03 20:47:51 UTC	1390	IN	Data Raw: 10 90 0a 82 c8 34 22 c2 ce 80 1e 1b 82 80 3e b8 42 11 3a d1 70 85 38 e2 c2 8e 20 20 d0 31 b1 85 94 cb 1f 04 a1 18 31 22 e8 0b 3d dc 63 e2 10 af 58 b8 42 f0 af 8c b7 1b c9 ff 30 03 37 26 66 82 8d 94 6b 83 c7 8a 10 03 fd 3c c2 8e 99 78 e0 08 c5 58 38 3c ec 51 06 fa b1 e1 17 f1 68 b8 0d 2e 2c 09 30 48 24 20 d7 c8 c8 44 cc 01 65 ce 2a 42 24 e1 03 48 a6 09 92 7a 84 84 5d 21 3c f6 02 fd a0 cf 8e 60 64 a4 23 0b 36 03 53 76 12 87 04 0c 65 d9 f4 b8 30 4d 4a b2 93 9f c4 e3 1d 30 b6 49 f4 14 ef 95 95 34 5b c4 8a 80 48 f8 d4 b1 93 c1 4c 84 1b 1f 59 4c 34 76 92 69 56 ac a4 04 e3 45 84 0f e8 c7 8b c0 2c 9c 2c 21 98 b8 82 11 e1 79 f0 a1 22 20 73 79 c5 69 aa cb 08 05 d0 cf 16 9e c9 34 58 12 11 86 ff 4a 83 80 40 c0 4e 4f 56 d2 0e 0b fe eb 81 80 14 70 ca 6c ea 72 61 34 10 Data Ascii: 4">B:p8 11"=cXB07&fk<xX8<Qh.,0H$ De*B$Hz]!<`d#6Sve0MJ0I4[HLYL4viVE,,!y" syi4XJ@NOVplra4