Play interactive tourEdit tour

Windows Analysis Report
https://hacdct-my.sharepoint.com/:f:/g/personal/dmarra_hacdct_org/El0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ?email=dhodder%40haigroup.com&e=d37USF&xsdata=MDV8MDJ8am1ja2lubGV5QGhhaWdyb3VwLmNvbXwyYzYxNmM3ZDhlNmU0YWM5MDJlMjA4ZGQyZTYzYjFmMnw4MjgxNWI4YzM3NzU0NTk5OTdjNzJiODc1MjhlNmY4M3wwfDB8NjM4NzE3Nz

Overview

General Information

Sample URL:	https://hacdct-my.sharepoint.com/:f:/g/personal/dmarra_hacdct_org/El0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ?email=dhodder%40haigroup.com&e=d37USF&xsdata=MDV8MDJ8am1ja2lubGV5QGhhaWdyb3VwLmNvbXwyYz
Analysis ID:	1584847
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected BlockedWebSite

Detected suspicious crossdomain redirect

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

×

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_189, type: DROPPED

HTML body with high number of embedded images detected

Source: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b401976...

HTTP Parser: Total embedded image size: 45070

HTML page contains hidden javascript code

Source: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhacdct-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdmarra_hacdct_org%2FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%3Femail%3Ddhodder%2540haigroup.com%26e%3Dd37USF&data=05%7C02%7Cjmckinley%40haigroup.com%7C2c616c7d8e6e4ac902e208dd2e63b1f2%7C82815b8c3775459997c72b87528e6f83%7C0%7C0%7C638717735163844421%7CBad%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%3D%7C1%7CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%7C7df52ca9541b4019765e08dd2e65640d%7Cf1e574a120f470006fe34d625...

HTTP Parser: Base64 decoded: nstanceID> <xmpMM:DerivedFrom rdf:parseType="Resource"> <stRef:instanceID>xmp.iid:dc367036-9ff1-4136-a5bd-ad1cd2b8e5f9</stRef:instanceID> <stRef:documentID>adobe:docid:photoshop:f258af37-86a5-117a-b4d5-dc1df99d265f</stRef:document...

HTML page is missing a favicon

Source: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b401976...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%257CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiIsIkNJRC1PcmlnaW4iOiJTUE8ifX0%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b401976...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%257CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiIsIkNJRC1PcmlnaW4iOiJTUE8ifX0%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b401976...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b401976...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b401976...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%257CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiIsIkNJRC1PcmlnaW4iOiJTUE8ifX0%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd...	HTTP Parser: No favicon
Source: https://www.google.com/search?q=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd...	HTTP Parser: No favicon

Compliance

Binary contains paths to debug symbols

Source:	Binary string: methodName:"replaceState",Uh:b.Aa(),Be:{serviceName:"InternalHistory",methodName:"replaceState"}})})}};_.lp(_.Ecb,_.Fcb);var Gcb=_.Xt("on8eSc",[_.$t]);_.Hcb=_.w("KtzSQe",[Gcb]);_.Icb=_.w("okIx8");var Jcb=_.w("T9y5Dd",[]);_.Kcb=_.w("nKPLpc",[Jcb]);_.Lcb=_.w("FM5QJe",[Jcb]);_.Mcb=_.w("H8cOfd",[_.dbb]);_.Ncb=_.w("ga7Xpd",[_.Mcb]);_.Ocb=_.w("XMyrsd");_.Pcb=_.w("So1Lae");_.Qcb=_.w("ZZdEzd");_.Rcb=_.w("rMFO0e");_.Scb=_.w("rsp5jc");_.Tcb=_.w("ZodfDf");_.Ucb=_.w("jKe9bb");_.Vcb=_.w("Ge0Dib");_.Wcb=_.w("mOGWZd");var Xcb=_.Xt("J4kevb",[_.$t]);_.Ycb=_.w("RxAgNb",[Xcb]);_.Zcb=_.w("tNN8v",[_.hbb]);_.$cb=_.w("f0Cybe",[_.Zcb]);_.adb=_.w("zV9jQc");var bdb=_.Xt("oqSlAb",[_.$t]);_.cdb=_.w("A0Cs1d",[bdb]);_.ddb=_.w("XAgw7b");var edb=_.Xt("XY4yyb",[_.$t]);_.fdb=_.w("CUwjff",[edb]);_.gdb=_.w("DcDOMc");var hdb=_.Xt("n7heyf",[_.$t]);_.idb=_.w("Vb53Zc",[hdb]);_.jdb=_.w("WKbkM");_.kdb=_.w("rkiRkd",[]);_.ldb=_.w("k4Xo8b",[]);_.mdb=_.w("OTUSPb",[_.ldb]);_.ndb=_.w("t1pfrb",[]);_.odb=_.w("kh94Oc");_.pdb=_.w("XXWQib",[]);_.qdb=_.w("JJYdTe",[_.hbb]);_.rdb=_.w("lggbh",[]);_.sdb=_.w("yqmrof",[_.As,_.$t]);_.tdb=_.w("gKD90c",[]);_.udb=_.w("lHpQtd");_.vdb=_.w("kKcI7c");_.wdb=_.w("hbbXIf");_.xdb=_.w("bM2W5e");_.ydb=_.w("Q7BaEe",[]);_.lp(_.ydb,class extends _.jp{isAvailable(){const a=_.du("agsa_ext");a&&_.ah("InternalHistory");return a}G_(){return this.isAvailable()}back(){_.cu({serviceName:"agsa_ext",methodName:"goBack",Be:{serviceName:"InternalHistory",methodName:"back"},qO:!1});return Promise.resolve(void 0)}dda(){return!1}forward(){return _.ai("InternalHistory","forward")}G$(){return!1}go(){return _.ai("InternalHistory","go")}I$(){return!1}pushState(){return _.ai("InternalHistory","pushState")}replaceState(){return _.ai("InternalHistory", source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: _.qFb=function(a,b,c,d){if(!_.oFb(b))return null;var e=b.pdb,f=b.Ne,g=b.Kf,h=b.p6;e&&!e.build().length&&(e=void 0);g==void 0?g=[]:g instanceof _.yg&&(g=[g]);const k=new _.xh;h=h||new _.gh;const m=new _.Awa;var n=new _.zd,r=a.Da||(a.Da=_.gm(_.Tc("Yllh3e"),_.Ad));_.Qb(n,_.Ad,1,r);_.OUa(m,n);b=b.MYa||null;e?m.Aa(_.ita(e.Ba)):(n=_.nUa++,m.Aa(_.ita(n)),f&&(a.Ca=n));e&&(e=e.build(),_.yh(m,2,e),c?g.length||(g=[new _.yg(new _.kta(0),3)]):a.Ca&&!g.length&&_.OUa(m,_.ita(a.Ca)),f||_.zwa(k,5));f&&(a=f.fba,a instanceof source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: var XGb,YGb;_.WGb=function(a,b,c){return _.zg(_.lta(a),b,c)};XGb=class{constructor(a,b,c,d,e){this.oa=a;this.Ne=b;this.Kf=c;this.p6=d;this.MYa=e}};YGb=class{constructor(a,b){this.output=a;this.oa=b}};var ZGb,bHb;ZGb=function(a,b){if(!_.oFb(b))return!1;b.pdb&&b.pdb.build().length>0&&!_.nFb(b)&&(b.Kf=a.La);return a.Ja.logEvent(b,!0)};bHb=function(a,b,c={}){c=_.$Gb(c);return _.aHb(a,b,c)};_.cHb=function(a,b){return ZGb(a,{pdb:b.oa,Ne:b.Ne,Kf:b.Kf,p6:b.p6,MYa:b.MYa})};_.$Gb=function({Ne:a,Kf:b,p6:c,MYa:d}={}){return new XGb(new _.DUa,a,b,c,d)};_.aHb=function(a,b,c){const d=_.qVa(_.og(_.Usa),c.oa);a.oa=!0;try{const e=b();return new YGb(e,c)}finally{a.oa=!1,_.qVa(_.og(_.Usa),d)}}; source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: _.nFb=function(a){return a.Kf!=void 0&&(a.Kf instanceof _.yg||!!a.Kf.length)};_.oFb=function(a){if(a.pdb&&a.pdb.build().length>0||a.Ne||a.MYa)a=!0;else{var b;if(b=_.nFb(a))a=_.$Eb(a.Kf),b=!(a.length==1&&a[0].dW==3);a=b}return a}; source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: b,c=""){this.oa.isAvailable()?this.oa.I$()?this.oa.pushState(a,b,c):this.window.history.pushState(a,b,c):this.window.history.pushState(a,b,c)}replaceState(a,b,c=""){this.oa.isAvailable()?this.oa.I$()?this.oa.replaceState(a,b,c):this.window.history.replaceState(a,b,c):this.window.history.replaceState(a,b,c)}state(){return this.window.history.state}getCurrentUrl(){return this.window.location.href}};_.lp(_.Kdb,_.Ldb);var Mdb=class extends _.jp{isAvailable(){return!1}G_(){return!1}dda(){return!1}G$(){return!1}I$(){return!1}back(){return _.ai("InternalHistory","back")}forward(){return _.ai("InternalHistory","forward")}go(){return _.ai("InternalHistory","go")}pushState(){return _.ai("InternalHistory","pushState")}replaceState(){return _.ai("InternalHistory","replaceState")}};_.lp(I5a,Mdb);_.Ndb=_.qAa;var Odb=_.Xt("fvjcPb",[_.$t]);_.Pdb=_.w("US1EU",[Odb]);_.Qdb=_.w("BgyPPc",[Ubb]);_.Rdb=_.w("UBGcdd",[Wbb]);_.Sdb=_.w("eSFC5c");_.Tdb=_.w("B6b85");_.Udb=_.w("pPxdAd");_.Vdb=_.w("TPCh7b");_.Wdb=_.w("NsiCRb");_.Xdb=_.w("BkiHtd");_.Ydb=_.w("K6ZEbf");_.Zdb=_.w("TwdwWc",[]);_.$db=_.w("C0JoAb");_.aeb=_.w("R8gt1");_.beb=_.w("yvBIXc");_.ceb=_.w("hwYI4c",[ccb]);_.deb=_.w("GTaNlc");_.eeb=_.w("g6ZUob");_.feb=_.w("xkctJ");_.geb=_.w("vo3XM");_.heb=_.w("YgAQTc",[]);_.ieb=_.w("dbr2Mc");_.jeb=_.w("krRYtf");_.keb=_.w("yWCO4c");_.leb=_.w("nVG46b");_.meb=_.w("gsJLOc",[]);_.neb=_.w("G29HYe",[S8a]);_.oeb=_.w("h4qzS",[rcb]);var peb=_.Xt("oD0wqf",[_.$t]);_.qeb=_.w("B2egec",[peb]);_.reb=_.w("YhmRB");_.seb=_.w("wciyUe",[]);_.teb=_.w("Il1M4b");_.ueb=_.w("vWfZ8c",[Gcb]);_.veb=_.w("KRDUUb");_.web=_.w("hQ97re");_.xeb=_.w("iK2sb");_.yeb=_.w("soVptf");_.zeb=_.w("YeKaq");_.Aeb=_.w("Odo3Od");_.Beb=_.w("d7NTy");_.Ceb=_.w("VQ7Yuf");_.Deb=_.w("M0VQbd");_.Eeb=_.w("dhjipe",[Xcb]);_.Feb=_.w("lBp0",[_.hbb]);_.Geb=_.w("CJRYDf",[_.Tt]);_.Heb=_.w("Z8Pdh");_.Ieb=_.w("a70q7b");_.Jeb=_.w("sfFTle",[edb]);_.Keb=_.w("nv86s",[hdb]);_.Leb=_.w("rW1zq");_.Meb=_.w("H1Onzb");_.Neb=_.w("QE3hvd");_.Oeb=_.w("pPIvie",[_.$t]);_.Peb=_.w("XwhUEb",[]);_.Qeb=_.w("Kmnn6b");_.Reb=_.w("FrcyJe");_.Seb=_.w("xkjGve",[_.dbb]);_.Teb=_.w("E2zlIf");var Ueb=_.Xt("uxcEeb",[_.$t]);_.Veb=_.w("LR64x",[Ueb]);_.Web=_.w("HZnJ6");_.Xeb=_.w("v74Vad");_.Yeb=_.w("J2YIUd");_.Zeb=_.w("Y2XuT");_.$eb=_.w("O1Rq3");_.afb=_.w("JyBE3e",[_.hp]);_.bfb=_.w("LHCaNd",[]);_.cfb=_.w("wKdTle",[_.Tt,_.Ot]);_.eu=_.w("Fdd8nd",[_.cfb,_.Pt,_.fh]);_.dfb=_.w("b6vcbb",[_.Rt]);_.efb=_.w("ttQ27",[_.Og,_.Up,_.eu,_.cfb]);_.ffb=_.w("SGpRce",[_.Og,_.eu,_.dfb,_.cfb]);_.gfb=_.w("lcrkwe",[_.Og,_.zs,_.Up,_.cfb,_.ws,_.ffb,_.efb]);_.hfb=_.w("CpWC2d",[]);_.ifb=_.w("j9Yuyc",[]);_.jfb=_.w("ofjVkb",[_.hp]);_.kfb=_.w("rlHKFc",[_.Mt]);_.lfb=_.w("sZnyj",[]);_.mfb=_.w("jn2sGd",[_.Tt]);_.nfb=_.w("p4LrCe",[]);_.ofb=_.w("k0T3Ub",[_.nfb]);var pfb;pfb=class{WQ(a){return Vza().WQ(a)}setTimeout(a,b,...c){return Vza().setTimeout(a,b,...c)}setInterval(a,b,...c){return Vza().setInterval(a,b,...c)}clearTimeout(a){return Vza().clearTimeout(a)}clearInterval(a){return Vza().clearInterval(a)}};_.fu=

Networking

Detected suspicious crossdomain redirect

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: hacdct-my.sharepoint.com to https://nam12.safelinks.protection.outlook.com/?url=https%3a%2f%2fhacdct-my.sharepoint.com%2f%3af%3a%2fg%2fpersonal%2fdmarra_hacdct_org%2fel0cfhnmvmnnuzpj6qgnrsqbywvlnw96w_xrx10udrlfmq%3femail%3ddhodder%2540haigroup.com%26e%3dd37usf&data=05%7c02%7cjmckinley%40haigroup.com%7c2c616c7d8e6e4ac902e208dd2e63b1f2%7c82815b8c3775459997c72b87528e6f83%7c0%7c0%7c638717735163844421%7cbad%7ctwfpbgzsb3d8eyjfbxb0eu1hcgkionrydwusilyioiiwljaumdawmcisilaioijxaw4zmiisikfoijoitwfpbcisilduijoylcjbuci6eyjgswqioiixotm5njuilcjgtgjsijoivvnfmzqyx0nvbnrlbnqilcjhzw8ioijoqu0ilcjszxfjzci6imyxztu3ngexltcwymitnzawmc02zmuzltrmmgi4zwvjytgyzcisik1jzci6ijc3otgzmjqilcjntmftzsi6ilvtuje5mzk2ns03otkilcjdbgllbnrjuci6ijgundyumtizlje4osisiknsawvudc1bz2vudci6ik1vemlsbgevns4wichxaw5kb3dzie5uidewlja7ifdpbjy0oyb4njqpiefwcgxlv2vis2l0lzuzny4zniaos0hutuwsigxpa2ugr2vja28pienocm9tzs8xmtcumc4wljagu2fmyxjplzuzny4zniisiknjrc1pcmlnaw4ioijtue8ifx0%3d%7c1%7cmmm2mtzjn2qtogu2zs00ywm5ltayztitmdhkzdjlnjnimwyy%7c7df52ca9541b4019765e08dd2e65640d%7cf1e574a120f470006fe34d625f48fd72&sdata=qwy2hnyg8ktmbxfdwjfmgwootivl7anls4kg1vjavqi%3d&reserved=0

Connects to IPs without corresponding DNS lookups

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.13
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Downloads files from webservers via HTTP

Source: global traffic	HTTP traffic detected: GET /:f:/g/personal/dmarra_hacdct_org/El0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ?email=dhodder%40haigroup.com&e=d37USF&xsdata=MDV8MDJ8am1ja2lubGV5QGhhaWdyb3VwLmNvbXwyYzYxNmM3ZDhlNmU0YWM5MDJlMjA4ZGQyZTYzYjFmMnw4MjgxNWI4YzM3NzU0NTk5OTdjNzJiODc1MjhlNmY4M3wwfDB8NjM4NzE3NzMyNjY3MjIxNDQzfFVua25vd258VFdGcGJHWnNiM2Q4ZXlKRmJYQjBlVTFoY0draU9uUnlkV1VzSWxZaU9pSXdMakF1TURBd01DSXNJbEFpT2lKWGFXNHpNaUlzSWtGT0lqb2lUV0ZwYkNJc0lsZFVJam95ZlE9PXw0MDAwfHx8&sdata=bXM5KzduUjdVc3RFaFJsU1ZBR1d1enMxT3I3VitIdmc4MUlhZ25WT3dmWT0%3d HTTP/1.1Host: hacdct-my.sharepoint.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?url=https%3A%2F%2Fhacdct-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdmarra_hacdct_org%2FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%3Femail%3Ddhodder%2540haigroup.com%26e%3Dd37USF&data=05%7C02%7Cjmckinley%40haigroup.com%7C2c616c7d8e6e4ac902e208dd2e63b1f2%7C82815b8c3775459997c72b87528e6f83%7C0%7C0%7C638717735163844421%7CBad%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%3D%7C1%7CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%7C7df52ca9541b4019765e08dd2e65640d%7Cf1e574a120f470006fe34d625f48fd72&sdata=qwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%3D&reserved=0 HTTP/1.1Host: nam12.safelinks.protection.outlook.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Scripts/safelinksv2.css HTTP/1.1Host: nam12.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhacdct-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdmarra_hacdct_org%2FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%3Femail%3Ddhodder%2540haigroup.com%26e%3Dd37USF&data=05%7C02%7Cjmckinley%40haigroup.com%7C2c616c7d8e6e4ac902e208dd2e63b1f2%7C82815b8c3775459997c72b87528e6f83%7C0%7C0%7C638717735163844421%7CBad%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%3D%7C1%7CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%7C7df52ca9541b4019765e08dd2e65640d%7Cf1e574a120f470006fe34d625f48fd72&sdata=qwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%3D&reserved=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Scripts/site.js HTTP/1.1Host: nam12.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhacdct-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdmarra_hacdct_org%2FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%3Femail%3Ddhodder%2540haigroup.com%26e%3Dd37USF&data=05%7C02%7Cjmckinley%40haigroup.com%7C2c616c7d8e6e4ac902e208dd2e63b1f2%7C82815b8c3775459997c72b87528e6f83%7C0%7C0%7C638717735163844421%7CBad%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%3D%7C1%7CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%7C7df52ca9541b4019765e08dd2e65640d%7Cf1e574a120f470006fe34d625f48fd72&sdata=qwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%3D&reserved=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/Scripts/site.js HTTP/1.1Host: nam12.safelinks.protection.outlook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/images/cross.png HTTP/1.1Host: nam12.safelinks.protection.outlook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://nam12.safelinks.protection.outlook.com/?url=https%3A%2F%2Fhacdct-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdmarra_hacdct_org%2FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%3Femail%3Ddhodder%2540haigroup.com%26e%3Dd37USF&data=05%7C02%7Cjmckinley%40haigroup.com%7C2c616c7d8e6e4ac902e208dd2e63b1f2%7C82815b8c3775459997c72b87528e6f83%7C0%7C0%7C638717735163844421%7CBad%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiIsIkNJRC1PcmlnaW4iOiJTUE8ifX0%3D%7C1%7CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%7C7df52ca9541b4019765e08dd2e65640d%7Cf1e574a120f470006fe34d625f48fd72&sdata=qwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%3D&reserved=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Content/images/cross.png HTTP/1.1Host: nam12.safelinks.protection.outlook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&oit=4&cp=0&pgcl=4&gs_rn=42&psi=Nk7-6w45LqZNbpLq&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&oq=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCDYyOTBqMGo0qAIAsAIA&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: no
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII/d=1/ed=1/br=1/rs=ACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&oq=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%257CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CL-NgLyy4YoDFYRcSAAdMMQQkQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=1/ed=1/dg=3/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;FqHJkd:yQamIb;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SzQQ3e:dNhofb;TxfV6d:YORN0b;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;Uvc8o:VDovNc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;Zen4yb:jMF88c;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;euOXY:OZjbQ;flqRgb:ox2Q7c;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;lkq0A:JyBE3e;mWzs9c:fz5ukf;mzW4Id:nYdusb;nAFL3:NTMZac,s39S4;nJw4Gd:dPFZH;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;oVHXxc:HODIOb;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb,yDVVkb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tGdRVe:CS1mob;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uknmt:GkPrzb;uuQkY:u2V3ud;vEYCNb:FaqsVd;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=X3N0Bf,attn,cdos,gwc,hsm,j
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=1/ed=1/dg=3/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;FqHJkd:yQamIb;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SzQQ3e:dNhofb;TxfV6d:YORN0b;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;Uvc8o:VDovNc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YIZmRd:A1yn5d;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;Zen4yb:jMF88c;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bFZ6gf:RsDQqe;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;euOXY:OZjbQ;flqRgb:ox2Q7c;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;lkq0A:JyBE3e;mWzs9c:fz5ukf;mzW4Id:nYdusb;nAFL3:NTMZac,s39S4;nJw4Gd:dPFZH;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;oVHXxc:HODIOb;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb,yDVVkb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;ropkZ:UT1DG;sTsDMc:kHVSUb;sZmdvc:rdGEfc;tGdRVe:CS1mob;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uknmt:GkPrzb;uuQkY:u2V3ud;vEYCNb:FaqsVd;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=X3N0Bf,attn,cdos,gwc,hsm,j
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /vi/cBe5nnnJbSQ/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kwck404TzsBz8bo5Bnigj-7f1IcA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/_shebf5iJ3U/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kMZYU-7z9qAk312Q_Ei-p3-hGwyw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=f_R7Z5v4G8aw1sQPyv3tsA4.1736176770219&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%257CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiIsIkNJRC1PcmlnaW4iOiJTUE8ifX0%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&psi=f_R7Z5v4G8aw1sQPyv3tsA4.1736176770219&dpr=1&ofp=EAEY5snl2761zJ1XGPyZ1smhwf6cDBiA9djJg5rFm-4BGJOKqbm23N3TgAEYl7eS_OmtzYlbMqEBCgwKCm9mZmljZSAzNjUKFQoTc2hhcmVwb2ludCBkb3dubG9hZAoKCghvbmVkcml2ZQoPCg1taWNyb3NvZnQgMzY1ChAKDnNoYXJlcG9pbnQgMzY1ChcKFXNoYXJlcG9pbnQsIG1pY3Jvc29mdAoVChNvbmVkcml2ZSBzaGFyZXBvaW50ChkKF3NoYXJlcG9pbnQgYWRtaW4gY2VudGVyEEcyeQosCipIb3cgZG8gSSBsb2dpbiB0byBTaGFyZVBvaW50IGFkbWluIGNlbnRlcj8KJgokSG93IGRvIEkgaWRlbnRpZnkgYSBTaGFyZVBvaW50IHNpdGU_Ch4KHFdoYXQgdGhlIGhlY2sgaXMgU2hhcmVQb2ludD8Q5AI HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=syau,syak,syaj,syai,sy9y,sy9o,sy1i3,syyq,syvn,syfh,bEGPrc,sy1ix,sy60a,sy609,mBG1hd,sy60b,mscaJf,sy60f,sGwFce,HxbScf,eAR4Hf,sy60g,h3zgVb,lRePd,sy3ze,nN2e1e,sy60c,sy60h,IRJCef,sy60e,sy60d,scFHte,pr5okc,IFqxxc,sy3zf,OXpAmf,sy60i,sy3vw,sy3vp,sy3vo,sy1i5,sy1i6,syzn,syzo,syzm,syzp,syzl,syzq,syzd,syzc,syze,syzr,syzs,GElbSc,syv7,syv5,syv4,syv2,DPreE,sy60v,xdV1C,sy68z,HYSCof,sy6sb,sy3b3,sy22z,sy1gj,KSk4yc,sy3a3,msmzHf,RagDlc,oUlnpc,sy860,sy861,sy6zp,sy3p0,sy2kb,sy2kc,sy2k7,sy14s,sywt,sywy,Da4hkd,sy7qt,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=sy2op,fVaWL,sy14t,sy14q,sy14p,sy14o,sy14m,syxt,syxv,syxs,aD8OEe,sy6zn,xfmZMb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /vi/cBe5nnnJbSQ/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kwck404TzsBz8bo5Bnigj-7f1IcA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/_shebf5iJ3U/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kMZYU-7z9qAk312Q_Ei-p3-hGwyw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&cp=0&client=desktop-gws-wiz-on-focus-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&psi=f_R7Z5v4G8aw1sQPyv3tsA4.1736176770219&dpr=1&ofp=EAEY5snl2761zJ1XGPyZ1smhwf6cDBiA9djJg5rFm-4BGJOKqbm23N3TgAEYl7eS_OmtzYlbMqEBCgwKCm9mZmljZSAzNjUKFQoTc2hhcmVwb2ludCBkb3dubG9hZAoKCghvbmVkcml2ZQoPCg1taWNyb3NvZnQgMzY1ChAKDnNoYXJlcG9pbnQgMzY1ChcKFXNoYXJlcG9pbnQsIG1pY3Jvc29mdAoVChNvbmVkcml2ZSBzaGFyZXBvaW50ChkKF3NoYXJlcG9pbnQgYWRtaW4gY2VudGVyEEcyeQosCipIb3cgZG8gSSBsb2dpbiB0byBTaGFyZVBvaW50IGFkbWluIGNlbnRlcj8KJgokSG93IGRvIEkgaWRlbnRpZnkgYSBTaGFyZVBvaW50IHNpdGU_Ch4KHFdoYXQgdGhlIGhlY2sgaXMgU2hhcmVQb2ludD8Q5AI HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrom
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=f_R7Z5v4G8aw1sQPyv3tsA4.1736176770219&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=sy2op,fVaWL,sy14t,sy14q,sy14p,sy14o,sy14m,syxt,syxv,syxs,aD8OEe,sy6zn,xfmZMb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /vi/MW3orwpxY4c/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lfqu9OMS5c1qtm1gF1V4QTYJCs5A HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=UMk45c,bplExb,nMfLA,O19q8,Grwmle,xMHx5e,R6UkWb,tW711b,UX8qee,tDA9G,sy38b,sy387,sy386,syyy,sy2uh,sy2ui,sy2uj,syjx,sy3yn,sy3ym,sy384,sy15e,sy12t,sy12l,sy12u,sy12r,sy12p,sy2uk,sy15d,Eox39d,sy63y,sy2nr,sy2l7,syv3,tIj4fb,sy3vu,w4UyN,sy7t,sy7s,syho,syhk,syhl,syhj,syhx,syhv,syhu,syht,syhp,syhi,sybj,sybe,sydh,sydi,syc3,syc0,sybt,sybw,sybv,sybs,sybr,sybh,sybp,syby,syc2,syc1,sybc,sybk,sybi,sybg,syb6,syb3,syb2,syab,syb0,sy9w,sydt,syag,syal,sydk,syde,syd2,syd6,syb5,syd3,sycq,sycr,sycx,sycw,syco,sy9v,sycp,sycg,sycf,sycv,sycs,syce,sycd,sycc,syc9,syca,sycb,syc5,syc6,syc7,syb9,syct,syh8,syhh,syhd,syhe,sy8h,sy8d,sy8g,syha,syfo,syhf,syh9,syh7,syh4,syh3,syh1,sy8k,uxMpU,sygx,sydw,sydr,syds,sydl,sydu,sydo,syb7,syb8,syc8,sydp,sydf,sy8z,sy8y,sy8x,sy8w,Mlhmy,QGR0gd,aurFic,sy98,fKUV3e,OTA3Ae,sy7u,OmgaI,EEDORb,PoEs9b,Pjplud,sy8t,sy8p,sy8n,A1yn5d,YIZmRd,uY49fb,sy7k,sy7i,sy7d,sy7h,sy7g,sy7e,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,sy97,sy9a,sy8j,xUdipf,NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,sy3zn,sy3zm,sy3zl,sy3zk,SJpD2c,sy608,sy5tx,sy137,sy130,sy132,syku,sya8,syap,sy551,sy2ay,sy2b5,sy24m,syck,syax,syav,syah?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /vi/n3jZRBHGAB0/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3nORiT5NAH2nMyWTtD2jtNatE5_jA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=syau,syak,syaj,syai,sy9y,sy9o,sy1i3,syyq,syvn,syfh,bEGPrc,sy1ix,sy60a,sy609,mBG1hd,sy60b,mscaJf,sy60f,sGwFce,HxbScf,eAR4Hf,sy60g,h3zgVb,lRePd,sy3ze,nN2e1e,sy60c,sy60h,IRJCef,sy60e,sy60d,scFHte,pr5okc,IFqxxc,sy3zf,OXpAmf,sy60i,sy3vw,sy3vp,sy3vo,sy1i5,sy1i6,syzn,syzo,syzm,syzp,syzl,syzq,syzd,syzc,syze,syzr,syzs,GElbSc,syv7,syv5,syv4,syv2,DPreE,sy60v,xdV1C,sy68z,HYSCof,sy6sb,sy3b3,sy22z,sy1gj,KSk4yc,sy3a3,msmzHf,RagDlc,oUlnpc,sy860,sy861,sy6zp,sy3p0,sy2kb,sy2kc,sy2k7,sy14s,sywt,sywy,Da4hkd,sy7qt,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&ei=f_R7Z5v4G8aw1sQPyv3tsA4&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /vi/MW3orwpxY4c/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3lfqu9OMS5c1qtm1gF1V4QTYJCs5A HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/n3jZRBHGAB0/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3nORiT5NAH2nMyWTtD2jtNatE5_jA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=UMk45c,bplExb,nMfLA,O19q8,Grwmle,xMHx5e,R6UkWb,tW711b,UX8qee,tDA9G,sy38b,sy387,sy386,syyy,sy2uh,sy2ui,sy2uj,syjx,sy3yn,sy3ym,sy384,sy15e,sy12t,sy12l,sy12u,sy12r,sy12p,sy2uk,sy15d,Eox39d,sy63y,sy2nr,sy2l7,syv3,tIj4fb,sy3vu,w4UyN,sy7t,sy7s,syho,syhk,syhl,syhj,syhx,syhv,syhu,syht,syhp,syhi,sybj,sybe,sydh,sydi,syc3,syc0,sybt,sybw,sybv,sybs,sybr,sybh,sybp,syby,syc2,syc1,sybc,sybk,sybi,sybg,syb6,syb3,syb2,syab,syb0,sy9w,sydt,syag,syal,sydk,syde,syd2,syd6,syb5,syd3,sycq,sycr,sycx,sycw,syco,sy9v,sycp,sycg,sycf,sycv,sycs,syce,sycd,sycc,syc9,syca,sycb,syc5,syc6,syc7,syb9,syct,syh8,syhh,syhd,syhe,sy8h,sy8d,sy8g,syha,syfo,syhf,syh9,syh7,syh4,syh3,syh1,sy8k,uxMpU,sygx,sydw,sydr,syds,sydl,sydu,sydo,syb7,syb8,syc8,sydp,sydf,sy8z,sy8y,sy8x,sy8w,Mlhmy,QGR0gd,aurFic,sy98,fKUV3e,OTA3Ae,sy7u,OmgaI,EEDORb,PoEs9b,Pjplud,sy8t,sy8p,sy8n,A1yn5d,YIZmRd,uY49fb,sy7k,sy7i,sy7d,sy7h,sy7g,sy7e,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,sy97,sy9a,sy8j,xUdipf,NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,sy3zn,sy3zm,sy3zl,sy3zk,SJpD2c,sy608,sy5tx,sy137,sy130,sy132,syku,sya8,syap,sy551,sy2ay,sy2b5,sy24m,syck,syax,syav,syah?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII/d=0/br=1/rs=ACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w/m=L1AAkb,y05UD,sy5h1,sy1ad,sy1dq,sy1nt,sy1m8,sy1me,sy1mf,sy1ms,sy17v,sy2el,sy1m4,sy1ry,sy2ec,epYOx?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sb_wiz,aa,abd,sy2px,syye,syyd,syy7,syyc,syyf,async,sy13q,bgd,sy7y6,foot,sy1xm,kyn,sy1rm,sy2lr,lli,sf,sylk,syll,sy4oc,sonic,sy85t,sy2ob,syge,sy2oa,syki,sy238,sy239,spch,tl,syx8,syx7,rtH1bd,sy3ag,sy3ae,syy8,syya,syxh,syxe,sy3af,syz4,EkevXb,syw2,syvy,syvx,syw1,syw0,syvz,syvt,syvk,SMquOb,syxf,syxb,syxd,d5EhJe,syys,sy1is,sy1ir,sy1iq,sy1ip,sy1io,sy1in,sy1ij,sy1af,sy1ah,sy1ag,sy1ae,syxo,syvw,syxl,syxq,T1HOxc,syxm,syxk,zx30Y,sy1iw,sy1iv,sy1ig,Wo3n8,sy159,L1AAkb,sy1lg,fiAufb,sy1jq,SZXsif,sy7ns,sy7yl,sy69q,sy3k0,syx5,sYEX8b,sy22p,NEW1Qc,xBbsrc,sy22r,sy1xo,IX53Tb,ma4xG,syjk,syjl,syfn,syfd,syfc,syfk,sykx,syky,syvd,NO84gd,sykr,sykp,sykq,sykw,sykm,sykn,syks,syj0,E9M6Uc,b5lhvb,IoGlCf,syv9,syv8,C8HsP,syvg,syve,sykz,gOTY1,sywe,sywa,sywc,sywb,syjh,syjm,sywf,syw9,syw7,syw6,syw4,syvi,syvj,syvh,syw8,PbHo4e,sy3on,Q8FUWe,sy3om,g5dM4c,sy1lm,E23uIf,sy3eg,g4PEk,sy3e9,qzpJXc,PGkS1e,sy1lu,sy1lt,oFYokc,sy13j,bwixAb,syh0,aLUfP,wQlYve,sy13m,sy13l,syzj,syz7,syz5,s0j7C,sy13p,sy13o,QQ51Ce,sy6lq,Qqt3Gf,dLlj2,sy8ki,sy7pb,O6Iu7d,sy141,syyb,C8ffD,sy142,sy144,ZUBru,sy146,sy145,sy143,rTuANe,sy61h,gmR6rc,sywk,UBXHI,sywl,R3fhkb,syz3,TSZEqd,sy6zr,ND0kmf,sy5jb?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=syjf,zGLm3b,sy3d0,sy3ct,sy3cu,sy2vv,sy1e4,sy3cz,sy3df,sy3de,sy3cq,sy3dc,sy3db,KHourd,sy6s2,vrkJ0e,sy40k,T5VV,sy2ur,aDVF7,sy6ny,rhYw1b,d6FVZd,v5smjd,sy40b,nC8Lwf,yb08jf,sy40e,sy3kk,oPmHrb,sy2lp,sy2md,Tia57b,KpRAue,sy2lt,syk8,sy2ls,sy2m2,sy2me,NyeqM,sy3d5,sy3d4,sy3cy,O9SqHb,M6QgBb,sy17m,sy17l,sy17g,sy148,sy147,sy17k,sy17j,sy17b,EO13pd,sy2pk,I9y8sd,MpJwZc,UUJqVe,sy7x,sOXFj,sy7w,s39S4,oGtAuc,NTMZac,nAFL3,sy8b,sy8a,q0xTif,y05UD,sy5h1,sy1ad,sy1dq,sy1ac,sy1ab,sy17u,sy1ax,sy2fy,sy1nt,sy2fj,sy1m8,sy2cw,sy1mm,sy1me,sy2cv,sy1mj,syjy,sy1mk,sy18l,sy1ma,sy1mi,sy1m5,sy1mf,sy2cx,sy1ms,sy17v,sy2el,sy27m,sy2eo,sy1m4,sy2d8,sy1ry,sy2ct,sy2ec,sy1m7,sy2ed,sy1os,sy1ot,epYOx?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII/d=0/br=1/rs=ACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w/m=L1AAkb,y05UD,sy5h1,sy1ad,sy1dq,sy1nt,sy1m8,sy1me,sy1mf,sy1ms,sy17v,sy2el,sy1m4,sy1ry,sy2ec,epYOx?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=f_R7Z5v4G8aw1sQPyv3tsA4&zx=1736176772970&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=syjf,zGLm3b,sy3d0,sy3ct,sy3cu,sy2vv,sy1e4,sy3cz,sy3df,sy3de,sy3cq,sy3dc,sy3db,KHourd,sy6s2,vrkJ0e,sy40k,T5VV,sy2ur,aDVF7,sy6ny,rhYw1b,d6FVZd,v5smjd,sy40b,nC8Lwf,yb08jf,sy40e,sy3kk,oPmHrb,sy2lp,sy2md,Tia57b,KpRAue,sy2lt,syk8,sy2ls,sy2m2,sy2me,NyeqM,sy3d5,sy3d4,sy3cy,O9SqHb,M6QgBb,sy17m,sy17l,sy17g,sy148,sy147,sy17k,sy17j,sy17b,EO13pd,sy2pk,I9y8sd,MpJwZc,UUJqVe,sy7x,sOXFj,sy7w,s39S4,oGtAuc,NTMZac,nAFL3,sy8b,sy8a,q0xTif,y05UD,sy5h1,sy1ad,sy1dq,sy1ac,sy1ab,sy17u,sy1ax,sy2fy,sy1nt,sy2fj,sy1m8,sy2cw,sy1mm,sy1me,sy2cv,sy1mj,syjy,sy1mk,sy18l,sy1ma,sy1mi,sy1m5,sy1mf,sy2cx,sy1ms,sy17v,sy2el,sy27m,sy2eo,sy1m4,sy2d8,sy1ry,sy2ct,sy2ec,sy1m7,sy2ed,sy1os,sy1ot,epYOx?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sb_wiz,aa,abd,sy2px,syye,syyd,syy7,syyc,syyf,async,sy13q,bgd,sy7y6,foot,sy1xm,kyn,sy1rm,sy2lr,lli,sf,sylk,syll,sy4oc,sonic,sy85t,sy2ob,syge,sy2oa,syki,sy238,sy239,spch,tl,syx8,syx7,rtH1bd,sy3ag,sy3ae,syy8,syya,syxh,syxe,sy3af,syz4,EkevXb,syw2,syvy,syvx,syw1,syw0,syvz,syvt,syvk,SMquOb,syxf,syxb,syxd,d5EhJe,syys,sy1is,sy1ir,sy1iq,sy1ip,sy1io,sy1in,sy1ij,sy1af,sy1ah,sy1ag,sy1ae,syxo,syvw,syxl,syxq,T1HOxc,syxm,syxk,zx30Y,sy1iw,sy1iv,sy1ig,Wo3n8,sy159,L1AAkb,sy1lg,fiAufb,sy1jq,SZXsif,sy7ns,sy7yl,sy69q,sy3k0,syx5,sYEX8b,sy22p,NEW1Qc,xBbsrc,sy22r,sy1xo,IX53Tb,ma4xG,syjk,syjl,syfn,syfd,syfc,syfk,sykx,syky,syvd,NO84gd,sykr,sykp,sykq,sykw,sykm,sykn,syks,syj0,E9M6Uc,b5lhvb,IoGlCf,syv9,syv8,C8HsP,syvg,syve,sykz,gOTY1,sywe,sywa,sywc,sywb,syjh,syjm,sywf,syw9,syw7,syw6,syw4,syvi,syvj,syvh,syw8,PbHo4e,sy3on,Q8FUWe,sy3om,g5dM4c,sy1lm,E23uIf,sy3eg,g4PEk,sy3e9,qzpJXc,PGkS1e,sy1lu,sy1lt,oFYokc,sy13j,bwixAb,syh0,aLUfP,wQlYve,sy13m,sy13l,syzj,syz7,syz5,s0j7C,sy13p,sy13o,QQ51Ce,sy6lq,Qqt3Gf,dLlj2,sy8ki,sy7pb,O6Iu7d,sy141,syyb,C8ffD,sy142,sy144,ZUBru,sy146,sy145,sy143,rTuANe,sy61h,gmR6rc,sywk,UBXHI,sywl,R3fhkb,syz3,TSZEqd,sy6zr,ND0kmf,sy5jb?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=f_R7Z5v4G8aw1sQPyv3tsA4&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII/d=0/br=1/rs=ACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w/m=HKNF9e,sy1ht?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sy69b,sy3wp,DpX64d,uKlGbf,sy69c,EufiNb,sy22y,P10Owf,sy1ih,sy1ie,gSZvdb,sy1jy,sy1j7,WlNQGd,sy3os,sy3or,nabPbb,HKNF9e,sy1j6,sy1j4,sy1ht,CnSW2d,sy60s,sy60r,sy1e6,syz1,syyz,syz0,sy1k5,sy1k3,VD4Qme,sygy,BYwJlf,sy15f,sy15c,sy15b,VEbNoe,sy7l4,sy2uu,SC7lYd,sy3e5,xuUld,sy3e8,qwbW4b,sy3ls,sy13i,sy12w,sy13f,sy13e,M2ABbc,DQweEe,Ouoacf,sy61i,k6Mdie,sy14c,sy14b,Dq2Yjb,sy14f,sy14e,sy14d,NVlnE,sy13s,sy13r,qmdEUe,sy14h,sy14g,UqGwg,sy1lf,sy1le,q00IXe,sy1lk,sy1lj,sy1lh,Fh0l0,sy3du,qcH9Lc,sy3d1,gCngrf,pjDTFb,sy3da,sy2jf,KgxeNb,sy3d6,khkNpe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ4dMLegQICBAA..i&ei=f_R7Z5v4G8aw1sQPyv3tsA4&opi=89978449&yv=3&cid=10934857585152794797&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII%2Fbr%3D1%2Frs%3DACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fck%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fy
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII/d=0/br=1/rs=ACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w/m=HKNF9e,sy1ht?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=f_R7Z5v4G8aw1sQPyv3tsA4&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=kH-ueFAgIJGGV5O4AqX_mVb0WiRy6aRxuIaAM2M14QuLJayXEO6J1U0urp_pUVObazj1_7yUnFHlhilB4jlDrtFuVdT7c80dVNc8fyO7v3QOG2Zt3NK1-7ZZpUzl5P4aAJvrZRSU1lVbpzE1I_Ucna_Uh98rDajtFxCBS5HNvw8OU4RX532hVdyg8nu_ERpZ9QTVVdtYhua34kIFIA; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=lOO0Vd,sy8u,P6sQOc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sy69b,sy3wp,DpX64d,uKlGbf,sy69c,EufiNb,sy22y,P10Owf,sy1ih,sy1ie,gSZvdb,sy1jy,sy1j7,WlNQGd,sy3os,sy3or,nabPbb,HKNF9e,sy1j6,sy1j4,sy1ht,CnSW2d,sy60s,sy60r,sy1e6,syz1,syyz,syz0,sy1k5,sy1k3,VD4Qme,sygy,BYwJlf,sy15f,sy15c,sy15b,VEbNoe,sy7l4,sy2uu,SC7lYd,sy3e5,xuUld,sy3e8,qwbW4b,sy3ls,sy13i,sy12w,sy13f,sy13e,M2ABbc,DQweEe,Ouoacf,sy61i,k6Mdie,sy14c,sy14b,Dq2Yjb,sy14f,sy14e,sy14d,NVlnE,sy13s,sy13r,qmdEUe,sy14h,sy14g,UqGwg,sy1lf,sy1le,q00IXe,sy1lk,sy1lj,sy1lh,Fh0l0,sy3du,qcH9Lc,sy3d1,gCngrf,pjDTFb,sy3da,sy2jf,KgxeNb,sy3d6,khkNpe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /js/bg/YzJnfHZry0-WzXR_WdgLp0Q7JSDioNOeXqI-CileiB8.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ4dMLegQICBAA..i&ei=f_R7Z5v4G8aw1sQPyv3tsA4&opi=89978449&yv=3&cid=10934857585152794797&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII%2Fbr%3D1%2Frs%3DACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fck%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0Kb
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=lOO0Vd,sy8u,P6sQOc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /iframe_api?version=3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/YzJnfHZry0-WzXR_WdgLp0Q7JSDioNOeXqI-CileiB8.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=sfm5tk8OHJ4; VISITOR_INFO1_LIVE=Bl4uCbVcobA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXA%3D%3D
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ4dMLegQICBAA..i&ei=f_R7Z5v4G8aw1sQPyv3tsA4&opi=89978449&yv=3&cid=10934857585152794797&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII%2Fbr%3D1%2Frs%3DACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fck%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0Kb
Source: global traffic	HTTP traffic detected: GET /embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/search?q=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&oq=https%253A%252F%252Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=sfm5tk8OHJ4; VISITOR_INFO1_LIVE=Bl4uCbVcobA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=sfm5tk8OHJ4; VISITOR_INFO1_LIVE=Bl4uCbVcobA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=sfm5tk8OHJ4; VISITOR_INFO1_LIVE=Bl4uCbVcobA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=sfm5tk8OHJ4; VISITOR_INFO1_LIVE=Bl4uCbVcobA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/03dbdfab/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=sfm5tk8OHJ4; VISITOR_INFO1_LIVE=Bl4uCbVcobA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXA%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /search?q=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&sca_esv=598c226b643eedfc&ei=f_R7Z5v4G8aw1sQPyv3tsA4&ved=0ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ4dUDCBA&uact=5&oq=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&gs_lp=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
Source: global traffic	HTTP traffic detected: GET /pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CMCjvdmy4YoDFamKaAkdCisXwg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAttribution-Reporting-Eligible: event-source, trigger, not-navigation-sourceReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /verify/APzSz2e9By2xoYflxkpT6vSzx62DFuOA2Z0kebazoHMQjwuJ93ZFvP0XhSJt5C1k10YcdmTZ0UEEq7qXUo2sJ5OHD8wmHd4RZ6j4_obwiNmYVJsPDg HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&psi=vfR7Z--4Bbuui-gPztWCEA.1736176829327&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%257CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyLCJBUCI6eyJGSWQiOiIxOTM5NjUiLCJGTGJsIjoiVVNfMzQyX0NvbnRlbnQiLCJHZW8iOiJOQU0iLCJSZXFJZCI6ImYxZTU3NGExLTcwYmItNzAwMC02ZmUzLTRmMGI4ZWVjYTgyZCIsIk1JZCI6Ijc3OTgzMjQiLCJNTmFtZSI6IlVTUjE5Mzk2NS03OTkiLCJDbGllbnRJUCI6IjguNDYuMTIzLjE4OSIsIkNsaWVudC1BZ2VudCI6Ik1vemlsbGEvNS4wIChXaW5kb3dzIE5UIDEwLjA7IFdpbjY0OyB4NjQpIEFwcGxlV2ViS2l0LzUzNy4zNiAoS0hUTUwsIGxpa2UgR2Vja28pIENocm9tZS8xMTcuMC4wLjAgU2FmYXJpLzUzNy4zNiIsIkNJRC1PcmlnaW4iOiJTUE8ifX0%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&psi=vfR7Z--4Bbuui-gPztWCEA.1736176829327&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Window
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=syau,syak,syaj,syai,sy9y,sy9o,sy1i3,syyq,syvn,syfh,bEGPrc,sy1ix,sy60a,sy609,mBG1hd,sy60b,mscaJf,sy60f,sGwFce,HxbScf,eAR4Hf,sy60g,h3zgVb,lRePd,sy3ze,nN2e1e,sy60c,sy60h,IRJCef,sy60e,sy60d,scFHte,pr5okc,IFqxxc,sy3zf,OXpAmf,sy60i,sy3vw,sy3vp,sy3vo,sy1i5,sy1i6,syzn,syzo,syzm,syzp,syzl,syzq,syzd,syzc,syze,syzr,syzs,GElbSc,syv7,syv5,syv4,syv2,DPreE,sy60v,xdV1C,sy68z,HYSCof,sy6sb,sy3b3,sy22z,sy1gj,KSk4yc,sy3a3,msmzHf,sy7qt,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=QEFBVrUkjbhCGC3cl7kuEOKuAyW6Mhmon7iVVNVKhhidL4OLQ1v1yDPHhy9QIjm0KbqmtQL8QeOPnA9b5S2mi7Wx2KYRDR298CvTqceK84H51YY0qoHM6OxoX26EpVki-YeVGz7BDxhJ2NUhyVg_85aTJu4z_VrjSeeQ45BFsH-Bfh_AJjZhF98aUeDKDrXtMuViwwoxNIi8zVFpXLsnlJM3xrt0
Source: global traffic	HTTP traffic detected: GET /complete/search?q=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&psi=vfR7Z--4Bbuui-gPztWCEA.1736176829327&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=https%3A%2F%2Fhacdct-my.sharepoint.com%252F%253Af%253A%252Fg%252Fpersonal%252Fdmarra_hacdct_org%252FEl0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ%253Femail%253Ddhodder%252540haigroup.com%2526e%253Dd37USF%26data%3D05%257C02%257Cjmckinley%2540haigroup.com%257C2c616c7d8e6e4ac902e208dd2e63b1f2%257C82815b8c3775459997c72b87528e6f83%257C0%257C0%257C638717735163844421%257CBad%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%253D%257C1%257CMmM2MTZjN2QtOGU2ZS00YWM5LTAyZTItMDhkZDJlNjNiMWYy%257C7df52ca9541b4019765e08dd2e65640d%257Cf1e574a120f470006fe34d625f48fd72%26sdata%3DqwY2hNYG8ktmbXFDWJfMGWootIVL7ANLS4KG1VJAVqI%253D%26reserved%3D0&psi=vfR7Z--4Bbuui-gPztWCEA.1736176829327&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sb_wiz,aa,abd,sy2px,syye,syyd,syy7,syyc,syyf,async,sy13q,bgd,sy7y6,foot,sy1xm,kyn,sy1rm,sy2lr,lli,sf,sylk,syll,sy4oc,sonic,sy85t,sy2ob,syge,sy2oa,syki,sy238,sy239,spch,tl,syx8,syx7,rtH1bd,sy3ag,sy3ae,syy8,syya,syxh,syxe,sy3af,syz4,EkevXb,syw2,syvy,syvx,syw1,syw0,syvz,syvt,syvk,SMquOb,syxf,syxb,syxd,d5EhJe,syys,sy1is,sy1ir,sy1iq,sy1ip,sy1io,sy1in,sy1ij,sy1af,sy1ah,sy1ag,sy1ae,syxo,syvw,syxl,syxq,T1HOxc,syxm,syxk,zx30Y,sy1iw,sy1iv,sy1ig,Wo3n8,sy159,L1AAkb,sy1lg,fiAufb,sy1jq,SZXsif,sy7ns,sy7yl,sy69q,sy3k0,syx5,sYEX8b,sy22p,NEW1Qc,xBbsrc,sy22r,sy1xo,IX53Tb,ma4xG,syjk,syjl,syfn,syfd,syfc,syfk,sykx,syky,syvd,NO84gd,sykr,sykp,sykq,sykw,sykm,sykn,syks,syj0,E9M6Uc,b5lhvb,IoGlCf,syv9,syv8,C8HsP,syvg,syve,sykz,gOTY1,sywe,sywa,sywc,sywb,syjh,syjm,sywf,syw9,syw7,syw6,syw4,syvi,syvj,syvh,syw8,PbHo4e,sy860,sy861,sy6zr,ND0kmf,sy5jb,syjf,zGLm3b,sy3d0,sy3ct,sy3cu,sy2vv,sy1e4,sy3cz,sy3df,sy3de,sy3cq,sy3dc,sy3db,KHourd,sy6s2,vrkJ0e,sy40k,T5VV,sy2ur,aDVF7,sy6ny,rhYw1b,d6FVZd,v5smjd,sy40b,nC8Lwf,yb08jf,sy40e,sy3kk,oPmHrb,sy2lp,sy2md,Tia57b,KpRAue,sy2lt,syk8,sy2ls,sy2m2,sy2me,NyeqM,sy3d5,sy3d4,sy3cy,O9SqHb,M6QgBb,sy17m,sy17l,sy17g,sy148,sy147?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/ck=xjs.s.cv79PgLUhzo.L.B1.O/am=AJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/ujg=1/rs=ACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g/m=syau,syak,syaj,syai,sy9y,sy9o,sy1i3,syyq,syvn,syfh,bEGPrc,sy1ix,sy60a,sy609,mBG1hd,sy60b,mscaJf,sy60f,sGwFce,HxbScf,eAR4Hf,sy60g,h3zgVb,lRePd,sy3ze,nN2e1e,sy60c,sy60h,IRJCef,sy60e,sy60d,scFHte,pr5okc,IFqxxc,sy3zf,OXpAmf,sy60i,sy3vw,sy3vp,sy3vo,sy1i5,sy1i6,syzn,syzo,syzm,syzp,syzl,syzq,syzd,syzc,syze,syzr,syzs,GElbSc,syv7,syv5,syv4,syv2,DPreE,sy60v,xdV1C,sy68z,HYSCof,sy6sb,sy3b3,sy22z,sy1gj,KSk4yc,sy3a3,msmzHf,sy7qt,pHXghd?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sy17k,sy17j,sy17b,EO13pd,sy2pk,I9y8sd,MpJwZc,UUJqVe,sy7x,sOXFj,sy7w,s39S4,oGtAuc,NTMZac,nAFL3,sy8b,sy8a,q0xTif,y05UD,sy5h1,sy1ad,sy1dq,sy1ac,sy1ab,sy17u,sy1ax,sy2fy,sy1nt,sy2fj,sy1m8,sy2cw,sy1mm,sy1me,sy2cv,sy1mj,syjy,sy1mk,sy18l,sy1ma,sy1mi,sy1m5,sy1mf,sy2cx,sy1ms,sy17v,sy2el,sy27m,sy2eo,sy1m4,sy2d8,sy1ry,sy2ct,sy2ec,sy1m7,sy2ed,sy1os,sy1ot,epYOx,RagDlc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=vfR7Z--4Bbuui-gPztWCEA&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sb_wiz,aa,abd,sy2px,syye,syyd,syy7,syyc,syyf,async,sy13q,bgd,sy7y6,foot,sy1xm,kyn,sy1rm,sy2lr,lli,sf,sylk,syll,sy4oc,sonic,sy85t,sy2ob,syge,sy2oa,syki,sy238,sy239,spch,tl,syx8,syx7,rtH1bd,sy3ag,sy3ae,syy8,syya,syxh,syxe,sy3af,syz4,EkevXb,syw2,syvy,syvx,syw1,syw0,syvz,syvt,syvk,SMquOb,syxf,syxb,syxd,d5EhJe,syys,sy1is,sy1ir,sy1iq,sy1ip,sy1io,sy1in,sy1ij,sy1af,sy1ah,sy1ag,sy1ae,syxo,syvw,syxl,syxq,T1HOxc,syxm,syxk,zx30Y,sy1iw,sy1iv,sy1ig,Wo3n8,sy159,L1AAkb,sy1lg,fiAufb,sy1jq,SZXsif,sy7ns,sy7yl,sy69q,sy3k0,syx5,sYEX8b,sy22p,NEW1Qc,xBbsrc,sy22r,sy1xo,IX53Tb,ma4xG,syjk,syjl,syfn,syfd,syfc,syfk,sykx,syky,syvd,NO84gd,sykr,sykp,sykq,sykw,sykm,sykn,syks,syj0,E9M6Uc,b5lhvb,IoGlCf,syv9,syv8,C8HsP,syvg,syve,sykz,gOTY1,sywe,sywa,sywc,sywb,syjh,syjm,sywf,syw9,syw7,syw6,syw4,syvi,syvj,syvh,syw8,PbHo4e,sy860,sy861,sy6zr,ND0kmf,sy5jb,syjf,zGLm3b,sy3d0,sy3ct,sy3cu,sy2vv,sy1e4,sy3cz,sy3df,sy3de,sy3cq,sy3dc,sy3db,KHourd,sy6s2,vrkJ0e,sy40k,T5VV,sy2ur,aDVF7,sy6ny,rhYw1b,d6FVZd,v5smjd,sy40b,nC8Lwf,yb08jf,sy40e,sy3kk,oPmHrb,sy2lp,sy2md,Tia57b,KpRAue,sy2lt,syk8,sy2ls,sy2m2,sy2me,NyeqM,sy3d5,sy3d4,sy3cy,O9SqHb,M6QgBb,sy17m,sy17l,sy17g,sy148,sy147?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sy17k,sy17j,sy17b,EO13pd,sy2pk,I9y8sd,MpJwZc,UUJqVe,sy7x,sOXFj,sy7w,s39S4,oGtAuc,NTMZac,nAFL3,sy8b,sy8a,q0xTif,y05UD,sy5h1,sy1ad,sy1dq,sy1ac,sy1ab,sy17u,sy1ax,sy2fy,sy1nt,sy2fj,sy1m8,sy2cw,sy1mm,sy1me,sy2cv,sy1mj,syjy,sy1mk,sy18l,sy1ma,sy1mi,sy1m5,sy1mf,sy2cx,sy1ms,sy17v,sy2el,sy27m,sy2eo,sy1m4,sy2d8,sy1ry,sy2ct,sy2ec,sy1m7,sy2ed,sy1os,sy1ot,epYOx,RagDlc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ; DV=w6Adm-6oSKQjoLzqnEwKQNDBT0DDQ1kOd0vyzxJY51I8AAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sy69b,sy3wp,DpX64d,uKlGbf,sy69c,EufiNb,sy22y,P10Owf,sy1ih,sy1ie,gSZvdb,sy1jy,sy1j7,WlNQGd,sy3os,sy3or,nabPbb,HKNF9e,sy1j6,sy1j4,sy1ht,CnSW2d,sy60s,sy60r,sy1e6,syz1,syyz,syz0,sy1k5,sy1k3,VD4Qme,sygy,BYwJlf,sy15f,sy15c,sy15b,VEbNoe,sy7l4,sy2uu,SC7lYd,sy1lf,sy1le,q00IXe,sy1lk,sy1lj,sy1lh,Fh0l0,sy3du,qcH9Lc,sy3d1,gCngrf,pjDTFb,sy3da,sy2jf,KgxeNb,sy3d6,khkNpe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=vfR7Z--4Bbuui-gPztWCEA&opi=89978449&sca_esv=598c226b643eedfc&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; DV=w6Adm-6oSKQTkMPdkvyzBNYZOzHDQxk; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ4dMLegQIBhAA..i&ei=vfR7Z--4Bbuui-gPztWCEA&opi=89978449&sca_esv=598c226b643eedfc&yv=3&cid=10934857585152794797&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII%2Fbr%3D1%2Frs%3DACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fck%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=syh0,aLUfP?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ; DV=w6Adm-6oSKQjoLzqnEwKQNDBT0DDQ1kOd0vyzxJY51I8AAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=sy69b,sy3wp,DpX64d,uKlGbf,sy69c,EufiNb,sy22y,P10Owf,sy1ih,sy1ie,gSZvdb,sy1jy,sy1j7,WlNQGd,sy3os,sy3or,nabPbb,HKNF9e,sy1j6,sy1j4,sy1ht,CnSW2d,sy60s,sy60r,sy1e6,syz1,syyz,syz0,sy1k5,sy1k3,VD4Qme,sygy,BYwJlf,sy15f,sy15c,sy15b,VEbNoe,sy7l4,sy2uu,SC7lYd,sy1lf,sy1le,q00IXe,sy1lk,sy1lj,sy1lh,Fh0l0,sy3du,qcH9Lc,sy3d1,gCngrf,pjDTFb,sy3da,sy2jf,KgxeNb,sy3d6,khkNpe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ; DV=w6Adm-6oSKQjoLzqnEwKQNDBT0DDQ1kOd0vyzxJY51I8AAA
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=vfR7Z--4Bbuui-gPztWCEA&opi=89978449&sca_esv=598c226b643eedfc&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ; DV=w6Adm-6oSKQjoLzqnEwKQNDBT0DDQ1kOd0vyzxJY51I8AAA
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=vfR7Z--4Bbuui-gPztWCEA&zx=1736176832122&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ; DV=w6Adm-6oSKQjoLzqnEwKQNDBT0DDQ1kOd0vyzxJY51I8AAA
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.rVlnDMUGe0U.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC/d=0/dg=0/br=1/rs=ACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw/m=syh0,aLUfP?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCLnKzQEIitPNAQjB1M0BCLrYzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ3PRtbGH9diFPvtn559gI5YReNoPuA1qna8-CKn6iff0_3NbK60kYNANfrnWTHSNG7Ag5QzzLlYi4ciJ43Eq2yWfUMaZDkVTKc_j9SZW-fXrC9-apZiNQ_TUWlGJWYmrTm2k3AcYYt6v5_ATlRwSQ; DV=w6Adm-6oSKQjoLzqnEwKQNDBT0DDQ1kOd0vyzxJY51I8AAA
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ4dMLegQIBhAA..i&ei=vfR7Z--4Bbuui-gPztWCEA&opi=89978449&sca_esv=598c226b643eedfc&yv=3&cid=10934857585152794797&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII%2Fbr%3D1%2Frs%3DACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fck%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ4dMLegQIBhAA..i&ei=vfR7Z--4Bbuui-gPztWCEA&opi=89978449&sca_esv=598c226b643eedfc&yv=3&cid=10934857585152794797&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAAEAACgIQAAAAAACgAAAAAAAAAAAAAABIAAAAAAAAECAABEJCAAAEAAAAAMACAAAILAABAgAEAAAAAAAEAAAAIEAEYL__OAAAAAAAAAAAAAQCABEAAAAAAHABABAE0d4AAQAAAAgAAAAMAAAAQAAAAAAAAAUAAAAAAAAAAAQAAAAAAAAABAAAAAABAPoBAAAAAAAAAAAAAAACAAAAAABggAIAAvgBAAAAAACAAwAAAAABAQAAOAIGIAAAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oHEAwN3fMpOhnzYlf92JvOoKkuAbw,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAAAgAgKQMgEAAAQvAABgFwBAAAAA-AA4pKMK0AAAECAABEBCABAEAAgAAsAKAQAACABAAEAtAABAAAAHAAACACgEAAAAMTAAAAYAAAABAAICCBJAACYAoAABkOCXabwAyA9AgQAABAAMABIARUA4wDAAQQUABjwAAgAAAAAAAAAAAAAIABACAAADUAAABBAAoAeAAPABUGoCEQAgCABAgEIAEAAAAAQAAAAAIAACAQAAwk4AOAIGIADAAAAAAACQAAAAAMCQAgIAAAAAAAAAAAAAAAAAQAAMAQAUBAAAAAAAAAAAAAAAAAAAAJACaII%2Fbr%3D1%2Frs%3DACT90oEa_IPSjieP35ulf9ZPsmBb4wTP0w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.rVlnDMUGe0U.2018.O%2Fck%3Dxjs.s.cv79PgLUhzo.L.B1.O%2Fam%3DAJA6BAgBAAAgAACAEABUABAAAAAAAAAAAAAAAAAAAAAAAAAAAEACAAAAhIAAgCQAACAAAEAgCgKQMgEAAASvAABgFwBAAAAA-AB4pKMK0AAAECAABEJCABAEAAgAAsAKAQAILABBAkAtAABAAAAHAAACIGgEYL__OTAAAAYAAAABAAYCCBNAACYAoHABkPCX-f4AyQ9AgQgABAAMABIARUA4wDAAQQUABjwAAgAAAAQAAAAAAAAIBBACAAADUPoBBBAAoAeAAPABUGoCEQAgCABggEIAEvgBAAQAAACAIwACAQABw04AOAIGIADAAAAAAAD3AcDjAeGQwgIAAAAAAAAAAAAAAAABSBDMgfQXBCAAAAAAAAAAAAAAAAAAAJAiaOJyAwAC%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHdQJqJ0-aF0-GFhnypGQoh9DFc4g,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; GZ=Z=0; NID=520=OWGwBm-p3CsbI6rK2s7bQ4EN3ARGYiPz-GVLvkGdc5czIaZmbtb_f1KbCxtjv1SOZmgWGWqS14SKSJ

Found strings which match to known social media urls

Source: chromecache_224.1.dr	String found in binary or memory: 1 year ago</cite></div></div></div></div><div class="csDOgf BCF2pd L48a4c"><div jscontroller="gOTY1" data-id="atritem-https://www.youtube.com/watch?v=cBe5nnnJbSQ" jsdata="PFrTzf;_;A3q4bY" data-viewer-group="1" jsaction="rcuQ6b:npT2md;aevozb:T2P31d;vcOT6c:C6KsF;k7WJpc:beCLof;jH1Skf:sCDZjb"><div><div jsdata="l7Bhpb;_;A3q4bc" jscontroller="PbHo4e" jsshadow="" jsaction="rcuQ6b:npT2md;h5M12e;jGQF0b:kNqZ1c;" data-viewer-entrypoint="1" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ2esEegQIChAL"><div jsslot=""><div jsname="I3kE2c" class="MJ8UF iTPLzd rNSxBe eY4mx lUn2nc" style="position:absolute" aria-label="About this result" role="button" tabindex="0"><span jsname="czHhOd" class="D6lY4c mBswFe"><span jsname="Bil8Ae" class="xTFaxe z1asCe" style="height:18px;line-height:18px;width:18px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8c1.1 0 2-.9 2-2s-.9-2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg></span></span></div></div></div></div></div></div></div></div></div></div><div class="iHxmLe" jsshadow=""><a aria-label="SharePoint Online The Ultimate Beginners Guide 2023 by Andy Malone MVP on YouTube. Play on Google. 32:11. May 5, 2023" href="#" data-vll="" role="button" tabindex="0" data-hveid="CAoQDA" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ5KoOegQIChAM"><div class="gY2b2c" aria-hidden="true"><div class="AZJdrc JceRhc zGXzeb"><div jsname="zccVWc" class="uhHOwf BYbUcd" style="height:83px;width:148px"><img alt="" id="dimg_f_R7Z5v4G8aw1sQPyv3tsA4_1" src="data:image/gif;base64,R0lGODlhAQABAIAAAP///////yH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-deferred="1"></div><div class="Ylm8Fc YmeD8e"><svg height="32" width="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path class="MfcGr" d="M0 16C0 7.163 7.163 0 16 0s16 7.163 16 16-7.163 16-16 16S0 24.837 0 16Z"></path><path class="Nci3Ge" d="M13 10.92v10.16a1 1 0 0 0 1.573.819l7.257-5.08a1 1 0 0 0 0-1.638l-7.256-5.08a1 1 0 0 0-1.574.82Z"></path></svg></div><div class="kSFuOd rkqHyd" aria-hidden="true"><div class="c8rnLc flgn0c k1U36b zCaigb"><span>32:11</span></div><div class="Vtx8Xc jrwKTb ovklQ"><span style="height:14px;line-height:14px;width:14px" class="z1asCe"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 5.83L15.17 9l1.41-1.41L12 3 7.41 7.59 8.83 9 12 5.83zm0 12.34L8.83 15l-1.41 1.41L12 21l4.59-4.59L15.17 15 12 18.17z"></path></svg></span></div></div></div></div></a><div class="fzUZNc"><div class="ITZIwc p4wth" style="-webkit-line-clamp:3">In this week's episode we're going to take a look at Microsoft's SharePoint online from The Beginner's perspective.</div></div></div><div class="ITCGwe"><div class="AZP49b" data-hveid="CAoQEQ"><div jscontroller="k6Mdie" jsaction="JLw8x:mRG2Ib" data-hveid="CAoQEg"><div jsname="n0dxQc" class="GGYY2b" data-dir="ltr" data-is-desktop="true"><div jsname="FIltkb" class="KMEEs" aria-expanded="fals
Source: chromecache_224.1.dr	String found in binary or memory: 1 year ago</cite></div></div></div></div><div class="csDOgf BCF2pd L48a4c"><div jscontroller="gOTY1" data-id="atritem-https://www.youtube.com/watch?v=n3jZRBHGAB0" jsdata="PFrTzf;_;A3q4bY" data-viewer-group="1" jsaction="rcuQ6b:npT2md;aevozb:T2P31d;vcOT6c:C6KsF;k7WJpc:beCLof;jH1Skf:sCDZjb"><div><div jsdata="l7Bhpb;_;A3q4cI" jscontroller="PbHo4e" jsshadow="" jsaction="rcuQ6b:npT2md;h5M12e;jGQF0b:kNqZ1c;" data-viewer-entrypoint="1" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ2esEegQINhAL"><div jsslot=""><div jsname="I3kE2c" class="MJ8UF iTPLzd rNSxBe eY4mx lUn2nc" style="position:absolute" aria-label="About this result" role="button" tabindex="0"><span jsname="czHhOd" class="D6lY4c mBswFe"><span jsname="Bil8Ae" class="xTFaxe z1asCe" style="height:18px;line-height:18px;width:18px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8c1.1 0 2-.9 2-2s-.9-2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg></span></span></div></div></div></div></div></div></div></div></div></div><div class="iHxmLe" jsshadow=""><a aria-label="How to change SharePoint Site Name and URL by Dougie Wood (MVP) on YouTube. Play on Google. 4:21. Jan 10, 2023" href="#" data-vll="" role="button" tabindex="0" data-hveid="CDYQDA" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ5KoOegQINhAM"><div class="gY2b2c" aria-hidden="true"><div class="AZJdrc JceRhc zGXzeb"><div jsname="zccVWc" class="uhHOwf BYbUcd" style="height:83px;width:148px"><img alt="" id="dimg_f_R7Z5v4G8aw1sQPyv3tsA4_15" src="data:image/gif;base64,R0lGODlhAQABAIAAAP///////yH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-deferred="1"></div><div class="Ylm8Fc YmeD8e"><svg height="32" width="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path class="MfcGr" d="M0 16C0 7.163 7.163 0 16 0s16 7.163 16 16-7.163 16-16 16S0 24.837 0 16Z"></path><path class="Nci3Ge" d="M13 10.92v10.16a1 1 0 0 0 1.573.819l7.257-5.08a1 1 0 0 0 0-1.638l-7.256-5.08a1 1 0 0 0-1.574.82Z"></path></svg></div><div class="kSFuOd rkqHyd" aria-hidden="true"><div class="c8rnLc flgn0c k1U36b zCaigb"><span>4:21</span></div><div class="Vtx8Xc jrwKTb ovklQ"><span style="height:14px;line-height:14px;width:14px" class="z1asCe"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 5.83L15.17 9l1.41-1.41L12 3 7.41 7.59 8.83 9 12 5.83zm0 12.34L8.83 15l-1.41 1.41L12 21l4.59-4.59L15.17 15 12 18.17z"></path></svg></span></div></div></div></div></a><div class="fzUZNc"><div class="ITZIwc p4wth" style="-webkit-line-clamp:3">In this video I'm not just going to show you how to change the name of your SharePoint online site I'm also going to show you how to change the site URL.</div></div></div><div class="ITCGwe"><div class="AZP49b" data-hveid="CDYQEQ"><div jscontroller="k6Mdie" jsaction="JLw8x:mRG2Ib" data-hveid="CDYQEg"><div jsname="n0dxQc" class="GGYY2b" data-dir="ltr" data-is-desktop="true"><div jsname="FIltkb" cl
Source: chromecache_224.1.dr	String found in binary or memory: 2 years ago</cite></div></div></div></div><div class="csDOgf BCF2pd L48a4c"><div jscontroller="gOTY1" data-id="atritem-https://www.youtube.com/watch?v=MW3orwpxY4c" jsdata="PFrTzf;_;A3q4bY" data-viewer-group="1" jsaction="rcuQ6b:npT2md;aevozb:T2P31d;vcOT6c:C6KsF;k7WJpc:beCLof;jH1Skf:sCDZjb"><div><div jsdata="l7Bhpb;_;A3q4cQ" jscontroller="PbHo4e" jsshadow="" jsaction="rcuQ6b:npT2md;h5M12e;jGQF0b:kNqZ1c;" data-viewer-entrypoint="1" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ2esEegQIPBAL"><div jsslot=""><div jsname="I3kE2c" class="MJ8UF iTPLzd rNSxBe eY4mx lUn2nc" style="position:absolute" aria-label="About this result" role="button" tabindex="0"><span jsname="czHhOd" class="D6lY4c mBswFe"><span jsname="Bil8Ae" class="xTFaxe z1asCe" style="height:18px;line-height:18px;width:18px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8c1.1 0 2-.9 2-2s-.9-2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg></span></span></div></div></div></div></div></div></div></div></div></div><div class="iHxmLe" jsshadow=""><a aria-label="How to Create SharePoint Document Library by Jonathan Edwards on YouTube. Play on Google. 11:05. May 9, 2022" href="#" data-vll="" role="button" tabindex="0" data-hveid="CDwQDA" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ5KoOegQIPBAM"><div class="gY2b2c" aria-hidden="true"><div class="AZJdrc JceRhc zGXzeb"><div jsname="zccVWc" class="uhHOwf BYbUcd" style="height:83px;width:148px"><img alt="" id="dimg_f_R7Z5v4G8aw1sQPyv3tsA4_19" src="data:image/gif;base64,R0lGODlhAQABAIAAAP///////yH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-deferred="1"></div><div class="Ylm8Fc YmeD8e"><svg height="32" width="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path class="MfcGr" d="M0 16C0 7.163 7.163 0 16 0s16 7.163 16 16-7.163 16-16 16S0 24.837 0 16Z"></path><path class="Nci3Ge" d="M13 10.92v10.16a1 1 0 0 0 1.573.819l7.257-5.08a1 1 0 0 0 0-1.638l-7.256-5.08a1 1 0 0 0-1.574.82Z"></path></svg></div><div class="kSFuOd rkqHyd" aria-hidden="true"><div class="c8rnLc flgn0c k1U36b zCaigb"><span>11:05</span></div><div class="Vtx8Xc jrwKTb ovklQ"><span style="height:14px;line-height:14px;width:14px" class="z1asCe"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 5.83L15.17 9l1.41-1.41L12 3 7.41 7.59 8.83 9 12 5.83zm0 12.34L8.83 15l-1.41 1.41L12 21l4.59-4.59L15.17 15 12 18.17z"></path></svg></span></div></div></div></div></a><div class="fzUZNc"><div class="ITZIwc p4wth" style="-webkit-line-clamp:3">I'm going to show you how to create your own sharepoint document library, how to assign permissions, how to migrate your old files and folders.</div></div></div><div class="ITCGwe"><div class="AZP49b" data-hveid="CDwQEQ"><div jscontroller="k6Mdie" jsaction="JLw8x:mRG2Ib" data-hveid="CDwQEg"><div jsname="n0dxQc" class="GGYY2b" data-dir="ltr" data-is-desktop="true"><div jsname="FIltkb" class="KMEEs
Source: chromecache_224.1.dr	String found in binary or memory: 9 months ago</cite></div></div></div></div><div class="csDOgf BCF2pd L48a4c"><div jscontroller="gOTY1" data-id="atritem-https://www.youtube.com/watch?v=_shebf5iJ3U" jsdata="PFrTzf;_;A3q4bY" data-viewer-group="1" jsaction="rcuQ6b:npT2md;aevozb:T2P31d;vcOT6c:C6KsF;k7WJpc:beCLof;jH1Skf:sCDZjb"><div><div jsdata="l7Bhpb;_;A3q4cM" jscontroller="PbHo4e" jsshadow="" jsaction="rcuQ6b:npT2md;h5M12e;jGQF0b:kNqZ1c;" data-viewer-entrypoint="1" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ2esEegQIOBAL"><div jsslot=""><div jsname="I3kE2c" class="MJ8UF iTPLzd rNSxBe eY4mx lUn2nc" style="position:absolute" aria-label="About this result" role="button" tabindex="0"><span jsname="czHhOd" class="D6lY4c mBswFe"><span jsname="Bil8Ae" class="xTFaxe z1asCe" style="height:18px;line-height:18px;width:18px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 8c1.1 0 2-.9 2-2s-.9-2-2-2-2 .9-2 2 .9 2 2 2zm0 2c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2zm0 6c-1.1 0-2 .9-2 2s.9 2 2 2 2-.9 2-2-.9-2-2-2z"></path></svg></span></span></div></div></div></div></div></div></div></div></div></div><div class="iHxmLe" jsshadow=""><a aria-label="SharePoint Online for Beginners by Andy Malone MVP on YouTube. Play on Google. 36:07. Mar 26, 2024" href="#" data-vll="" role="button" tabindex="0" data-hveid="CDgQDA" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQ5KoOegQIOBAM"><div class="gY2b2c" aria-hidden="true"><div class="AZJdrc JceRhc zGXzeb"><div jsname="zccVWc" class="uhHOwf BYbUcd" style="height:83px;width:148px"><img alt="" id="dimg_f_R7Z5v4G8aw1sQPyv3tsA4_17" src="data:image/gif;base64,R0lGODlhAQABAIAAAP///////yH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-deferred="1"></div><div class="Ylm8Fc YmeD8e"><svg height="32" width="32" viewBox="0 0 32 32" xmlns="http://www.w3.org/2000/svg"><path class="MfcGr" d="M0 16C0 7.163 7.163 0 16 0s16 7.163 16 16-7.163 16-16 16S0 24.837 0 16Z"></path><path class="Nci3Ge" d="M13 10.92v10.16a1 1 0 0 0 1.573.819l7.257-5.08a1 1 0 0 0 0-1.638l-7.256-5.08a1 1 0 0 0-1.574.82Z"></path></svg></div><div class="kSFuOd rkqHyd" aria-hidden="true"><div class="c8rnLc flgn0c k1U36b zCaigb"><span>36:07</span></div><div class="Vtx8Xc jrwKTb ovklQ"><span style="height:14px;line-height:14px;width:14px" class="z1asCe"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 5.83L15.17 9l1.41-1.41L12 3 7.41 7.59 8.83 9 12 5.83zm0 12.34L8.83 15l-1.41 1.41L12 21l4.59-4.59L15.17 15 12 18.17z"></path></svg></span></div></div></div></div></a><div class="fzUZNc"><div class="ITZIwc p4wth" style="-webkit-line-clamp:3">In this video we're going to take a look at Microsoft SharePoint online from scratch so everything that you need to know to get yourself up and running.</div></div></div><div class="ITCGwe"><div class="AZP49b" data-hveid="CDgQEQ"><div jscontroller="k6Mdie" jsaction="JLw8x:mRG2Ib" data-hveid="CDgQEg"><div jsname="n0dxQc" class="GGYY2b" data-dir="ltr" data-is-desktop="true"><div jsname="FIltkb" class="KMEEs
Source: chromecache_210.1.dr, chromecache_208.1.dr	String found in binary or memory: "1":"0"}`;_.Ic(c,d)}catch(d){a=(0,_.ad)`https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=0`,_.Ic(c,a)}return c};_.Vwc=function(a,b,c,d,e=!0,f=!1,g){c=Uwc(b,c,d,e,f,g);a.oa.set(b,c);return c};_.Wwc=class extends _.jp{constructor(){super();this.oa=new Map}yra(a){a.textContent="";const b=this.oa.get(a);b&&(this.oa.delete(a),b.then(c=>{c.destroy()},()=>{}))}};_.lp(_.Rwc,_.Wwc); equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: (g.Dq(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Dq(V,"www.youtube.com"),N=V.toString()):(V=XQ9(N),XY(V)&&(N=V));V=new g.v1(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: 0?"http":"https";this.Vn=H8((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)||"")||H8(this.iW)||this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"||this.D?(N=hm(N,d,gru),d!=="shortsaudiopivot"||this.G("web_player_shorts_audio_pivot_event_label")||(N="detailpage")):d&&(N="embedded");this.Wr=N;oQH();d=null;N=C?C.playerStyle:p.ps;X=g.W5(W$L,N);!N||X&&!this.D||(d=N);this.playerStyle=d;this.Y=g.W5(W$L,this.playerStyle);this.houseBrandUserStatus= equals www.youtube.com (Youtube)
Source: chromecache_224.1.dr	String found in binary or memory: <s>3D%</s></div></div></div></div></div></div><div class="MjjYud"><div class="A6K0A" data-rpos="6" id="aYxlAd"><div><div jsname="pKB8Bc" class="g PmEWq" jscontroller="O6Iu7d" jsshadow="true" style="box-shadow:none" jsaction="rcuQ6b: npT2md" data-hveid="CAoQAA"><div><div jsname="uFwVBb" class="BrXYbc"></div></div><div jsslot="1"><div><div jscontroller="rTuANe" data-ar="1.7778" data-cid="8f3647c7" data-curl="https://www.youtube.com/watch?v=cBe5nnnJbSQ" data-dsktp="1" data-eiv="1" data-esrvl="1" data-preloadapi="1" data-surl="https://www.youtube.com/watch?v=cBe5nnnJbSQ" data-tpvid="" data-vid="cBe5nnnJbSQ" data-vurl="" jsaction="h5M12e;clickmod:h5M12e;rcuQ6b:npT2md;"><div><div class="xe8e1b"><div><div class="b8lM7"><span jscontroller="msmzHf" jsaction="rcuQ6b:npT2md;PYDNKe:bLV6Bd;mLt3mc"><a jsname="UWckNb" class="zReHs" href="https://www.youtube.com/watch?v=cBe5nnnJbSQ" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAgKEAI" ping="/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https://www.youtube.com/watch%3Fv%3DcBe5nnnJbSQ&amp;ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAgKEAI"><h3 class="LC20lb MBeuO DKV0Md">SharePoint Online The Ultimate Beginners Guide 2023</h3><div class="notranslate HGLrXd iUh30 ojE3Fb"><div class="q0vns"><span class="H9lube"><div class="eqA2re NjwKYd Vwoesf" aria-hidden="true"><img class="XNo5Ab" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAcElEQVR4AWP4//8/RZh6BgCZAkDsAMUNWDFCXgDFACCV8J/B+D8pGKwHRAKRAUyQDEMMQAYEUGBAAsiABpwKHjz4/9/BAZ8BDXgNgIMNGyg04MABkg1AeCEgAK8XKA5EiqORooSELykXEJuUBz43AgAIA1ZhBoG9vwAAAABJRU5ErkJggg==" style="height:18px;width:18px" alt=""></div></span><div class="CA5RN"><div><span class="VuuXrf">YouTube&nbsp; equals www.youtube.com (Youtube)
Source: chromecache_224.1.dr	String found in binary or memory: <s>3D%</s></div></div></div></div></div></div><div class="MjjYud"><span class="oUAcPd" id="fld_f_R7Z5v4G8aw1sQPyv3tsA4_2" data-csim=""></span><script nonce="c82Wjx-xt5o4_11ATJ6RjQ">(function(){var id='fld_f_R7Z5v4G8aw1sQPyv3tsA4_2';document.getElementById(id).setAttribute("lta",Date.now());})();</script><script nonce="c82Wjx-xt5o4_11ATJ6RjQ">(function(){var eid='fld_f_R7Z5v4G8aw1sQPyv3tsA4_2';var a=Date.now(),b=document.getElementById(eid);if(b){var c=b.getAttribute("lta");google.c.maft(c?Number(c):a,b)};})();</script><style>@media (max-width:1163.98px){.YNk70c.NbTBrb{grid-template-columns:8px repeat(20,36px) minmax(0,230px)}}.ULSxyf{margin-bottom:44px}.RTaUke{display:none;opacity:0}.oIk2Cb{margin:0}.y6Uyqe{padding:6px 0 0 0;width:100%;}.kfsfbe.kfsfbe{padding:0 0 8px}.EIaa9b{display:flex;column-gap:16px;flex-wrap:wrap}.AJLUJb{display:flex;flex:1;flex-direction:column;min-width:233px}.b2Rnsc{display:flex;height:52px;margin:4px 0 4px 0}.vIifob{align-items:center;background:#f7f8f9;border-radius:8px;justify-content:center;padding:0 8px 0 16px;}.b2Rnsc:hover{text-decoration:underline}.qR29te{display:flex;flex-direction:column;flex-grow:1;min-width:0}.B2VR9{display:flex;align-items:center}.ggLgoc{display:block}.wyccme{min-width:0;display:flex;flex-direction:column;justify-content:center;flex-grow:1;overflow:hidden}.ngTNl{text-decoration:none}.ngTNl:hover{text-decoration:none}.ngTNl:focus-visible{outline-color:var(--Pa8Wlb);outline-offset:2px;outline-width:2px}.oatEtb{align-items:center;display:flex;gap:12px;justify-content:space-between;padding-right:12px;width:100%}.mtv5bd{display:flex;height:100%;flex-direction:column;max-width:100%}.dg6jd{color:#1f1f1f;-webkit-box-orient:vertical;-webkit-line-clamp:2;display:-webkit-box;overflow:hidden;overflow-wrap:break-word;font-size:16px;}.dg6jd span{font-weight:700;}.DxHbyd{background-color:transparent;align-items:center;border-radius:50%;display:flex;height:20px;justify-content:center;padding-left:9px;padding-right:7px;width:20px}.yiwlZe{color:#747878;display:block}.XbQ34c{margin-left:auto}.FIfWIe{margin-left:4px}.XC18Gb{margin-top:8px}.oYQBg{margin-top:4px}.GmoL0c{margin-right:12px}.CJHX3e{padding-bottom:12px;padding-top:12px}.EXH1Ce{position:relative}.ClPXac.Pqkn2e{line-height:normal}.AaVjTc a:link{display:block;color:#4285f4;font-weight:normal}.AaVjTc td{padding:0;text-align:center}.AaVjTc{margin:30px auto 30px}</style><div class="A6K0A" data-rpos="12" id="RqkVPd"><div><div jsname="pKB8Bc" class="g PmEWq" jscontroller="O6Iu7d" jsshadow="true" style="box-shadow:none" jsaction="rcuQ6b: npT2md" data-hveid="CDgQAA"><div><div jsname="uFwVBb" class="BrXYbc"></div></div><div jsslot="1"><div><div jscontroller="rTuANe" data-ar="1.7778" data-cid="6503ed13" data-curl="https://www.youtube.com/watch?v=_shebf5iJ3U" data-dsktp="1" data-eiv="1" data-esrvl="1" data-preloadapi="1" data-surl="https://www.youtube.com/watch?v=_shebf5iJ3U" data-tpvid="" data-vid="_shebf5iJ3U" data-vurl="" jsaction="h5M12e;clickmod:h5M12e;rcuQ6b
Source: chromecache_224.1.dr	String found in binary or memory: <s>3D%</s></div></div></div><div style="display:none" id="evlb_f_R7Z5v4G8aw1sQPyv3tsA4_7"></div></div></div></div></div></div></div></div><div class="hlcw0c"><div class="MjjYud"><div class="A6K0A" data-rpos="16" id="IvoNcc"><div><div jsname="pKB8Bc" class="g PmEWq" jscontroller="O6Iu7d" jsshadow="true" style="box-shadow:none" jsaction="rcuQ6b: npT2md" data-hveid="CDYQAA"><div><div jsname="uFwVBb" class="BrXYbc"></div></div><div jsslot="1"><div><div jscontroller="rTuANe" data-ar="1.9120" data-cid="d05a478e" data-curl="https://www.youtube.com/watch?v=n3jZRBHGAB0" data-dsktp="1" data-eiv="1" data-esrvl="1" data-preloadapi="1" data-surl="https://www.youtube.com/watch?v=n3jZRBHGAB0" data-tpvid="" data-vid="n3jZRBHGAB0" data-vurl="" jsaction="h5M12e;clickmod:h5M12e;rcuQ6b:npT2md;"><div><div class="xe8e1b"><div><div class="b8lM7"><span jscontroller="msmzHf" jsaction="rcuQ6b:npT2md;PYDNKe:bLV6Bd;mLt3mc"><a jsname="UWckNb" class="zReHs" href="https://www.youtube.com/watch?v=n3jZRBHGAB0" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg2EAI" ping="/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https://www.youtube.com/watch%3Fv%3Dn3jZRBHGAB0&amp;ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg2EAI"><h3 class="LC20lb MBeuO DKV0Md">How to change SharePoint Site Name and URL</h3><div class="notranslate HGLrXd iUh30 ojE3Fb"><div class="q0vns"><span class="H9lube"><div class="eqA2re NjwKYd Vwoesf" aria-hidden="true"><img class="XNo5Ab" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAcElEQVR4AWP4//8/RZh6BgCZAkDsAMUNWDFCXgDFACCV8J/B+D8pGKwHRAKRAUyQDEMMQAYEUGBAAsiABpwKHjz4/9/BAZ8BDXgNgIMNGyg04MABkg1AeCEgAK8XKA5EiqORooSELykXEJuUBz43AgAIA1ZhBoG9vwAAAABJRU5ErkJggg==" style="height:18px;width:18px" alt=""></div></span><div class="CA5RN"><div><span class="VuuXrf">YouTube&nbsp; equals www.youtube.com (Youtube)
Source: chromecache_224.1.dr	String found in binary or memory: <s>3D%</s></div></div></div><div style="display:none" id="evlb_f_R7Z5v4G8aw1sQPyv3tsA4_9"></div></div></div></div></div></div></div></div><div class="MjjYud"><div class="A6K0A" data-rpos="14" id="eyBVic"><div><div jsname="pKB8Bc" class="g PmEWq" jscontroller="O6Iu7d" jsshadow="true" style="box-shadow:none" jsaction="rcuQ6b: npT2md" data-hveid="CDwQAA"><div><div jsname="uFwVBb" class="BrXYbc"></div></div><div jsslot="1"><div><div jscontroller="rTuANe" data-ar="1.7778" data-cid="279ca229" data-curl="https://www.youtube.com/watch?v=MW3orwpxY4c" data-dsktp="1" data-eiv="1" data-esrvl="1" data-preloadapi="1" data-surl="https://www.youtube.com/watch?v=MW3orwpxY4c" data-tpvid="" data-vid="MW3orwpxY4c" data-vurl="" jsaction="h5M12e;clickmod:h5M12e;rcuQ6b:npT2md;"><div><div class="xe8e1b"><div><div class="b8lM7"><span jscontroller="msmzHf" jsaction="rcuQ6b:npT2md;PYDNKe:bLV6Bd;mLt3mc"><a jsname="UWckNb" class="zReHs" href="https://www.youtube.com/watch?v=MW3orwpxY4c" data-ved="2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg8EAI" ping="/url?sa=t&amp;source=web&amp;rct=j&amp;opi=89978449&amp;url=https://www.youtube.com/watch%3Fv%3DMW3orwpxY4c&amp;ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg8EAI"><h3 class="LC20lb MBeuO DKV0Md">How to Create SharePoint Document Library</h3><div class="notranslate HGLrXd iUh30 ojE3Fb"><div class="q0vns"><span class="H9lube"><div class="eqA2re NjwKYd Vwoesf" aria-hidden="true"><img class="XNo5Ab" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAAAcElEQVR4AWP4//8/RZh6BgCZAkDsAMUNWDFCXgDFACCV8J/B+D8pGKwHRAKRAUyQDEMMQAYEUGBAAsiABpwKHjz4/9/BAZ8BDXgNgIMNGyg04MABkg1AeCEgAK8XKA5EiqORooSELykXEJuUBz43AgAIA1ZhBoG9vwAAAABJRU5ErkJggg==" style="height:18px;width:18px" alt=""></div></span><div class="CA5RN"><div><span class="VuuXrf">YouTube&nbsp; equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: C=this.api.K();p=this.api.getVideoData();var V="";C.V||(C=g.zM(C),C.indexOf("www.")===0&&(C=C.substring(4)),V=g.t_(p)?"Watch on YouTube Music":C==="youtube.com"?"Watch on YouTube":g.Ks("Watch on $WEBSITE",{WEBSITE:C}));this.updateValue("title",V)}; equals www.youtube.com (Youtube)
Source: chromecache_221.1.dr	String found in binary or memory: GTy=function(p,C){if(!p.T["0"]){var V=new WB("0","fakesb",{video:new wO(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new zn(new g.v1("http://www.youtube.com/videoplayback"),V,"fake"):new VM(new g.v1("http://www.youtube.com/videoplayback"),V,new D0(0,0),new D0(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_210.1.dr, chromecache_208.1.dr	String found in binary or memory: Twc=function(a,b){const c=_.Sm("IFRAME");c.setAttribute("allowfullscreen",a?"1":"0");c.setAttribute("allow",a?"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope":"autoplay; clipboard-write; encrypted-media");c.setAttribute("frameborder","0");c.setAttribute("width","100%");c.setAttribute("height","100%");c.setAttribute("referrerpolicy","unsafe-url");c.setAttribute("style",b);try{const d=(0,_.ad)`https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=${a? equals www.youtube.com (Youtube)
Source: chromecache_221.1.dr	String found in binary or memory: YI.prototype.Wd=function(){return this.w7.l()};var Vry=(new Date).getTime();var dkY="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ihu=/\bocr\b/;var soV=/(?:\[|%5B)([a-zA-Z0-9_]+)(?:\]|%5D)/g;var ZhY=0,uLH=0,Uk1=0;var e0=null,Po=!1,vcy=1,LX=Symbol("SIGNAL"),gE={version:0,lIa:0,d2:!1,F4:void 0,Qw:void 0,mF:void 0,KG:0,uf:void 0,Kg:void 0,bH:!1,pE:!1,kind:"unknown",zbV:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_210.1.dr, chromecache_208.1.dr	String found in binary or memory: cBc=function(a,b){a.Wa=!1;a.Aa=!0;let c=0;if(b&&b.JW){var d=b.JW.id;a.aspectRatio=b.JW.aspectRatio||1.778;c=b.tF?b.tF:0;d&&d!==a.videoId&&(a.videoId&&YAc(a),a.videoId=d)}if(b==null?0:b.G0)a.G0=b.G0;if(a.videoId)if(!a.Bn)a.Pa.promise.then(f=>{f.seekTo(c);f.playVideo()});else if(!a.Qa){a.Qa=!0;var e=!1;a.ob&&a.Ea&&!a.Rb&&(b=`{"event":"command","func":"loadVideoById","args":["${a.videoId}","${c}"],"id":1000,"channel":"widget"}`,d=a.Ea.contentWindow,d!==null&&(d.postMessage(b,"https://www.youtube.com"), equals www.youtube.com (Youtube)
Source: chromecache_210.1.dr, chromecache_208.1.dr	String found in binary or memory: delete Nwc().youTubeIframeAPIInitialized;delete Nwc().youTubeIframeAPILoadingCallbacks})})};Pwc=(0,_.ad)`//www.youtube.com/iframe_api?version=3`; equals www.youtube.com (Youtube)
Source: chromecache_167.1.dr, chromecache_187.1.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=qa(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b||{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&tb();c=a.tagName.toLowerCase()==="iframe";b.host||(b.host=c?mb(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_167.1.dr, chromecache_187.1.dr	String found in binary or memory: function tb(){var a=new rb,b=["https://www.youtube.com"];b=b===void 0?qb:b;oa(function(c){switch(c.g){case 1:return C(c,sb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return oa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: g.GM=function(p){var C=g.zM(p);Ha9.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_221.1.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.zM(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.yj(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),BW&&(p=LGj())&&(C.ebc=p));return g.GD(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: g.zM=function(p){p=AR(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_221.1.dr	String found in binary or memory: p))):this.api.K().G("enable_adb_handling_in_sabr")&&V==="BROWSER_OR_EXTENSION_ERROR"&&!N.Y?(N=N.hostLanguage,p="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",N&&(p=g.GD(p,{hl:N})),this.Jc(j4(this,"BROWSER_OR_EXTENSION_ERROR",p))):this.Jc(g.pZ(p.errorMessage)):this.Jc(j4(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(p=N.hostLanguage,V="//support.google.com/youtube/?p=player_error1",p&&(V=g.GD(V, equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: p.details.rc!=="429"?p.errorCode==="ump.spsrejectfailure"&&(H="HTML5_SPS_UMP_STATUS_REJECTED"):(H="TOO_MANY_REQUESTS",X="6");this.Ta.a_(p.errorCode,p.severity,H,yu(p.details),X)}else this.Ta.publish("nonfatalerror",p),N=/^pp/.test(this.videoData.clientPlaybackNonce),this.oN(p.errorCode,p.details),N&&p.errorCode==="manifest.net.connect"&&(p="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ip)(),kv(p,"manifest",function(d){C.Y=!0;C.k_("pathprobe",d)},function(d){C.oN(d.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_221.1.dr	String found in binary or memory: this.KS=!this.va;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(C==null||!C.deviceIsAudioOnly);this.I6=sB(this.I6,p.ismb);this.MR?(M=p.vss_host||"s.youtube.com",M==="s.youtube.com"&&(M=AR(this.Vn)||"www.youtube.com")):M="video.google.com";this.jS=M;og(this,p,!0);this.vr=new CI;g.R(this,this.vr);T=C?C.innertubeApiKey:a_("",p.innertube_api_key);c=C?C.innertubeApiVersion:a_("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:a_("",p.innertube_context_client_version);T=g.pO("INNERTUBE_API_KEY")|| equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)||(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV|STB|GAME|OTT|ATV|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(Wb(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.o5(this.C)?Az(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_204.1.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/03dbdfab\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: var uk={};var fmP={YE:[{Rn:/Unable to load player module/,weight:20},{Rn:/Failed to fetch/,weight:500},{Rn:/XHR API fetch failed/,weight:10},{Rn:/JSON parsing failed after XHR fetch/,weight:10},{Rn:/Retrying OnePlatform request/,weight:10},{Rn:/CSN Missing or undefined during playback association/,weight:100},{Rn:/Non-recoverable error. Do not retry./,weight:0},{Rn:/Internal Error. Retry with an exponential backoff./,weight:0},{Rn:/API disabled by application./,weight:0}],y8:[{callback:cu9,weight:500}]};var fPX=/[&\?]action_proxy=1/,UJs=/[&\?]token=([\w-]*)/,OLY=/[&\?]video_id=([\w-]*)/,yuQ=/[&\?]index=([\d-]*)/,qqv=/[&\?]m_pos_ms=([\d-]*)/,bLy=/[&\?]vvt=([\w-]*)/,mJV="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),IPH="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),SqX={android:"ANDROID", equals www.youtube.com (Youtube)

Performs DNS lookups

Source: global traffic	DNS traffic detected: DNS query: hacdct-my.sharepoint.com
Source: global traffic	DNS traffic detected: DNS query: nam12.safelinks.protection.outlook.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: dns-tunnel-check.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: tunnel.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: id.google.com

Posts data to webserver

Source: unknown

HTTP traffic detected: POST /gen_204?s=web&t=aft&atyp=csi&ei=f_R7Z5v4G8aw1sQPyv3tsA4&rt=wsrt.1245,aft.477,afts.477,frts.440,frvt.440,hst.209,prt.525,sct.398&frtp=435&imn=15&ima=0&imad=0&imac=1&wh=907&aft=1&aftp=1577&opi=89978449&dt=&ts=300 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CJC2yQEIprbJAQipncoBCLf3ygEIk6HLAQiFoM0BCNy9zQEIksrNAQi5ys0BCLbLzQEI6dLNAQiK080BCMHUzQEIz9bNAQjj1s0BCI7XzQEIp9jNAQi62M0BCPnA1BUYuL/NARj2yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AZ6Zc-UoAyBkJXpmbyVWiHJw_Zw7b9U2wO3lE3TS75rDzAkf7vD7A7GhCw; NID=520=TJnT7YCNvdY5RbGkO_8b7_HZvMQykWAEbCCWK59MYs4IAnGSv9-Q-1ooJbdR11IUniJPANSD4xxmaW6q_FXhY0cQ0X2Tgh-wVgJMk4bRHdXLqCGY3tzx1KMha6iPJyalEhvysnOB3Urhq3K8QZw1wW0Ep7vvNk7uuSPeV4Vw3hwNyPHHVO0PGYUf5hHhg3wBE1NenqXvfw

Tries to download or post to a non-existing HTTP route (HTTP/1.1 404 Not Found / 503 Service Unavailable / 403 Forbidden)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}Permissions-Policy: unload=()Date: Mon, 06 Jan 2025 15:19:36 GMTServer: gwsContent-Length: 3371X-XSS-Protection: 0X-Frame-Options: SAMEORIGINAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}Permissions-Policy: unload=()Date: Mon, 06 Jan 2025 15:19:38 GMTServer: gwsContent-Length: 3371X-XSS-Protection: 0X-Frame-Options: SAMEORIGINAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}Permissions-Policy: unload=()Date: Mon, 06 Jan 2025 15:19:39 GMTServer: gwsContent-Length: 3371X-XSS-Protection: 0X-Frame-Options: SAMEORIGINAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}Permissions-Policy: unload=()Date: Mon, 06 Jan 2025 15:20:34 GMTServer: gwsContent-Length: 3399X-XSS-Protection: 0X-Frame-Options: SAMEORIGINAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}Permissions-Policy: unload=()Date: Mon, 06 Jan 2025 15:20:36 GMTServer: gwsContent-Length: 3399X-XSS-Protection: 0X-Frame-Options: SAMEORIGINAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundContent-Type: text/html; charset=UTF-8Strict-Transport-Security: max-age=31536000Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}Permissions-Policy: unload=()Date: Mon, 06 Jan 2025 15:20:38 GMTServer: gwsContent-Length: 3399X-XSS-Protection: 0X-Frame-Options: SAMEORIGINAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

URLs found in memory or binary data

Source: chromecache_224.1.dr, chromecache_181.1.dr	String found in binary or memory: http://schema.org/SearchResultsPage
Source: chromecache_158.1.dr, chromecache_197.1.dr, chromecache_221.1.dr, chromecache_176.1.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_142.1.dr, chromecache_202.1.dr, chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_221.1.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_147.1.dr, chromecache_192.1.dr, chromecache_226.1.dr, chromecache_148.1.dr	String found in binary or memory: https://cda-push-dev.sandbox.googleapis.com/upload/
Source: chromecache_148.1.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_167.1.dr, chromecache_187.1.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_147.1.dr, chromecache_192.1.dr, chromecache_226.1.dr, chromecache_148.1.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_158.1.dr, chromecache_197.1.dr, chromecache_221.1.dr, chromecache_176.1.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_181.1.dr, chromecache_216.1.dr, chromecache_195.1.dr	String found in binary or memory: https://hacdct-my.sharepoint.com%2F%3Af%3A%2Fg%2Fpersonal%2Fdmarra_hacdct_org%2FEl0CfhNMVMNNuzPj6QGn
Source: chromecache_189.1.dr	String found in binary or memory: https://hacdct-my.sharepoint.com/:f:/g/personal/dmarra_hacdct_org/El0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/about_us/index.php
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/about_us/index.php&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gIoA3oECBoQBA
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/job_opportunities/index.php
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/job_opportunities/index.php&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gIoAXoECBoQ
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/residents/ffr.php
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/residents/ffr.php&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gIoAHoECBoQAQ
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/residents/ffr.php&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQFnoECBYQAQ
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/wait_list_information/contact_us.php
Source: chromecache_181.1.dr	String found in binary or memory: https://hacdct.org/wait_list_information/contact_us.php&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gI
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_207.1.dr, chromecache_234.1.dr, chromecache_133.1.dr, chromecache_156.1.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_129.1.dr	String found in binary or memory: https://lensfrontend-pa.clients6.google.com/v1/crupload
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://lensfrontend-pa.clients6.google.com/v1/gsessionid
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_189.1.dr	String found in binary or memory: https://nam12.safelinks.protection.outlook.com
Source: chromecache_141.1.dr, chromecache_161.1.dr	String found in binary or memory: https://play.google.com
Source: chromecache_176.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQFnoECB0QAQ
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/housing/applications
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/housing/applications&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gIoAXoE
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/housing/programs
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/housing/programs&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gIoA3oECB4Q
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/main/contact-us
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/main/contact-us&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQ0gIoAHoECB4QA
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/programs/eviction-prevention-fund
Source: chromecache_181.1.dr	String found in binary or memory: https://portal.ct.gov/doh/doh/programs/eviction-prevention-fund&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6
Source: chromecache_147.1.dr, chromecache_192.1.dr, chromecache_226.1.dr, chromecache_148.1.dr	String found in binary or memory: https://push.clients6.google.com/upload/
Source: chromecache_221.1.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_227.1.dr, chromecache_178.1.dr	String found in binary or memory: https://ssl.gstatic.com/images/icons/material/system/1x/done_black_16dp.png)
Source: chromecache_227.1.dr, chromecache_178.1.dr	String found in binary or memory: https://ssl.gstatic.com/images/icons/material/system/1x/done_white_16dp.png)
Source: chromecache_227.1.dr, chromecache_178.1.dr	String found in binary or memory: https://ssl.gstatic.com/ui/v1/menu/checkmark2-light.png)
Source: chromecache_227.1.dr, chromecache_178.1.dr	String found in binary or memory: https://ssl.gstatic.com/ui/v1/menu/checkmark2.png)
Source: chromecache_141.1.dr, chromecache_161.1.dr	String found in binary or memory: https://support.google.com
Source: chromecache_147.1.dr, chromecache_192.1.dr, chromecache_226.1.dr, chromecache_148.1.dr	String found in binary or memory: https://support.google.com/$
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_221.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_181.1.dr	String found in binary or memory: https://www.danbury-ct.gov
Source: chromecache_181.1.dr	String found in binary or memory: https://www.danbury-ct.gov/177/Housing-Authority
Source: chromecache_181.1.dr	String found in binary or memory: https://www.danbury-ct.gov/177/Housing-Authority&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQFnoECBcQAQ
Source: chromecache_181.1.dr	String found in binary or memory: https://www.danbury-ct.gov/219/Housing-Program
Source: chromecache_181.1.dr	String found in binary or memory: https://www.danbury-ct.gov/219/Housing-Program&ved=2ahUKEwivi6nZsuGKAxU71wIHHc6qAAIQFnoECBwQAQ
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://www.google.
Source: chromecache_142.1.dr, chromecache_167.1.dr, chromecache_202.1.dr, chromecache_141.1.dr, chromecache_187.1.dr, chromecache_161.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://www.google.com/interests/saved
Source: chromecache_131.1.dr, chromecache_129.1.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_224.1.dr, chromecache_181.1.dr	String found in binary or memory: https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=5
Source: chromecache_147.1.dr, chromecache_192.1.dr, chromecache_226.1.dr, chromecache_148.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_141.1.dr, chromecache_161.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_api.js
Source: chromecache_224.1.dr, chromecache_181.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk
Source: chromecache_224.1.dr, chromecache_181.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/conversion/16521530460/?gad_source=1&adview_type=3
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_147.1.dr, chromecache_192.1.dr, chromecache_226.1.dr, chromecache_148.1.dr	String found in binary or memory: https://www.googleapis.com/language/translate/v2
Source: chromecache_207.1.dr, chromecache_234.1.dr, chromecache_133.1.dr, chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/
Source: chromecache_162.1.dr, chromecache_155.1.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_142.1.dr, chromecache_202.1.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_148.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/$
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_224.1.dr	String found in binary or memory: https://www.reddit.com/r/Office365/comments/1egh2cv/excel_sharepoint_this_content_presents_a/
Source: chromecache_187.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_208.1.dr	String found in binary or memory: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_mu
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch%3Fv%3DMW3orwpxY4c&ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg8EAI
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch%3Fv%3D_shebf5iJ3U&ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg4EAI
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch%3Fv%3DcBe5nnnJbSQ&ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAgKEAI
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch%3Fv%3Dn3jZRBHGAB0&ved=2ahUKEwjbs_e7suGKAxVGmJUCHcp-G-YQtwJ6BAg2EAI
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=MW3orwpxY4c
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=_shebf5iJ3U
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=cBe5nnnJbSQ
Source: chromecache_224.1.dr	String found in binary or memory: https://www.youtube.com/watch?v=n3jZRBHGAB0
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_221.1.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_197.1.dr, chromecache_221.1.dr	String found in binary or memory: https://yurt.corp.google.com

Uses HTTPS

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

System Summary

Classification label

Source: classification engine

Classification label: mal48.phis.win@20/175@41/19

Creates files inside the user directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Spawns processes

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1932,i,18418441677585115875,6240014075560709213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://hacdct-my.sharepoint.com/:f:/g/personal/dmarra_hacdct_org/El0CfhNMVMNNuzPj6QGnrSQBywVLNW96w_XrX10UdRlfmQ?email=dhodder%40haigroup.com&e=d37USF&xsdata=MDV8MDJ8am1ja2lubGV5QGhhaWdyb3VwLmNvbXwyYzYxNmM3ZDhlNmU0YWM5MDJlMjA4ZGQyZTYzYjFmMnw4MjgxNWI4YzM3NzU0NTk5OTdjNzJiODc1MjhlNmY4M3wwfDB8NjM4NzE3NzMyNjY3MjIxNDQzfFVua25vd258VFdGcGJHWnNiM2Q4ZXlKRmJYQjBlVTFoY0draU9uUnlkV1VzSWxZaU9pSXdMakF1TURBd01DSXNJbEFpT2lKWGFXNHpNaUlzSWtGT0lqb2lUV0ZwYkNJc0lsZFVJam95ZlE9PXw0MDAwfHx8&sdata=bXM5KzduUjdVc3RFaFJsU1ZBR1d1enMxT3I3VitIdmc4MUlhZ25WT3dmWT0%3d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1932,i,18418441677585115875,6240014075560709213,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Windows shortcut file (LNK) contains relative path

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Found graphical window changes (likely an installer)

Source: Window Recorder

Window detected: More than 3 window changes detected

Binary contains paths to debug symbols

Source:	Binary string: methodName:"replaceState",Uh:b.Aa(),Be:{serviceName:"InternalHistory",methodName:"replaceState"}})})}};_.lp(_.Ecb,_.Fcb);var Gcb=_.Xt("on8eSc",[_.$t]);_.Hcb=_.w("KtzSQe",[Gcb]);_.Icb=_.w("okIx8");var Jcb=_.w("T9y5Dd",[]);_.Kcb=_.w("nKPLpc",[Jcb]);_.Lcb=_.w("FM5QJe",[Jcb]);_.Mcb=_.w("H8cOfd",[_.dbb]);_.Ncb=_.w("ga7Xpd",[_.Mcb]);_.Ocb=_.w("XMyrsd");_.Pcb=_.w("So1Lae");_.Qcb=_.w("ZZdEzd");_.Rcb=_.w("rMFO0e");_.Scb=_.w("rsp5jc");_.Tcb=_.w("ZodfDf");_.Ucb=_.w("jKe9bb");_.Vcb=_.w("Ge0Dib");_.Wcb=_.w("mOGWZd");var Xcb=_.Xt("J4kevb",[_.$t]);_.Ycb=_.w("RxAgNb",[Xcb]);_.Zcb=_.w("tNN8v",[_.hbb]);_.$cb=_.w("f0Cybe",[_.Zcb]);_.adb=_.w("zV9jQc");var bdb=_.Xt("oqSlAb",[_.$t]);_.cdb=_.w("A0Cs1d",[bdb]);_.ddb=_.w("XAgw7b");var edb=_.Xt("XY4yyb",[_.$t]);_.fdb=_.w("CUwjff",[edb]);_.gdb=_.w("DcDOMc");var hdb=_.Xt("n7heyf",[_.$t]);_.idb=_.w("Vb53Zc",[hdb]);_.jdb=_.w("WKbkM");_.kdb=_.w("rkiRkd",[]);_.ldb=_.w("k4Xo8b",[]);_.mdb=_.w("OTUSPb",[_.ldb]);_.ndb=_.w("t1pfrb",[]);_.odb=_.w("kh94Oc");_.pdb=_.w("XXWQib",[]);_.qdb=_.w("JJYdTe",[_.hbb]);_.rdb=_.w("lggbh",[]);_.sdb=_.w("yqmrof",[_.As,_.$t]);_.tdb=_.w("gKD90c",[]);_.udb=_.w("lHpQtd");_.vdb=_.w("kKcI7c");_.wdb=_.w("hbbXIf");_.xdb=_.w("bM2W5e");_.ydb=_.w("Q7BaEe",[]);_.lp(_.ydb,class extends _.jp{isAvailable(){const a=_.du("agsa_ext");a&&_.ah("InternalHistory");return a}G_(){return this.isAvailable()}back(){_.cu({serviceName:"agsa_ext",methodName:"goBack",Be:{serviceName:"InternalHistory",methodName:"back"},qO:!1});return Promise.resolve(void 0)}dda(){return!1}forward(){return _.ai("InternalHistory","forward")}G$(){return!1}go(){return _.ai("InternalHistory","go")}I$(){return!1}pushState(){return _.ai("InternalHistory","pushState")}replaceState(){return _.ai("InternalHistory", source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: _.qFb=function(a,b,c,d){if(!_.oFb(b))return null;var e=b.pdb,f=b.Ne,g=b.Kf,h=b.p6;e&&!e.build().length&&(e=void 0);g==void 0?g=[]:g instanceof _.yg&&(g=[g]);const k=new _.xh;h=h||new _.gh;const m=new _.Awa;var n=new _.zd,r=a.Da||(a.Da=_.gm(_.Tc("Yllh3e"),_.Ad));_.Qb(n,_.Ad,1,r);_.OUa(m,n);b=b.MYa||null;e?m.Aa(_.ita(e.Ba)):(n=_.nUa++,m.Aa(_.ita(n)),f&&(a.Ca=n));e&&(e=e.build(),_.yh(m,2,e),c?g.length||(g=[new _.yg(new _.kta(0),3)]):a.Ca&&!g.length&&_.OUa(m,_.ita(a.Ca)),f||_.zwa(k,5));f&&(a=f.fba,a instanceof source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: var XGb,YGb;_.WGb=function(a,b,c){return _.zg(_.lta(a),b,c)};XGb=class{constructor(a,b,c,d,e){this.oa=a;this.Ne=b;this.Kf=c;this.p6=d;this.MYa=e}};YGb=class{constructor(a,b){this.output=a;this.oa=b}};var ZGb,bHb;ZGb=function(a,b){if(!_.oFb(b))return!1;b.pdb&&b.pdb.build().length>0&&!_.nFb(b)&&(b.Kf=a.La);return a.Ja.logEvent(b,!0)};bHb=function(a,b,c={}){c=_.$Gb(c);return _.aHb(a,b,c)};_.cHb=function(a,b){return ZGb(a,{pdb:b.oa,Ne:b.Ne,Kf:b.Kf,p6:b.p6,MYa:b.MYa})};_.$Gb=function({Ne:a,Kf:b,p6:c,MYa:d}={}){return new XGb(new _.DUa,a,b,c,d)};_.aHb=function(a,b,c){const d=_.qVa(_.og(_.Usa),c.oa);a.oa=!0;try{const e=b();return new YGb(e,c)}finally{a.oa=!1,_.qVa(_.og(_.Usa),d)}}; source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: _.nFb=function(a){return a.Kf!=void 0&&(a.Kf instanceof _.yg||!!a.Kf.length)};_.oFb=function(a){if(a.pdb&&a.pdb.build().length>0||a.Ne||a.MYa)a=!0;else{var b;if(b=_.nFb(a))a=_.$Eb(a.Kf),b=!(a.length==1&&a[0].dW==3);a=b}return a}; source: chromecache_131.1.dr, chromecache_129.1.dr
Source:	Binary string: b,c=""){this.oa.isAvailable()?this.oa.I$()?this.oa.pushState(a,b,c):this.window.history.pushState(a,b,c):this.window.history.pushState(a,b,c)}replaceState(a,b,c=""){this.oa.isAvailable()?this.oa.I$()?this.oa.replaceState(a,b,c):this.window.history.replaceState(a,b,c):this.window.history.replaceState(a,b,c)}state(){return this.window.history.state}getCurrentUrl(){return this.window.location.href}};_.lp(_.Kdb,_.Ldb);var Mdb=class extends _.jp{isAvailable(){return!1}G_(){return!1}dda(){return!1}G$(){return!1}I$(){return!1}back(){return _.ai("InternalHistory","back")}forward(){return _.ai("InternalHistory","forward")}go(){return _.ai("InternalHistory","go")}pushState(){return _.ai("InternalHistory","pushState")}replaceState(){return _.ai("InternalHistory","replaceState")}};_.lp(I5a,Mdb);_.Ndb=_.qAa;var Odb=_.Xt("fvjcPb",[_.$t]);_.Pdb=_.w("US1EU",[Odb]);_.Qdb=_.w("BgyPPc",[Ubb]);_.Rdb=_.w("UBGcdd",[Wbb]);_.Sdb=_.w("eSFC5c");_.Tdb=_.w("B6b85");_.Udb=_.w("pPxdAd");_.Vdb=_.w("TPCh7b");_.Wdb=_.w("NsiCRb");_.Xdb=_.w("BkiHtd");_.Ydb=_.w("K6ZEbf");_.Zdb=_.w("TwdwWc",[]);_.$db=_.w("C0JoAb");_.aeb=_.w("R8gt1");_.beb=_.w("yvBIXc");_.ceb=_.w("hwYI4c",[ccb]);_.deb=_.w("GTaNlc");_.eeb=_.w("g6ZUob");_.feb=_.w("xkctJ");_.geb=_.w("vo3XM");_.heb=_.w("YgAQTc",[]);_.ieb=_.w("dbr2Mc");_.jeb=_.w("krRYtf");_.keb=_.w("yWCO4c");_.leb=_.w("nVG46b");_.meb=_.w("gsJLOc",[]);_.neb=_.w("G29HYe",[S8a]);_.oeb=_.w("h4qzS",[rcb]);var peb=_.Xt("oD0wqf",[_.$t]);_.qeb=_.w("B2egec",[peb]);_.reb=_.w("YhmRB");_.seb=_.w("wciyUe",[]);_.teb=_.w("Il1M4b");_.ueb=_.w("vWfZ8c",[Gcb]);_.veb=_.w("KRDUUb");_.web=_.w("hQ97re");_.xeb=_.w("iK2sb");_.yeb=_.w("soVptf");_.zeb=_.w("YeKaq");_.Aeb=_.w("Odo3Od");_.Beb=_.w("d7NTy");_.Ceb=_.w("VQ7Yuf");_.Deb=_.w("M0VQbd");_.Eeb=_.w("dhjipe",[Xcb]);_.Feb=_.w("lBp0",[_.hbb]);_.Geb=_.w("CJRYDf",[_.Tt]);_.Heb=_.w("Z8Pdh");_.Ieb=_.w("a70q7b");_.Jeb=_.w("sfFTle",[edb]);_.Keb=_.w("nv86s",[hdb]);_.Leb=_.w("rW1zq");_.Meb=_.w("H1Onzb");_.Neb=_.w("QE3hvd");_.Oeb=_.w("pPIvie",[_.$t]);_.Peb=_.w("XwhUEb",[]);_.Qeb=_.w("Kmnn6b");_.Reb=_.w("FrcyJe");_.Seb=_.w("xkjGve",[_.dbb]);_.Teb=_.w("E2zlIf");var Ueb=_.Xt("uxcEeb",[_.$t]);_.Veb=_.w("LR64x",[Ueb]);_.Web=_.w("HZnJ6");_.Xeb=_.w("v74Vad");_.Yeb=_.w("J2YIUd");_.Zeb=_.w("Y2XuT");_.$eb=_.w("O1Rq3");_.afb=_.w("JyBE3e",[_.hp]);_.bfb=_.w("LHCaNd",[]);_.cfb=_.w("wKdTle",[_.Tt,_.Ot]);_.eu=_.w("Fdd8nd",[_.cfb,_.Pt,_.fh]);_.dfb=_.w("b6vcbb",[_.Rt]);_.efb=_.w("ttQ27",[_.Og,_.Up,_.eu,_.cfb]);_.ffb=_.w("SGpRce",[_.Og,_.eu,_.dfb,_.cfb]);_.gfb=_.w("lcrkwe",[_.Og,_.zs,_.Up,_.cfb,_.ws,_.ffb,_.efb]);_.hfb=_.w("CpWC2d",[]);_.ifb=_.w("j9Yuyc",[]);_.jfb=_.w("ofjVkb",[_.hp]);_.kfb=_.w("rlHKFc",[_.Mt]);_.lfb=_.w("sZnyj",[]);_.mfb=_.w("jn2sGd",[_.Tt]);_.nfb=_.w("p4LrCe",[]);_.ofb=_.w("k0T3Ub",[_.nfb]);var pfb;pfb=class{WQ(a){return Vza().WQ(a)}setTimeout(a,b,...c){return Vza().setTimeout(a,b,...c)}setInterval(a,b,...c){return Vza().setInterval(a,b,...c)}clearTimeout(a){return Vza().clearTimeout(a)}clearInterval(a){return Vza().clearInterval(a)}};_.fu=

Boot Survival

Stores files to the Windows start menu directory

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior