Edit tour

Windows Analysis Report
http://lookerstudio.google.com/s/ryl1d6fWDPQ

Overview

General Information

Sample URL:	http://lookerstudio.google.com/s/ryl1d6fWDPQ
Analysis ID:	1622753
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected suspicious URL

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2368,i,5864554905798704397,480237047089285741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5800 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/ryl1d6fWDPQ" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.17.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The URL 'bgslogin.lgninmsoftrl.com' does not match the legitimate domain., The URL contains misspellings and unusual patterns, such as 'lgninmsoftrl', which appears to be a misspelled or obfuscated version of 'login.microsoft'., The domain does not have any direct association with Microsoft and includes suspicious elements like extra characters and unusual subdomain structure. DOM: 3.12.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 3.17.pages.csv, type: HTML

AI detected suspicious URL

Source: https://lgninmsoftrl.com	Joe Sandbox AI: The URL 'https://lgninmsoftrl.com' appears to be a typosquatting attempt targeting the well-known brand Microsoft. The legitimate URL is 'https://login.microsoft.com'. The analyzed URL uses character omissions and substitutions: 'login' is shortened to 'lgnin', and 'microsoft' is altered to 'msoftrl'. These changes maintain a high degree of visual similarity, likely to confuse users. The domain structure lacks any legitimate subdomain or extension that would suggest a different purpose, reinforcing the likelihood of it being a deceptive attempt.
Source: https://bgslogin.lgninmsoftrl.com	Joe Sandbox AI: The URL 'https://bgslogin.lgninmsoftrl.com' appears to be a typosquatting attempt targeting Microsoft's login portal. The subdomain 'bgslogin' and the main domain 'lgninmsoftrl' are structured to visually and phonetically resemble 'login.microsoft.com'. The character substitution includes 'lgnin' for 'login' and 'msoftrl' for 'microsoft', which are common tactics in typosquatting. The use of a non-standard domain extension '.com' with a misleading main domain increases the likelihood of user confusion. There is no indication that this URL serves a legitimate purpose unrelated to Microsoft, suggesting a high likelihood of being a typosquatting attempt.

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 3.12	OCR Text: Microsoft Browser defense check in progress- Verifying,.. CLOUDFLARE Ternw To move forward, Microsoft must confirm your connection is secure-
Source: Chrome DOM: 3.14	OCR Text: Microsoft Browser defense check in progress- Verifying v.. CLOUDFLARE Ternw To move forward, Microsoft must confirm your connection is secure-

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: Number of links: 0

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: Invalid link: Privacy statement

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: <input type="password" .../> found

Source: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ	HTTP Parser: No favicon
Source: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ	HTTP Parser: No favicon
Source: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ	HTTP Parser: No favicon
Source: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ	HTTP Parser: No favicon
Source: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ	HTTP Parser: No favicon
Source: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ	HTTP Parser: No favicon
Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/	HTTP Parser: No favicon
Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/	HTTP Parser: No favicon
Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/	HTTP Parser: No favicon
Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/	HTTP Parser: No favicon
Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/	HTTP Parser: No favicon

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: No <meta name="author".. found

Source: https://bgslogin.lgninmsoftrl.com/Iwuuv/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50185 version: TLS 1.2

Source:	Binary string: a.S1&&lg_5R(a)?1:0);_.lg_s();_.lg_Je("width",a.Hw()?"100%":"auto")("margin-bottom",a.Hw()?"5px":"0");_.lg_s();_.lg_x("ngIf",a.discreteValues&&a.oJ(a.discreteValues));_.lg_s();_.lg_Je("min-width",lg_5R(a)?"0":lg_MDc(a))("max-width",lg_5R(a)?"inherit":lg_MDc(a))("margin-left",lg_3R(a.xu.YWa))("min-height",a.discreteValues&&a.ranges[0]&&lg_NDc(a,a.S1).Pdb===1?"20px":"auto");_.lg_s();_.lg_Je("margin-top","-"+a.Ljb)("flex-direction",lg_5R(a)?"column":"row")("width",lg_5R(a)?"auto":"100%");_.lg_s();if(a.discreteValues){var b= source: chromecache_234.3.dr, chromecache_162.3.dr
Source:	Binary string: (J=H.addons[I])==null?void 0:J.logoUrl,L))}return K})}):[]}).then(function(E){var B=E.PDb;E=E.gTb;B=Object.assign.apply(Object,[{}].concat(_.lg_b(B)));E=Object.assign.apply(Object,[{}].concat(_.lg_b(E)));for(var F in B)q[F]&&B[F]&&(lg_rQa(q[F],B[F]),lg_qQa(q[F],E[F]));C.length?lg_eQb(a.ma,C,d).then(function(G){G=_.lg_a(G);for(var H=G.next();!H.done;H=G.next())H=H.value,H.shareableConfig&&q[H.shareableId].setName(H.shareableConfig.name);h.resolve(q)}):h.resolve(q)})});return h.promise}; source: chromecache_165.3.dr
Source:	Binary string: _.lg_0W=function(a,b,c,d,e){var f=this;this.YC=a;this.store=b;this.Kb=c;this.Ga=d;this.re=e;this.Ba=new _.lg_Qc(1);this.oa=!1;this.ma=this.timer=0;this.qa=this.store.select(_.lg_9Fb);this.B6a=this.store.select(_.lg_qE);this.eBb=this.qa.pipe(_.lg_f(function(g){return f.getLabel(g)}));this.dBb=this.qa.pipe(_.lg_f(function(g){return f.hKa(g)}));this.pDb=[10,15,30,60].map(function(g){return{text:lg_MV(g,{gva:_.lg_FMc}),value:g*1E3}});this.cEb=[{type:0,label:"Actual size"},{type:1,label:"Fit to width"}, source: chromecache_234.3.dr
Source:	Binary string: _.lg_Q(29,38,b.Nz))("matMenuTriggerFor",f);_.lg_s(3);_.lg_N(" ",_.lg_Q(31,40,b.oDb)," ");_.lg_s(2);_.lg_x("ngIf",_.lg_Q(33,42,b.Nz)===!1);_.lg_s(5);_.lg_x("ngForOf",b.pDb);_.lg_s();_.lg_x("vertical",!0);_.lg_s();_.lg_x("matMenuTriggerFor",h);_.lg_s(7);_.lg_x("ngForOf",b.cEb)}},dependencies:[_.lg_gS,_.lg_0o,_.lg_1o,_.lg_5,_.lg_1v,_.lg_Vv,_.lg_Zv,_.lg_9,_.lg_ex,_.lg_ax,_.lg_$w,_.lg_bx,_.lg_uB,_.lg_WS,_.lg_$o],styles:["[_nghost-%COMP%] .presentation-control-toolbar-shown[_ngcontent-%COMP%]{background:rgba(241,243,244,.9);-webkit-transition:opacity .25s linear,background .25s linear,bottom .25s linear;transition:opacity .25s linear,background .25s linear,bottom .25s linear;visibility:visible;color:#80868b}[_nghost-%COMP%] .presentation-control-toolbar-hidden[_ngcontent-%COMP%]{opacity:0;-webkit-transition:opacity .25s linear,background .25s linear,bottom .25s linear;transition:opacity .25s linear,background .25s linear,bottom .25s linear;visibility:hidden}[_nghost-%COMP%] .presentation-control-toolbar-fullshown[_ngcontent-%COMP%], [_nghost-%COMP%] .presentation-control-toolbar[_ngcontent-%COMP%]:hover{opacity:100%;-webkit-transition:opacity .25s linear,background .25s linear,bottom .25s linear;transition:opacity .25s linear,background .25s linear,bottom .25s linear;background:#f1f3f4;color:#3c4043}[_nghost-%COMP%] .presentation-control-toolbar[_ngcontent-%COMP%]{height:48px;position:absolute;bottom:20px;left:20px;z-index:2;padding:0 4px;font-size:0;box-shadow:0 1px 2px rgba(60,64,67,.3),0 2px 6px rgba(60,64,67,.15);border-radius:8px;display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center}[_nghost-%COMP%] .gmat-mdc-button{padding:0;vertical-align:middle;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center;color:inherit;display:grid}[_nghost-%COMP%] .mat-mdc-icon-button[_ngcontent-%COMP%]{height:100%}[_nghost-%COMP%] .gmat-mdc-button.mat-mdc-button.page-selector-button[disabled][_ngcontent-%COMP%]{margin-right:10px;padding-left:10px}[_nghost-%COMP%] .gmat-mdc-button.mat-mdc-button.advance-selector-button[disabled][_ngcontent-%COMP%]{margin-right:15px}[_nghost-%COMP%] .toolbar-separator-left[_ngcontent-%COMP%]{height:34px;-webkit-align-self:center;-ms-flex-item-align:center;align-self:center;border-left:1px solid var(--mat-divider-color);border-right:0;margin-right:5px}[_nghost-%COMP%] .toolbar-separator-right[_ngcontent-%COMP%]{height:34px;-webkit-align-self:center;-ms-flex-item-align:center;align-self:center;border-left:1px solid var(--mat-divider-color);border-right:0}[_nghost-%COMP%] .exit-button[_ngcontent-%COMP%]{min-width:45px}[_nghost-%COMP%] .page-selector-button[_ngcontent-%COMP%]{padding-left:10px;margin-right:5px;display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex}[_n
Source:	Binary string: _.lg_py.prototype.ma=function(a){_.lg_qy(this,"Workspace",{event_action:a.action,workspace_id:a.workspaceId,can_get_acl:a.V4a,is_folder:String(a.Yh),parent_workspace_id:a.parentWorkspaceId,folder_depth:String(a.GFb),move_origin_is_folder:String(a.pdb),move_destination_is_folder:String(a.ndb)})};_.lg_ztb=function(a,b,c){a.trackEvent("Analysis",b,c,void 0)};_.lg_mQa=function(a,b,c){a.trackEvent("Validation",b,c,void 0)};_.lg_xy=function(a,b,c){a.trackEvent("Debugging",b,c)}; source: chromecache_165.3.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /s/ryl1d6fWDPQ HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /js/client.js HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://lookerstudio.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.z-CF99wuLeU.O/m=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8yJLmK2FeQzRT4hxPn9_NEJo9eCg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X&size=invisible&cb=mbbcbj3qag7x HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://lookerstudio.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X&size=invisible&cb=mbbcbj3qag7xAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /getReport?appVersion=20250210_0007 HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404156.0.0.0; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1
Source: global traffic	HTTP traffic detected: GET /external HTTP/1.1Host: lookerstudio.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
Source: global traffic	HTTP traffic detected: GET /getImageV2?reportId=e9245564-52bf-4b48-9115-dea6f2152111&id=ADpgoFXfm2sWSr%2FLnjDpZ1EbMc20Ehx4xBqWXNljjhIp55VW2hpjcJ8HTLaDDX4chxoq9G09hFd%2BG3SFc5vLyfc90n3RwS0XVjZ%2F4p8FdFHNaicjBVfm%2FVuEHsJ19TLhcpZ2grceE2udRB4qpgwX6LXtwkDuhSmGxwv9ozBFB7k%3D HTTP/1.1Host: lookerstudio.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, /sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
Source: global traffic	HTTP traffic detected: GET /js/googleapis.proxy.js?onload=startup HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
Source: global traffic	HTTP traffic detected: GET /getImageV2?reportId=e9245564-52bf-4b48-9115-dea6f2152111&id=ADpgoFXfm2sWSr%2FLnjDpZ1EbMc20Ehx4xBqWXNljjhIp55VW2hpjcJ8HTLaDDX4chxoq9G09hFd%2BG3SFc5vLyfc90n3RwS0XVjZ%2F4p8FdFHNaicjBVfm%2FVuEHsJ19TLhcpZ2grceE2udRB4qpgwX6LXtwkDuhSmGxwv9ozBFB7k%3D HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
Source: global traffic	HTTP traffic detected: GET /getFirebaseAuthToken?appVersion=20250210_0007 HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.z-CF99wuLeU.O/m=googleapis_proxy/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8yJLmK2FeQzRT4hxPn9_NEJo9eCg/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: lookerstudio.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
Source: global traffic	HTTP traffic detected: GET /updatePresence?appVersion=20250210_0007 HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
Source: global traffic	HTTP traffic detected: GET /Iwuuv HTTP/1.1Host: bgslogin.lgninmsoftrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Iwuuv/ HTTP/1.1Host: bgslogin.lgninmsoftrl.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vjq2s/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=916fd7ebffca430e&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vjq2s/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vjq2s/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=916fd7ebffca430e&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: bgslogin.lgninmsoftrl.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bgslogin.lgninmsoftrl.com/Iwuuv/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=sv3g6rtogdp91pmdblcblrrtk5
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/916715417:1740402717:KicFSjWd-c1DwQ9JsmVukQZUx-IDjTfcZfrPR8MY0gQ/916fd7ebffca430e/mXGIOmmn8clSYK6V1akBJeLa1qql6J3RC6bkl70xdyI-1740404174-1.1.1.1-UNgT5yx9ZtL5PSk9ejjQrwII4ErckfUI6YTarMCdedo6NN.mW75i6Ok7Kd19bXDF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/916fd7ebffca430e/1740404176529/BmPEWwPDxeU9hUA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vjq2s/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/916fd7ebffca430e/1740404176529/BmPEWwPDxeU9hUA HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/916fd7ebffca430e/1740404176540/8984221029fa0d6b2fa31191e5c7281827f5fb3b6abe0cef933f680b90b25bc0/vMs6ESNwdwF_khj HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vjq2s/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/916715417:1740402717:KicFSjWd-c1DwQ9JsmVukQZUx-IDjTfcZfrPR8MY0gQ/916fd7ebffca430e/mXGIOmmn8clSYK6V1akBJeLa1qql6J3RC6bkl70xdyI-1740404174-1.1.1.1-UNgT5yx9ZtL5PSk9ejjQrwII4ErckfUI6YTarMCdedo6NN.mW75i6Ok7Kd19bXDF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/916715417:1740402717:KicFSjWd-c1DwQ9JsmVukQZUx-IDjTfcZfrPR8MY0gQ/916fd7ebffca430e/mXGIOmmn8clSYK6V1akBJeLa1qql6J3RC6bkl70xdyI-1740404174-1.1.1.1-UNgT5yx9ZtL5PSk9ejjQrwII4ErckfUI6YTarMCdedo6NN.mW75i6Ok7Kd19bXDF HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bgslogin.lgninmsoftrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bgslogin.lgninmsoftrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://bgslogin.lgninmsoftrl.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6265662839-1317754460.cos.ap-bangkok.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6265662839-1317754460.cos.ap-bangkok.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 6265662839.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://bgslogin.lgninmsoftrl.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 6265662839.sbsConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_200.3.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},Fk:function(){e=qb()},Jd:function(){d()}}};var $b=xa(["data-gtm-yt-inspected-"]),HG=["www.youtube.com","www.youtube-nocookie.com"],IG,JG=!1; equals www.youtube.com (Youtube)
Source: chromecache_165.3.dr	String found in binary or memory: a.put("activities/reporting/components/blendwarmwelcome/blend_warm_welcome.ng",'<md-dialog class="bigquery-interstitial">\n <md-dialog-content>\n \x3c!-- App icon. --\x3e\n <div class="appHeader">\n <div class="appIconHolder reporting">\n <div class="icon"></div>\n </div>\n </div>\n\n <iframe width="560" height="315" src="https://www.youtube.com/embed/E735sJTcjZk?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>\n <div class="welcome-msg">\n Get started with data blending\n </div>\n \x3c!-- Button list --\x3e\n </md-dialog-content>\n <md-dialog-actions>\n <md-button class="{{::button.class}}"\n ng-repeat="button in buttons"\n ng-click="button.action()">\n {{::button.label}}\n </md-button>\n </md-dialog-actions>\n</md-dialog>\n'); equals www.youtube.com (Youtube)
Source: chromecache_162.3.dr	String found in binary or memory: description:"Returns a hyperlink.",returnType:[_.lg_8[42]],examples:["HYPERLINK(URL, Link Label)","HYPERLINK(CONCAT('https://www.youtube.com/watch?v=', External Video Id), Video Title)","HYPERLINK(URL, Link Image)","HYPERLINK(CONCAT('https://www.youtube.com/watch?v=', External Video Id), Video Thumbnail)"],isEnabled:!0},{name:"IMAGE",articleId:"7570489",category:"Text",arguments:[{name:"Image URL",dataType:[_.lg_8[32],_.lg_8[41]],description:"The full URL of the link location, enclosed in quotation marks, or an expression that returns such a URL."}, equals www.youtube.com (Youtube)
Source: chromecache_200.3.dr	String found in binary or memory: if(!(f\|\|g\|\|k\|\|m.length\|\|n.length))return;var q={Ih:f,Gh:g,Hh:k,oi:m,ri:n,jf:p,Lb:e},r=z.YT;if(r)return r.ready&&r.ready(d),e;var t=z.onYouTubeIframeAPIReady;z.onYouTubeIframeAPIReady=function(){t&&t();d()};F(function(){for(var v=B.getElementsByTagName("script"),u=v.length,w=0;w<u;w++){var x=v[w].getAttribute("src");if(SG(x,"iframe_api")\|\|SG(x,"player_api"))return e}for(var y=B.getElementsByTagName("iframe"),A=y.length,C=0;C<A;C++)if(!JG&&QG(y[C],q.jf))return pc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: wf=x(["https://sandbox.google.com/tools/feedback/"]),xf=x(["https://www.google.cn/tools/feedback/"]),yf=x(["https://help.youtube.com/tools/feedback/"]),zf=x(["https://asx-frontend-staging.corp.google.com/inapp/"]),Af=x(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Bf=x(["https://localhost.corp.google.com/inapp/"]),Cf=x(["https://localhost.proxy.googlers.com/inapp/"]),Df=R(ef),Ef=[R(ff),R(gf)],Ff=[R(hf),R(jf),R(kf),R(lf),R(mf),R(nf),R(of),R(pf),R(qf),R(rf)],Gf=[R(sf),R(tf)],Hf= equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: lookerstudio.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: bgslogin.lgninmsoftrl.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6265662839-1317754460.cos.ap-bangkok.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 6265662839.sbs
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /getReport?appVersion=20250210_0007 HTTP/1.1Host: lookerstudio.google.comConnection: keep-aliveContent-Length: 194sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/plain, */*Content-Type: application/jsonsec-ch-ua-mobile: ?0encoding: nullUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://lookerstudio.google.comX-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404156.0.0.0; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Feb 2025 13:36:17 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kYHr4wUbAaoa9TIemnk8Gw2%2BQcozEV3maF6XcZHoNxdoBVk58zL68Aqv%2Bc381WfT2cXJa0tz8rIcOj1domrj2g9N%2BOn50OYTN7xDPaR4M9Cf7%2B0qv3S%2FxM90vdQQTgmzG9fNQrG4fNz6YpYp"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 916fd7f97f1e42d2-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1869&min_rtt=1593&rtt_var=795&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1236&delivery_rate=1833019&cwnd=231&unsent_bytes=0&cid=c3367c3c0d97e7da&ts=330&x=0"

Source: chromecache_165.3.dr	String found in binary or memory: http://angular-ui.github.com
Source: chromecache_165.3.dr	String found in binary or memory: http://angular.io
Source: chromecache_165.3.dr	String found in binary or memory: http://angularjs.org
Source: chromecache_165.3.dr	String found in binary or memory: http://errors.angularjs.org/1.6.4-local
Source: chromecache_198.3.dr, chromecache_150.3.dr	String found in binary or memory: http://g.co/dev/maps-no-account
Source: chromecache_165.3.dr	String found in binary or memory: http://g.co/ng/security#xss)
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT)
Source: chromecache_214.3.dr, chromecache_118.3.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_165.3.dr	String found in binary or memory: http://support.google.com/looker-studio?p=cancel-pro
Source: chromecache_165.3.dr	String found in binary or memory: http://support.google.com/looker-studio?p=upgrade-org
Source: chromecache_165.3.dr, chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_198.3.dr, chromecache_150.3.dr, chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_165.3.dr	String found in binary or memory: https://accountlinking-pa.clients6.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://accountlinking-pa.googleapis.com
Source: chromecache_165.3.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://accounts.google.com/ListAccounts
Source: chromecache_165.3.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin?continue=
Source: chromecache_119.3.dr, chromecache_123.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_119.3.dr, chromecache_123.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_165.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/v2/auth?client_id=
Source: chromecache_165.3.dr	String found in binary or memory: https://admin.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://admin.google.com/ac/managedsettings/810260081642
Source: chromecache_165.3.dr	String found in binary or memory: https://admin.google.com/ac/reporting/audit/data_studio
Source: chromecache_200.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_162.3.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/angular_material/0.9.4/angular-material.min.css
Source: chromecache_212.3.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_234.3.dr	String found in binary or memory: https://analytics.google.com/analytics/web/#report/defaultid/a
Source: chromecache_165.3.dr	String found in binary or memory: https://analyticssuitefrontend-pa-googleapis.corp.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://analyticssuitefrontend-pa.clients6.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_165.3.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://apis.google.com/js/auth.js
Source: chromecache_125.3.dr, chromecache_196.3.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_134.3.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js
Source: chromecache_219.3.dr, chromecache_159.3.dr	String found in binary or memory: https://apis.google.com/js/googleapis.proxy.js?onload=startup
Source: chromecache_165.3.dr	String found in binary or memory: https://ariane.googleplex.com/launch/$1
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_196.3.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_165.3.dr	String found in binary or memory: https://autopush-analyticssuitefrontend-pa-googleapis.corp.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://autopush-analyticssuitefrontend-pa-googleapis.sandbox.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=$1
Source: chromecache_200.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_119.3.dr, chromecache_123.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://cloud.google.com/bi-user/docs
Source: chromecache_234.3.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/reference/standard-sql/migrating-from-legacy-sql
Source: chromecache_165.3.dr	String found in binary or memory: https://cloud.google.com/billing/docs/how-to/create-billing-account
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_234.3.dr	String found in binary or memory: https://cloud.google.com/looker/docs/filter-expressions#date_and_time
Source: chromecache_234.3.dr	String found in binary or memory: https://cloud.google.com/looker/docs/reference/param-explore-always-filter
Source: chromecache_234.3.dr	String found in binary or memory: https://cloud.google.com/looker/docs/reference/param-explore-conditionally-filter
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_165.3.dr	String found in binary or memory: https://cloud.google.com/resource-manager/docs/creating-managing-projects#before_you_begin
Source: chromecache_165.3.dr	String found in binary or memory: https://cloud.google.com/spanner/docs/query-syntax
Source: chromecache_165.3.dr	String found in binary or memory: https://cloud.google.com/terms
Source: chromecache_165.3.dr	String found in binary or memory: https://cloud.google.com/terms/service-terms
Source: chromecache_165.3.dr	String found in binary or memory: https://cloud.google.com/trusted-tester/duet-preview
Source: chromecache_162.3.dr	String found in binary or memory: https://cloud.google.com/trusted-tester/gemini-for-google-cloud-preview
Source: chromecache_165.3.dr	String found in binary or memory: https://cnsviewer.corp.google.com$2
Source: chromecache_165.3.dr	String found in binary or memory: https://console.cloud.google.com
Source: chromecache_234.3.dr	String found in binary or memory: https://console.cloud.google.com/bigquery?project=
Source: chromecache_165.3.dr	String found in binary or memory: https://console.cloud.google.com/cloud-resource-manager
Source: chromecache_234.3.dr	String found in binary or memory: https://console.cloud.google.com/google/maps-apis/studio/maps
Source: chromecache_165.3.dr	String found in binary or memory: https://console.cloud.google.com/projectcreate
Source: chromecache_234.3.dr	String found in binary or memory: https://console.cloud.google.com/storage/browser/
Source: chromecache_234.3.dr	String found in binary or memory: https://console.cloud.google.com/storage/browser/_details/
Source: chromecache_165.3.dr	String found in binary or memory: https://console.cloud.google.com/terms
Source: chromecache_119.3.dr, chromecache_123.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_165.3.dr	String found in binary or memory: https://critique.corp.google.com/$2
Source: chromecache_165.3.dr	String found in binary or memory: https://cs.corp.google.com/piper/$2
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_165.3.dr	String found in binary or memory: https://datastudio-integration.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://datastudio-preprod.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://dev-analyticssuitefrontend-pa-googleapis.corp.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://dev-analyticssuitefrontend-pa-googleapis.sandbox.google.com/
Source: chromecache_234.3.dr	String found in binary or memory: https://dev.mysql.com/doc/refman/5.7/en/using-encrypted-connections.htm
Source: chromecache_234.3.dr	String found in binary or memory: https://dev.mysql.com/doc/refman/5.7/en/using-encrypted-connections.html#using-encrypted-connections
Source: chromecache_150.3.dr	String found in binary or memory: https://developer.mozilla.org/docs/Web/API/EventTarget/addEventListener
Source: chromecache_165.3.dr	String found in binary or memory: https://developers.google.com/analytics/devguides/reporting/data/v1/quotas
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://developers.google.com/datastudio
Source: chromecache_234.3.dr	String found in binary or memory: https://developers.google.com/datastudio/connector/overview
Source: chromecache_234.3.dr	String found in binary or memory: https://developers.google.com/datastudio/connector/publish-connector
Source: chromecache_234.3.dr	String found in binary or memory: https://developers.google.com/datastudio/visualization/publish
Source: chromecache_198.3.dr, chromecache_150.3.dr	String found in binary or memory: https://developers.google.com/maps/deprecations
Source: chromecache_198.3.dr, chromecache_150.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/advanced-markers/migration
Source: chromecache_223.3.dr, chromecache_154.3.dr, chromecache_166.3.dr, chromecache_148.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#
Source: chromecache_150.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/error-messages#unsupported-browsers
Source: chromecache_198.3.dr, chromecache_150.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/libraries
Source: chromecache_150.3.dr	String found in binary or memory: https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_234.3.dr	String found in binary or memory: https://docs.aws.amazon.com/redshift/latest/dg/c_redshift-and-postgres-sql.html
Source: chromecache_234.3.dr	String found in binary or memory: https://docs.aws.amazon.com/redshift/latest/mgmt/jdbc20-configure-authentication-ssl.html
Source: chromecache_234.3.dr	String found in binary or memory: https://docs.google.com/document/d/1QAoLKeeGw6FljGWXOgrYB79rkuFdtrp5iJtp8eZ2SQQ/edit?resourcekey=0-d
Source: chromecache_234.3.dr	String found in binary or memory: https://docs.google.com/document/d/1REkHOTGtBOgXnD9bp9cxa-aV4njOPx6eyDk_Wxfak9I/edit?resourcekey=0-6
Source: chromecache_162.3.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSciijLhxO9uARquBMtKSXVq0NseOF936N8R7KFwUNZoetHeww/viewform
Source: chromecache_165.3.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSefBWbxchQFyZB9EOOcRxYTRi-16TezwRExW-x-XJRfeklCiA/viewform
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://docs.google.com/forms/d/e/1FAIpQLSfxmQpsMhPDeNnvAUPLfIPfN82GzU9YI0phVVj6JyXSb_xd2g/viewform?
Source: chromecache_234.3.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_234.3.dr	String found in binary or memory: https://docs.google.com/spreadsheets/d/
Source: chromecache_123.3.dr, chromecache_127.3.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_196.3.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_234.3.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=RobotoDraft:300
Source: chromecache_162.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/chat_2020q4/v8/192px.svg
Source: chromecache_162.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/info/gradN25/20px.svg
Source: chromecache_162.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/webhook/default/48px.svg
Source: chromecache_195.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialicons/v143/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2)
Source: chromecache_195.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/materialiconsextended/v152/kJEjBvgX7BgnkSrUwT8UnLVc38YydejYY-oE_LvJ.woff
Source: chromecache_165.3.dr	String found in binary or memory: https://g.co/ng/security#xss)
Source: chromecache_165.3.dr	String found in binary or memory: https://g3doc.corp.google.com/java/com/google/analytics/lego/web/client/activities/datasource/ui/sha
Source: chromecache_234.3.dr	String found in binary or memory: https://g3doc.corp.google.com/storage/googlesql/g3doc/index.md?cl=head
Source: chromecache_165.3.dr	String found in binary or memory: https://gaiastaging.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://gaiastaging.corp.google.com/ListAccounts
Source: chromecache_175.3.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_216.3.dr, chromecache_161.3.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://github.com/Starcounter-Jack/JSON-Patch
Source: chromecache_218.3.dr	String found in binary or memory: https://github.com/angular/material
Source: chromecache_216.3.dr, chromecache_161.3.dr, chromecache_175.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_216.3.dr, chromecache_161.3.dr, chromecache_175.3.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_198.3.dr, chromecache_150.3.dr	String found in binary or memory: https://goo.gle/js-api-loading
Source: chromecache_234.3.dr	String found in binary or memory: https://groups.google.com/a/google.com/forum/#
Source: chromecache_234.3.dr	String found in binary or memory: https://groups.google.com/a/google.com/g/googler-data-studio-discuss/c/rrnveou2-Sk/m/-Wm-5VzsDgAJ
Source: chromecache_196.3.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_165.3.dr	String found in binary or memory: https://issuetracker.google.com/issues/new?component=1257233&template=1744498
Source: chromecache_165.3.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_165.3.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_165.3.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user
Source: chromecache_234.3.dr	String found in binary or memory: https://lh3.googleusercontent.com/a/default-user=s48-cc
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio-integration.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio-preprod.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio.cloud.google
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio.cloud.google/c
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio.googleusercontent.com/c/thirdPartyViz/
Source: chromecache_165.3.dr	String found in binary or memory: https://lookerstudio.googleusercontent.com/thirdPartyViz/
Source: chromecache_234.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js
Source: chromecache_234.3.dr	String found in binary or memory: https://maps.googleapis.com/maps/api/js?key=
Source: chromecache_234.3.dr	String found in binary or memory: https://mapstyle.withgoogle.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://myaccount-autopush.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://myaccount-dev.corp.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://myaccount-staging.corp.google.com
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://myaccount.google.com
Source: chromecache_234.3.dr	String found in binary or memory: https://myaccount.google.com/accountlinking
Source: chromecache_165.3.dr	String found in binary or memory: https://myaccount.google.com/permissions
Source: chromecache_165.3.dr	String found in binary or memory: https://ngrx.io/guide/store/configuration/runtime-checks#strict
Source: chromecache_165.3.dr	String found in binary or memory: https://ngrx.io/guide/store/configuration/runtime-checks#strictactiontypeuniqueness
Source: chromecache_165.3.dr	String found in binary or memory: https://ngrx.io/guide/store/configuration/runtime-checks#strictactionwithinngzone
Source: chromecache_165.3.dr	String found in binary or memory: https://oauth-redirect-sandbox.googleusercontent.com
Source: chromecache_165.3.dr	String found in binary or memory: https://oauth-redirect-test.googleusercontent.com
Source: chromecache_165.3.dr	String found in binary or memory: https://oauth-redirect.googleusercontent.com
Source: chromecache_165.3.dr	String found in binary or memory: https://oauth2.googleapis.com/token
Source: chromecache_200.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_200.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_125.3.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_165.3.dr	String found in binary or memory: https://people-pa.googleapis.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://people-pa.googleapis.com/$discovery/rest
Source: chromecache_165.3.dr	String found in binary or memory: https://play.google.com
Source: chromecache_143.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_127.3.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_119.3.dr, chromecache_123.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_165.3.dr	String found in binary or memory: https://privacy.google.com/businesses/processorterms/
Source: chromecache_165.3.dr	String found in binary or memory: https://pulse-tracker.corp.google.com/tracking_script.js
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://services.google.com/fb/forms/datastudio/
Source: chromecache_234.3.dr	String found in binary or memory: https://sheets.googleapis.com/$discovery/rest?version=v4
Source: chromecache_165.3.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://ssl.gstatic.com/
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://ssl.gstatic.com/closure/hsva-sprite-sm.png);width:22px;height:22px;border-radius:50%;backgro
Source: chromecache_234.3.dr	String found in binary or memory: https://ssl.gstatic.com/docs/doclist/images/icon_10_generic_list.png
Source: chromecache_165.3.dr	String found in binary or memory: https://ssl.gstatic.com/guidedhelp/runtime/guided_help.js
Source: chromecache_165.3.dr	String found in binary or memory: https://ssl.gstatic.com/guidedhelp/runtime_staging/guided_help.js
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_165.3.dr	String found in binary or memory: https://stagingqual-accountlinking-pa-googleapis.sandbox.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://stagingqual-accountlinking-pa.sandbox.googleapis.com
Source: chromecache_196.3.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_200.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_200.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_212.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com
Source: chromecache_196.3.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/360suite/answer/6308901?hl=en-US&ref_topic=6308908
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/accounts/answer/181692
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://support.google.com/admanager/answer/7558019
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/analytics/?p=measure-report
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/analytics/answer/10759417
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/contacts/answer/7345608
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/datastudio/?p=sa-err-missing-role
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/datastudio/?p=sa-err-no-access
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/datastudio/?p=sa-err-no-user
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/datastudio/?p=sa-err-use-agent
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/datastudio/answer/6371135
Source: chromecache_198.3.dr, chromecache_150.3.dr	String found in binary or memory: https://support.google.com/fusiontables/answer/9185417).
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/legal/answer/3110420?hl=en-US
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio#topic=6267740
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=blend
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=custom-bin
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=custom-group
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=ds-owner-xfer
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=embed-rpt#navigation
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=mapkey
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=publishing
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=reach
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=relnotes
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/?p=sa-missing-role
Source: chromecache_165.3.dr, chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/10039127
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/10043514
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/10181379
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/10309432
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/10601378
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/11283389
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/11377200
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/11420855
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/11939233
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/12388266
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/12814824
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/13715508
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/14112719
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/14121883
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/14151372
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/14295042
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/14611921
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/14953315#storage
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/15683626
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6291062
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6291066
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6291066#view
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6370296
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6370352
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6370353
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6370357
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6370357?hl=en&ref_topic=7332552
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6371135
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6371135#revoke-data-credentials
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6371829
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6371829?hl=en&ref_topic=6371818
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/6401549
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7019158
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7019158?hl=en
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7020039
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7020275
Source: chromecache_165.3.dr, chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7020275#notes
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7020432
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7020436
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7083608#refresh-data-source-fields
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7088031
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7175478
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7245540
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7287331
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7287743?ref_topic=7287742#what-adding-a-segment-mean
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7288010
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7314895
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7333350
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7340016
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7340016?hl=en-US
Source: chromecache_165.3.dr, chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7410735
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7502134
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7511998
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7512288
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7530149
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7539413
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7539413?ref_topic=7156687
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7569962#troubleshoot-calculated-fields
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7570489
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7660772
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/7664330
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9002005
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9002005#fix-invalid-parameters
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9008245
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9019969
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9053399
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9053467
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9061420
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9091956
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9093373
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9125317
Source: chromecache_165.3.dr, chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9206527
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9263641
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9263641?hl=en
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9265174
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9266499
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9518554#deprecated
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9706918?hl=en
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9713352#custom-map-style
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9713766
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9713766#revoke-consent
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio/answer/9713766#viewer-consent
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio/topic/12398462
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio/topic/7332343?ref_topic=6370347
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=apps-script-off
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=bqparams
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=cloud_forum
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=cm-invite
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=cm-team
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=data-access
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=excel-connector
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=formula-geni-caution
Source: chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=formula-prompt-guide
Source: chromecache_234.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=get-gemini
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=invalid_field_name
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=pause-updates
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=personal-report
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=upgrade-content
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=upgrade-licenses
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=upgrade-project
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/looker-studio?p=upgrade-users
Source: chromecache_143.3.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/surveys/answer/12626240
Source: chromecache_234.3.dr	String found in binary or memory: https://surveys.google.com/reporting/survey?survey=
Source: chromecache_212.3.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_165.3.dr	String found in binary or memory: https://tc-message.corp.google.com/search/message-id=$3&target-option=include-obsolete-message
Source: chromecache_200.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://vega.github.io/editor/
Source: chromecache_234.3.dr	String found in binary or memory: https://vega.github.io/editor/#/url/vega/
Source: chromecache_119.3.dr, chromecache_123.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr, chromecache_127.3.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://workspace.google.com/terms/premier_terms.html
Source: chromecache_165.3.dr	String found in binary or memory: https://www.en.advertisercommunity.com/t5/Data-Studio/
Source: chromecache_212.3.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_212.3.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_212.3.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_200.3.dr, chromecache_166.3.dr, chromecache_165.3.dr, chromecache_148.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_212.3.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_177.3.dr, chromecache_140.3.dr, chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_196.3.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_186.3.dr, chromecache_196.3.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_196.3.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_162.3.dr	String found in binary or memory: https://www.google.com/url?q=
Source: chromecache_200.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_127.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_127.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_200.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_212.3.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_120.3.dr, chromecache_143.3.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/IyZ984yGrXrBd6ihLOYGwy9X/recaptcha__.
Source: chromecache_234.3.dr, chromecache_162.3.dr	String found in binary or memory: https://www.gstatic.com/analytics-lego/svg/ic_looker_studio.svg
Source: chromecache_234.3.dr	String found in binary or memory: https://www.gstatic.com/charts/geochart/
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/charts/regioncoder/
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/charts/regioncoder/0/
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_48dp.png
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system_gm/svg/
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system_gm_filled/svg/
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_email_address_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/change_name_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_copy_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/content_cut_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/email_copy_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/info_outline_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/phone_copy_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_grey300.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/dark_theme/visibility_off_grey200.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_email_address_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/change_name_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_copy_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/content_cut_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/domain_disabled_grey900.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/email_copy_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/info_outline_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/out_of_domain_yellow500.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/phone_copy_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_grey700.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/people/peoplekit/icons/light_theme/visibility_off_grey700.svg
Source: chromecache_136.3.dr, chromecache_177.3.dr, chromecache_140.3.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/IyZ984yGrXrBd6ihLOYGwy9X/recaptcha__en.js
Source: chromecache_196.3.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_196.3.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_200.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_234.3.dr	String found in binary or memory: https://www.postgresql.org/docs/9.1/ssl-tcp.html#SSL-CLIENT-CERTIFICATES
Source: chromecache_234.3.dr	String found in binary or memory: https://www.postgresql.org/docs/9.6/static/libpq-ssl.html
Source: chromecache_165.3.dr	String found in binary or memory: https://www.youtube.com/embed/E735sJTcjZk?rel=0&showinfo=0
Source: chromecache_200.3.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_162.3.dr	String found in binary or memory: https://www.youtube.com/watch?v=

Source: unknown	Network traffic detected: HTTP traffic on port 50168 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 50116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50176
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 50071 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50154 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50184
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50125 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50070
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50071
Source: unknown	Network traffic detected: HTTP traffic on port 50159 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50162 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50116
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50119
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50172 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50156 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50119 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50167 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50126
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50125
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 50153 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50132
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50161 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50184 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50140
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50169 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50173 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 50152 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 50176 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50153
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50152
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50154
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50156
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50159
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50162
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50161
Source: unknown	Network traffic detected: HTTP traffic on port 50163 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50140 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50163
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50168
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50167
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50169
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49987 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50173
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50172
Source: unknown	Network traffic detected: HTTP traffic on port 50126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49987

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50077 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:50185 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@22/193@70/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2368,i,5864554905798704397,480237047089285741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/ryl1d6fWDPQ"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2400 --field-trial-handle=2368,i,5864554905798704397,480237047089285741,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: a.S1&&lg_5R(a)?1:0);_.lg_s();_.lg_Je("width",a.Hw()?"100%":"auto")("margin-bottom",a.Hw()?"5px":"0");_.lg_s();_.lg_x("ngIf",a.discreteValues&&a.oJ(a.discreteValues));_.lg_s();_.lg_Je("min-width",lg_5R(a)?"0":lg_MDc(a))("max-width",lg_5R(a)?"inherit":lg_MDc(a))("margin-left",lg_3R(a.xu.YWa))("min-height",a.discreteValues&&a.ranges[0]&&lg_NDc(a,a.S1).Pdb===1?"20px":"auto");_.lg_s();_.lg_Je("margin-top","-"+a.Ljb)("flex-direction",lg_5R(a)?"column":"row")("width",lg_5R(a)?"auto":"100%");_.lg_s();if(a.discreteValues){var b= source: chromecache_234.3.dr, chromecache_162.3.dr
Source:	Binary string: (J=H.addons[I])==null?void 0:J.logoUrl,L))}return K})}):[]}).then(function(E){var B=E.PDb;E=E.gTb;B=Object.assign.apply(Object,[{}].concat(_.lg_b(B)));E=Object.assign.apply(Object,[{}].concat(_.lg_b(E)));for(var F in B)q[F]&&B[F]&&(lg_rQa(q[F],B[F]),lg_qQa(q[F],E[F]));C.length?lg_eQb(a.ma,C,d).then(function(G){G=_.lg_a(G);for(var H=G.next();!H.done;H=G.next())H=H.value,H.shareableConfig&&q[H.shareableId].setName(H.shareableConfig.name);h.resolve(q)}):h.resolve(q)})});return h.promise}; source: chromecache_165.3.dr
Source:	Binary string: _.lg_0W=function(a,b,c,d,e){var f=this;this.YC=a;this.store=b;this.Kb=c;this.Ga=d;this.re=e;this.Ba=new _.lg_Qc(1);this.oa=!1;this.ma=this.timer=0;this.qa=this.store.select(_.lg_9Fb);this.B6a=this.store.select(_.lg_qE);this.eBb=this.qa.pipe(_.lg_f(function(g){return f.getLabel(g)}));this.dBb=this.qa.pipe(_.lg_f(function(g){return f.hKa(g)}));this.pDb=[10,15,30,60].map(function(g){return{text:lg_MV(g,{gva:_.lg_FMc}),value:g*1E3}});this.cEb=[{type:0,label:"Actual size"},{type:1,label:"Fit to width"}, source: chromecache_234.3.dr
Source:	Binary string: _.lg_Q(29,38,b.Nz))("matMenuTriggerFor",f);_.lg_s(3);_.lg_N(" ",_.lg_Q(31,40,b.oDb)," ");_.lg_s(2);_.lg_x("ngIf",_.lg_Q(33,42,b.Nz)===!1);_.lg_s(5);_.lg_x("ngForOf",b.pDb);_.lg_s();_.lg_x("vertical",!0);_.lg_s();_.lg_x("matMenuTriggerFor",h);_.lg_s(7);_.lg_x("ngForOf",b.cEb)}},dependencies:[_.lg_gS,_.lg_0o,_.lg_1o,_.lg_5,_.lg_1v,_.lg_Vv,_.lg_Zv,_.lg_9,_.lg_ex,_.lg_ax,_.lg_$w,_.lg_bx,_.lg_uB,_.lg_WS,_.lg_$o],styles:["[_nghost-%COMP%] .presentation-control-toolbar-shown[_ngcontent-%COMP%]{background:rgba(241,243,244,.9);-webkit-transition:opacity .25s linear,background .25s linear,bottom .25s linear;transition:opacity .25s linear,background .25s linear,bottom .25s linear;visibility:visible;color:#80868b}[_nghost-%COMP%] .presentation-control-toolbar-hidden[_ngcontent-%COMP%]{opacity:0;-webkit-transition:opacity .25s linear,background .25s linear,bottom .25s linear;transition:opacity .25s linear,background .25s linear,bottom .25s linear;visibility:hidden}[_nghost-%COMP%] .presentation-control-toolbar-fullshown[_ngcontent-%COMP%], [_nghost-%COMP%] .presentation-control-toolbar[_ngcontent-%COMP%]:hover{opacity:100%;-webkit-transition:opacity .25s linear,background .25s linear,bottom .25s linear;transition:opacity .25s linear,background .25s linear,bottom .25s linear;background:#f1f3f4;color:#3c4043}[_nghost-%COMP%] .presentation-control-toolbar[_ngcontent-%COMP%]{height:48px;position:absolute;bottom:20px;left:20px;z-index:2;padding:0 4px;font-size:0;box-shadow:0 1px 2px rgba(60,64,67,.3),0 2px 6px rgba(60,64,67,.15);border-radius:8px;display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center}[_nghost-%COMP%] .gmat-mdc-button{padding:0;vertical-align:middle;-webkit-box-align:center;-webkit-align-items:center;-moz-box-align:center;-ms-flex-align:center;align-items:center;color:inherit;display:grid}[_nghost-%COMP%] .mat-mdc-icon-button[_ngcontent-%COMP%]{height:100%}[_nghost-%COMP%] .gmat-mdc-button.mat-mdc-button.page-selector-button[disabled][_ngcontent-%COMP%]{margin-right:10px;padding-left:10px}[_nghost-%COMP%] .gmat-mdc-button.mat-mdc-button.advance-selector-button[disabled][_ngcontent-%COMP%]{margin-right:15px}[_nghost-%COMP%] .toolbar-separator-left[_ngcontent-%COMP%]{height:34px;-webkit-align-self:center;-ms-flex-item-align:center;align-self:center;border-left:1px solid var(--mat-divider-color);border-right:0;margin-right:5px}[_nghost-%COMP%] .toolbar-separator-right[_ngcontent-%COMP%]{height:34px;-webkit-align-self:center;-ms-flex-item-align:center;align-self:center;border-left:1px solid var(--mat-divider-color);border-right:0}[_nghost-%COMP%] .exit-button[_ngcontent-%COMP%]{min-width:45px}[_nghost-%COMP%] .page-selector-button[_ngcontent-%COMP%]{padding-left:10px;margin-right:5px;display:-webkit-box;display:-webkit-flex;display:-moz-box;display:-ms-flexbox;display:flex}[_n
Source:	Binary string: _.lg_py.prototype.ma=function(a){_.lg_qy(this,"Workspace",{event_action:a.action,workspace_id:a.workspaceId,can_get_acl:a.V4a,is_folder:String(a.Yh),parent_workspace_id:a.parentWorkspaceId,folder_depth:String(a.GFb),move_origin_is_folder:String(a.pdb),move_destination_is_folder:String(a.ndb)})};_.lg_ztb=function(a,b,c){a.trackEvent("Analysis",b,c,void 0)};_.lg_mQa=function(a,b,c){a.trackEvent("Validation",b,c,void 0)};_.lg_xy=function(a,b,c){a.trackEvent("Debugging",b,c)}; source: chromecache_165.3.dr

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/ryl1d6fWDPQ	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://cs.corp.google.com/piper/$2	0%	Avira URL Cloud	safe
https://lookerstudio-preprod.corp.google.com	0%	Avira URL Cloud	safe
https://lookerstudio-integration.corp.google.com	0%	Avira URL Cloud	safe
https://analyticssuitefrontend-pa-googleapis.corp.google.com/	0%	Avira URL Cloud	safe
https://ngrx.io/guide/store/configuration/runtime-checks#strictactionwithinngzone	0%	Avira URL Cloud	safe
https://ariane.googleplex.com/launch/$1	0%	Avira URL Cloud	safe
https://bgslogin.lgninmsoftrl.com/favicon.ico	0%	Avira URL Cloud	safe
https://dev-analyticssuitefrontend-pa-googleapis.corp.google.com/	0%	Avira URL Cloud	safe
https://6265662839-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://lookerstudio.cloud.google/c	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.129.229	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.186.31	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	92.123.12.181	true	false	high
plus.l.google.com	142.250.185.110	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
cos.ap-bangkok.myqcloud.com	43.128.193.10	true	false	high
6265662839.sbs	69.49.246.64	true	false	high
lookerstudio.google.com	172.217.18.14	true	false	high
bgslogin.lgninmsoftrl.com	104.21.80.1	true	false	high
play.google.com	142.250.185.206	true	false	high
code.jquery.com	151.101.2.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	172.217.18.4	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
6265662839-1317754460.cos.ap-bangkok.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		high
https://apis.google.com/js/client.js	false		high
https://lookerstudio.google.com/getImageV2?reportId=e9245564-52bf-4b48-9115-dea6f2152111&id=ADpgoFXfm2sWSr%2FLnjDpZ1EbMc20Ehx4xBqWXNljjhIp55VW2hpjcJ8HTLaDDX4chxoq9G09hFd%2BG3SFc5vLyfc90n3RwS0XVjZ%2F4p8FdFHNaicjBVfm%2FVuEHsJ19TLhcpZ2grceE2udRB4qpgwX6LXtwkDuhSmGxwv9ozBFB7k%3D	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE	false		high
https://bgslogin.lgninmsoftrl.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://lookerstudio.google.com/external	false		high
https://a.nel.cloudflare.com/report/v4?s=kYHr4wUbAaoa9TIemnk8Gw2%2BQcozEV3maF6XcZHoNxdoBVk58zL68Aqv%2Bc381WfT2cXJa0tz8rIcOj1domrj2g9N%2BOn50OYTN7xDPaR4M9Cf7%2B0qv3S%2FxM90vdQQTgmzG9fNQrG4fNz6YpYp	false		high
https://6265662839-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cs.corp.google.com/piper/$2	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_200.3.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://myaccount.google.com/permissions	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio?p=data-access	chromecache_234.3.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_120.3.dr, chromecache_143.3.dr	false		high
https://console.cloud.google.com/projectcreate	chromecache_165.3.dr	false		high
https://support.google.com	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/9706918?hl=en	chromecache_165.3.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_134.3.dr	false		high
http://g.co/dev/maps-no-account	chromecache_198.3.dr, chromecache_150.3.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://support.google.com/looker-studio/answer/10043514	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/6401549	chromecache_165.3.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_196.3.dr	false		high
https://support.google.com/looker-studio/answer/10039127	chromecache_165.3.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_212.3.dr	false		high
https://lookerstudio-preprod.corp.google.com	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/looker-studio?p=get-gemini	chromecache_234.3.dr	false		high
https://lookerstudio-integration.corp.google.com	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://analyticssuitefrontend-pa-googleapis.corp.google.com/	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/looker-studio/?p=relnotes	chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/9093373	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/7088031	chromecache_165.3.dr	false		high
https://groups.google.com/a/google.com/forum/#	chromecache_234.3.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_216.3.dr, chromecache_161.3.dr, chromecache_175.3.dr	false		high
https://support.google.com/looker-studio/answer/9061420	chromecache_234.3.dr, chromecache_162.3.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_125.3.dr	false		high
https://support.google.com/looker-studio?p=cm-team	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio?p=formula-prompt-guide	chromecache_162.3.dr	false		high
https://developers.google.com/datastudio/connector/publish-connector	chromecache_234.3.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_120.3.dr, chromecache_143.3.dr	false		high
https://support.google.com/looker-studio/?p=custom-group	chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/6371135	chromecache_234.3.dr, chromecache_162.3.dr	false		high
https://goo.gle/js-api-loading	chromecache_198.3.dr, chromecache_150.3.dr	false		high
https://www.postgresql.org/docs/9.6/static/libpq-ssl.html	chromecache_234.3.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://stats.g.doubleclick.net/j/collect	chromecache_212.3.dr	false		high
https://support.google.com/looker-studio/answer/13715508	chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/7314895	chromecache_165.3.dr	false		high
https://developers.google.com/maps/documentation/javascript/styling#cloud_tooling	chromecache_150.3.dr	false		high
https://ngrx.io/guide/store/configuration/runtime-checks#strictactionwithinngzone	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://lookerstudio.cloud.google/c	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_143.3.dr	false		high
https://support.google.com/fusiontables/answer/9185417).	chromecache_198.3.dr, chromecache_150.3.dr	false		high
https://developers.google.com/maps/deprecations	chromecache_198.3.dr, chromecache_150.3.dr	false		high
https://support.google.com/looker-studio/answer/6370296	chromecache_165.3.dr	false		high
https://www.google.com/tools/feedback	chromecache_196.3.dr	false		high
https://ariane.googleplex.com/launch/$1	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/looker-studio/answer/7019158	chromecache_165.3.dr	false		high
https://myaccount.google.com/accountlinking	chromecache_234.3.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://support.google.com/admanager/answer/7558019	chromecache_165.3.dr, chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/7340016	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio?p=excel-connector	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/9713766#viewer-consent	chromecache_234.3.dr, chromecache_162.3.dr	false		high
https://support.google.com/looker-studio?p=upgrade-licenses	chromecache_165.3.dr	false		high
https://apis.google.com/js/api.js	chromecache_165.3.dr, chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/7539413?ref_topic=7156687	chromecache_234.3.dr	false		high
https://services.google.com/fb/forms/datastudio/	chromecache_165.3.dr	false		high
https://console.cloud.google.com/google/maps-apis/studio/maps	chromecache_234.3.dr	false		high
https://docs.google.com/picker	chromecache_234.3.dr	false		high
https://www.google.com/tools/feedback/	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_119.3.dr, chromecache_134.3.dr, chromecache_181.3.dr, chromecache_125.3.dr	false		high
https://docs.aws.amazon.com/redshift/latest/mgmt/jdbc20-configure-authentication-ssl.html	chromecache_234.3.dr	false		high
http://support.google.com/looker-studio?p=upgrade-org	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/topic/7332343?ref_topic=6370347	chromecache_165.3.dr	false		high
https://dev-analyticssuitefrontend-pa-googleapis.corp.google.com/	chromecache_165.3.dr	false	Avira URL Cloud: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://support.google.com/looker-studio/answer/7530149	chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/9713766	chromecache_234.3.dr, chromecache_162.3.dr	false		high
https://plus.google.com	chromecache_127.3.dr	false		high
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_120.3.dr, chromecache_143.3.dr	false		high
https://support.google.com/looker-studio#topic=6267740	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/7570489	chromecache_234.3.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://support.google.com/looker-studio/answer/7664330	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio?p=apps-script-off	chromecache_234.3.dr	false		high
https://support.google.com/looker-studio/answer/7020275	chromecache_165.3.dr, chromecache_234.3.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_186.3.dr, chromecache_196.3.dr	false		high
https://jquery.com/	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/7511998	chromecache_165.3.dr	false		high
https://support.google.com/analytics/answer/10759417	chromecache_234.3.dr	false		high
https://support.google.com/accounts/answer/181692	chromecache_165.3.dr	false		high
https://support.google.com/looker-studio/answer/7020039	chromecache_165.3.dr	false		high
https://cloud.google.com/resource-manager/docs/creating-managing-projects#before_you_begin	chromecache_165.3.dr	false		high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_216.3.dr, chromecache_161.3.dr, chromecache_175.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.80.1	bgslogin.lgninmsoftrl.com	United States	13335	CLOUDFLARENETUS	false
69.49.246.64	6265662839.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
104.18.186.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
43.128.193.190	unknown	Japan	4249	LILLY-ASUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
43.128.193.10	cos.ap-bangkok.myqcloud.com	Japan	4249	LILLY-ASUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.206	play.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.129.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.164	unknown	United States	15169	GOOGLEUS	false
92.123.12.181	e329293.dscd.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1622753
Start date and time:	2025-02-24 14:34:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://lookerstudio.google.com/s/ryl1d6fWDPQ
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@22/193@70/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 172.217.18.14, 64.233.166.84, 216.58.206.78, 142.250.184.238, 142.250.186.170, 216.58.206.67, 172.217.16.131, 142.250.181.238, 142.250.74.200, 142.250.184.195, 172.217.23.104, 172.217.16.195, 172.217.16.138, 142.250.186.138, 142.250.185.74, 142.250.185.106, 142.250.186.42, 172.217.16.202, 172.217.18.10, 142.250.181.234, 216.58.206.74, 142.250.185.138, 142.250.184.202, 142.250.186.74, 142.250.186.106, 172.217.18.106, 142.250.184.234, 2.23.77.188, 88.221.110.121, 216.58.212.142, 142.250.74.206, 172.217.16.142, 172.217.23.106, 216.58.212.138, 142.250.185.170, 142.250.185.202, 142.250.185.234, 216.58.206.42, 142.250.74.202, 216.58.212.170, 142.250.185.238, 142.250.184.206, 172.217.23.110, 142.250.185.110, 172.217.16.206, 13.107.246.60, 2.18.97.153, 20.12.23.50
Excluded domains from analysis (whitelisted): ssl.gstatic.com, slscr.update.microsoft.com, clientservices.googleapis.com, identitytoolkit.googleapis.com, maps.googleapis.com, firestore.googleapis.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, www.gstatic.com, content-people-pa.googleapis.com, www.google-analytics.com, client.wns.windows.com, fonts.googleapis.com, content-sheets.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, fonts.gstatic.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/ryl1d6fWDPQ

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 24, 2025 14:35:33.245429993 CET	53	62010	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:33.307328939 CET	53	52932	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:34.341949940 CET	53	61013	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:37.271929026 CET	54156	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:37.272047997 CET	53284	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:37.279073954 CET	53	53284	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:37.279134035 CET	53	54156	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:39.087878942 CET	64008	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:39.088179111 CET	56243	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:39.095494986 CET	53	64008	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:39.095848083 CET	53	56243	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:39.779355049 CET	65144	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:39.779517889 CET	63300	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:39.787194014 CET	53	63300	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:39.787774086 CET	53	65144	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:42.135891914 CET	53	49215	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:42.157375097 CET	61691	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:42.157659054 CET	58795	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:42.164624929 CET	53	61691	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:42.164753914 CET	53	58795	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:42.397783041 CET	53	62998	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:43.147924900 CET	56456	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:43.148194075 CET	50431	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:43.155251026 CET	53	56456	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:43.156805992 CET	53	50431	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:43.963907003 CET	53	55862	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:44.329013109 CET	53	63263	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:44.349575043 CET	53	51604	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:44.546804905 CET	58100	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:44.547128916 CET	59085	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:44.554145098 CET	53	58100	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:44.554656029 CET	53	59085	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:45.087898970 CET	53	57147	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:45.772187948 CET	53	56339	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:46.156785011 CET	53	59236	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:46.267512083 CET	53	53099	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:51.468764067 CET	53	62353	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:57.276658058 CET	53	51388	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:58.205678940 CET	64204	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:58.205833912 CET	61781	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:58.212796926 CET	53	64204	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:58.212944984 CET	53	61781	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:58.898170948 CET	58966	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:58.898319006 CET	64810	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:58.905740023 CET	53	58966	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:58.920881033 CET	53	64810	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:58.927545071 CET	53	49503	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:59.025733948 CET	53	50538	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:59.753043890 CET	54330	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:59.753328085 CET	61134	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:35:59.760500908 CET	53	54330	1.1.1.1	192.168.2.6
Feb 24, 2025 14:35:59.760709047 CET	53	61134	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:01.055809975 CET	53	57457	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:01.067222118 CET	53	61633	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:02.334259987 CET	53	62602	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:03.087791920 CET	62393	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:03.087990999 CET	50982	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:03.095210075 CET	53	62393	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:03.095626116 CET	53	50982	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:04.073982000 CET	53	51964	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:05.833430052 CET	53	57259	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:05.838629007 CET	53	55025	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:06.858391047 CET	53	52427	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:07.948532104 CET	53	58456	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:10.234466076 CET	53	63619	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:10.978929043 CET	62305	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:10.979161978 CET	56214	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:10.987936974 CET	53	62305	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:10.988032103 CET	53	56214	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:12.397515059 CET	54554	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:12.397969007 CET	62573	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:12.406757116 CET	53	62573	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:12.408756971 CET	53	54554	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:12.721333981 CET	64155	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:12.721678972 CET	55615	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:12.722950935 CET	54228	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:12.723157883 CET	52553	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:12.729085922 CET	53	64155	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:12.729203939 CET	53	55615	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:12.730319977 CET	53	54228	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:12.731338978 CET	53	52553	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:13.368381977 CET	61742	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:13.369060993 CET	49939	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:13.375715017 CET	53	61742	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:13.376616001 CET	53	49939	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:14.068506002 CET	63007	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:14.068609953 CET	55123	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:14.076313972 CET	53	63007	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:14.077043056 CET	53	55123	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:14.176136017 CET	59244	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:14.179924011 CET	55120	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:14.183504105 CET	53	59244	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:14.187903881 CET	53	55120	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:17.277358055 CET	61948	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:17.277476072 CET	50844	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:17.285046101 CET	53	50844	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:17.285089970 CET	53	61948	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:24.613193989 CET	58793	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:24.613317013 CET	62942	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:24.634615898 CET	53	62942	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:24.643006086 CET	53	58793	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.410430908 CET	55560	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.410763025 CET	56974	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.411554098 CET	58021	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.412031889 CET	57421	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.412504911 CET	59971	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.412640095 CET	55318	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.413587093 CET	56807	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.413808107 CET	55245	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.414172888 CET	64074	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.414321899 CET	64465	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:26.417638063 CET	53	55560	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.417793036 CET	53	56974	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.418692112 CET	53	58021	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.419456959 CET	53	57421	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.419635057 CET	53	59971	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.420032978 CET	53	55318	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.420440912 CET	53	57720	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.420572996 CET	53	56807	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.421016932 CET	53	55245	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.583909988 CET	53	64465	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:26.760962009 CET	53	64074	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.168179035 CET	64001	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.168441057 CET	65299	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.175625086 CET	53	65299	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.175661087 CET	53	64001	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.187957048 CET	60202	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.188167095 CET	59256	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.195108891 CET	53	59256	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.195123911 CET	53	60202	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.226461887 CET	63978	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.229872942 CET	57491	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.233838081 CET	53	63978	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.237216949 CET	53	57491	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.278240919 CET	55643	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.278664112 CET	56993	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:27.285294056 CET	53	55643	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.286485910 CET	53	56993	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:27.591598988 CET	53	56850	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:29.138078928 CET	63646	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:29.138314962 CET	63602	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:29.142204046 CET	58377	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:29.142374992 CET	55386	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:29.337735891 CET	53	58377	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:29.506268978 CET	53	55386	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:29.630008936 CET	53	63602	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:29.650954962 CET	61149	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:29.654382944 CET	58218	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:29.869102001 CET	53	63646	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:29.897245884 CET	53	58218	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:30.075524092 CET	53	61149	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:33.884422064 CET	53	62924	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:33.884951115 CET	53	53175	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:33.885242939 CET	53	50289	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:34.219703913 CET	60948	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:34.219846964 CET	59174	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:34.478019953 CET	53	59174	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:34.559504986 CET	53	60948	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:37.507999897 CET	54657	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:37.508397102 CET	59273	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:37.509515047 CET	54164	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:37.509660006 CET	63400	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:37.515168905 CET	53	54657	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:37.515796900 CET	53	59273	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:37.516565084 CET	53	54164	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:37.517196894 CET	53	63400	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:37.555377007 CET	53	49632	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:38.462757111 CET	59097	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:38.462908030 CET	58273	53	192.168.2.6	1.1.1.1
Feb 24, 2025 14:36:38.470938921 CET	53	58273	1.1.1.1	192.168.2.6
Feb 24, 2025 14:36:38.471004009 CET	53	59097	1.1.1.1	192.168.2.6

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 24, 2025 14:35:58.920953035 CET	192.168.2.6	1.1.1.1	c221	(Port unreachable)	Destination Unreachable
Feb 24, 2025 14:36:12.408828974 CET	192.168.2.6	1.1.1.1	c261	(Port unreachable)	Destination Unreachable
Feb 24, 2025 14:36:24.643074989 CET	192.168.2.6	1.1.1.1	c261	(Port unreachable)	Destination Unreachable
Feb 24, 2025 14:36:29.897317886 CET	192.168.2.6	1.1.1.1	c243	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:34 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 71 75 44 34 44 50 38 51 65 45 71 76 72 64 72 4b 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 36 63 39 63 66 61 35 61 37 31 63 38 61 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: quD4DP8QeEqvrdrK.1Context: 8a6c9cfa5a71c8a1
2025-02-24 13:35:34 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-02-24 13:35:34 UTC	1364	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 33 34 31 0d 0a 4d 53 2d 43 56 3a 20 71 75 44 34 44 50 38 51 65 45 71 76 72 64 72 4b 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 36 63 39 63 66 61 35 61 37 31 63 38 61 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 49 41 2b 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 6a 6e 67 36 2f 75 53 45 34 41 50 47 33 71 4c 75 72 2f 64 45 31 55 6f 71 64 58 77 39 47 63 6a 61 39 78 4d 45 61 44 31 41 63 38 33 76 2f 2f 7a 46 75 33 2f 58 4d 64 48 46 73 62 70 73 36 59 58 6d 65 35 47 33 76 33 6f 5a 51 6f 51 31 78 32 41 68 75 58 34 4d 6d 78 47 6b 6a 42 43 42 6d 46 72 55 2f 4e 6d 6c 4a 47 6f 4d 6f 72 38 2f Data Ascii: ATH 2 CON\DEVICE 1341MS-CV: quD4DP8QeEqvrdrK.2Context: 8a6c9cfa5a71c8a1<device><compact-ticket>t=EwCIA+pIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASjng6/uSE4APG3qLur/dE1UoqdXw9Gcja9xMEaD1Ac83v//zFu3/XMdHFsbps6YXme5G3v3oZQoQ1x2AhuX4MmxGkjBCBmFrU/NmlJGoMor8/
2025-02-24 13:35:34 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 71 75 44 34 44 50 38 51 65 45 71 76 72 64 72 4b 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 38 61 36 63 39 63 66 61 35 61 37 31 63 38 61 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: quD4DP8QeEqvrdrK.3Context: 8a6c9cfa5a71c8a1<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-02-24 13:35:34 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-02-24 13:35:34 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 41 62 61 71 58 32 50 71 57 6b 57 67 4c 35 76 6b 52 41 65 6f 70 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: AbaqX2PqWkWgL5vkRAeopg.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:40 UTC	679	OUT	GET /s/ryl1d6fWDPQ HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 13:35:40 UTC	1318	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-E-KUFafpMecewhzyHYlszQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:35:40 GMT Location: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; expires=Tue, 26-Aug-2025 13:35:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:41 UTC	932	OUT	GET /reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:42 UTC	824	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-3Kpy5hY7cMVUJpKBXoaRdQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:35:41 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: unsafe-none Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:42 UTC	566	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 6c 74 72 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 2f 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 44 47 45 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 27 63 6f 6e 74 65 6e 74 2d 74 79 70 65 27 20 63 6f 6e 74 65 6e 74 3d 27 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 27 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 c2 a0 20 4f 6e 6c 69 6e 65 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir=ltr><head><base href="/"><meta http-equiv="X-UA-Compatible" content="IE=EDGE"/><meta http-equiv='content-type' content='text/html; charset=UTF-8'/><meta property="og:title" content="Microsoft Online"/><meta prope
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 3d 22 6f 67 3a 61 6c 74 22 20 63 6f 6e 74 65 6e 74 3d 22 4d 69 63 72 6f 73 6f 66 74 c2 a0 20 4f 6e 6c 69 6e 65 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 6f 6b 65 72 20 53 74 75 64 69 6f 22 2f 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 4c 6f 6f 6b 65 72 20 53 74 75 64 69 6f 20 74 75 72 6e 73 20 79 6f 75 72 20 64 61 74 61 20 69 6e 74 6f 20 69 6e 66 6f 72 6d 61 74 69 76 65 20 64 61 73 68 62 6f 61 72 64 73 20 61 6e 64 20 72 65 70 6f 72 74 73 20 74 68 61 74 20 61 72 65 20 65 61 73 79 20 74 6f 20 72 65 61 64 2c 20 65 61 73 79 20 74 6f 20 73 68 61 72 65 2c 20 61 6e 64 20 66 75 6c 6c 79 20 63 Data Ascii: ="og:alt" content="Microsoft Online"/><meta property="og:site_name" content="Looker Studio"/><meta property="og:description" content="Looker Studio turns your data into informative dashboards and reports that are easy to read, easy to share, and fully c
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 65 62 75 63 68 65 74 2b 4d 53 3a 34 30 30 69 74 61 6c 69 63 2c 37 30 30 69 74 61 6c 69 63 2c 34 30 30 2c 37 30 30 2c 35 30 30 7c 42 6f 6f 67 61 6c 6f 6f 7c 42 75 62 62 6c 65 67 75 6d 2b 53 61 6e 73 7c 43 6f 6d 69 6e 67 2b 53 6f 6f 6e 7c 43 6f 72 6d 6f 72 61 6e 74 2b 55 6e 69 63 61 73 65 3a 34 30 30 2c 37 30 30 7c 4f 6c 65 6f 2b 53 63 72 69 70 74 3a 34 30 30 2c 37 30 30 7c 50 65 72 6d 61 6e 65 6e 74 2b 4d 61 72 6b 65 72 7c 52 61 6c 65 77 61 79 3a 34 30 30 2c 34 30 30 69 2c 37 30 30 2c 37 30 30 69 7c 52 65 65 6e 69 65 2b 42 65 61 6e 69 65 7c 45 61 74 65 72 7c 47 72 65 61 74 2b 56 69 62 65 73 7c 47 6f 6f 67 6c 65 2b 53 61 6e 73 3a 34 30 30 69 74 61 6c 69 63 2c 37 30 30 69 74 61 6c 69 63 2c 34 30 30 2c 37 30 30 2c 35 30 30 7c 50 72 6f 64 75 63 74 2b 53 61 6e Data Ascii: ebuchet+MS:400italic,700italic,400,700,500\|Boogaloo\|Bubblegum+Sans\|Coming+Soon\|Cormorant+Unicase:400,700\|Oleo+Script:400,700\|Permanent+Marker\|Raleway:400,400i,700,700i\|Reenie+Beanie\|Eater\|Great+Vibes\|Google+Sans:400italic,700italic,400,700,500\|Product+San
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 5f 73 69 67 6e 65 64 5f 69 6e 27 3a 20 20 66 61 6c 73 65 20 2c 20 27 65 6d 62 65 64 64 69 6e 67 5f 73 74 61 74 75 73 27 3a 20 27 64 69 72 65 63 74 20 76 69 73 69 74 27 7d 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6a 73 2f 63 6c 69 65 6e 74 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 33 4b 70 79 35 68 59 37 63 4d 56 55 4a 70 4b 42 58 6f 61 52 64 51 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 33 4b 70 79 35 68 59 37 63 4d 56 55 4a 70 4b 42 58 6f 61 52 64 51 22 3e 77 69 6e 64 6f 77 2e 70 72 65 6c 6f 61 64 20 3d 20 4a 53 4f 4e 2e 70 61 72 73 65 28 27 5c 78 37 62 5c 78 32 32 68 65 6c 70 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 68 65 6c 70 43 65 6e 74 65 Data Ascii: _signed_in': false , 'embedding_status': 'direct visit'});</script><script src="//apis.google.com/js/client.js" nonce="3Kpy5hY7cMVUJpKBXoaRdQ"></script><script nonce="3Kpy5hY7cMVUJpKBXoaRdQ">window.preload = JSON.parse('\x7b\x22help\x22:\x7b\x22helpCente
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 61 63 6c 65 43 6f 6e 6e 65 63 74 6f 72 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 6a 64 62 63 4f 72 61 63 6c 65 43 75 73 74 6f 6d 51 75 65 72 79 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 61 64 77 6f 72 64 73 41 70 69 45 6e 74 65 72 43 75 73 74 6f 6d 65 72 49 64 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 73 68 6f 77 55 6e 6b 6e 6f 77 6e 4a 73 45 72 72 6f 72 50 6f 70 75 70 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 64 61 74 61 49 6d 70 6f 72 74 43 6f 6e 6e 65 63 74 6f 72 45 6e 61 62 6c 65 64 5c 78 32 32 3a 74 72 75 65 2c 5c 78 32 32 74 6f 73 53 75 70 70 6f 72 74 65 64 4c 61 6e 67 75 61 67 65 54 61 67 73 5c 78 32 32 3a 5c 78 35 62 5c 78 32 32 63 73 5c 78 32 32 2c 5c 78 32 32 65 6e 5c 78 Data Ascii: acleConnectorEnabled\x22:false,\x22jdbcOracleCustomQueryEnabled\x22:false,\x22adwordsApiEnterCustomerIdEnabled\x22:false,\x22showUnknownJsErrorPopup\x22:false,\x22dataImportConnectorEnabled\x22:true,\x22tosSupportedLanguageTags\x22:\x5b\x22cs\x22,\x22en\x
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 78 32 32 64 6f 75 62 6c 65 63 6c 69 63 6b 53 65 61 72 63 68 49 63 73 55 69 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 64 62 6d 49 63 73 55 69 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 74 69 6c 65 56 69 65 77 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 62 69 67 51 75 65 72 79 50 72 6f 6a 65 63 74 73 4d 61 78 43 6f 75 6e 74 5c 78 32 32 3a 5c 78 32 32 35 30 30 5c 78 32 32 2c 5c 78 32 32 6e 65 77 44 62 6d 55 69 45 6e 61 62 6c 65 64 5c 78 32 32 3a 66 61 6c 73 65 2c 5c 78 32 32 73 63 68 65 64 75 6c 65 54 69 6d 65 49 6e 74 65 72 76 61 6c 49 6e 4d 69 6e 75 74 65 5c 78 32 32 3a 5c 78 32 32 33 30 5c 78 32 32 2c 5c 78 32 32 73 63 68 65 64 75 6c 65 45 6d 61 69 6c 4d 61 78 52 65 63 69 70 69 65 6e 74 Data Ascii: x22doubleclickSearchIcsUiEnabled\x22:false,\x22dbmIcsUiEnabled\x22:false,\x22tileViewEnabled\x22:false,\x22bigQueryProjectsMaxCount\x22:\x22500\x22,\x22newDbmUiEnabled\x22:false,\x22scheduleTimeIntervalInMinute\x22:\x2230\x22,\x22scheduleEmailMaxRecipient
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 3a 5c 78 35 62 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 32 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 32 5c 78 37 64 2c 5c 78 32 32 69 73 44 65 66 61 75 6c 74 50 6f 6c 69 63 79 5c 78 32 32 3a 74 72 75 65 5c 78 37 64 5c 78 35 64 5c 78 37 64 5c 78 37 64 2c 5c 78 37 62 5c 78 32 32 6b 65 79 5c 78 32 32 3a 5c 78 32 32 67 6f 6f 67 6c 65 41 6e 61 6c 79 74 69 63 73 5c 78 32 32 2c 5c 78 32 32 76 61 6c 75 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 70 6f 6c 69 63 69 65 73 5c 78 32 32 3a 5c 78 35 62 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 Data Ascii: :\x5b\x7b\x22shelfLife\x22:\x7b\x22amount\x22:12,\x22chronoUnit\x22:2\x7d,\x22isDefaultPolicy\x22:true\x7d\x5d\x7d\x7d,\x7b\x22key\x22:\x22googleAnalytics\x22,\x22value\x22:\x7b\x22policies\x22:\x5b\x7b\x22shelfLife\x22:\x7b\x22amount\x22:1,\x22chronoUnit
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 6c 5c 78 32 32 2c 5c 78 32 32 76 61 6c 75 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 70 6f 6c 69 63 69 65 73 5c 78 32 32 3a 5c 78 35 62 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 35 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 31 5c 78 37 64 5c 78 37 64 2c 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 32 5c 78 37 64 5c 78 37 64 2c 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 34 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 32 5c 78 Data Ascii: l\x22,\x22value\x22:\x7b\x22policies\x22:\x5b\x7b\x22shelfLife\x22:\x7b\x22amount\x22:15,\x22chronoUnit\x22:1\x7d\x7d,\x7b\x22shelfLife\x22:\x7b\x22amount\x22:1,\x22chronoUnit\x22:2\x7d\x7d,\x7b\x22shelfLife\x22:\x7b\x22amount\x22:4,\x22chronoUnit\x22:2\x
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 31 5c 78 37 64 2c 5c 78 32 32 69 73 43 75 73 74 6f 6d 50 6f 6c 69 63 79 5c 78 32 32 3a 74 72 75 65 5c 78 37 64 5c 78 35 64 5c 78 37 64 5c 78 37 64 2c 5c 78 37 62 5c 78 32 32 6b 65 79 5c 78 32 32 3a 5c 78 32 32 67 63 73 5c 78 32 32 2c 5c 78 32 32 76 61 6c 75 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 70 6f 6c 69 63 69 65 73 5c 78 32 32 3a 5c 78 35 62 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 35 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 31 5c 78 37 64 5c 78 37 64 2c 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 Data Ascii: ife\x22:\x7b\x22amount\x22:1,\x22chronoUnit\x22:1\x7d,\x22isCustomPolicy\x22:true\x7d\x5d\x7d\x7d,\x7b\x22key\x22:\x22gcs\x22,\x22value\x22:\x7b\x22policies\x22:\x5b\x7b\x22shelfLife\x22:\x7b\x22amount\x22:15,\x22chronoUnit\x22:1\x7d\x7d,\x7b\x22shelfLife
2025-02-24 13:35:42 UTC	1390	IN	Data Raw: 2c 5c 78 37 62 5c 78 32 32 6b 65 79 5c 78 32 32 3a 5c 78 32 32 73 71 6c 53 65 72 76 65 72 5c 78 32 32 2c 5c 78 32 32 76 61 6c 75 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 70 6f 6c 69 63 69 65 73 5c 78 32 32 3a 5c 78 35 62 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 35 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 31 5c 78 37 64 5c 78 37 64 2c 5c 78 37 62 5c 78 32 32 73 68 65 6c 66 4c 69 66 65 5c 78 32 32 3a 5c 78 37 62 5c 78 32 32 61 6d 6f 75 6e 74 5c 78 32 32 3a 31 32 2c 5c 78 32 32 63 68 72 6f 6e 6f 55 6e 69 74 5c 78 32 32 3a 32 5c 78 37 64 2c 5c 78 32 32 69 73 44 65 66 61 75 6c 74 50 6f 6c 69 63 79 5c 78 32 32 3a 74 72 75 65 5c 78 37 64 2c 5c 78 37 62 5c 78 Data Ascii: ,\x7b\x22key\x22:\x22sqlServer\x22,\x22value\x22:\x7b\x22policies\x22:\x5b\x7b\x22shelfLife\x22:\x7b\x22amount\x22:15,\x22chronoUnit\x22:1\x7d\x7d,\x7b\x22shelfLife\x22:\x7b\x22amount\x22:12,\x22chronoUnit\x22:2\x7d,\x22isDefaultPolicy\x22:true\x7d,\x7b\x

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:43 UTC	634	OUT	GET /js/client.js HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:44 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14462 Date: Mon, 24 Feb 2025 13:35:44 GMT Expires: Mon, 24 Feb 2025 13:35:44 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "87bbe036824e6f8c" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-24 13:35:44 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d 3d 2d 31 26 26 41 2e 70 75 73 68 28 44 29 3b 2f 2a 0a 20 67 61 70 69 2e Data Ascii: rror("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)===-1&&A.push(D);/* gapi.
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 Data Ascii: ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.push(["jsl",function(a){for(var b in a)
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 Data Ascii: .replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join(""
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e 6e 6f 6e 63 65 3d 6e 75 6c 6c 3a 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3f 28 61 3d 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d Data Ascii: a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.nonce=null:F.querySelector?(a=F.querySelector("script[nonce]
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 65 74 75 72 6e 20 30 3b 45 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 71 29 3b 47 2e 70 75 73 68 2e 61 70 70 6c 79 28 47 2c 72 29 3b 76 61 72 20 43 3d 28 28 4a 7c 7c 7b 7d 29 2e 63 6f 6e 66 69 67 7c 7c 7b 7d 29 2e 75 Data Ascii: "Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)return 0;E.clearTimeout(q);G.push.apply(G,r);var C=((J\|\|{}).config\|\|{}).u
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 73 28 64 29 7d 29 2c 63 2e 66 65 61 74 75 72 65 73 3d 61 29 29 7d 5d 29 3b 51 2e 62 73 30 3d 77 69 6e 64 6f 77 2e 67 61 70 69 2e 5f 62 73 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 52 28 22 62 73 30 22 29 3b 51 2e 62 73 31 3d Data Ascii: b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].includes(d)}),c.features=a))}]);Q.bs0=window.gapi._bs\|\|(new Date).getTime();R("bs0");Q.bs1=
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 62 72 5f 73 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 73 69 6d 70 6c 65 73 63 72 6f 6c 6c 65 72 22 7d 2c 22 3a Data Ascii: fix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},rbr_s:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarsimplescroller"},":
2025-02-24 13:35:44 UTC	1390	IN	Data Raw: 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 68 61 72 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 6f 6e 65 3a 7b 70 61 72 61 6d 73 3a 7b 63 6f 75 6e 74 3a 22 22 2c 0a 73 69 7a 65 3a 22 22 2c 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a Data Ascii: rams:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_/widget/render/share?usegapi=1"},plusone:{params:{count:"",size:"",url:""},url:":socialhost:/:session_prefix::se:

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:44 UTC	933	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:44 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 24 Feb 2025 13:35:44 GMT Date: Mon, 24 Feb 2025 13:35:44 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:44 UTC	641	IN	Data Raw: 36 37 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 67b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-02-24 13:35:44 UTC	1025	IN	Data Raw: 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b Data Ascii: 5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJk
2025-02-24 13:35:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:45 UTC	703	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:45 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 24 Feb 2025 13:35:45 GMT Date: Mon, 24 Feb 2025 13:35:45 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:45 UTC	641	IN	Data Raw: 36 37 62 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 67b/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2025-02-24 13:35:45 UTC	1025	IN	Data Raw: 35 75 65 72 61 76 63 7a 65 66 2f 77 49 6c 54 6b 62 56 6b 31 71 58 51 65 73 70 33 39 6e 56 2b 78 4e 45 43 50 64 4c 42 56 65 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b Data Ascii: 5ueravczef/wIlTkbVk1qXQesp39nV+xNECPdLBVeYffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJk
2025-02-24 13:35:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:46 UTC	760	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.z-CF99wuLeU.O/m=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8yJLmK2FeQzRT4hxPn9_NEJo9eCg/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:46 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 321572 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 24 Feb 2025 07:29:16 GMT Expires: Tue, 24 Feb 2026 07:29:16 GMT Cache-Control: public, max-age=31536000 Last-Modified: Sat, 08 Feb 2025 15:22:43 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 21990 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-24 13:35:46 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 61 61 2c 65 61 2c 6c 61 2c 6f 61 2c 79 61 2c 42 61 2c 43 61 3b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var aa,ea,la,oa,ya,Ba,Ca;aa=function(a){var
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 61 22 29 3b 7d 3b 5f Data Ascii: lue;return a};la=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");};_
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 3d 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 7d 2c 73 61 3b 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 73 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 75 61 3b 61 3a 7b 76 61 72 20 77 61 3d 7b 61 3a 21 30 7d 2c 78 61 3d 7b 7d 3b 74 72 79 7b 78 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 77 61 3b 75 61 3d 78 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 75 61 3d 21 31 7d 73 61 3d 75 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 Data Ascii: unction(a){var b=function(){};b.prototype=a;return new b},sa;if(typeof Object.setPrototypeOf=="function")sa=Object.setPrototypeOf;else{var ua;a:{var wa={a:!0},xa={};try{xa.__proto__=wa;ua=xa.a;break a}catch(a){}ua=!1}sa=ua?function(a,b){a.__proto__=b;if(a
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 44 66 26 26 74 68 69 73 2e 44 66 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 44 66 3b 74 68 69 73 2e 44 66 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 6b 3d 30 3b 6b 3c 68 2e 6c 65 6e 67 74 68 3b 2b 2b 6b 29 7b 76 61 72 20 6c 3d 68 5b 6b 5d 3b 68 5b 6b 5d 3d 6e 75 6c 6c 3b 74 72 79 7b 6c 28 29 7d 63 61 74 63 68 28 6d 29 7b 74 68 69 73 2e 62 71 28 6d 29 7d 7d 7d 74 68 69 73 2e 44 66 3d 6e 75 6c 6c 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 62 71 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 71 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 68 3b 0a 7d 29 7d 3b 76 61 Data Ascii: unction(h){d(h,0)};b.prototype.k8=function(){for(;this.Df&&this.Df.length;){var h=this.Df;this.Df=[];for(var k=0;k<h.length;++k){var l=h[k];h[k]=null;try{l()}catch(m){this.bq(m)}}}this.Df=null};b.prototype.bq=function(h){this.qP(function(){throw h;})};va
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 66 69 6e 65 64 22 29 72 65 74 75 72 6e 21 30 3b 74 79 70 65 6f 66 20 68 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 68 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 74 79 70 65 6f 66 20 6b 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 68 3d 6e 65 77 20 6b 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 7b 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 3a 28 68 3d 5f 2e 6e 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 2c 68 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 22 75 6e 68 61 6e 64 6c 65 64 72 65 6a 65 63 74 69 6f 6e 22 2c 21 31 2c 21 30 2c 68 29 29 3b 68 2e 70 72 6f 6d 69 73 65 3d Data Ascii: fined")return!0;typeof h==="function"?h=new h("unhandledrejection",{cancelable:!0}):typeof k==="function"?h=new k("unhandledrejection",{cancelable:!0}):(h=_.na.document.createEvent("CustomEvent"),h.initCustomEvent("unhandledrejection",!1,!0,h));h.promise=
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 65 29 2e 71 79 28 70 28 71 2e 6c 65 6e 67 74 68 2d 0a 31 29 2c 6e 29 2c 6c 3d 6b 2e 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 Data Ascii: e).qy(p(q.length-1),n),l=k.next();while(!l.done)})};return e});var Ga=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument t
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 65 28 22 66 72 65 65 7a 65 22 29 3b 65 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 65 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 2c 6b 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 74 68 69 73 2e 45 61 3d 28 68 2b 3d 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2b 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 3b 69 66 28 6c 29 7b 6c 3d 5f 2e 41 61 28 6c 29 3b 66 6f 72 28 76 61 72 20 6d 3b 21 28 6d 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6d 3d 6d 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e Data Ascii: tch(p){return!1}}())return a;var f="$jscomp_hidden_"+Math.random();e("freeze");e("preventExtensions");e("seal");var h=0,k=function(l){this.Ea=(h+=Math.random()+1).toString();if(l){l=_.Aa(l);for(var m;!(m=l.next()).done;)m=m.value,this.set(m[0],m[1])}};k.
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 65 3a 6c 7d 2c 6d 2e 6c 69 73 74 2e 70 75 73 68 28 6d 2e 5a 65 29 2c 74 68 69 73 5b 31 5d 2e 4d 6b 2e 6e 65 78 74 3d 6d 2e 5a 65 2c 74 68 69 73 5b 31 5d 2e 4d 6b 3d 6d 2e 5a 65 2c 74 68 69 73 2e 73 69 7a 65 2b 2b 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 3d 64 28 74 68 69 73 2c 6b 29 3b 72 65 74 75 72 6e 20 6b 2e 5a 65 26 26 6b 2e 6c 69 73 74 3f 28 6b 2e 6c 69 73 74 2e 73 70 6c 69 63 65 28 6b 2e 69 6e 64 65 78 2c 31 29 2c 6b 2e 6c 69 73 74 2e 6c 65 6e 67 74 68 7c 7c 64 65 6c 65 74 65 20 74 68 69 73 5b 30 5d 5b 6b 2e 69 64 5d 2c 6b 2e 5a 65 2e 4d 6b 2e 6e 65 78 74 3d 6b 2e 5a 65 2e 6e 65 78 74 2c 6b 2e 5a 65 2e 6e 65 78 74 2e 4d 6b 3d 0a 6b 2e 5a 65 2e 4d 6b Data Ascii: e:l},m.list.push(m.Ze),this[1].Mk.next=m.Ze,this[1].Mk=m.Ze,this.size++);return this};c.prototype.delete=function(k){k=d(this,k);return k.Ze&&k.list?(k.list.splice(k.index,1),k.list.length\|\|delete this[0][k.id],k.Ze.Mk.next=k.Ze.next,k.Ze.next.Mk=k.Ze.Mk
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 2c 68 3d 30 3b 72 65 74 75 72 6e 20 63 7d 29 3b 0a 6f 61 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 63 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 64 3d 6e 65 77 20 61 28 5f 2e 41 61 28 5b 63 5d 29 29 3b 69 66 28 21 64 2e 68 61 73 28 63 29 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 63 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 Data Ascii: ,h=0;return c});oa("Set",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var c=Object.seal({x:4}),d=new a(_.Aa([c]));if(!d.has(c)\|\|d.size!=1\|\|d.add(c)!=d\|\|d.size!=1\|\|d.add({x:4})!=d
2025-02-24 13:35:46 UTC	1390	IN	Data Raw: 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 3b 6f 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 5b 62 2c 63 5d 7d 29 7d 7d 29 3b 0a 6f 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 61 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 7d 29 7d 7d 29 3b 6f 61 28 22 53 74 Data Ascii: rator]=function(){return e};return e};oa("Array.prototype.entries",function(a){return a?a:function(){return Na(this,function(b,c){return[b,c]})}});oa("Array.prototype.keys",function(a){return a?a:function(){return Na(this,function(b){return b})}});oa("St

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:46 UTC	1199	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X&size=invisible&cb=mbbcbj3qag7x HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:47 UTC	1161	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:35:46 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-9g9SJbgKtQi10-Jo0YNAKA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:47 UTC	229	IN	Data Raw: 37 31 34 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 Data Ascii: 7145<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cy
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 41 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 Data Ascii: rillic-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C8A, U+20B4, U+2DE0-2DFF, U+A64
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 42 41 2c 20 55 2b 30 32 42 44 2d 30 32 43 35 2c 20 55 2b 30 32 43 37 2d 30 32 43 43 2c 20 55 2b 30 32 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 Data Ascii: font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/* greek */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 32 30 30 30 2d 32 30 36 46 2c 20 55 2b 32 30 41 43 2c 20 55 2b 32 31 32 32 2c 20 55 2b 32 31 39 31 2c 20 55 2b 32 31 39 33 2c 20 55 2b 32 32 31 32 2c 20 55 2b 32 32 31 35 2c 20 55 2b 46 45 46 46 2c 20 55 2b 46 46 46 44 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 Data Ascii: ormat('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}/* cyrillic-ext */@font-face { font-family: '
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 43 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 32 2d 30 31 30 33 2c 20 55 2b 30 31 31 30 2d 30 31 31 31 2c 20 55 2b 30 31 32 38 2d 30 31 32 39 2c 20 55 2b 30 31 36 38 2d 30 31 36 39 2c 20 55 2b 30 31 41 30 2d 30 31 41 31 2c 20 55 2b 30 31 41 46 2d 30 31 42 30 2c 20 55 2b 30 33 30 30 2d 30 33 30 31 2c 20 55 2b 30 33 30 33 2d 30 33 30 34 2c 20 55 2b 30 33 30 38 2d 30 33 30 39 2c 20 55 2b 30 33 32 33 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 41 30 2d 31 45 46 39 2c 20 55 2b 32 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a Data Ascii: /s/roboto/v18/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2) format('woff2'); unicode-range: U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}/* latin-ext */
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 47 72 58 72 42 64 36 69 68 4c 4f 59 47 77 79 39 58 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 39 67 39 53 4a 62 67 4b 74 51 69 31 30 2d 4a 6f 30 59 4e 41 4b 41 22 3e 0a 20 20 20 20 20 20 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 3c 64 69 76 20 69 64 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 20 63 6c 61 73 73 3d 22 72 63 2d 61 6e 63 68 6f 72 2d 61 6c 65 72 74 22 3e 3c 2f 64 69 76 3e 0a 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 72 65 63 61 70 74 63 68 61 2d 74 6f 6b 65 6e 22 20 76 61 6c 75 65 3d 22 30 33 41 46 63 57 65 41 35 6c 55 42 39 4a 50 4b 36 46 6a 53 73 5f 68 44 4d 46 35 54 4c 73 54 72 4f 41 74 67 55 65 37 32 6f 63 45 34 76 54 55 Data Ascii: GrXrBd6ihLOYGwy9X/recaptcha__en.js" nonce="9g9SJbgKtQi10-Jo0YNAKA"> </script></head><body><div id="rc-anchor-alert" class="rc-anchor-alert"></div><input type="hidden" id="recaptcha-token" value="03AFcWeA5lUB9JPK6FjSs_hDMF5TLsTrOAtgUe72ocE4vTU
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 4c 4c 34 6f 56 62 2d 5f 4a 52 46 75 45 31 51 54 4b 59 4d 56 61 4a 37 58 62 6a 44 31 6a 77 57 57 52 2d 32 64 72 69 52 59 34 51 66 2d 77 6e 59 4a 41 78 59 51 6d 4e 79 42 49 52 71 65 74 62 6a 66 35 5f 44 51 35 39 51 63 76 6f 74 72 6b 72 31 44 48 46 6b 59 5f 6c 36 68 4f 6c 55 55 44 41 33 49 67 55 38 50 67 33 53 42 46 33 52 43 43 56 31 50 5a 33 33 51 6a 65 4c 61 37 52 72 70 4d 32 5a 36 4b 6c 5f 79 77 5a 67 78 59 30 51 48 66 6a 48 50 70 34 31 77 50 65 74 41 41 6b 7a 33 33 6c 45 58 45 75 59 59 6b 48 50 55 62 74 79 39 66 42 64 70 36 35 48 59 32 69 30 77 45 35 34 39 72 35 4c 68 42 51 41 35 59 73 73 77 43 72 63 5a 74 61 59 33 73 4e 2d 69 50 4c 53 37 75 42 53 4d 63 6a 72 64 51 58 5a 4a 33 31 62 4f 65 75 33 6b 48 53 30 73 65 37 66 73 57 32 71 61 64 44 52 36 53 72 52 Data Ascii: LL4oVb-_JRFuE1QTKYMVaJ7XbjD1jwWWR-2driRY4Qf-wnYJAxYQmNyBIRqetbjf5_DQ59Qcvotrkr1DHFkY_l6hOlUUDA3IgU8Pg3SBF3RCCV1PZ33QjeLa7RrpM2Z6Kl_ywZgxY0QHfjHPp41wPetAAkz33lEXEuYYkHPUbty9fBdp65HY2i0wE549r5LhBQA5YsswCrcZtaY3sN-iPLS7uBSMcjrdQXZJ31bOeu3kHS0se7fsW2qadDR6SrR
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 75 63 32 39 73 5a 53 35 6c 63 6e 4a 76 63 69 68 43 4c 6d 31 6c 63 33 4e 68 5a 32 55 70 66 58 4a 6c 64 48 56 79 62 69 42 51 66 53 78 6d 50 58 52 6f 61 58 4e 38 66 48 4e 6c 62 47 59 37 4b 44 41 73 5a 58 5a 68 62 43 6b 6f 5a 6e 56 75 59 33 52 70 62 32 34 6f 55 43 78 69 4b 58 74 79 5a 58 52 31 63 6d 34 6f 59 6a 31 32 4b 43 6b 70 4a 69 5a 51 4c 6d 56 32 59 57 77 6f 59 69 35 6a 63 6d 56 68 64 47 56 54 59 33 4a 70 63 48 51 6f 49 6a 45 69 4b 53 6b 39 50 54 30 78 50 32 5a 31 62 6d 4e 30 61 57 39 75 4b 45 49 70 65 33 4a 6c 64 48 56 79 62 69 42 69 4c 6d 4e 79 5a 57 46 30 5a 56 4e 6a 63 6d 6c 77 64 43 68 43 4b 58 30 36 5a 6e 56 75 59 33 52 70 62 32 34 6f 51 69 6c 37 63 6d 56 30 64 58 4a 75 49 69 49 72 51 6e 31 39 4b 47 59 70 4b 45 46 79 63 6d 46 35 4b 45 31 68 64 47 Data Ascii: uc29sZS5lcnJvcihCLm1lc3NhZ2UpfXJldHVybiBQfSxmPXRoaXN8fHNlbGY7KDAsZXZhbCkoZnVuY3Rpb24oUCxiKXtyZXR1cm4oYj12KCkpJiZQLmV2YWwoYi5jcmVhdGVTY3JpcHQoIjEiKSk9PT0xP2Z1bmN0aW9uKEIpe3JldHVybiBiLmNyZWF0ZVNjcmlwdChCKX06ZnVuY3Rpb24oQil7cmV0dXJuIiIrQn19KGYpKEFycmF5KE1hdG
2025-02-24 13:35:47 UTC	1390	IN	Data Raw: 58 74 70 5a 69 68 51 4c 6d 78 6c 62 6d 64 30 61 44 30 39 4d 79 6c 37 5a 6d 39 79 4b 47 59 39 4d 44 74 6d 50 44 4d 37 5a 69 73 72 4b 57 4a 62 5a 6c 30 72 50 56 42 62 5a 6c 30 37 5a 6d 39 79 4b 47 59 39 57 7a 45 7a 4c 44 67 73 4d 54 4d 73 4d 54 49 73 4d 54 59 73 4b 46 41 39 4d 43 77 31 4b 53 77 7a 4c 44 45 77 4c 44 45 31 58 54 74 51 50 44 6b 37 55 43 73 72 4b 57 4a 62 4d 31 30 6f 59 69 78 51 4a 54 4d 73 5a 6c 74 51 58 53 6c 39 66 53 78 71 64 7a 31 6d 64 57 35 6a 64 47 6c 76 62 69 68 51 4c 47 49 70 65 31 41 75 56 79 35 73 5a 57 35 6e 64 47 67 2b 4d 54 41 30 50 32 34 6f 55 43 78 62 63 53 77 7a 4e 6c 30 73 4d 43 6b 36 4b 46 41 75 56 79 35 77 64 58 4e 6f 4b 46 41 75 56 69 35 7a 62 47 6c 6a 5a 53 67 70 4b 53 78 51 4c 6c 5a 62 4e 44 55 30 58 54 31 32 62 32 6c 6b Data Ascii: XtpZihQLmxlbmd0aD09Myl7Zm9yKGY9MDtmPDM7ZisrKWJbZl0rPVBbZl07Zm9yKGY9WzEzLDgsMTMsMTIsMTYsKFA9MCw1KSwzLDEwLDE1XTtQPDk7UCsrKWJbM10oYixQJTMsZltQXSl9fSxqdz1mdW5jdGlvbihQLGIpe1AuVy5sZW5ndGg+MTA0P24oUCxbcSwzNl0sMCk6KFAuVy5wdXNoKFAuVi5zbGljZSgpKSxQLlZbNDU0XT12b2lk

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:48 UTC	1093	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X&size=invisible&cb=mbbcbj3qag7x Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:49 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Mon, 24 Feb 2025 13:35:49 GMT Date: Mon, 24 Feb 2025 13:35:49 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:49 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 49 79 5a 39 38 34 79 47 72 58 72 42 64 36 69 68 4c 4f 59 47 77 79 39 58 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/IyZ984yGrXrBd6ihLOYGwy9X/recaptcha__en.js');
2025-02-24 13:35:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:50 UTC	681	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=IyZ984yGrXrBd6ihLOYGwy9X HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:35:50 UTC	917	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Expires: Mon, 24 Feb 2025 13:35:50 GMT Date: Mon, 24 Feb 2025 13:35:50 GMT Cache-Control: private, max-age=300 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Cross-Origin-Resource-Policy: same-site Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:50 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 49 79 5a 39 38 34 79 47 72 58 72 42 64 36 69 68 4c 4f 59 47 77 79 39 58 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/IyZ984yGrXrBd6ihLOYGwy9X/recaptcha__en.js');
2025-02-24 13:35:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:54 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 42 46 57 62 57 73 74 73 42 6b 57 34 62 6a 74 52 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 37 32 36 63 66 65 30 36 30 33 63 33 30 31 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: BFWbWstsBkW4bjtR.1Context: 35726cfe0603c301
2025-02-24 13:35:54 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2025-02-24 13:35:54 UTC	1364	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 33 34 31 0d 0a 4d 53 2d 43 56 3a 20 42 46 57 62 57 73 74 73 42 6b 57 34 62 6a 74 52 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 37 32 36 63 66 65 30 36 30 33 63 33 30 31 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 49 41 2b 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 53 6a 6e 67 36 2f 75 53 45 34 41 50 47 33 71 4c 75 72 2f 64 45 31 55 6f 71 64 58 77 39 47 63 6a 61 39 78 4d 45 61 44 31 41 63 38 33 76 2f 2f 7a 46 75 33 2f 58 4d 64 48 46 73 62 70 73 36 59 58 6d 65 35 47 33 76 33 6f 5a 51 6f 51 31 78 32 41 68 75 58 34 4d 6d 78 47 6b 6a 42 43 42 6d 46 72 55 2f 4e 6d 6c 4a 47 6f 4d 6f 72 38 2f Data Ascii: ATH 2 CON\DEVICE 1341MS-CV: BFWbWstsBkW4bjtR.2Context: 35726cfe0603c301<device><compact-ticket>t=EwCIA+pIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAASjng6/uSE4APG3qLur/dE1UoqdXw9Gcja9xMEaD1Ac83v//zFu3/XMdHFsbps6YXme5G3v3oZQoQ1x2AhuX4MmxGkjBCBmFrU/NmlJGoMor8/
2025-02-24 13:35:54 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 42 46 57 62 57 73 74 73 42 6b 57 34 62 6a 74 52 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 33 35 37 32 36 63 66 65 30 36 30 33 63 33 30 31 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: BFWbWstsBkW4bjtR.3Context: 35726cfe0603c301<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2025-02-24 13:35:54 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2025-02-24 13:35:54 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 57 70 42 7a 48 34 48 43 69 6b 2b 73 43 66 56 2f 44 61 30 31 75 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: WpBzH4HCik+sCfV/Da01uA.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:58 UTC	1245	OUT	POST /getReport?appVersion=20250210_0007 HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive Content-Length: 194 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 encoding: null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://lookerstudio.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111?s=ryl1d6fWDPQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404156.0.0.0; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1
2025-02-24 13:35:58 UTC	194	OUT	Data Raw: 7b 22 72 65 70 6f 72 74 49 64 22 3a 22 65 39 32 34 35 35 36 34 2d 35 32 62 66 2d 34 62 34 38 2d 39 31 31 35 2d 64 65 61 36 66 32 31 35 32 31 31 31 22 2c 22 69 6e 63 6c 75 64 65 50 61 67 65 73 22 3a 74 72 75 65 2c 22 75 70 64 61 74 65 56 69 65 77 65 64 44 61 74 65 22 3a 74 72 75 65 2c 22 75 70 64 61 74 65 46 69 72 65 73 74 6f 72 65 22 3a 74 72 75 65 2c 22 64 72 61 66 74 52 65 71 75 65 73 74 4d 6f 64 65 22 3a 30 2c 22 73 68 6f 72 74 4c 69 6e 6b 49 64 22 3a 22 72 79 6c 31 64 36 66 57 44 50 51 22 2c 22 6d 6f 62 69 6c 65 46 72 69 65 6e 64 6c 79 56 69 65 77 22 3a 66 61 6c 73 65 7d Data Ascii: {"reportId":"e9245564-52bf-4b48-9115-dea6f2152111","includePages":true,"updateViewedDate":true,"updateFirestore":true,"draftRequestMode":0,"shortLinkId":"ryl1d6fWDPQ","mobileFriendlyView":false}
2025-02-24 13:35:58 UTC	945	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-4KeVu5XHbrYxwisOsJwkvg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:35:58 GMT Content-Disposition: attachment; filename="json.txt" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:58 UTC	445	IN	Data Raw: 63 65 36 0d 0a 29 5d 7d 27 0a 0a 7b 22 72 65 70 6f 72 74 43 6f 6e 66 69 67 22 3a 7b 22 73 68 61 72 65 61 62 6c 65 22 3a 7b 22 69 64 22 3a 22 65 39 32 34 35 35 36 34 2d 35 32 62 66 2d 34 62 34 38 2d 39 31 31 35 2d 64 65 61 36 66 32 31 35 32 31 31 31 22 2c 22 74 79 70 65 22 3a 30 2c 22 61 63 6c 4d 6f 64 65 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 4d 69 63 72 6f 73 6f 66 74 5c 75 30 30 61 30 20 4f 6e 6c 69 6e 65 22 2c 22 63 6f 70 79 61 62 6c 65 22 3a 74 72 75 65 2c 22 64 6f 77 6e 6c 6f 61 64 61 62 6c 65 22 3a 74 72 75 65 2c 22 73 63 68 65 64 75 6c 61 62 6c 65 22 3a 66 61 6c 73 65 2c 22 61 6c 65 72 74 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 67 65 6e 65 72 61 74 65 53 6c 69 64 65 73 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 63 61 6e 55 73 65 41 64 76 61 6e Data Ascii: ce6)]}'{"reportConfig":{"shareable":{"id":"e9245564-52bf-4b48-9115-dea6f2152111","type":0,"aclMode":2,"name":"Microsoft\u00a0 Online","copyable":true,"downloadable":true,"schedulable":false,"alertEnabled":true,"generateSlidesEnabled":true,"canUseAdvan
2025-02-24 13:35:58 UTC	1390	IN	Data Raw: 64 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2d 63 6f 6d 70 6f 6e 65 6e 74 22 2c 22 62 65 68 61 76 69 6f 72 22 3a 7b 22 6d 61 70 56 61 6c 75 65 22 3a 7b 22 65 6e 74 72 79 22 3a 5b 5d 7d 7d 2c 22 63 6f 6d 70 6f 6e 65 6e 74 43 6f 6e 66 69 67 22 3a 5b 5d 2c 22 70 72 65 73 65 74 22 3a 22 64 65 66 61 75 6c 74 22 2c 22 61 74 74 72 69 62 75 74 65 43 6f 6e 66 69 67 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 41 74 74 72 69 62 75 74 65 22 3a 7b 22 64 61 74 61 73 6f 75 72 63 65 43 6f 6e 66 69 67 56 65 72 73 69 6f 6e 22 3a 32 2c 22 64 69 73 70 6c 61 79 43 6f 6e 66 69 67 56 65 72 73 69 6f 6e 22 3a 30 2c 22 68 65 69 67 68 74 22 3a 35 32 37 2c 22 77 69 64 74 68 22 3a 36 31 36 2c 22 74 6f 70 22 3a 33 35 2c 22 6c 65 66 74 22 3a 32 31 30 2c 22 66 6c 69 70 48 6f 72 69 7a 6f Data Ascii: d","type":"image-component","behavior":{"mapValue":{"entry":[]}},"componentConfig":[],"preset":"default","attributeConfig":{"componentAttribute":{"datasourceConfigVersion":2,"displayConfigVersion":0,"height":527,"width":616,"top":35,"left":210,"flipHorizo
2025-02-24 13:35:58 UTC	1390	IN	Data Raw: 72 63 65 43 6f 6e 66 69 67 56 65 72 73 69 6f 6e 22 3a 32 2c 22 64 69 73 70 6c 61 79 43 6f 6e 66 69 67 56 65 72 73 69 6f 6e 22 3a 30 2c 22 6e 61 6d 65 22 3a 22 55 6e 74 69 74 6c 65 64 20 50 61 67 65 22 7d 7d 2c 22 70 72 6f 70 65 72 74 79 43 6f 6e 66 69 67 22 3a 7b 22 70 61 67 65 50 72 6f 70 65 72 74 79 22 3a 7b 22 66 69 6c 74 65 72 73 22 3a 5b 5d 2c 22 69 6e 68 65 72 69 74 46 69 6c 74 65 72 73 22 3a 74 72 75 65 7d 7d 2c 22 63 6f 6e 63 65 70 74 44 65 66 73 22 3a 5b 5d 7d 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 30 2c 22 76 65 72 73 69 6f 6e 22 3a 22 31 37 34 30 33 39 32 38 38 34 32 35 32 22 2c 22 63 68 61 72 74 43 6f 6e 64 69 74 69 6f 6e 22 3a 5b 5d 7d 5d 2c 22 72 65 70 6f 72 74 22 3a 7b 22 63 6f 6d 70 6f 6e 65 6e 74 43 6f 6e 66 69 67 22 3a 5b 5d 2c 22 72 65 73 Data Ascii: rceConfigVersion":2,"displayConfigVersion":0,"name":"Untitled Page"}},"propertyConfig":{"pageProperty":{"filters":[],"inheritFilters":true}},"conceptDefs":[]},"position":0,"version":"1740392884252","chartCondition":[]}],"report":{"componentConfig":[],"res
2025-02-24 13:35:58 UTC	84	IN	Data Raw: 69 64 65 73 22 3a 5b 5d 7d 2c 22 74 79 70 65 22 3a 30 7d 5d 2c 22 61 63 74 69 76 65 49 64 22 3a 22 72 79 6c 31 64 36 66 57 44 50 51 22 7d 2c 22 69 6f 67 22 3a 66 61 6c 73 65 2c 22 70 61 72 65 6e 74 57 6f 72 6b 73 70 61 63 65 49 64 22 3a 22 22 7d 0d 0a Data Ascii: ides":[]},"type":0}],"activeId":"ryl1d6fWDPQ"},"iog":false,"parentWorkspaceId":""}
2025-02-24 13:35:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:59 UTC	816	OUT	GET /getReport?appVersion=20250210_0007 HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404156.0.0.0; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1
2025-02-24 13:35:59 UTC	678	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:35:59 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: attachment; filename="json.txt" Cross-Origin-Opener-Policy: same-origin-allow-popups Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:35:59 UTC	37	IN	Data Raw: 31 66 0d 0a 29 5d 7d 27 0a 7b 22 65 72 72 6f 72 53 74 61 74 75 73 22 3a 7b 22 63 6f 64 65 22 3a 39 7d 7d 0d 0a Data Ascii: 1f)]}'{"errorStatus":{"code":9}}
2025-02-24 13:35:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:59 UTC	1283	OUT	GET /external HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Referer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
2025-02-24 13:36:00 UTC	843	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Frame-Options: SAMEORIGIN Content-Security-Policy: script-src 'report-sample' 'nonce-M0L6E3vx4JPpM1W7FyCW7w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'self' Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:35:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:00 UTC	547	IN	Data Raw: 34 37 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 44 47 45 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 2f 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 22 3e 3c 69 66 72 61 6d 65 20 69 64 3d 22 65 6d 62 65 64 64 65 64 2d 63 6f 6e 74 65 6e 74 22 20 73 74 79 6c 65 3d 22 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 76 77 3b 68 65 69 Data Ascii: 473<!DOCTYPE html><html><head><meta http-equiv="X-UA-Compatible" content="IE=EDGE"/><meta http-equiv="content-type" content="text/html; charset=UTF-8"/></head><body style="margin:0;"><iframe id="embedded-content" style="position:absolute;width:100vw;hei
2025-02-24 13:36:00 UTC	599	IN	Data Raw: 20 20 20 66 75 6e 63 74 69 6f 6e 20 72 65 63 65 69 76 65 4d 65 73 73 61 67 65 28 65 76 65 6e 74 29 20 7b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 69 6e 64 6f 77 4f 72 69 67 69 6e 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f 6c 20 2b 20 27 2f 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 65 76 65 6e 74 2e 6f 72 69 67 69 6e 20 3d 3d 3d 20 77 69 6e 64 6f 77 4f 72 69 67 69 6e 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 2f 2f 20 41 6e 74 69 63 69 70 61 74 65 20 6d 75 6c 74 69 70 6c 65 20 70 6f 73 74 4d 65 73 73 61 67 65 20 65 76 65 6e 74 73 20 77 69 74 68 20 74 68 65 20 73 61 6d 65 20 55 52 4c 20 2d 20 6f 6e 6c 79 20 75 70 64 61 74 65 20 66 72 61 6d 65 0a 20 Data Ascii: function receiveMessage(event) { var windowOrigin = window.location.protocol + '//' + window.location.host; if (event.origin === windowOrigin) { // Anticipate multiple postMessage events with the same URL - only update frame
2025-02-24 13:36:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:59 UTC	1360	OUT	GET /getImageV2?reportId=e9245564-52bf-4b48-9115-dea6f2152111&id=ADpgoFXfm2sWSr%2FLnjDpZ1EbMc20Ehx4xBqWXNljjhIp55VW2hpjcJ8HTLaDDX4chxoq9G09hFd%2BG3SFc5vLyfc90n3RwS0XVjZ%2F4p8FdFHNaicjBVfm%2FVuEHsJ19TLhcpZ2grceE2udRB4qpgwX6LXtwkDuhSmGxwv9ozBFB7k%3D HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
2025-02-24 13:36:00 UTC	905	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-mccjWm_4sj_gqOjn81PSbA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' X-Content-Type-Options: nosniff Expires: Mon, 24 Feb 2025 13:36:00 GMT Date: Mon, 24 Feb 2025 13:36:00 GMT Cache-Control: private, max-age=2592000 Content-Disposition: attachment; filename="json.txt" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:00 UTC	485	IN	Data Raw: 33 66 38 62 0d 0a 29 5d 7d 27 0a 7b 22 70 61 79 6c 6f 61 64 22 3a 22 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 64 63 41 41 41 47 54 43 41 49 41 41 41 44 31 4c 38 5f 73 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 4b 4d 71 53 55 52 42 56 48 68 65 37 62 30 48 51 46 52 5a 75 6a 55 36 5f 33 5f 66 65 5f 65 39 4f 33 50 5f 75 54 4f 64 34 33 54 33 39 50 52 30 54 75 5a 4d 4c 48 49 77 5a 30 56 52 54 42 6a 49 56 41 49 45 78 42 77 77 35 35 78 7a 7a 6a 6b 6a 67 6d 53 4b 71 71 4c 49 69 43 4b 43 45 69 73 41 62 2d 31 7a 69 72 4a 45 62 52 56 4c 6f 66 41 37 73 32 66 33 73 54 68 68 Data Ascii: 3f8b)]}'{"payload":"iVBORw0KGgoAAAANSUhEUgAAAdcAAAGTCAIAAAD1L8_sAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAKMqSURBVHhe7b0HQFRZujU6_3_fe_e9O3P_uTOd43T39PR0TuZMLHIwZ0VRTBjIVAIExBww55xzzjkjgmSKqqLIiCKCEisAb-1zirJEbRVLofA7s2f3sThh
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 42 5a 47 62 6a 34 7a 52 43 78 4b 56 6e 59 6d 49 4c 35 33 79 66 34 67 30 4f 6a 30 62 78 78 47 4f 6d 47 68 41 41 68 51 41 69 38 45 67 49 67 4c 74 41 58 7a 32 4f 76 32 79 49 32 47 51 73 54 42 62 5f 53 6e 4e 50 4a 68 41 41 68 30 4d 49 51 65 47 4e 45 62 47 49 57 4e 67 6a 42 2d 44 56 53 56 56 58 56 77 6c 43 6c 34 52 41 43 68 41 41 68 38 42 49 49 67 4d 53 65 74 49 68 4e 4c 68 43 62 68 6f 56 35 51 39 6a 67 6a 73 4f 34 53 30 74 4c 53 51 74 2d 69 64 6d 6d 51 77 6b 42 51 71 44 6c 49 51 41 53 41 35 58 78 52 47 79 73 45 5a 75 57 69 45 33 41 77 6f 32 30 43 4a 36 43 79 52 42 75 65 57 38 55 6a 59 67 51 49 41 52 65 47 67 46 51 6d 54 45 52 76 34 36 51 43 5a 4f 78 73 45 47 4c 77 49 6a 76 33 37 2d 50 6d 49 2d 58 66 6c 77 36 67 52 41 67 42 41 69 42 46 6f 59 41 71 41 79 45 42 Data Ascii: BZGbj4zRCxKVnYmIL53yf4g0Oj0bxxGOmGhAAhQAi8EgIgLtAXz2Ov2yI2GQsTBb_SnNPJhAAh0MIQeGNEbGIWNgjB-DVSVVXVwlCl4RAChAAh8BIIgMSetIhNLhCbhoV5Q9jgjsO4S0tLSQt-idmmQwkBQqDlIQASA5XxRGysEZuWiE3Awo20CJ6CyRBueW8UjYgQIAReGgFQmTERv46QCZOxsEGLwIjv37-PmI-Xflw6gRAgBAiBFoYAqAyEB
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 4f 79 30 65 54 78 72 67 6d 30 4f 41 57 50 6a 4e 59 55 31 33 65 6e 30 49 63 50 54 4c 4c 6d 5f 67 74 34 59 64 6a 70 63 68 52 74 54 58 36 39 53 31 39 54 70 64 66 58 31 31 51 76 59 39 37 37 43 54 76 5f 54 65 38 38 50 67 34 35 30 38 7a 39 71 4f 76 32 7a 74 64 61 37 37 71 4d 74 57 34 2d 4f 74 78 38 64 61 65 6c 32 78 48 6e 76 56 30 6a 76 57 77 76 75 6d 68 58 65 73 35 63 53 62 56 70 50 69 62 48 32 54 4c 53 62 65 73 70 79 53 4a 50 42 58 43 49 49 7a 72 43 4a 76 57 6f 68 56 6e 62 77 56 58 53 66 66 6d 4c 77 36 35 55 59 75 6d 42 30 47 73 41 61 4b 52 4c 30 57 6c 4d 5f 54 4c 54 38 67 5f 55 4d 54 38 37 36 2d 32 54 66 33 4b 78 4d 4c 6d 5f 73 4d 30 76 68 35 42 41 79 32 73 4c 61 75 44 74 59 6f 45 32 64 72 61 78 6e 37 77 69 72 46 54 71 30 4f 2d 6f 50 6d 59 61 56 6d 34 64 71 Data Ascii: Oy0eTxrgm0OAWPjNYU13en0IcPTLLm_gt4YdjpchRtTX69S19TpdfX11QvY977CTv_Te88Pg4508z9qOv2ztda77qMtW4-Otx8dael2xHnvV0jvWwvumhXes5cSbVpPibH2TLSbespySJPBXCIIzrCJvWohVnbwVXSffmLw65UYumB0GsAaKRL0WlM_TLT8g_UMT876-2Tf3KxMLm_sM0vh5BAy2sLauDtYoE2draxn7wirFTq0O-oPmYaVm4dq
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 62 66 2d 6d 33 75 4d 47 68 58 5a 39 6a 43 51 34 35 33 48 58 61 69 79 34 6a 47 4c 41 78 62 32 47 6f 43 6b 79 4e 73 6f 41 68 50 6a 72 50 78 75 57 55 44 4f 63 49 5f 30 53 59 41 68 6e 43 69 62 58 43 53 72 53 6a 5a 56 67 51 69 54 72 4b 52 70 74 69 43 67 6b 50 53 72 63 4f 54 75 73 2d 34 61 52 55 68 73 77 6e 4e 64 4a 36 75 63 70 71 52 34 54 41 6a 33 58 6d 75 77 6d 4a 36 55 72 76 70 53 72 39 74 71 6f 7a 62 35 51 78 69 61 4d 51 61 54 59 31 47 79 36 49 31 74 48 41 68 77 6f 64 49 74 72 42 35 76 6e 75 6d 48 6a 57 78 73 4b 6b 52 70 65 75 39 45 51 51 65 5f 56 31 66 71 39 5a 70 74 44 71 4e 44 6e 6c 73 4d 44 7a 4c 53 6d 71 75 6e 79 68 61 45 53 70 66 49 53 70 59 48 4a 62 6a 30 47 76 4e 7a 78 61 7a 32 5f 64 63 39 5a 76 72 38 6f 35 39 4e 6e 58 73 75 37 33 54 67 46 31 64 42 Data Ascii: bf-m3uMGhXZ9jCQ453HXaiy4jGLAxb2GoCkyNsoAhPjrPxuWUDOcI_0SYAhnCibXCSrSjZVgQiTrKRptiCgkPSrcOTus-4aRUhswnNdJ6ucpqR4TAj3XmuwmJ6UrvpSr9tqozb5QxiaMQaTY1Gy6I1tHAhwodItrB5vnumHjWxsKkRpeu9EQQe_V1fq9ZptDqNDnlsMDzLSmqunyhaESpfISpYHJbj0GvNzxaz2_dc9Zvr8o59NnXsu73TgF1dB
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 70 54 4e 46 47 49 62 77 6a 48 54 62 6d 56 43 45 4d 36 41 49 4d 79 4b 65 70 78 44 4d 55 7a 70 46 4b 78 77 58 79 4f 77 57 4b 6d 32 69 35 62 59 4c 5a 62 5a 4c 35 4e 32 58 35 33 5a 65 72 42 71 39 49 66 6d 4d 38 6a 35 2d 69 65 42 42 71 72 52 31 74 52 72 38 59 74 48 69 77 62 6a 48 34 71 70 65 4d 48 38 6a 46 5a 31 34 4b 37 34 53 78 4d 4a 76 78 54 53 62 36 55 50 71 6f 32 73 52 62 61 74 42 2d 6b 4d 46 5f 47 2d 31 4b 49 7a 47 4a 49 6a 61 30 73 4b 4b 30 78 75 56 36 34 4a 56 47 30 58 5a 57 30 4e 7a 4e 34 64 6b 62 35 4a 6d 62 51 7a 4a 33 52 61 63 74 32 64 71 6a 6b 50 50 35 56 39 59 68 50 31 6d 4d 65 4e 6e 77 63 7a 66 37 42 65 30 64 56 37 52 76 75 65 36 44 72 32 33 64 4f 79 37 7a 57 41 4c 64 78 31 2d 72 42 74 6e 43 33 63 64 66 62 37 62 6d 49 75 57 59 36 39 61 6a 57 4d Data Ascii: pTNFGIbwjHTbmVCEM6AIMyKepxDMUzpFKxwXyOwWKm2i5bYLZbZL5N2X53ZerBq9IfmM8j5-ieBBqrR1tRr8YtHiwbjH4qpeMH8jFZ14K74SxMJvxTSb6UPqo2sRbatB-kMF_G-1KIzGJIja0sKK0xuV64JVG0XZW0NzN4dkb5JmbQzJ3Ract2dqjkPP5V9YhP1mMeNnwczf7Be0dV7Rvue6Dr23dOy7zWALdx1-rBtnC3cdfb7bmIuWY69ajWM
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 4b 6c 49 4e 53 41 59 44 76 34 55 78 77 45 68 43 79 4d 65 67 53 69 73 52 55 78 4b 6a 51 70 70 34 75 33 52 53 72 57 2d 47 58 76 44 4c 6d 37 4b 7a 52 72 52 36 69 43 4e 56 6a 42 34 73 4a 64 49 58 6c 37 51 76 4a 33 68 2d 54 76 6b 75 59 64 6e 48 70 37 77 65 54 59 66 33 57 53 66 47 63 5a 38 6e 76 33 38 42 38 73 6f 36 42 49 50 4e 63 57 52 71 52 61 6a 7a 47 58 4c 4d 64 64 52 5a 69 61 6c 58 65 4d 31 5a 52 59 61 39 38 34 6d 34 42 62 53 4a 61 7a 43 57 49 42 77 6e 44 4b 6f 56 6c 4c 6b 32 31 67 43 45 39 4e 73 34 36 41 55 34 34 7a 68 43 45 4b 77 77 53 65 43 61 64 63 4f 6b 66 42 47 54 62 7a 35 62 59 51 49 68 59 6f 62 45 48 42 69 7a 4c 74 46 71 6e 73 6c 71 67 45 53 35 57 43 70 5a 6d 43 5a 54 43 45 73 32 78 58 5a 54 75 73 4c 37 42 62 6c 32 73 48 52 57 4a 6a 6e 75 57 57 4f Data Ascii: KlINSAYDv4UxwEhCyMegSisRUxKjQpp4u3RSrW-GXvDLm7KzRrR6iCNVjB4sJdIXl7QvJ3h-TvkuYdnHp7weTYf3WSfGcZ8nv38B8so6BIPNcWRqRajzGXLMddRZialXeM1ZRYa984m4BbSJazCWIBwnDKoVlLk21gCE9Ns46AU44zhCEKwwSeCadcOkfBGTbz5bYQIhYobEHBizLtFqnslqgES5WCpZmCZTCEs2xXZTusL7Bbl2sHRWJjnuWWO
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 7a 4f 32 68 71 71 33 53 7a 42 32 53 48 41 4d 46 4d 31 73 34 4e 46 2d 76 53 45 6a 7a 39 34 55 57 62 42 56 6e 32 54 6f 73 5f 62 71 4c 35 49 66 4f 34 6c 38 37 68 5f 39 67 4e 65 73 58 78 41 73 5f 4b 30 59 43 69 73 53 49 6b 39 32 35 33 44 6b 4c 36 4d 4c 4d 46 72 35 6d 4e 66 47 36 74 55 2d 73 74 64 39 4e 51 58 43 69 6e 54 42 4a 49 45 6f 57 53 4a 47 76 6e 43 6f 49 53 62 4d 4e 35 66 4f 56 4d 32 79 6a 4d 75 7a 68 6a 70 73 75 67 30 63 4f 4f 52 70 51 68 42 45 67 44 4b 63 63 50 48 4c 4d 48 62 63 51 63 52 47 5a 67 6b 55 63 42 53 5f 4e 63 56 69 65 62 62 38 38 79 32 35 6c 4e 68 70 59 47 42 51 4d 45 39 68 68 58 5a 37 44 2d 6a 7a 48 39 58 6b 4f 6f 47 44 77 37 32 5a 51 38 47 33 6f 77 73 36 37 53 68 32 33 46 7a 6e 73 79 4c 50 62 6e 57 74 5f 49 4e 5f 39 59 4b 37 56 31 75 4b Data Ascii: zO2hqq3SzB2SHAMFM1s4NF-vSEjz94UWbBVn2Tos_bqL5IfO4l87h_9gNesXxAs_K0YCisSIk9253DkL6MLMFr5mNfG6tU-std9NQXCinTBJIEoWSJGvnCoISbMN5fOVM2yjMuzhjpsug0cOORpQhBEgDKccPHLMHbcQcRGZgkUcBS_NcViebb88y25lNhpYGBQME9hhXZ7D-jzH9XkOoGDw72ZQ8G3ows67Sh23FznsyLPbnWt_IN_9YK7V1uK
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 75 72 31 74 57 67 50 47 61 31 6a 71 58 65 6b 53 31 73 72 6c 38 4c 59 6d 46 7a 6e 54 6c 7a 47 54 64 6e 2d 78 71 6c 66 48 45 30 6a 45 6f 4a 79 45 57 75 4c 74 65 65 4f 35 43 7a 47 50 77 72 4b 6c 77 75 7a 6c 77 75 56 71 77 4a 56 61 34 4e 6c 36 30 4c 55 34 4b 46 31 30 75 7a 4e 30 68 7a 4e 6a 45 57 52 72 46 4b 66 59 4c 63 64 6d 6a 42 59 47 45 4a 31 5f 4e 45 33 4b 42 49 48 41 69 37 76 59 46 6a 59 64 34 57 5f 6f 6c 6c 4d 45 39 72 5a 41 74 33 36 47 4e 55 52 77 49 73 37 48 6d 79 57 34 4d 74 62 4d 48 5a 77 70 59 2d 73 56 61 67 34 49 42 34 6d 79 42 57 54 52 67 55 44 46 47 59 71 32 41 4a 46 6d 59 78 77 71 78 38 38 4d 78 30 41 56 68 34 6c 73 77 57 2d 63 71 67 59 43 51 72 6f 5f 45 42 77 69 77 6f 49 6b 75 77 4c 42 4d 55 44 4b 65 63 77 33 49 57 47 6d 48 4c 68 61 62 78 51 Data Ascii: ur1tWgPGa1jqXekS1srl8LYmFznTlzGTdn-xqlfHE0jEoJyEWuLteeO5CzGPwrKlwuzlwuVqwJVa4Nl60LU4KF10uzN0hzNjEWRrFKfYLcdmjBYGEJ1_NE3KBIHAi7vYFjYd4W_ollME9rZAt36GNURwIs7HmyW4MtbMHZwpY-sVag4IB4myBWTRgUDFGYq2AJFmYxwqx88Mx0AVh4lswW-cqgYCQro_EBwiwoIkuwLBMUDKecw3IWGmHLhabxQ
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 6d 73 50 4a 45 74 64 54 70 61 37 48 37 6a 74 66 56 41 76 4f 33 4c 4d 35 6f 5a 69 54 64 5a 2d 6c 4f 57 74 72 4b 6a 51 50 55 49 43 4f 4c 55 44 4e 42 61 43 59 35 79 76 7a 31 6f 32 61 57 50 69 74 6d 5f 49 33 39 73 42 36 4b 35 69 76 67 4d 44 79 34 69 70 72 36 38 72 4f 48 62 30 58 36 61 75 61 48 35 4b 31 4d 45 53 31 55 4b 4a 61 49 73 31 61 4b 73 6c 61 48 70 4b 39 51 71 4a 61 49 56 57 74 44 4d 6c 65 47 51 70 62 4f 48 75 31 4e 46 74 76 43 34 66 6b 62 70 42 6d 49 32 70 74 4d 33 78 30 58 50 6d 30 52 72 61 77 51 53 41 2d 45 49 70 49 4e 63 55 66 36 4d 4b 6f 4c 38 7a 72 77 6d 7a 64 4f 64 52 55 59 37 72 77 73 32 31 68 50 6b 61 4e 35 63 75 6c 32 30 59 67 54 4a 67 5a 77 71 78 77 44 35 65 6d 30 5a 41 73 78 36 4c 54 75 4e 41 49 4f 57 70 58 32 71 4e 71 44 77 71 6e 63 56 6f Data Ascii: msPJEtdTpa7H7jtfVAvO3LM5oZiTdZ-lOWtrKjQPUICOLUDNBaCY5yvz1o2aWPitm_I39sB6K5ivgMDy4ipr68rOHb0X6auaH5K1MES1UKJaIs1aKslaHpK9QqJaIVWtDMleGQpbOHu1NFtvC4fkbpBmI2ptM3x0XPm0RrawQSA-EIpINcUf6MKoL8zrwmzdOdRUY7rws21hPkaN5cul20YgTJgZwqxwD5em0ZAsx6LTuNAIOWpX2qNqDwqncVo
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 67 6c 79 36 47 43 4a 5a 4b 56 6b 53 61 48 64 54 51 51 49 37 78 63 5a 63 64 56 37 57 47 5a 63 6b 59 42 77 69 78 5a 6a 68 6e 43 69 41 35 75 43 45 33 62 55 57 43 33 71 39 42 75 5a 36 48 64 33 6b 4b 37 66 59 58 32 2d 32 37 62 63 39 6b 5a 44 67 65 59 46 6d 78 5f 47 4e 48 42 64 2d 31 68 42 52 2d 5f 36 77 41 56 2d 41 53 7a 67 67 31 61 42 45 5f 45 72 6d 64 4c 58 63 37 64 64 30 4b 37 55 4f 70 34 5f 72 37 7a 2d 66 76 75 4a 2d 35 59 58 58 6a 67 63 76 32 65 73 6b 79 44 50 49 36 71 75 68 6f 55 59 71 75 76 4a 6b 6d 69 2d 62 34 41 4c 33 78 6e 59 75 45 58 68 6f 6f 4f 66 45 6b 45 74 41 69 48 59 45 58 53 61 72 43 69 32 6f 5a 56 69 68 6c 43 31 62 79 70 32 58 4e 44 73 75 61 45 73 6e 36 65 4a 47 75 2d 4a 47 73 68 4b 42 68 75 4f 6b 6e 32 49 71 6c 71 4b 61 51 4a 43 51 54 69 48 Data Ascii: gly6GCJZKVkSaHdTQQI7xcZcdV7WGZckYBwixZjhnCiA5uCE3bUWC3q9BuZ6Hd3kK7fYX2-27bc9kZDgeYFmx_GNHBd-1hBR-_6wAV-ASzgg1aBE_ErmdLXc7dd0K7UOp4_r7z-fvuJ-5YXXjgcv2eskyDPI6quhoUYquvJkmi-b4AL3xnYuEXhooOfEkEtAiHYEXSarCi2oZVihlC1byp2XNDsuaEsn6eJGu-JGshKBhuOkn2IqlqKaQJCQTiH

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:35:59 UTC	659	OUT	GET /js/googleapis.proxy.js?onload=startup HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:36:00 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14478 Date: Mon, 24 Feb 2025 13:36:00 GMT Expires: Mon, 24 Feb 2025 13:36:00 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "7e12e6bb6166dd06" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-24 13:36:00 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof win
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 61 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 Data Ascii: break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}},h=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegEx
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 72 72 6f 72 28 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 6c 3d 61 7d 3b 79 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 7d 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 79 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 41 3d 5b 5d 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d 3d 2d 31 26 26 41 2e 70 75 73 68 28 44 29 3b 2f 2a 0a 20 67 61 70 69 2e Data Ascii: rror("Bad secret");this.l=a};y.prototype.toString=function(){return this.l};new y("about:blank");new y("about:invalid#zClosurez");var A=[],D=function(a){console.warn("A URL with content '"+a+"' was sanitized away.")};A.indexOf(D)===-1&&A.push(D);/* gapi.
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 6a 6f 69 6e 28 22 5f 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2d 2f 67 2c 22 5f 22 29 2e 72 65 70 6c 61 63 65 28 2f 2c 2f 67 2c 22 5f 22 29 7d 3b 76 61 72 20 6e 61 3d 49 28 29 2c 55 3d 5b 5d 2c 56 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 22 2b 61 29 3b 7d 3b 55 2e 70 75 73 68 28 5b 22 6a 73 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 20 69 6e 20 61 29 Data Ascii: ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function(a){return a.join("__").replace(/\./g,"_").replace(/\-/g,"_").replace(/,/g,"_")};var na=I(),U=[],V=function(a){throw Error("Bad hint: "+a);};U.push(["jsl",function(a){for(var b in a)
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 22 2c 22 29 7d 3b 72 65 74 75 72 6e 5b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 61 2e 70 61 74 68 50 72 65 66 69 78 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 43 2f 67 2c 0a 22 2c 22 29 2e 72 65 70 6c 61 63 65 28 2f 25 32 46 2f 67 2c 22 2f 22 29 2c 22 2f 6b 3d 22 2c 65 28 61 2e 76 65 72 73 69 6f 6e 29 2c 22 2f 6d 3d 22 2c 65 28 62 29 2c 64 3f 22 2f 65 78 6d 3d 22 2b 65 28 64 29 3a 22 22 2c 22 2f 72 74 3d 6a 2f 73 76 3d 31 2f 64 3d 31 2f 65 64 3d 31 22 2c 61 2e 67 3f 22 2f 61 6d 3d 22 2b 65 28 61 2e 67 29 3a 22 22 2c 61 2e 69 3f 22 2f 72 73 3d 22 2b 65 28 61 2e 69 29 3a 22 22 2c 61 2e 6a 3f 22 2f 74 3d 22 2b 65 28 61 2e 6a 29 3a 22 22 2c 22 2f 63 62 3d 22 2c 65 28 63 29 5d 2e 6a 6f 69 6e 28 22 22 Data Ascii: .replace(/%2C/g,",")};return[encodeURIComponent(a.pathPrefix).replace(/%2C/g,",").replace(/%2F/g,"/"),"/k=",e(a.version),"/m=",e(b),d?"/exm="+e(d):"","/rt=j/sv=1/d=1/ed=1",a.g?"/am="+e(a.g):"",a.i?"/rs="+e(a.i):"",a.j?"/t="+e(a.j):"","/cb=",e(c)].join(""
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 61 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 76 61 72 20 65 3d 61 5b 64 5d 2c 66 3b 69 66 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e 6e 6f 6e 63 65 3d 6e 75 6c 6c 3a 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3f 28 61 3d 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d Data Ascii: a.length;++d){var e=a[d],f;if(f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.nonce=null:F.querySelector?(a=F.querySelector("script[nonce]
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 22 54 69 6d 65 6f 75 74 20 72 65 71 75 69 72 65 73 20 62 6f 74 68 20 74 68 65 20 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 61 6e 64 20 6f 6e 74 69 6d 65 6f 75 74 20 70 61 72 61 6d 65 74 65 72 20 74 6f 20 62 65 20 73 65 74 22 3b 0a 6c 3d 48 28 4f 28 63 29 2c 22 72 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 3b 76 61 72 20 47 3d 48 28 4f 28 63 29 2c 22 4c 22 2c 5b 5d 29 2e 73 6f 72 74 28 29 2c 4d 61 3d 4d 2e 6c 65 7c 7c 5b 5d 2c 4b 3d 5b 5d 2e 63 6f 6e 63 61 74 28 6c 29 2c 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 77 2c 42 29 7b 69 66 28 7a 29 72 65 74 75 72 6e 20 30 3b 45 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 71 29 3b 47 2e 70 75 73 68 2e 61 70 70 6c 79 28 47 2c 72 29 3b 76 61 72 20 43 3d 28 28 4a 7c 7c 7b 7d 29 2e 63 6f 6e 66 69 67 7c 7c 7b 7d 29 2e 75 Data Ascii: "Timeout requires both the timeout parameter and ontimeout parameter to be set";l=H(O(c),"r",[]).sort();var G=H(O(c),"L",[]).sort(),Ma=M.le\|\|[],K=[].concat(l),la=function(w,B){if(z)return 0;E.clearTimeout(q);G.push.apply(G,r);var C=((J\|\|{}).config\|\|{}).u
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 62 21 3d 3d 22 22 7c 7c 21 61 2e 65 6e 64 73 57 69 74 68 28 22 2e 6a 73 22 29 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 33 29 2c 62 3d 61 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2b 31 2c 62 3e 3d 61 2e 6c 65 6e 67 74 68 7c 7c 28 61 3d 61 2e 73 75 62 73 74 72 28 62 29 2e 73 70 6c 69 74 28 22 3a 22 29 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 21 5b 22 61 70 69 22 2c 22 70 6c 61 74 66 6f 72 6d 22 5d 2e 69 6e 63 6c 75 64 65 73 28 64 29 7d 29 2c 63 2e 66 65 61 74 75 72 65 73 3d 61 29 29 7d 5d 29 3b 51 2e 62 73 30 3d 77 69 6e 64 6f 77 2e 67 61 70 69 2e 5f 62 73 7c 7c 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 3b 52 28 22 62 73 30 22 29 3b 51 2e 62 73 31 3d Data Ascii: b!==""\|\|!a.endsWith(".js")\|\|(a=a.substring(0,a.length-3),b=a.lastIndexOf("/")+1,b>=a.length\|\|(a=a.substr(b).split(":").filter(function(d){return!["api","platform"].includes(d)}),c.features=a))}]);Q.bs0=window.gapi._bs\|\|(new Date).getTime();R("bs0");Q.bs1=
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 70 6c 75 73 2f 63 69 72 63 6c 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 0a 70 6c 75 73 5f 73 68 61 72 65 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 2b 31 2f 73 68 61 72 65 62 75 74 74 6f 6e 3f 70 6c 75 73 53 68 61 72 65 3d 74 72 75 65 26 75 73 65 67 61 70 69 3d 31 22 7d 2c 72 62 72 5f 73 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 73 69 6d 70 6c 65 73 63 72 6f 6c 6c 65 Data Ascii: on_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""},url:":socialhost:/:session_prefix::se:_/+1/sharebutton?plusShare=true&usegapi=1"},rbr_s:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarsimplescrolle
2025-02-24 13:36:00 UTC	1390	IN	Data Raw: 5f 69 3a 7b 70 61 72 61 6d 73 3a 7b 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 73 65 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 72 65 63 6f 62 61 72 69 6e 76 69 74 61 74 69 6f 6e 22 7d 2c 73 68 61 72 65 3a 7b 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 78 3a 3a 69 6d 5f 70 72 65 66 69 78 3a 5f 2f 77 69 64 67 65 74 2f 72 65 6e 64 65 72 2f 73 68 61 72 65 3f 75 73 65 67 61 70 69 3d 31 22 7d 2c 70 6c 75 73 6f 6e 65 3a 7b 70 61 72 61 6d 73 3a 7b 63 6f 75 6e 74 3a 22 22 2c 0a 73 69 7a 65 3a 22 22 2c 75 72 6c 3a 22 22 7d 2c 75 72 6c 3a 22 3a 73 6f 63 69 61 6c 68 6f 73 74 3a 2f 3a 73 65 73 73 69 6f 6e 5f 70 72 65 66 69 Data Ascii: _i:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/render/recobarinvitation"},share:{url:":socialhost:/:session_prefix::im_prefix:_/widget/render/share?usegapi=1"},plusone:{params:{count:"",size:"",url:""},url:":socialhost:/:session_prefi

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:00 UTC	587	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser Origin: https://lookerstudio.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 13:36:00 UTC	554	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://lookerstudio.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin Content-Type: text/plain; charset=UTF-8 Date: Mon, 24 Feb 2025 13:36:00 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:01 UTC	1273	OUT	POST /getFirebaseAuthToken?appVersion=20250210_0007 HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive Content-Length: 94 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 encoding: null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://lookerstudio.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
2025-02-24 13:36:01 UTC	94	OUT	Data Raw: 7b 22 72 65 70 6f 72 74 49 64 22 3a 22 65 39 32 34 35 35 36 34 2d 35 32 62 66 2d 34 62 34 38 2d 39 31 31 35 2d 64 65 61 36 66 32 31 35 32 31 31 31 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 34 68 34 32 76 6b 61 32 70 64 22 2c 22 64 61 74 61 73 6f 75 72 63 65 49 64 22 3a 5b 5d 7d Data Ascii: {"reportId":"e9245564-52bf-4b48-9115-dea6f2152111","sessionId":"4h42vka2pd","datasourceId":[]}
2025-02-24 13:36:01 UTC	945	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-R9yX3uw1e_ScOydgmKnQFA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:36:01 GMT Content-Disposition: attachment; filename="json.txt" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:01 UTC	445	IN	Data Raw: 34 36 36 0d 0a 29 5d 7d 27 0a 0a 7b 22 74 6f 6b 65 6e 22 3a 22 65 79 4a 68 62 47 63 69 4f 69 4a 53 55 7a 49 31 4e 69 49 73 49 6d 74 70 5a 43 49 36 49 6a 4d 79 5a 54 4d 35 5a 47 55 32 4f 57 46 6b 59 6a 4d 31 59 6d 45 35 59 6a 6c 6b 4d 6a 41 77 4e 6d 59 31 4f 44 51 32 4d 6a 55 35 59 7a 56 6b 5a 47 56 6a 4f 44 55 69 4c 43 4a 30 65 58 41 69 4f 69 4a 4b 56 31 51 69 66 51 2e 65 79 4a 70 63 33 4d 69 4f 69 4a 6a 62 47 39 31 5a 43 31 6b 59 58 52 68 63 33 52 76 63 6d 55 74 5a 47 46 30 59 53 31 7a 64 48 56 6b 61 57 39 41 63 33 6c 7a 64 47 56 74 4c 6d 64 7a 5a 58 4a 32 61 57 4e 6c 59 57 4e 6a 62 33 56 75 64 43 35 6a 62 32 30 69 4c 43 4a 7a 64 57 49 69 4f 69 4a 6a 62 47 39 31 5a 43 31 6b 59 58 52 68 63 33 52 76 63 6d 55 74 5a 47 46 30 59 53 31 7a 64 48 56 6b 61 57 39 Data Ascii: 466)]}'{"token":"eyJhbGciOiJSUzI1NiIsImtpZCI6IjMyZTM5ZGU2OWFkYjM1YmE5YjlkMjAwNmY1ODQ2MjU5YzVkZGVjODUiLCJ0eXAiOiJKV1QifQ.eyJpc3MiOiJjbG91ZC1kYXRhc3RvcmUtZGF0YS1zdHVkaW9Ac3lzdGVtLmdzZXJ2aWNlYWNjb3VudC5jb20iLCJzdWIiOiJjbG91ZC1kYXRhc3RvcmUtZGF0YS1zdHVkaW9
2025-02-24 13:36:01 UTC	688	IN	Data Raw: 53 77 69 5a 58 68 77 49 6a 6f 78 4e 7a 51 77 4e 44 41 33 4e 7a 59 78 4c 43 4a 31 61 57 51 69 4f 69 4a 67 51 55 31 57 63 32 31 36 59 55 56 48 56 32 52 32 54 45 38 77 4e 30 78 4d 4d 69 30 30 4e 48 6c 4f 55 6b 4e 7a 52 7a 4a 6e 65 47 38 35 53 44 46 53 4d 45 49 74 51 6c 39 78 62 46 46 50 4f 58 42 54 52 30 67 31 4f 55 78 32 4d 30 64 46 62 57 52 46 63 6b 70 68 54 7a 6c 43 63 57 6c 5a 63 6d 6c 76 62 47 52 6a 4d 32 41 69 4c 43 4a 6a 62 47 46 70 62 58 4d 69 4f 6e 73 69 63 32 6c 6e 62 6d 6c 75 58 33 52 70 62 57 56 7a 64 47 46 74 63 43 49 36 4d 54 63 30 4d 44 51 77 4e 44 45 32 4d 54 63 33 4d 79 77 69 64 58 4e 6c 63 6c 39 7a 5a 58 4e 7a 61 57 39 75 49 6a 6f 69 59 45 46 4e 56 6e 4e 74 65 6d 46 4d 5a 6c 64 54 52 48 6b 77 59 31 55 31 4f 44 56 6d 53 32 56 43 4f 44 4a 56 Data Ascii: SwiZXhwIjoxNzQwNDA3NzYxLCJ1aWQiOiJgQU1Wc216YUVHV2R2TE8wN0xMMi00NHlOUkNzRzJneG85SDFSMEItQl9xbFFPOXBTR0g1OUx2M0dFbWRFckphTzlCcWlZcmlvbGRjM2AiLCJjbGFpbXMiOnsic2lnbmluX3RpbWVzdGFtcCI6MTc0MDQwNDE2MTc3MywidXNlcl9zZXNzaW9uIjoiYEFNVnNtemFMZldTRHkwY1U1ODVmS2VCODJV
2025-02-24 13:36:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://lookerstudio.google.com/s/ryl1d6fWDPQ

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Windows Analysis Report
http://lookerstudio.google.com/s/ryl1d6fWDPQ

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:01 UTC	1028	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 320 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: application/binary Content-Encoding: gzip X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://lookerstudio.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ
2025-02-24 13:36:01 UTC	320	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ed 54 4d 4f 84 30 14 fc 2b e6 1d 37 95 7d 05 0a 34 c6 83 7a f0 62 3c b8 31 1e 5a 0e 1b 20 48 04 6a f8 88 fe 7c 1f 10 d4 ec 6e 50 b2 c9 c6 18 d2 66 42 87 a1 ed 6b 67 50 8a b3 b2 cd f3 5f 83 3a 44 42 52 c2 9e 50 29 b8 35 26 cd 93 b3 9b e7 ca 14 09 30 e0 dc 87 90 29 b8 37 cd c5 d5 e5 75 b5 2d 63 62 83 9e eb 45 59 5b 8c b2 90 21 83 a7 ac 8c cd 5b dd 71 68 51 a3 87 f7 c0 23 1c 54 44 09 e9 04 16 77 dc 6e 0e 97 61 48 df 09 94 b4 3a 70 df 45 6a 5c 78 42 f8 7b db db ad e0 60 5d d3 a0 a9 ec f3 c7 8d 86 71 b8 ae 92 57 53 35 59 99 ae 57 2b ea fa fb aa 9c 04 b9 31 2f 49 55 37 6d 9c 19 2b ed 0f c7 8a 4c a1 27 76 67 7b 33 ef 47 71 3b 40 c6 d1 76 43 66 bb 6c 18 4a f4 e9 60 e6 97 b8 c0 69 40 fa e1 4f 0e e5 01 22 4e bc ee 32 f4 69 f9 c0 41 31 Data Ascii: TMO0+7}4zb<1Z Hj\|nPfBkgP_:DBRP)5&0)7u-cbEY[![qhQ#TDwnaH:pEj\xB{`]qWS5YW+1/IU7m+L'vg{3Gq;@vCflJ`i@O"N2iA1
2025-02-24 13:36:01 UTC	954	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://lookerstudio.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE; expires=Tue, 26-Aug-2025 13:36:01 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 24 Feb 2025 13:36:01 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 24 Feb 2025 13:36:01 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:01 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-02-24 13:36:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:01 UTC	1024	OUT	GET /getImageV2?reportId=e9245564-52bf-4b48-9115-dea6f2152111&id=ADpgoFXfm2sWSr%2FLnjDpZ1EbMc20Ehx4xBqWXNljjhIp55VW2hpjcJ8HTLaDDX4chxoq9G09hFd%2BG3SFc5vLyfc90n3RwS0XVjZ%2F4p8FdFHNaicjBVfm%2FVuEHsJ19TLhcpZ2grceE2udRB4qpgwX6LXtwkDuhSmGxwv9ozBFB7k%3D HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=sXew-4k3rL7KeXf5y2PcS8Ty3aVY5NHyPCZRBVJtcB5Ml2qWzsokCHHhU7k5IBEBYw2MsAjxcK2H1Hn6W5y_7HYuyDQdNYsLrCRrChQrHIrmSugsmVVasXy9RqR1q3IdMhnly1vx5j6kbe2oJZefAww5Aa_EWfmKaKkbiDSP5pnk--KI-ih-FjT71yXJ; _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0
2025-02-24 13:36:02 UTC	905	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-V-ebe7hzZyZGdi3JhRiPMQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' X-Content-Type-Options: nosniff Expires: Mon, 24 Feb 2025 13:36:02 GMT Date: Mon, 24 Feb 2025 13:36:02 GMT Cache-Control: private, max-age=2592000 Content-Disposition: attachment; filename="json.txt" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:02 UTC	485	IN	Data Raw: 33 66 38 62 0d 0a 29 5d 7d 27 0a 7b 22 70 61 79 6c 6f 61 64 22 3a 22 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 64 63 41 41 41 47 54 43 41 49 41 41 41 44 31 4c 38 5f 73 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 41 41 52 6e 51 55 31 42 41 41 43 78 6a 77 76 38 59 51 55 41 41 41 41 4a 63 45 68 5a 63 77 41 41 44 73 4d 41 41 41 37 44 41 63 64 76 71 47 51 41 41 4b 4d 71 53 55 52 42 56 48 68 65 37 62 30 48 51 46 52 5a 75 6a 55 36 5f 33 5f 66 65 5f 65 39 4f 33 50 5f 75 54 4f 64 34 33 54 33 39 50 52 30 54 75 5a 4d 4c 48 49 77 5a 30 56 52 54 42 6a 49 56 41 49 45 78 42 77 77 35 35 78 7a 7a 6a 6b 6a 67 6d 53 4b 71 71 4c 49 69 43 4b 43 45 69 73 41 62 2d 31 7a 69 72 4a 45 62 52 56 4c 6f 66 41 37 73 32 66 33 73 54 68 68 Data Ascii: 3f8b)]}'{"payload":"iVBORw0KGgoAAAANSUhEUgAAAdcAAAGTCAIAAAD1L8_sAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsMAAA7DAcdvqGQAAKMqSURBVHhe7b0HQFRZujU6_3_fe_e9O3P_uTOd43T39PR0TuZMLHIwZ0VRTBjIVAIExBww55xzzjkjgmSKqqLIiCKCEisAb-1zirJEbRVLofA7s2f3sThh
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 42 5a 47 62 6a 34 7a 52 43 78 4b 56 6e 59 6d 49 4c 35 33 79 66 34 67 30 4f 6a 30 62 78 78 47 4f 6d 47 68 41 41 68 51 41 69 38 45 67 49 67 4c 74 41 58 7a 32 4f 76 32 79 49 32 47 51 73 54 42 62 5f 53 6e 4e 50 4a 68 41 41 68 30 4d 49 51 65 47 4e 45 62 47 49 57 4e 67 6a 42 2d 44 56 53 56 56 58 56 77 6c 43 6c 34 52 41 43 68 41 41 68 38 42 49 49 67 4d 53 65 74 49 68 4e 4c 68 43 62 68 6f 56 35 51 39 6a 67 6a 73 4f 34 53 30 74 4c 53 51 74 2d 69 64 6d 6d 51 77 6b 42 51 71 44 6c 49 51 41 53 41 35 58 78 52 47 79 73 45 5a 75 57 69 45 33 41 77 6f 32 30 43 4a 36 43 79 52 42 75 65 57 38 55 6a 59 67 51 49 41 52 65 47 67 46 51 6d 54 45 52 76 34 36 51 43 5a 4f 78 73 45 47 4c 77 49 6a 76 33 37 2d 50 6d 49 2d 58 66 6c 77 36 67 52 41 67 42 41 69 42 46 6f 59 41 71 41 79 45 42 Data Ascii: BZGbj4zRCxKVnYmIL53yf4g0Oj0bxxGOmGhAAhQAi8EgIgLtAXz2Ov2yI2GQsTBb_SnNPJhAAh0MIQeGNEbGIWNgjB-DVSVVXVwlCl4RAChAAh8BIIgMSetIhNLhCbhoV5Q9jgjsO4S0tLSQt-idmmQwkBQqDlIQASA5XxRGysEZuWiE3Awo20CJ6CyRBueW8UjYgQIAReGgFQmTERv46QCZOxsEGLwIjv37-PmI-Xflw6gRAgBAiBFoYAqAyEB
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 4f 79 30 65 54 78 72 67 6d 30 4f 41 57 50 6a 4e 59 55 31 33 65 6e 30 49 63 50 54 4c 4c 6d 5f 67 74 34 59 64 6a 70 63 68 52 74 54 58 36 39 53 31 39 54 70 64 66 58 31 31 51 76 59 39 37 37 43 54 76 5f 54 65 38 38 50 67 34 35 30 38 7a 39 71 4f 76 32 7a 74 64 61 37 37 71 4d 74 57 34 2d 4f 74 78 38 64 61 65 6c 32 78 48 6e 76 56 30 6a 76 57 77 76 75 6d 68 58 65 73 35 63 53 62 56 70 50 69 62 48 32 54 4c 53 62 65 73 70 79 53 4a 50 42 58 43 49 49 7a 72 43 4a 76 57 6f 68 56 6e 62 77 56 58 53 66 66 6d 4c 77 36 35 55 59 75 6d 42 30 47 73 41 61 4b 52 4c 30 57 6c 4d 5f 54 4c 54 38 67 5f 55 4d 54 38 37 36 2d 32 54 66 33 4b 78 4d 4c 6d 5f 73 4d 30 76 68 35 42 41 79 32 73 4c 61 75 44 74 59 6f 45 32 64 72 61 78 6e 37 77 69 72 46 54 71 30 4f 2d 6f 50 6d 59 61 56 6d 34 64 71 Data Ascii: Oy0eTxrgm0OAWPjNYU13en0IcPTLLm_gt4YdjpchRtTX69S19TpdfX11QvY977CTv_Te88Pg4508z9qOv2ztda77qMtW4-Otx8dael2xHnvV0jvWwvumhXes5cSbVpPibH2TLSbespySJPBXCIIzrCJvWohVnbwVXSffmLw65UYumB0GsAaKRL0WlM_TLT8g_UMT876-2Tf3KxMLm_sM0vh5BAy2sLauDtYoE2draxn7wirFTq0O-oPmYaVm4dq
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 62 66 2d 6d 33 75 4d 47 68 58 5a 39 6a 43 51 34 35 33 48 58 61 69 79 34 6a 47 4c 41 78 62 32 47 6f 43 6b 79 4e 73 6f 41 68 50 6a 72 50 78 75 57 55 44 4f 63 49 5f 30 53 59 41 68 6e 43 69 62 58 43 53 72 53 6a 5a 56 67 51 69 54 72 4b 52 70 74 69 43 67 6b 50 53 72 63 4f 54 75 73 2d 34 61 52 55 68 73 77 6e 4e 64 4a 36 75 63 70 71 52 34 54 41 6a 33 58 6d 75 77 6d 4a 36 55 72 76 70 53 72 39 74 71 6f 7a 62 35 51 78 69 61 4d 51 61 54 59 31 47 79 36 49 31 74 48 41 68 77 6f 64 49 74 72 42 35 76 6e 75 6d 48 6a 57 78 73 4b 6b 52 70 65 75 39 45 51 51 65 5f 56 31 66 71 39 5a 70 74 44 71 4e 44 6e 6c 73 4d 44 7a 4c 53 6d 71 75 6e 79 68 61 45 53 70 66 49 53 70 59 48 4a 62 6a 30 47 76 4e 7a 78 61 7a 32 5f 64 63 39 5a 76 72 38 6f 35 39 4e 6e 58 73 75 37 33 54 67 46 31 64 42 Data Ascii: bf-m3uMGhXZ9jCQ453HXaiy4jGLAxb2GoCkyNsoAhPjrPxuWUDOcI_0SYAhnCibXCSrSjZVgQiTrKRptiCgkPSrcOTus-4aRUhswnNdJ6ucpqR4TAj3XmuwmJ6UrvpSr9tqozb5QxiaMQaTY1Gy6I1tHAhwodItrB5vnumHjWxsKkRpeu9EQQe_V1fq9ZptDqNDnlsMDzLSmqunyhaESpfISpYHJbj0GvNzxaz2_dc9Zvr8o59NnXsu73TgF1dB
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 70 54 4e 46 47 49 62 77 6a 48 54 62 6d 56 43 45 4d 36 41 49 4d 79 4b 65 70 78 44 4d 55 7a 70 46 4b 78 77 58 79 4f 77 57 4b 6d 32 69 35 62 59 4c 5a 62 5a 4c 35 4e 32 58 35 33 5a 65 72 42 71 39 49 66 6d 4d 38 6a 35 2d 69 65 42 42 71 72 52 31 74 52 72 38 59 74 48 69 77 62 6a 48 34 71 70 65 4d 48 38 6a 46 5a 31 34 4b 37 34 53 78 4d 4a 76 78 54 53 62 36 55 50 71 6f 32 73 52 62 61 74 42 2d 6b 4d 46 5f 47 2d 31 4b 49 7a 47 4a 49 6a 61 30 73 4b 4b 30 78 75 56 36 34 4a 56 47 30 58 5a 57 30 4e 7a 4e 34 64 6b 62 35 4a 6d 62 51 7a 4a 33 52 61 63 74 32 64 71 6a 6b 50 50 35 56 39 59 68 50 31 6d 4d 65 4e 6e 77 63 7a 66 37 42 65 30 64 56 37 52 76 75 65 36 44 72 32 33 64 4f 79 37 7a 57 41 4c 64 78 31 2d 72 42 74 6e 43 33 63 64 66 62 37 62 6d 49 75 57 59 36 39 61 6a 57 4d Data Ascii: pTNFGIbwjHTbmVCEM6AIMyKepxDMUzpFKxwXyOwWKm2i5bYLZbZL5N2X53ZerBq9IfmM8j5-ieBBqrR1tRr8YtHiwbjH4qpeMH8jFZ14K74SxMJvxTSb6UPqo2sRbatB-kMF_G-1KIzGJIja0sKK0xuV64JVG0XZW0NzN4dkb5JmbQzJ3Ract2dqjkPP5V9YhP1mMeNnwczf7Be0dV7Rvue6Dr23dOy7zWALdx1-rBtnC3cdfb7bmIuWY69ajWM
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 4b 6c 49 4e 53 41 59 44 76 34 55 78 77 45 68 43 79 4d 65 67 53 69 73 52 55 78 4b 6a 51 70 70 34 75 33 52 53 72 57 2d 47 58 76 44 4c 6d 37 4b 7a 52 72 52 36 69 43 4e 56 6a 42 34 73 4a 64 49 58 6c 37 51 76 4a 33 68 2d 54 76 6b 75 59 64 6e 48 70 37 77 65 54 59 66 33 57 53 66 47 63 5a 38 6e 76 33 38 42 38 73 6f 36 42 49 50 4e 63 57 52 71 52 61 6a 7a 47 58 4c 4d 64 64 52 5a 69 61 6c 58 65 4d 31 5a 52 59 61 39 38 34 6d 34 42 62 53 4a 61 7a 43 57 49 42 77 6e 44 4b 6f 56 6c 4c 6b 32 31 67 43 45 39 4e 73 34 36 41 55 34 34 7a 68 43 45 4b 77 77 53 65 43 61 64 63 4f 6b 66 42 47 54 62 7a 35 62 59 51 49 68 59 6f 62 45 48 42 69 7a 4c 74 46 71 6e 73 6c 71 67 45 53 35 57 43 70 5a 6d 43 5a 54 43 45 73 32 78 58 5a 54 75 73 4c 37 42 62 6c 32 73 48 52 57 4a 6a 6e 75 57 57 4f Data Ascii: KlINSAYDv4UxwEhCyMegSisRUxKjQpp4u3RSrW-GXvDLm7KzRrR6iCNVjB4sJdIXl7QvJ3h-TvkuYdnHp7weTYf3WSfGcZ8nv38B8so6BIPNcWRqRajzGXLMddRZialXeM1ZRYa984m4BbSJazCWIBwnDKoVlLk21gCE9Ns46AU44zhCEKwwSeCadcOkfBGTbz5bYQIhYobEHBizLtFqnslqgES5WCpZmCZTCEs2xXZTusL7Bbl2sHRWJjnuWWO
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 7a 4f 32 68 71 71 33 53 7a 42 32 53 48 41 4d 46 4d 31 73 34 4e 46 2d 76 53 45 6a 7a 39 34 55 57 62 42 56 6e 32 54 6f 73 5f 62 71 4c 35 49 66 4f 34 6c 38 37 68 5f 39 67 4e 65 73 58 78 41 73 5f 4b 30 59 43 69 73 53 49 6b 39 32 35 33 44 6b 4c 36 4d 4c 4d 46 72 35 6d 4e 66 47 36 74 55 2d 73 74 64 39 4e 51 58 43 69 6e 54 42 4a 49 45 6f 57 53 4a 47 76 6e 43 6f 49 53 62 4d 4e 35 66 4f 56 4d 32 79 6a 4d 75 7a 68 6a 70 73 75 67 30 63 4f 4f 52 70 51 68 42 45 67 44 4b 63 63 50 48 4c 4d 48 62 63 51 63 52 47 5a 67 6b 55 63 42 53 5f 4e 63 56 69 65 62 62 38 38 79 32 35 6c 4e 68 70 59 47 42 51 4d 45 39 68 68 58 5a 37 44 2d 6a 7a 48 39 58 6b 4f 6f 47 44 77 37 32 5a 51 38 47 33 6f 77 73 36 37 53 68 32 33 46 7a 6e 73 79 4c 50 62 6e 57 74 5f 49 4e 5f 39 59 4b 37 56 31 75 4b Data Ascii: zO2hqq3SzB2SHAMFM1s4NF-vSEjz94UWbBVn2Tos_bqL5IfO4l87h_9gNesXxAs_K0YCisSIk9253DkL6MLMFr5mNfG6tU-std9NQXCinTBJIEoWSJGvnCoISbMN5fOVM2yjMuzhjpsug0cOORpQhBEgDKccPHLMHbcQcRGZgkUcBS_NcViebb88y25lNhpYGBQME9hhXZ7D-jzH9XkOoGDw72ZQ8G3ows67Sh23FznsyLPbnWt_IN_9YK7V1uK
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 75 72 31 74 57 67 50 47 61 31 6a 71 58 65 6b 53 31 73 72 6c 38 4c 59 6d 46 7a 6e 54 6c 7a 47 54 64 6e 2d 78 71 6c 66 48 45 30 6a 45 6f 4a 79 45 57 75 4c 74 65 65 4f 35 43 7a 47 50 77 72 4b 6c 77 75 7a 6c 77 75 56 71 77 4a 56 61 34 4e 6c 36 30 4c 55 34 4b 46 31 30 75 7a 4e 30 68 7a 4e 6a 45 57 52 72 46 4b 66 59 4c 63 64 6d 6a 42 59 47 45 4a 31 5f 4e 45 33 4b 42 49 48 41 69 37 76 59 46 6a 59 64 34 57 5f 6f 6c 6c 4d 45 39 72 5a 41 74 33 36 47 4e 55 52 77 49 73 37 48 6d 79 57 34 4d 74 62 4d 48 5a 77 70 59 2d 73 56 61 67 34 49 42 34 6d 79 42 57 54 52 67 55 44 46 47 59 71 32 41 4a 46 6d 59 78 77 71 78 38 38 4d 78 30 41 56 68 34 6c 73 77 57 2d 63 71 67 59 43 51 72 6f 5f 45 42 77 69 77 6f 49 6b 75 77 4c 42 4d 55 44 4b 65 63 77 33 49 57 47 6d 48 4c 68 61 62 78 51 Data Ascii: ur1tWgPGa1jqXekS1srl8LYmFznTlzGTdn-xqlfHE0jEoJyEWuLteeO5CzGPwrKlwuzlwuVqwJVa4Nl60LU4KF10uzN0hzNjEWRrFKfYLcdmjBYGEJ1_NE3KBIHAi7vYFjYd4W_ollME9rZAt36GNURwIs7HmyW4MtbMHZwpY-sVag4IB4myBWTRgUDFGYq2AJFmYxwqx88Mx0AVh4lswW-cqgYCQro_EBwiwoIkuwLBMUDKecw3IWGmHLhabxQ
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 6d 73 50 4a 45 74 64 54 70 61 37 48 37 6a 74 66 56 41 76 4f 33 4c 4d 35 6f 5a 69 54 64 5a 2d 6c 4f 57 74 72 4b 6a 51 50 55 49 43 4f 4c 55 44 4e 42 61 43 59 35 79 76 7a 31 6f 32 61 57 50 69 74 6d 5f 49 33 39 73 42 36 4b 35 69 76 67 4d 44 79 34 69 70 72 36 38 72 4f 48 62 30 58 36 61 75 61 48 35 4b 31 4d 45 53 31 55 4b 4a 61 49 73 31 61 4b 73 6c 61 48 70 4b 39 51 71 4a 61 49 56 57 74 44 4d 6c 65 47 51 70 62 4f 48 75 31 4e 46 74 76 43 34 66 6b 62 70 42 6d 49 32 70 74 4d 33 78 30 58 50 6d 30 52 72 61 77 51 53 41 2d 45 49 70 49 4e 63 55 66 36 4d 4b 6f 4c 38 7a 72 77 6d 7a 64 4f 64 52 55 59 37 72 77 73 32 31 68 50 6b 61 4e 35 63 75 6c 32 30 59 67 54 4a 67 5a 77 71 78 77 44 35 65 6d 30 5a 41 73 78 36 4c 54 75 4e 41 49 4f 57 70 58 32 71 4e 71 44 77 71 6e 63 56 6f Data Ascii: msPJEtdTpa7H7jtfVAvO3LM5oZiTdZ-lOWtrKjQPUICOLUDNBaCY5yvz1o2aWPitm_I39sB6K5ivgMDy4ipr68rOHb0X6auaH5K1MES1UKJaIs1aKslaHpK9QqJaIVWtDMleGQpbOHu1NFtvC4fkbpBmI2ptM3x0XPm0RrawQSA-EIpINcUf6MKoL8zrwmzdOdRUY7rws21hPkaN5cul20YgTJgZwqxwD5em0ZAsx6LTuNAIOWpX2qNqDwqncVo
2025-02-24 13:36:02 UTC	1390	IN	Data Raw: 67 6c 79 36 47 43 4a 5a 4b 56 6b 53 61 48 64 54 51 51 49 37 78 63 5a 63 64 56 37 57 47 5a 63 6b 59 42 77 69 78 5a 6a 68 6e 43 69 41 35 75 43 45 33 62 55 57 43 33 71 39 42 75 5a 36 48 64 33 6b 4b 37 66 59 58 32 2d 32 37 62 63 39 6b 5a 44 67 65 59 46 6d 78 5f 47 4e 48 42 64 2d 31 68 42 52 2d 5f 36 77 41 56 2d 41 53 7a 67 67 31 61 42 45 5f 45 72 6d 64 4c 58 63 37 64 64 30 4b 37 55 4f 70 34 5f 72 37 7a 2d 66 76 75 4a 2d 35 59 58 58 6a 67 63 76 32 65 73 6b 79 44 50 49 36 71 75 68 6f 55 59 71 75 76 4a 6b 6d 69 2d 62 34 41 4c 33 78 6e 59 75 45 58 68 6f 6f 4f 66 45 6b 45 74 41 69 48 59 45 58 53 61 72 43 69 32 6f 5a 56 69 68 6c 43 31 62 79 70 32 58 4e 44 73 75 61 45 73 6e 36 65 4a 47 75 2d 4a 47 73 68 4b 42 68 75 4f 6b 6e 32 49 71 6c 71 4b 61 51 4a 43 51 54 69 48 Data Ascii: gly6GCJZKVkSaHdTQQI7xcZcdV7WGZckYBwixZjhnCiA5uCE3bUWC3q9BuZ6Hd3kK7fYX2-27bc9kZDgeYFmx_GNHBd-1hBR-_6wAV-ASzgg1aBE_ErmdLXc7dd0K7UOp4_r7z-fvuJ-5YXXjgcv2eskyDPI6quhoUYquvJkmi-b4AL3xnYuEXhooOfEkEtAiHYEXSarCi2oZVihlC1byp2XNDsuaEsn6eJGu-JGshKBhuOkn2IqlqKaQJCQTiH

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:03 UTC	835	OUT	GET /getFirebaseAuthToken?appVersion=20250210_0007 HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
2025-02-24 13:36:04 UTC	678	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:36:03 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: attachment; filename="json.txt" Cross-Origin-Opener-Policy: same-origin-allow-popups Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:04 UTC	37	IN	Data Raw: 31 66 0d 0a 29 5d 7d 27 0a 7b 22 65 72 72 6f 72 53 74 61 74 75 73 22 3a 7b 22 63 6f 64 65 22 3a 39 7d 7d 0d 0a Data Ascii: 1f)]}'{"errorStatus":{"code":9}}
2025-02-24 13:36:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:04 UTC	1171	OUT	GET /favicon.ico HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
2025-02-24 13:36:04 UTC	945	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-P4a-3QJSCEVova7wIk-ZXg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:36:04 GMT Location: https://ssl.gstatic.com/datastudio/latest/static_images/pngs/favicon_looker_studio.png Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:07 UTC	1275	OUT	POST /updatePresence?appVersion=20250210_0007 HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive Content-Length: 76 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/plain, / Content-Type: application/json sec-ch-ua-mobile: ?0 encoding: null User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://lookerstudio.google.com X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEI3L3NAQi5ys0BCOnSzQEI6NXNAQjL1s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://lookerstudio.google.com/reporting/e9245564-52bf-4b48-9115-dea6f2152111/page/p_4gb3na7ypd?s=ryl1d6fWDPQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
2025-02-24 13:36:07 UTC	76	OUT	Data Raw: 7b 22 72 65 70 6f 72 74 49 64 22 3a 22 65 39 32 34 35 35 36 34 2d 35 32 62 66 2d 34 62 34 38 2d 39 31 31 35 2d 64 65 61 36 66 32 31 35 32 31 31 31 22 2c 22 73 65 73 73 69 6f 6e 49 64 22 3a 22 34 68 34 32 76 6b 61 32 70 64 22 7d Data Ascii: {"reportId":"e9245564-52bf-4b48-9115-dea6f2152111","sessionId":"4h42vka2pd"}
2025-02-24 13:36:08 UTC	945	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Frame-Options: DENY Content-Security-Policy: script-src 'report-sample' 'nonce-qTClQPP2hlhd6z80BIZ97A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/datastudio/;frame-ancestors 'none' X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:36:07 GMT Content-Disposition: attachment; filename="json.txt" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Cross-Origin-Opener-Policy: same-origin-allow-popups Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:08 UTC	102	IN	Data Raw: 36 30 0d 0a 29 5d 7d 27 0a 0a 7b 22 65 6e 63 72 79 70 74 65 64 55 73 65 72 53 65 73 73 69 6f 6e 49 64 22 3a 22 41 4d 56 73 6d 7a 61 4c 66 57 53 44 79 30 63 55 35 38 35 66 4b 65 42 38 32 55 4b 63 2d 71 4c 78 33 58 78 63 32 46 58 75 5a 68 41 52 77 32 63 46 79 6d 6e 65 66 5a 4d 5c 75 30 30 33 64 22 7d 0d 0a Data Ascii: 60)]}'{"encryptedUserSessionId":"AMVsmzaLfWSDy0cU585fKeB82UKc-qLx3Xxc2FXuZhARw2cFymnefZM\u003d"}
2025-02-24 13:36:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:08 UTC	829	OUT	GET /updatePresence?appVersion=20250210_0007 HTTP/1.1 Host: lookerstudio.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CJa2yQEIprbJAQipncoBCO6MywEIkqHLAQj6mM0BCIWgzQEIucrNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _gid=GA1.3.219082190.1740404144; _gat=1; _ga=GA1.3.202788371.1740404144; _gat_marketingTracker=1; _ga_S4FJY0X3VX=GS1.1.1740404145.1.1.1740404158.0.0.0; NID=521=YEl-jVgQDiFmk100ICalCR-frtWpd1O61GWPnMvttNNiXcybME28t8nss-CLMmmhaA3JgjMiZsoJMPbnWukTgiEkt9pgg5y6Fufc51qC_nbpU29gWvqrjRWXz68P2Qr-if94O-O03JMsBg0kF25TPXutZPP06CZhbvNFWT4KaLP05oHno1lxWyuD8BQfJXqvLvrE
2025-02-24 13:36:09 UTC	678	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 24 Feb 2025 13:36:08 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Disposition: attachment; filename="json.txt" Cross-Origin-Opener-Policy: same-origin-allow-popups Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-02-24 13:36:09 UTC	37	IN	Data Raw: 31 66 0d 0a 29 5d 7d 27 0a 7b 22 65 72 72 6f 72 53 74 61 74 75 73 22 3a 7b 22 63 6f 64 65 22 3a 39 7d 7d 0d 0a Data Ascii: 1f)]}'{"errorStatus":{"code":9}}
2025-02-24 13:36:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:12 UTC	679	OUT	GET /Iwuuv HTTP/1.1 Host: bgslogin.lgninmsoftrl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 13:36:12 UTC	869	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 24 Feb 2025 13:36:12 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://bgslogin.lgninmsoftrl.com/Iwuuv/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SPTw88vA1ty4JzDYQ3%2F2Siai5VQgMLHvGLeH%2BF4JoZYXNktv4%2B9s8sQV7L9EEBaUoDiRFaasn61LyPY9uql8S49HXvG5Q9SBrSfQbpsSp7oA1PZmjv6QDmK3MKrWs3JbyJ3gtqx5JJ3OPaf4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 916fd7dbda848c0f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1994&min_rtt=1988&rtt_var=758&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1257&delivery_rate=1432777&cwnd=238&unsent_bytes=0&cid=fbe1aa48ad863f1c&ts=457&x=0"
2025-02-24 13:36:12 UTC	253	IN	Data Raw: 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 67 73 6c 6f 67 69 6e 2e 6c 67 6e 69 6e 6d 73 6f 66 74 72 6c 2e 63 6f 6d 2f 49 77 75 75 76 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: f7<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://bgslogin.lgninmsoftrl.com/Iwuuv/">here</a>.</p></body></html>
2025-02-24 13:36:12 UTC	6	IN	Data Raw: 31 0d 0a 0a 0d 0a Data Ascii: 1
2025-02-24 13:36:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:12 UTC	680	OUT	GET /Iwuuv/ HTTP/1.1 Host: bgslogin.lgninmsoftrl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 13:36:12 UTC	1000	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 13:36:12 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=sv3g6rtogdp91pmdblcblrrtk5; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XAkZtJ5PI2A7S4zEffx%2Fibbl2%2B3Egc%2FHbV4Fk%2FXa96FbSdje0yerkRXxmoBEZkjF4EfzjJJ0Qy4mA55N1u%2Bq0Xu0HB8CBwf21wy3oQP0OO9pHnoxB23S7OBnNrTNzi%2BTzYlEUxQ7Nc03Oaf%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 916fd7dddd7042d2-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1568&min_rtt=1563&rtt_var=596&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1258&delivery_rate=1819314&cwnd=231&unsent_bytes=0&cid=693005ff6f63b9f3&ts=733&x=0"
2025-02-24 13:36:12 UTC	369	IN	Data Raw: 31 30 64 62 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 41 6d 62 65 72 54 69 64 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 54 68 65 20 63 68 65 66 20 74 61 75 67 68 74 20 61 20 63 6f 6f 6b 69 6e 67 20 63 6c 61 73 73 20 61 62 6f 75 74 20 6d 61 6b 69 6e 67 20 74 72 61 64 69 74 69 6f 6e 61 6c 20 49 74 61 6c 69 61 6e 20 70 61 73 74 61 20 64 69 73 68 65 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 10db <html lang="en"> <head> <meta charset="UTF-8"> <title>AmberTide</title> ... <span>The chef taught a cooking class about making traditional Italian pasta dishes.</span> --> <meta name="robots" content="
2025-02-24 13:36:12 UTC	1369	IN	Data Raw: 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 54 68 65 20 61 74 68 6c 65 74 65 73 20 67 61 74 68 65 72 65 64 20 61 74 20 74 68 65 20 73 74 61 64 69 75 6d 20 66 6f 72 20 74 68 65 20 6c 6f 6e 67 2d 61 77 61 69 74 65 64 20 63 68 61 6d 70 69 6f 6e 73 68 69 70 20 65 76 65 6e 74 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 54 68 65 20 74 61 6c 65 6e 74 65 64 20 67 79 6d 6e 61 73 74 20 70 65 72 66 6f 72 6d 65 Data Ascii: pt src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>The athletes gathered at the stadium for the long-awaited championship event.</p> --> <style> * /* The talented gymnast performe
2025-02-24 13:36:12 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 2f 2a 20 41 20 64 65 64 69 63 61 74 65 64 20 74 65 61 63 68 65 72 20 69 6e 73 70 69 72 65 64 20 73 74 75 64 65 6e 74 73 20 74 6f 20 70 75 72 73 75 65 20 6b 6e 6f 77 6c 65 64 67 65 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 74 68 65 69 72 20 64 72 65 61 6d 73 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a Data Ascii: /* A dedicated teacher inspired students to pursue knowledge and follow their dreams. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width:
2025-02-24 13:36:12 UTC	1216	IN	Data Raw: 74 73 20 74 6f 20 70 75 72 73 75 65 20 6b 6e 6f 77 6c 65 64 67 65 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 74 68 65 69 72 20 64 72 65 61 6d 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 41 20 6d 61 72 69 6e 65 20 62 69 6f 6c 6f 67 69 73 74 20 64 69 73 63 6f 76 65 72 65 64 20 61 20 6e 65 77 20 73 70 65 63 69 65 73 20 6f 66 20 66 69 73 68 20 69 6e 20 64 65 65 70 20 77 61 74 65 72 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 38 70 6b 52 47 6a 69 38 38 36 4b 72 46 66 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 4d 69 73 74 52 69 70 70 6c 65 Data Ascii: ts to pursue knowledge and follow their dreams. --> ... A marine biologist discovered a new species of fish in deep waters. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA8pkRGji886KrFf" data-callback="MistRipple
2025-02-24 13:36:12 UTC	7	IN	Data Raw: 32 0d 0a 0d 0a 0d 0a Data Ascii: 2
2025-02-24 13:36:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:13 UTC	634	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://bgslogin.lgninmsoftrl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 13:36:13 UTC	1075	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 13:36:13 GMT Content-Type: image/png Content-Length: 1746 Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: master x-jsd-version-type: branch etag: W/"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE" Age: 470 x-served-by: cache-fra-etou8220171-FRA, cache-lga21990-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qxj%2BcV%2B7xfPEkHCc1Yc8cI2LlTx7yQgF5hKccdLHwUx2sDFjtlNKn4d3EmsnQoUKhdta14jvYJeKO7wgGT9iPHgZ3g8koBPZJH5kB4EtbdaUMdKM%2BR8mi0zR9WOtqHTGhCk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 916fd7e30eecc452-EWR
2025-02-24 13:36:13 UTC	294	IN	Data Raw: 52 49 46 46 ca 06 00 00 57 45 42 50 56 50 38 4c bd 06 00 00 2f ff c4 3f 11 1e 3a b6 b5 29 92 9c da dd 4c 65 66 c3 f0 78 d3 a6 b4 8a 5e 86 a0 40 cc 54 95 15 59 62 66 96 25 79 da 0a cb ca 9e 86 50 44 dd 3c a3 05 b0 c9 cc e4 cb 65 4b 16 5b 63 89 7c c9 93 20 39 92 a4 48 0a c5 9f 67 29 b3 97 e9 c4 0c 4f 5c 75 65 96 ba aa 87 03 6e 24 49 8e 9c 8a 7e 13 40 2f ae e7 39 27 36 c2 07 c8 dc 34 ba 7b af 51 11 c0 c0 b2 6d 3b 6d b3 ac af 2e 0b 1c e6 e9 37 5f 1d 04 a3 65 c9 9c e2 00 c2 0c 4e 9e 73 27 a0 aa 81 c8 b5 ac 41 2b 9b 3e ca 74 7a 20 5c eb 7a 67 b0 ae b5 8f 08 a7 bb f0 0c 11 9c e0 da 0b d0 38 d4 38 88 5b 83 71 89 5d 8a 0c 5a dd f5 d1 0f a7 6b 1a d4 ba de 1f ac 4d d7 3c 20 82 11 5c 7f 09 82 41 fc c7 7f fc c7 7f fc c7 7f fc 87 18 fd 68 d3 e4 4f 91 91 f0 1f ff f1 1f Data Ascii: RIFFWEBPVP8L/?:)Lefx^@TYbf%yPD<eK[c\| 9Hg)O\uen$I~@/9'64{Qm;m.7_eNs'A+>tz \zg88[q]ZkM< \AhO
2025-02-24 13:36:13 UTC	1369	IN	Data Raw: 54 e5 3f fe e3 3f fe e3 3f fe e3 3f fe 33 80 a2 04 7d 54 45 c4 fc c7 7f fc 97 40 79 85 ff f8 8f ff f8 cf 58 ca 70 fc 4f d7 fb 84 a5 7d 8a 70 7c 58 93 4a d7 13 0e ff f1 1f ff f1 1f ff f1 1f ff f1 1f 01 ac ee fb 28 d2 11 ff f1 1f ff f1 1f ff 65 d1 1a a3 e4 3f fe 13 b6 22 1c f1 1f ff f1 1f ff f1 1f ff f1 1f ff e5 83 0e 6b 5c 49 fd f4 c3 d1 9a e6 1e ff f1 1f ff f1 1f ff f1 1f ff 6d 8e 83 71 e5 bf 0c c6 67 c9 9f 2a 1d 16 9a 7b c9 9f 52 73 8f ff f8 8f ff f8 8f ff f8 8f ff f8 2f 16 a8 c2 61 f2 a7 1a 1d ae 6a a5 f8 8f ff f8 8f ff f8 8f ff f8 8f ff 62 81 aa 38 4c fe 54 69 1b 3b 05 e7 9a fc f9 9b ff f8 8f ff 72 40 ef f3 1f ff f1 5f 0e e8 15 fe cb 60 54 61 cb 7f fc 97 3e 3b c6 7f fc c7 7f 39 a0 1f f8 8f ff 52 58 55 b1 5d d1 4a a5 7e ca b0 39 a4 9d 4c fd 94 a5 35 87 Data Ascii: T????3}TE@yXpO}p\|XJ(e?"k\Imqg*{Rs/ajb8LTi;r@_`Ta>;9RXU]J~9L5
2025-02-24 13:36:13 UTC	83	IN	Data Raw: f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff 2d b4 34 9b 65 ae 93 50 37 95 61 29 c4 ad b3 2e 8a 5d 46 ec e8 8b 31 bb f4 0c 7c d7 bb 75 3c b0 36 5d 29 78 3d eb b9 59 eb 5c 77 ad eb ae 5d dc 5a 77 ad 00 00 Data Ascii: -4eP7a).]F1\|u<6])x=Y\w]Zw

Timestamp	Bytes transferred	Direction	Data
2025-02-24 13:36:13 UTC	553	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://bgslogin.lgninmsoftrl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 13:36:13 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 24 Feb 2025 13:36:13 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/b0e4a89976ce/api.js Server: cloudflare CF-RAY: 916fd7e31ef932dc-EWR alt-svc: h3=":443"; ma=86400