Edit tour

Windows Analysis Report
https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c

Overview

General Information

Sample URL:	https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c
Analysis ID:	1649414
Infos:

Detection

Score:	1
Range:	0 - 100
Confidence:	80%

Signatures

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3364 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,1677511049627265133,4065197035755924340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,1677511049627265133,4065197035755924340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4016 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /csp/proto/6b8ce7c01e3dacd3d2c7a8cd322ff979 HTTP/1.1Host: csp.withgoogle.comConnection: keep-aliveContent-Length: 56sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://sites.google.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 26 Mar 2025 17:56:02 GMTContent-Type: text/plain; charset=UTF-8Content-Length: 12Connection: closeStrict-Transport-Security: max-age=31536000; includeSubDomainsPermissions-Policy: geolocation=(), camera=(), microphone=()Referrer-Policy: strict-origin-when-cross-originX-Content-Type-Options: nosniffX-Frame-Options: SAMEORIGINX-XSS-Protection: 1; mode=blockSet-Cookie: __cf_bm=XvONuH379ggTK5asePbv_530rQVWuF1n_xOL0FNZIZE-1743011762-1.0.1.1-0Lnq4lZkAPWCWn0RaVt8kpoi.8_Rzx3UPRHg.xcY2iPLsku9ALB9Nzympnz3vTVIZhSitWs8n9oCwOjl5hKgXH7iJWGFODKgfLpaOz5ptsFY2BXcDUIkZgV9jNnzgbSs; path=/; expires=Wed, 26-Mar-25 18:26:02 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=NoneReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4RBX22cdt%2FKYiaa7BUHPufVL7vrlR6rYf5kFiL2QBLZDLsv3KMdZmRYR2jEKGnkyLu3he%2B%2FeBD%2FkuVOyYG%2FBiteKEhTpTfgfEZZU6BwM7kZshFkQvouY23dCc%2BaichPKY7Ogcg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 926885bcce0619ae-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_118.1.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_141.1.dr	String found in binary or memory: http://lh3.ggpht.com
Source: chromecache_141.1.dr	String found in binary or memory: http://lh4.ggpht.com
Source: chromecache_141.1.dr	String found in binary or memory: http://lh5.ggpht.com
Source: chromecache_141.1.dr	String found in binary or memory: http://lh6.ggpht.com
Source: chromecache_131.1.dr	String found in binary or memory: http://localhost.corp.google.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: http://localhost.proxy.googlers.com/inapp/
Source: chromecache_141.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_141.1.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_141.1.dr	String found in binary or memory: https://accounts.google.com/gsi/client
Source: chromecache_118.1.dr	String found in binary or memory: https://accounts.google.com/gsi/ottoken
Source: chromecache_118.1.dr	String found in binary or memory: https://accounts.google.com/o/fedcm/config.json
Source: chromecache_118.1.dr, chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_118.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_144.1.dr, chromecache_134.1.dr, chromecache_118.1.dr, chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_141.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/model-viewer/3.5.0/model-viewer.min.js
Source: chromecache_133.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_119.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_119.1.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_147.1.dr, chromecache_121.1.dr	String found in binary or memory: https://apis.google.com/js/api.js?checkCookie=1
Source: chromecache_144.1.dr, chromecache_141.1.dr, chromecache_131.1.dr	String found in binary or memory: https://apis.google.com/js/client.js
Source: chromecache_141.1.dr	String found in binary or memory: https://apps-drive-picker-dev.corp.google.com/picker/minpick/main
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.com/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.google.de/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-frontend-staging.corp.google.com/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/
Source: chromecache_133.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/mathjax/
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_141.1.dr	String found in binary or memory: https://clients5.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://clients5.google.com/webstore/wall/widget
Source: chromecache_141.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://cloud.google.com/bigquery/docs/connected-sheets
Source: chromecache_118.1.dr	String found in binary or memory: https://console.developers.google.com/
Source: chromecache_141.1.dr	String found in binary or memory: https://content-googleapis-staging.sandbox.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://content-googleapis-test.sandbox.google.com
Source: chromecache_118.1.dr, chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_118.1.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_118.1.dr	String found in binary or memory: https://developers.google.com/
Source: chromecache_118.1.dr	String found in binary or memory: https://developers.google.com/api-client-library/javascript/reference/referencedocs
Source: chromecache_118.1.dr	String found in binary or memory: https://developers.google.com/identity/gsi/web/guides/gis-migration)
Source: chromecache_118.1.dr	String found in binary or memory: https://developers.googleblog.com/2018/03/discontinuing-support-for-json-rpc-and.html
Source: chromecache_134.1.dr, chromecache_118.1.dr, chromecache_135.1.dr	String found in binary or memory: https://domains.google.com/suggest/flow
Source: chromecache_141.1.dr	String found in binary or memory: https://drive-thirdparty.googleusercontent.com/
Source: chromecache_141.1.dr	String found in binary or memory: https://drive.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://drive.google.com/drive/my-drive
Source: chromecache_141.1.dr	String found in binary or memory: https://drive.google.com/picker/minpick/main
Source: chromecache_141.1.dr	String found in binary or memory: https://drive.google.com/requestreview?id=
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_141.1.dr	String found in binary or memory: https://drive.google.com/viewer
Source: chromecache_141.1.dr	String found in binary or memory: https://drive.usercontent.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://drivemetadata.clients6.google.com
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback-pa.clients6.google.com
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/annotator.css
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback.googleusercontent.com/resources/render_frame2.html
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback2-test.corp.google.com/inapp/%
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback2-test.corp.google.com/tools/feedback/%
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/inapp/%
Source: chromecache_131.1.dr	String found in binary or memory: https://feedback2-test.corp.googleusercontent.com/tools/feedback/%
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_141.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/googlesans/v62/4UasrENHsxJlGDuGo1OIlJfC6l_24rlCK1Yo_Iqcsih3SAyH6cAwhX9RP
Source: chromecache_141.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialiconsfilled/close/v19/gm_grey200-24dp/1x/gm_filled_close
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAUi-qJCY.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u8w4BMUTPHjxsAXC-q.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwaPGR_p.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh6UVSwiPGQ.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwaPGR_p.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u9w4BMUTPHh7USSwiPGQ.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_FQft1dw.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI5wq_Gwft.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjx4wXg.woff2)
Source: chromecache_125.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/lato/v24/S6uyw4BMUTPHjxAwXjeu.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3-UBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3CUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3GUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3KUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3OUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3iUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMawCUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v47/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMaxKUBGEe.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlM-vWjMY.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMOvWjMY.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMevWjMY.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMuvWjMY.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlOevWjMY.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2)
Source: chromecache_140.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPuvWjMY.woff2)
Source: chromecache_131.1.dr	String found in binary or memory: https://gstatic.com/uservoice/surveys/resources/
Source: chromecache_131.1.dr	String found in binary or memory: https://help.youtube.com/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://localhost.corp.google.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://localhost.proxy.googlers.com/inapp/
Source: chromecache_141.1.dr	String found in binary or memory: https://one.google.com/plans
Source: chromecache_141.1.dr	String found in binary or memory: https://one.google.com/storage
Source: chromecache_141.1.dr	String found in binary or memory: https://one.google.com/storage/management
Source: chromecache_141.1.dr	String found in binary or memory: https://onepick-autopush.sandbox.google.com/picker/minpick/main
Source: chromecache_141.1.dr	String found in binary or memory: https://onepick-preprod.sandbox.google.com/picker/minpick/main
Source: chromecache_141.1.dr	String found in binary or memory: https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main
Source: chromecache_141.1.dr	String found in binary or memory: https://onepick-staging.sandbox.google.com/picker/minpick/main
Source: chromecache_119.1.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_141.1.dr	String found in binary or memory: https://play.google.com
Source: chromecache_133.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_144.1.dr, chromecache_134.1.dr, chromecache_118.1.dr, chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_141.1.dr	String found in binary or memory: https://punctual-dev.corp.google.com
Source: chromecache_133.1.dr	String found in binary or memory: https://rapid.corp.google.com/
Source: chromecache_137.1.dr	String found in binary or memory: https://reportingwidget-staging.corp.google.com/u/0/widget/
Source: chromecache_137.1.dr	String found in binary or memory: https://reportingwidget.google.com/u/0/widget/
Source: chromecache_131.1.dr	String found in binary or memory: https://sandbox.google.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://sandbox.google.com/inapp/%
Source: chromecache_131.1.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://sandbox.google.com/tools/feedback/%
Source: chromecache_131.1.dr	String found in binary or memory: https://scone-pa.clients6.google.com
Source: chromecache_133.1.dr	String found in binary or memory: https://scriptz.corp.google.com/
Source: chromecache_141.1.dr	String found in binary or memory: https://signaler-pa.clients6.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://signaler-pa.googleapis.com
Source: chromecache_141.1.dr	String found in binary or memory: https://signaler-pa.youtube.com
Source: chromecache_141.1.dr	String found in binary or memory: https://signaler-staging.sandbox.google.com
Source: chromecache_124.1.dr	String found in binary or memory: https://sites.google.com/view/jhgfgyfghbj/home
Source: chromecache_141.1.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no-results-found.svg
Source: chromecache_141.1.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/no_results_error.png
Source: chromecache_141.1.dr	String found in binary or memory: https://ssl.gstatic.com/atari/images/results-not-loaded.svg
Source: chromecache_141.1.dr	String found in binary or memory: https://ssl.gstatic.com/docs/common/cleardot.gif
Source: chromecache_118.1.dr	String found in binary or memory: https://ssl.gstatic.com/gb/js/
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_131.1.dr	String found in binary or memory: https://stagingqual-feedback-pa-googleapis.sandbox.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/a/answer/10411339
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/a/answer/33864?hl=en-US
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/cloudsearch/answer/6172299
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/docs/answer/148505
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/docs/answer/15001094
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/docs/answer/37603
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/docs/answer/49114
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/docs?p=editors_encryption
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/drive/answer/2407404?hl=en
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/drive/answer/2423485?hl=%s
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/drive/answer/2423694
Source: chromecache_141.1.dr	String found in binary or memory: https://support.google.com/drive/answer/7650301
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/inapp/
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/inapp/%
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_131.1.dr	String found in binary or memory: https://test-scone-pa-googleapis.sandbox.google.com
Source: chromecache_133.1.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_141.1.dr	String found in binary or memory: https://workspace.google.com
Source: chromecache_144.1.dr, chromecache_134.1.dr, chromecache_118.1.dr, chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_141.1.dr	String found in binary or memory: https://workspace.google.com/products/sites/
Source: chromecache_141.1.dr	String found in binary or memory: https://workspacevideo-pa.googleapis.com
Source: chromecache_131.1.dr	String found in binary or memory: https://www.google.cn/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://www.google.cn/tools/feedback/%
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_141.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_131.1.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_131.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/
Source: chromecache_131.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/%
Source: chromecache_131.1.dr	String found in binary or memory: https://www.google.com/tools/feedback/help_panel_binary.js
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googleapis.com/auth/cloud_search.query
Source: chromecache_118.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.login
Source: chromecache_135.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.me
Source: chromecache_135.1.dr	String found in binary or memory: https://www.googleapis.com/auth/plus.people.recommended
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googleapis.com/auth/teams.readonly
Source: chromecache_118.1.dr, chromecache_141.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.email
Source: chromecache_118.1.dr	String found in binary or memory: https://www.googleapis.com/auth/userinfo.profile
Source: chromecache_133.1.dr	String found in binary or memory: https://www.gstatic.com/_/apps-fileview/_/js/
Source: chromecache_141.1.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_131.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_131.1.dr	String found in binary or memory: https://www.gstatic.com/uservoice/surveys/resources/
Source: chromecache_141.1.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1
Source: chromecache_141.1.dr	String found in binary or memory: https://www.youtubeeducation.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 142.251.40.228:443 -> 192.168.2.5:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.176.209:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.174:443 -> 192.168.2.5:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.129:443 -> 192.168.2.5:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.174:443 -> 192.168.2.5:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.129:443 -> 192.168.2.5:49756 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.174:443 -> 192.168.2.5:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.206:443 -> 192.168.2.5:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.174:443 -> 192.168.2.5:49765 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.65.174:443 -> 192.168.2.5:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.129:443 -> 192.168.2.5:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.251.40.174:443 -> 192.168.2.5:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.5:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.5:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.5:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.5:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.80.14:443 -> 192.168.2.5:49802 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4104_1867228295

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4104_1867228295

Jump to behavior

Source: classification engine

Classification label: clean1.win@26/59@44/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,1677511049627265133,4065197035755924340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,1677511049627265133,4065197035755924340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4016 /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,1677511049627265133,4065197035755924340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2040 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=printing.mojom.UnsandboxedPrintBackendHost --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2016,i,1677511049627265133,4065197035755924340,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=4016 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://reportingwidget.google.com/u/0/widget/	0%	Avira URL Cloud	safe
https://rapid.corp.google.com/	0%	Avira URL Cloud	safe
https://scriptz.corp.google.com/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
google.com	142.250.80.14	true	false	high
csp.withgoogle.com	142.250.176.209	true	false	high
plus.l.google.com	142.250.65.174	true	false	high
beacons.gvt2.com	142.250.113.94	true	false	high
www.google.as	142.251.40.195	true	false	high
play.google.com	142.251.40.174	true	false	high
www.cloudflare.com	104.16.123.96	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
gce-beacons.gcp.gvt2.com	35.186.229.172	true	false	high
www.google.com	142.251.40.228	true	false	high
drive.google.com	142.250.65.206	true	false	high
googlehosted.l.googleusercontent.com	142.251.40.129	true	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
272868631-atari-embeds.googleusercontent.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	high
lh4.googleusercontent.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://www.cloudflare.com/img/cf-bg.jpg	false	high
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs	false	high
https://challenges.cloudflare.com/turnstile/v0/b/708f7a809116/api.js	false	high
https://apis.google.com/js/api.js?checkCookie=1	false	high
https://google.com/domainreliability/upload	false	high
https://a.nel.cloudflare.com/report/v4?s=n%2BN1LggYiZ8vZYkvqKlCtFuMZGDkzR6%2B1ke9U35y5FHwL7IfTuPjJ%2BCdkXf4xbTjavCbjK8BG8KEci0kDCCl4%2FRuUHtZ0c7bnIqfRTbfXoZRnBhMSKTWx47lMInPXYg4EEYBIz6V	false	high
https://apis.google.com/js/client.js?onload=gapiLoaded	false	high
https://csp.withgoogle.com/csp/proto/6b8ce7c01e3dacd3d2c7a8cd322ff979	false	high
https://a.nel.cloudflare.com/report/v4?s=4RBX22cdt%2FKYiaa7BUHPufVL7vrlR6rYf5kFiL2QBLZDLsv3KMdZmRYR2jEKGnkyLu3he%2B%2FeBD%2FkuVOyYG%2FBiteKEhTpTfgfEZZU6BwM7kZshFkQvouY23dCc%2BaichPKY7Ogcg%3D%3D	false	high
https://lh4.googleusercontent.com/RmS-Fulz9pAL2NVFb70sNRDKU_lBlDpSGDuoOELu4v6C8IYbkDVJw7x3WzVsrEhpIiADDVB3-Cft_1yZ-kENbhE=w16383	false	high
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js	false	high
https://challenges.cloudflare.com/turnstile/v0/api.js?compat=recaptcha	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://signaler-staging.sandbox.google.com	chromecache_141.1.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_131.1.dr	false		high
http://www.broofa.com	chromecache_141.1.dr	false		high
https://apis.google.com/js/client.js	chromecache_144.1.dr, chromecache_141.1.dr, chromecache_131.1.dr	false		high
https://feedback2-test.corp.googleusercontent.com/tools/feedback/%	chromecache_131.1.dr	false		high
http://lh3.ggpht.com	chromecache_141.1.dr	false		high
https://support.google.com	chromecache_141.1.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_131.1.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_131.1.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://support.google.com/drive/answer/2423485?hl=%s	chromecache_141.1.dr	false		high
https://reportingwidget.google.com/u/0/widget/	chromecache_137.1.dr	false	Avira URL Cloud: safe	unknown
https://help.youtube.com/tools/feedback/	chromecache_131.1.dr	false		high
https://support.google.com/a/answer/33864?hl=en-US	chromecache_141.1.dr	false		high
https://onepick-autopush.sandbox.google.com/picker/minpick/main	chromecache_141.1.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_144.1.dr, chromecache_134.1.dr, chromecache_118.1.dr, chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://www.youtube.com	chromecache_141.1.dr	false		high
https://asx-frontend-staging.corp.google.com/tools/feedback/	chromecache_131.1.dr	false		high
https://support.google.com/a/answer/10411339	chromecache_141.1.dr	false		high
https://www.google.com	chromecache_141.1.dr	false		high
https://support.google.com/drive/answer/2407404?hl=en	chromecache_141.1.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_119.1.dr	false		high
https://workspace.google.com	chromecache_141.1.dr	false		high
https://onepick-staging.sandbox.google.com/picker/minpick/main	chromecache_141.1.dr	false		high
https://support.google.com/docs/answer/49114	chromecache_141.1.dr	false		high
https://support.google.com/drive/answer/2423694	chromecache_141.1.dr	false		high
https://drive-thirdparty.googleusercontent.com/	chromecache_141.1.dr	false		high
https://content-googleapis-test.sandbox.google.com	chromecache_141.1.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_131.1.dr	false		high
https://onepick-preprod.sandbox.google.com/picker/minpick/main	chromecache_141.1.dr	false		high
https://developers.google.com/	chromecache_118.1.dr	false		high
https://onepick-staging-drivequal.sandbox.google.com/picker/minpick/main	chromecache_141.1.dr	false		high
https://support.google.com/cloudsearch/answer/6172299	chromecache_141.1.dr	false		high
https://developers.google.com/identity/gsi/web/guides/gis-migration)	chromecache_118.1.dr	false		high
https://www.google.com/tools/feedback	chromecache_131.1.dr	false		high
https://sandbox.google.com/inapp/%	chromecache_131.1.dr	false		high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_141.1.dr	false		high
https://apis.google.com/js/api.js	chromecache_119.1.dr	false		high
https://cdnjs.cloudflare.com/ajax/libs/mathjax/	chromecache_133.1.dr	false		high
https://workspace.google.com/products/sites/	chromecache_141.1.dr	false		high
https://support.google.com/docs?p=editors_encryption	chromecache_141.1.dr	false		high
https://www.google.com/tools/feedback/	chromecache_131.1.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_131.1.dr	false		high
https://punctual-dev.corp.google.com	chromecache_141.1.dr	false		high
https://plus.google.com	chromecache_135.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_131.1.dr	false		high
https://www.youtubeeducation.com	chromecache_141.1.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_131.1.dr	false		high
https://clients5.google.com/webstore/wall/widget	chromecache_141.1.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_133.1.dr	false		high
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_131.1.dr	false		high
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_131.1.dr	false		high
https://sandbox.google.com/tools/feedback/%	chromecache_131.1.dr	false		high
https://content-googleapis-staging.sandbox.google.com	chromecache_141.1.dr	false		high
https://localhost.corp.google.com/inapp/	chromecache_131.1.dr	false		high
https://support.google.com/drive/answer/7650301	chromecache_141.1.dr	false		high
https://drive.google.com	chromecache_141.1.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://rapid.corp.google.com/	chromecache_133.1.dr	false	Avira URL Cloud: safe	unknown
https://drive.google.com/requestreview?id=	chromecache_141.1.dr	false		high
http://lh4.ggpht.com	chromecache_141.1.dr	false		high
https://asx-frontend-staging.corp.google.com/inapp/	chromecache_131.1.dr	false		high
https://drive.google.com/drive/my-drive	chromecache_141.1.dr	false		high
https://fonts.google.com/license/googlerestricted	chromecache_140.1.dr	false		high
https://clients6.google.com	chromecache_141.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
http://localhost.corp.google.com/inapp/	chromecache_131.1.dr	false		high
https://scriptz.corp.google.com/	chromecache_133.1.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_141.1.dr	false		high
https://clients5.google.com	chromecache_141.1.dr	false		high
https://console.developers.google.com/	chromecache_118.1.dr	false		high
https://signaler-pa.youtube.com	chromecache_141.1.dr	false		high
https://support.google.com/inapp/%	chromecache_131.1.dr	false		high
https://asx-help-frontend-autopush.corp.youtube.com/inapp/	chromecache_131.1.dr	false		high
https://drivemetadata.clients6.google.com	chromecache_141.1.dr	false		high
https://support.google.com/docs/answer/15001094	chromecache_141.1.dr	false		high
https://angular.dev/license	chromecache_133.1.dr	false		high
https://support.google.com/docs/answer/148505	chromecache_141.1.dr	false		high
https://support.google.com/	chromecache_131.1.dr	false		high
https://support.google.com/docs/answer/37603	chromecache_141.1.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	false		high
https://scone-pa.clients6.google.com	chromecache_131.1.dr	false		high
https://support.google.com/inapp/	chromecache_131.1.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_131.1.dr	false		high
https://drive.usercontent.google.com	chromecache_141.1.dr	false		high
https://one.google.com/plans	chromecache_141.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.80.14	google.com	United States	15169	GOOGLEUS	false
142.250.65.174	plus.l.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.228	www.google.com	United States	15169	GOOGLEUS	false
142.251.40.129	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.176.209	csp.withgoogle.com	United States	15169	GOOGLEUS	false
142.250.65.206	drive.google.com	United States	15169	GOOGLEUS	false
142.251.40.174	play.google.com	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.123.96	www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1649414
Start date and time:	2025-03-26 18:54:49 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@26/59@44/12

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, BackgroundTransferHost.exe, SIHClient.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.9.183.29, 142.250.80.35, 142.250.81.238, 142.251.167.84, 142.251.40.142, 142.251.35.174, 142.250.80.10, 142.251.40.195, 142.251.40.106, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.250.72.106, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 142.250.81.234, 142.251.32.106, 142.251.35.170, 142.250.81.227, 23.210.73.6, 142.251.41.3, 20.109.210.53, 20.75.60.91, 150.171.28.10, 23.44.203.190
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/jquery/3.5.1/jquery.min.js
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Source: https://sites.google.com/view/jhgfgyfghbj/home	HTTP Parser: No favicon
Source: https://sites.google.com/view/jhgfgyfghbj/home	HTTP Parser: No favicon
Source: https://sites.google.com/view/jhgfgyfghbj/home	HTTP Parser: No favicon
Source: https://sites.google.com/view/jhgfgyfghbj/home	HTTP Parser: No favicon
Source: https://sites.google.com/view/jhgfgyfghbj/home	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.14
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 23.44.203.193
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.90.172
Source: unknown	TCP traffic detected without corresponding DNS query: 150.171.27.10
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /js/client.js?onload=gapiLoaded HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
Source: global traffic	HTTP traffic detected: GET /RmS-Fulz9pAL2NVFb70sNRDKU_lBlDpSGDuoOELu4v6C8IYbkDVJw7x3WzVsrEhpIiADDVB3-Cft_1yZ-kENbhE=w16383 HTTP/1.1Host: lh4.googleusercontent.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /RmS-Fulz9pAL2NVFb70sNRDKU_lBlDpSGDuoOELu4v6C8IYbkDVJw7x3WzVsrEhpIiADDVB3-Cft_1yZ-kENbhE=w16383 HTTP/1.1Host: lh4.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIguXOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=gapi_rpc/exm=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_1?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
Source: global traffic	HTTP traffic detected: GET /auth_warmup HTTP/1.1Host: drive.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://sites.google.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIguXOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
Source: global traffic	HTTP traffic detected: GET /js/api.js?checkCookie=1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.gstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.gstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
Source: global traffic	HTTP traffic detected: GET /embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.fwXSHnIYz-4.O%2Fd%3D1%2Frs%3DAHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ%2Fm%3D__features__ HTTP/1.1Host: 272868631-atari-embeds.googleusercontent.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.gstatic.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIguXOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
Source: global traffic	HTTP traffic detected: GET /js/api.js?checkCookie=1 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://272868631-atari-embeds.googleusercontent.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://272868631-atari-embeds.googleusercontent.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://272868631-atari-embeds.googleusercontent.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://272868631-atari-embeds.googleusercontent.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://272868631-atari-embeds.googleusercontent.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://272868631-atari-embeds.googleusercontent.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/cf-bg.jpg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://272868631-atari-embeds.googleusercontent.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_141.1.dr	String found in binary or memory: _.k.WN=function(){};_.k.QF=function(){};_.k.EO=function(){};_.k.OO=function(){};_.k.WO=function(){};_.k.zL=function(){return 0};_.k.OK=function(){return 0};_.k.uM=function(){return!1};_.E7a=new _.ka("Tc7Qif","Tc7Qif");var HO=function(a,c,e){a=DO.call(this,a,c,e)\|\|this;a.aa=!1;a.ready=!1;a.I=0;a.volume=0;a.ha=!1;a.H=null;a.Ba=null;a.R=-1;a.V=e.fa().C()\|\|new _.CO;a.host=_.K(a.V,1,"https://www.youtube.com");a.J={onError:a.wY.bind(a),onKeyPress:a.onKeyPress.bind(a),onReady:a.onReady.bind(a),onStateChange:a.onStateChange.bind(a),onTabOrderChange:a.gma.bind(a),onVideoProgress:a.onVideoProgress.bind(a),onVolumeChange:a.onVolumeChange.bind(a)};a.ea().listen(a.da().getWindow(),"message",a.wa);a.Ba=_.yg(e,q7a);return a}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: af=y(["https://sandbox.google.com/tools/feedback/"]),bf=y(["https://www.google.cn/tools/feedback/"]),cf=y(["https://help.youtube.com/tools/feedback/"]),df=y(["https://asx-frontend-staging.corp.google.com/inapp/"]),ef=y(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),ff=y(["https://localhost.corp.google.com/inapp/"]),gf=y(["https://localhost.proxy.googlers.com/inapp/"]),hf=S(Ke),jf=[S(Le),S(Me)],kf=[S(Ne),S(Oe),S(Pe),S(Qe),S(Re),S(Se),S(Te),S(Ue),S(Ve),S(We)],lf=[S(Xe),S(Ye)],mf= equals www.youtube.com (Youtube)
Source: chromecache_144.1.dr, chromecache_126.1.dr, chromecache_119.1.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_141.1.dr	String found in binary or memory: null?void 0:(D=B.MD)==null?void 0:D.cJ)&&w.length>0&&(e.length_seconds=qhb(w[0]))}}if(_.J(this.context.fa(),192)){if(!a.tt\|\|!a.tt.dB)return this.context.get(_.XE).Wa({L:252}),e;B=a.tt.dB===mY.AVAILABLE?250:251;this.context.get(_.XE).Wa({L:B});a.tt.dB===mY.AVAILABLE&&(e.videoStoryboard=JSON.stringify(ohb(a.tt)))}return e};var j3=function(a){x0.call(this,a.da());this.context=a;this.J=new _.vg};_.H(j3,x0);j3.prototype.C=function(){return"onYouTubeIframeAPIReady"};j3.prototype.H=function(){var a=this.context.fa().C()\|\|new _.CO;return _.AO(_.K(a,1,"https://www.youtube.com"),"iframe_api")};j3.prototype.B=function(){return _.fh("YT.Player",this.da().getWindow())};j3.prototype.qd=function(){return this.J};var k3=function(a){_.vg.call(this);var c=this;this.context=a;this.D=null;this.R=!1;this.I=0;this.logger=this.H=null;this.ja(this.context);var e=a.fa();a=a.da();e.Uh()\|\|_.Gh(e,83);this.F=new lpb;var f=UGb(e);npb(this.F,f,function(){return hpb(f)});FW(this.F,f);this.handler=new _.tg(this);this.ja(this.handler);this.B=new Zyb;this.ja(this.B);VGb(this,e,a);WGb(this);var g=kR(e);this.C&&g&&(this.context.get(_.XE).start(),this.C.Wa({L:1}),_.uM(Nsb),(e=QR(e))&&this.context.iz().Qa(!!_.J(e,18)));this.root= equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.as
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: drive.google.com
Source: global traffic	DNS traffic detected: DNS query: 272868631-atari-embeds.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 26, 2025 18:55:47.448574066 CET	53	54394	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:47.452548027 CET	53	50291	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:48.145525932 CET	53	57266	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:48.503401995 CET	53	64026	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:51.176640034 CET	60986	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:51.176892042 CET	65229	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:51.261060953 CET	53	60986	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:51.261085033 CET	53	65229	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:53.445837021 CET	49292	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:53.445837021 CET	54200	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:53.569639921 CET	53	49292	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:53.583544016 CET	53	54200	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:54.148365974 CET	53	60121	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:54.843501091 CET	64041	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:54.844865084 CET	54257	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:54.930689096 CET	53	64041	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:54.933195114 CET	53	54257	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:54.939006090 CET	53429	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:54.939275980 CET	64955	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:54.952780008 CET	53	51134	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:54.954029083 CET	53	62297	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:55.023144960 CET	53	53429	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:55.023309946 CET	53	64955	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:55.933163881 CET	55478	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:55.933537960 CET	56020	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:56.017443895 CET	53	55478	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:56.017683983 CET	53	56020	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:56.176692963 CET	53	60261	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:56.603189945 CET	55694	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:56.603353024 CET	50647	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:56.687382936 CET	53	55694	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:56.687480927 CET	53	50647	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:56.705775976 CET	57557	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:56.705986023 CET	58533	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:56.789932013 CET	53	57557	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:56.790035963 CET	53	58533	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:57.407484055 CET	60597	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:57.407484055 CET	49435	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:57.491784096 CET	53	60597	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:57.491805077 CET	53	49435	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:57.865571976 CET	53	50928	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:58.024909973 CET	53	51708	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:58.321728945 CET	63823	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:58.321886063 CET	53480	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:58.407788038 CET	53	63823	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:58.407828093 CET	53	53480	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:58.597626925 CET	53976	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:58.597767115 CET	56588	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:58.681915998 CET	53	53976	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:58.681940079 CET	53	56588	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:58.682507038 CET	53	51059	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:59.131992102 CET	53	51472	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:59.843975067 CET	63912	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:59.844203949 CET	51852	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:55:59.937489033 CET	53	51852	1.1.1.1	192.168.2.5
Mar 26, 2025 18:55:59.937546015 CET	53	63912	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:01.459403992 CET	58751	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:01.459603071 CET	49209	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:01.460036993 CET	57060	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:01.460199118 CET	58633	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:01.543617010 CET	53	58751	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:01.543632030 CET	53	49209	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:01.544126034 CET	53	57060	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:01.544224024 CET	53	58633	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:02.261152983 CET	56538	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:02.261425018 CET	51685	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:02.345228910 CET	53	56538	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:02.345582962 CET	53	51685	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:05.510339975 CET	53	63012	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:24.418032885 CET	53	59567	162.159.36.2	192.168.2.5
Mar 26, 2025 18:56:24.451442957 CET	53	62854	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:42.652122974 CET	138	138	192.168.2.5	192.168.2.255
Mar 26, 2025 18:56:46.843677044 CET	53	58165	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:47.261995077 CET	53	49950	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:55.838560104 CET	61311	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:55.838797092 CET	53382	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:55.922827005 CET	53	61311	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:55.922974110 CET	53	53382	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:56.036592960 CET	55389	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:56.036765099 CET	59816	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:56.124275923 CET	53	55389	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:56.124289989 CET	53	59816	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:56.511277914 CET	54032	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:56.511414051 CET	58938	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:56.595367908 CET	53	54032	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:56.595457077 CET	53	58938	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:56.863719940 CET	63574	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:56.863719940 CET	50216	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:56.949033022 CET	53	63574	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:56.949047089 CET	53	50216	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:58.895597935 CET	61123	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:58.979798079 CET	53	61123	1.1.1.1	192.168.2.5
Mar 26, 2025 18:56:59.910689116 CET	61123	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:56:59.995218039 CET	53	61123	1.1.1.1	192.168.2.5
Mar 26, 2025 18:57:00.910924911 CET	61123	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:57:00.995692015 CET	53	61123	1.1.1.1	192.168.2.5
Mar 26, 2025 18:57:02.911000967 CET	61123	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:57:02.995954990 CET	53	61123	1.1.1.1	192.168.2.5
Mar 26, 2025 18:57:06.925882101 CET	61123	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:57:07.011152983 CET	53	61123	1.1.1.1	192.168.2.5
Mar 26, 2025 18:57:11.837013006 CET	61241	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:57:11.837177038 CET	57696	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:57:11.923119068 CET	53	61241	1.1.1.1	192.168.2.5
Mar 26, 2025 18:57:11.923167944 CET	53	57696	1.1.1.1	192.168.2.5
Mar 26, 2025 18:57:12.847831011 CET	60344	53	192.168.2.5	1.1.1.1
Mar 26, 2025 18:57:12.932296038 CET	53	60344	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:55 UTC	695	OUT	POST /csp/proto/6b8ce7c01e3dacd3d2c7a8cd322ff979 HTTP/1.1 Host: csp.withgoogle.com Connection: keep-alive Content-Length: 56 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://sites.google.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:55:55 UTC	56	OUT	Data Raw: 7b 22 6f 72 69 67 69 6e 22 3a 22 68 74 74 70 73 3a 2f 2f 73 69 74 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 74 79 70 65 22 3a 22 48 45 41 52 54 42 45 41 54 22 7d Data Ascii: {"origin":"https://sites.google.com","type":"HEARTBEAT"}
2025-03-26 17:55:55 UTC	1745	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=utf-8 Access-Control-Allow-Origin: https://sites.google.com Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 26 Mar 2025 17:55:55 GMT Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-4Q4DwGEKToREzXlqUhKHbA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist Cross-Origin-Resource-Policy: cross-origin Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin reporting-endpoints: default="/csp/_/CspCollectorHttp/web-reports?context=eJzj4tDikmLw1pBiEOLmWP1_wn42gQe_myqV9JLyC-OLU5NLizJLKnWTiwt0k_NzclKTS_KLdDNKSgrijQyMTA2MjUz0DMziCwwALugXOQ" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:55 UTC	880	OUT	GET /js/client.js?onload=gapiLoaded HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
2025-03-26 17:55:55 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14461 Date: Wed, 26 Mar 2025 17:55:55 GMT Expires: Wed, 26 Mar 2025 17:55:55 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "947b4197693d9818" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:55 UTC	160	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.v
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 Data Ascii: alue;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 62 21 3d 3d 30 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 0a 67 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 63 3c 30 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 Data Ascii: Object.is",function(a){return a?a:function(b,c){return b===c?b!==0\|\|1/b===1/c:b!==b&&c!==c}});g("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(c<0&&(c=Math.max(c+e,0
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d 3d 2d 31 26 26 41 2e 70 75 73 68 28 44 29 3b 2f 2a 0a 20 67 61 70 69 2e 6c 6f 61 64 65 72 2e 4f 42 4a 45 43 54 5f 43 52 45 41 54 45 5f 54 45 53 54 5f 4f 56 45 52 52 49 44 45 20 26 26 2a 2f 0a 76 61 72 20 45 3d 77 69 6e 64 6f 77 2c 46 3d 64 6f 63 75 6d 65 6e 74 2c 65 61 3d 45 2e 6c 6f 63 61 74 69 6f 6e 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 68 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c Data Ascii: y.")};A.indexOf(D)===-1&&A.push(D);/* gapi.loader.OBJECT_CREATE_TEST_OVERRIDE &&*/var E=window,F=document,ea=E.location,fa=function(){},ha=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},ia=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.l
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 64 3d 50 2e 72 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 64 28 61 2c 62 2c 63 29 3a 64 2e 70 75 73 68 28 5b 61 2c 62 2c 63 5d 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 26 26 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 3d 6d 61 28 62 29 2c 63 26 26 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 2b 3d 22 5f 5f 5f 22 2b 6d 61 28 63 29 29 2c 62 2e 6c 65 6e 67 74 68 3e 32 38 26 26 28 62 3d 62 2e 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 48 28 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e Data Ascii: d=P.r;typeof d==="function"?d(a,b,c):d.push([a,b,c])},T=function(a,b,c){b&&b.length>0&&(b=ma(b),c&&c.length>0&&(b+="___"+ma(c)),b.length>28&&(b=b.substr(0,28)+(b.length-28)),c=b,b=H(ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 67 74 68 3d 3d 3d 31 7c 7c 56 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 3e 30 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 71 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 71 3b 66 3d 6b 3d 3d 22 6f 62 6a 65 63 74 22 26 26 71 21 3d 0a 6e 75 6c 6c 7c 7c 6b 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 22 6f 22 2b 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 71 2c 6e 29 26 26 71 5b 6e 5d 7c 7c 28 71 5b 6e 5d 3d 2b 2b 64 61 29 29 3a 28 74 79 70 65 6f 66 20 71 29 2e 63 68 61 72 41 74 28 30 29 2b 71 3b 4f 62 6a 65 63 Data Ascii: gth===1\|\|V("failed sanity: "+a);try{a="?";if(e&&e.length>0){c=b=0;for(d={};c<e.length;){var q=e[c++];f=void 0;k=typeof q;f=k=="object"&&q!=null\|\|k=="function"?"o"+(Object.prototype.hasOwnProperty.call(q,n)&&q[n]\|\|(q[n]=++da)):(typeof q).charAt(0)+q;Objec
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 76 65 20 64 69 72 65 63 74 6f 72 79 22 29 3b 65 6c 73 65 20 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 3e 30 29 7b 62 2e 75 6e 73 68 69 66 74 28 61 29 3b 62 72 65 61 6b 7d 63 2e 70 75 73 68 28 61 29 7d 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 2b 2b 64 29 7b 76 61 72 20 66 3d 62 5b 64 5d 2e 73 70 6c 69 74 28 22 3d 22 29 2c 6b 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 5b 30 5d 29 2c 6c 3d 0a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 5b 31 5d 29 3b 66 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 6b 26 26 6c 26 26 28 61 5b 6b 5d 3d 61 5b 6b 5d 7c 7c 6c 29 7d 62 3d 22 2f 22 2b 63 2e 6a 6f 69 6e 28 22 2f 22 29 3b 6f 61 2e 74 65 73 74 28 62 29 7c 7c 56 28 22 69 6e 76 61 Data Ascii: ve directory");else if(a.indexOf("=")>0){b.unshift(a);break}c.push(a)}a={};for(var d=0,e=b.length;d<e;++d){var f=b[d].split("="),k=decodeURIComponent(f[0]),l=decodeURIComponent(f[1]);f.length==2&&k&&l&&(a[k]=a[k]\|\|l)}b="/"+c.join("/");oa.test(b)\|\|V("inva
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e 6e 6f 6e 63 65 3d 6e 75 6c 6c 3a 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3f 28 61 3d 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 29 3f 28 61 3d 61 2e 6e 6f 6e 63 65 7c 7c 61 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: (f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.nonce=null:F.querySelector?(a=F.querySelector("script[nonce]"))?(a=a.nonce\|\|a.getAttribut
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 65 5d 5b 30 5d 2c 6b 3d 55 5b 65 5d 5b 31 5d 3b 6b 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 66 29 26 26 6b 28 64 5b 66 5d 2c 61 2c 62 29 7d 62 3d 5b 5d 3b 61 3f 62 3d 61 2e 73 70 6c 69 74 28 22 3a 22 29 3a 63 2e 66 65 61 74 75 72 65 73 26 26 28 62 3d 63 2e 66 65 61 74 75 72 65 73 29 3b 69 66 28 21 28 61 3d 63 2e 68 29 26 26 28 61 3d 4e 28 29 2c 21 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 21 68 69 6e 74 22 29 3b 48 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 69 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 64 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 65 3d 62 2e 63 6f 6e 66 69 67 2c 66 3d 62 Data Ascii: e][0],k=U[e][1];k&&Object.prototype.hasOwnProperty.call(d,f)&&k(d[f],a,b)}b=[];a?b=a.split(":"):c.features&&(b=c.features);if(!(a=c.h)&&(a=N(),!a))throw Error("Bad hint: !hint");Ha(b\|\|[],c,a)},Ha=function(a,b,c){a=ia(a)\|\|[];var d=b.callback,e=b.config,f=b
2025-03-26 17:55:55 UTC	997	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 42 28 43 29 7d 3a 42 28 43 29 7d 3b 69 66 28 72 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 53 3d 22 6c 6f 61 64 65 64 5f 22 2b 4d 2e 49 2b 2b 3b 4a 5b 53 5d 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 75 5b 76 5d 28 77 29 3b 4a 5b 53 5d 3d 6e 75 6c 6c 7d 3b 61 3d 77 61 28 63 2c 72 2c 22 67 61 70 69 2e 22 2b 53 2c 6c 2c 4d 61 29 3b 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 72 29 3b 54 28 22 6d 6c 30 22 2c 72 2c 4b 29 3b 62 2e 73 79 6e 63 7c 7c 45 2e 5f 5f 5f 67 61 70 69 73 79 6e 63 3f 45 61 28 61 29 3a 44 61 28 61 29 7d 65 6c 73 65 20 75 5b 76 5d 28 66 61 29 7d 65 6c 73 65 20 6c 61 28 72 29 26 26 64 26 26 64 28 29 7d 2c 4a 61 3b 76 61 72 20 4b 61 3d 6e 75 6c 6c 2c 5a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 5a 26 26 Data Ascii: unction(){B(C)}:B(C)};if(r.length){var S="loaded_"+M.I++;J[S]=function(w){u[v](w);J[S]=null};a=wa(c,r,"gapi."+S,l,Ma);l.push.apply(l,r);T("ml0",r,K);b.sync\|\|E.___gapisync?Ea(a):Da(a)}else u[v](fa)}else la(r)&&d&&d()},Ja;var Ka=null,Z=m.trustedTypes;if(Z&&

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:56 UTC	988	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
2025-03-26 17:55:56 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 321608 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 24 Mar 2025 22:48:14 GMT Expires: Tue, 24 Mar 2026 22:48:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 04 Mar 2025 15:24:42 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 155262 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:56 UTC	81	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(t
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 61 61 2c 65 61 2c 6c 61 2c 70 61 2c 7a 61 2c 45 61 2c 46 61 3b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 65 61 3d 74 79 70 Data Ascii: ypeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var aa,ea,la,pa,za,Ea,Fa;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=typ
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 6c 75 65 3a 68 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 31 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 70 61 28 22 53 79 6d 62 6f 6c Data Ascii: lue:h})};b.prototype.toString=function(){return this.I1};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});pa("Symbol
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 7d 76 61 3d 21 31 7d 74 61 3d 76 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 7a 61 3d 74 61 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 72 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 7a 61 29 7a 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 Data Ascii: }va=!1}ta=va?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}za=ta;_.r=function(a,b){a.prototype=ra(b.prototype);a.prototype.constructor=a;if(za)za(a,b);else for(var c in b)if(c!="prototype")if(Ob
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 68 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 74 68 69 73 2e 42 66 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 42 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 70 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 6c 38 28 29 7d 29 7d 74 68 69 73 2e 42 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6e 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 70 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 42 66 26 26 74 68 69 73 2e 42 66 2e 6c 65 6e 67 74 Data Ascii: function(k){k(h)})}if(a)return a;b.prototype.oP=function(h){if(this.Bf==null){this.Bf=[];var k=this;this.pP(function(){k.l8()})}this.Bf.push(h)};var d=_.na.setTimeout;b.prototype.pP=function(h){d(h,0)};b.prototype.l8=function(){for(;this.Bf&&this.Bf.lengt
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 76 6f 69 64 20 30 3b 74 72 79 7b 6b 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 66 4b 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 6b 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 59 66 61 28 6b 2c 68 29 3a 74 68 69 73 2e 4c 53 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 4b 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 78 5f 28 32 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 53 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 78 5f 28 31 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 78 5f 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 69 66 28 74 68 69 73 2e 43 61 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 60 22 2b 68 2b 22 60 22 Data Ascii: tion(h){var k=void 0;try{k=h.then}catch(l){this.fK(l);return}typeof k=="function"?this.Yfa(k,h):this.LS(h)};e.prototype.fK=function(h){this.x_(2,h)};e.prototype.LS=function(h){this.x_(1,h)};e.prototype.x_=function(h,k){if(this.Ca!=0)throw Error("c`"+h+"`"
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 70 65 2e 58 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 72 46 28 29 3b 68 2e 6f 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 72 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 71 2c 75 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 71 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6d Data Ascii: pe.Xfa=function(h){var k=this.rF();h.oy(k.resolve,k.reject)};e.prototype.Yfa=function(h,k){var l=this.rF();try{h.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(h,k){function l(q,u){return typeof q=="function"?function(v){try{m
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 6e 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 Data Ascii: next();while(!l.done)})};return e});var Ga=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" mus
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 28 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 65 61 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 Data Ascii: (l,f)){var m=new b;ea(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=ne
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 41 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6c 2e 67 65 74 28 6b 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 6c 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 Data Ascii: unction(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var k=Object.seal({x:4}),l=new a(_.Aa([[k,"s"]]));if(l.get(k)!="s"\|\|l.size!=1\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|l.size!=2)return!1;va

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:56 UTC	833	OUT	GET /RmS-Fulz9pAL2NVFb70sNRDKU_lBlDpSGDuoOELu4v6C8IYbkDVJw7x3WzVsrEhpIiADDVB3-Cft_1yZ-kENbhE=w16383 HTTP/1.1 Host: lh4.googleusercontent.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:55:56 UTC	518	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Vary: Origin Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length ETag: "v1" Expires: Thu, 27 Mar 2025 17:55:56 GMT Cache-Control: public, max-age=86400, no-transform Content-Disposition: inline;filename="logo.jpg" X-Content-Type-Options: nosniff Date: Wed, 26 Mar 2025 17:55:56 GMT Server: fife Content-Length: 9573 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:56 UTC	479	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2c 01 2c 00 00 ff e2 0a 20 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0a 10 00 00 00 00 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 41 50 50 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0a 64 65 73 63 00 00 00 fc 00 00 00 7c 63 70 72 74 00 00 01 78 00 00 00 28 77 74 70 74 00 00 01 a0 00 00 00 14 62 6b 70 74 00 00 01 b4 00 00 00 14 72 58 59 5a 00 00 01 c8 00 00 00 14 67 58 59 5a 00 00 01 dc 00 00 00 14 62 58 59 5a 00 00 01 f0 00 00 00 14 72 Data Ascii: JFIF,, ICC_PROFILEmntrRGB XYZ acspAPPL-desc\|cprtx(wtptbkptrXYZgXYZbXYZr
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 6f a2 00 00 38 f5 00 00 03 90 58 59 5a 20 00 00 00 00 00 00 62 99 00 00 b7 85 00 00 18 da 58 59 5a 20 00 00 00 00 00 00 24 a0 00 00 0f 84 00 00 b6 cf 63 75 72 76 00 00 00 00 00 00 04 00 00 00 00 05 00 0a 00 0f 00 14 00 19 00 1e 00 23 00 28 00 2d 00 32 00 37 00 3b 00 40 00 45 00 4a 00 4f 00 54 00 59 00 5e 00 63 00 68 00 6d 00 72 00 77 00 7c 00 81 00 86 00 8b 00 90 00 95 00 9a 00 9f 00 a4 00 a9 00 ae 00 b2 00 b7 00 bc 00 c1 00 c6 00 cb 00 d0 00 d5 00 db 00 e0 00 e5 00 eb 00 f0 00 f6 00 fb 01 01 01 07 01 0d 01 13 01 19 01 1f 01 25 01 2b 01 32 01 38 01 3e 01 45 01 4c 01 52 01 59 01 60 01 67 01 6e 01 75 01 7c 01 83 01 8b 01 92 01 9a 01 a1 01 a9 01 b1 01 b9 01 c1 01 c9 01 d1 01 d9 01 e1 Data Ascii: XYZ o8XYZ bXYZ $curv#(-27;@EJOTY^chmrw\|%+28>ELRY`gnu\|
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 2a 9b 2a cf 2b 02 2b 36 2b 69 2b 9d 2b d1 2c 05 2c 39 2c 6e 2c a2 2c d7 2d 0c 2d 41 2d 76 2d ab 2d e1 2e 16 2e 4c 2e 82 2e b7 2e ee 2f 24 2f 5a 2f 91 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 Data Ascii: *++6+i++,,9,n,,--A-v--..L.../$/Z///050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKH
2025-03-26 17:55:56 UTC	997	IN	Data Raw: f1 da 76 da fb db 80 dc 05 dc 8a dd 10 dd 96 de 1c de a2 df 29 df af e0 36 e0 bd e1 44 e1 cc e2 53 e2 db e3 63 e3 eb e4 73 e4 fc e5 84 e6 0d e6 96 e7 1f e7 a9 e8 32 e8 bc e9 46 e9 d0 ea 5b ea e5 eb 70 eb fb ec 86 ed 11 ed 9c ee 28 ee b4 ef 40 ef cc f0 58 f0 e5 f1 72 f1 ff f2 8c f3 19 f3 a7 f4 34 f4 c2 f5 50 f5 de f6 6d f6 fb f7 8a f8 19 f8 a8 f9 38 f9 c7 fa 57 fa e7 fb 77 fc 07 fc 98 fd 29 fd ba fe 4b fe dc ff 6d ff ff ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a Data Ascii: v)6DScs2F[p(@Xr4Pm8Ww)KmCC
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-26 17:55:56 UTC	997	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 18 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: B

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1421)
Category:	downloaded
Size (bytes):	30391
Entropy (8bit):	5.39500864828483
Encrypted:	false
SSDEEP:	768:0Txk52HFqnjwzrUPFnbmFA9qPkVWX1uhj9xVBHaRnVq+oHQby9OIokHfuTDN1cWi:BGyUnVq+oHQby9OIoN3RpaJ
MD5:	D833C676060F2F639F40EF65AA3AC3D9
SHA1:	664AB2AF0EAD0AA1D713D34C72B3036B71D9106F
SHA-256:	27BF0178FB5B800096294A2B22D41C59AAE81D3843B6E038F85B26AB7FB76182
SHA-512:	D19EDC3DA999C0D22D826419ED482875A7D0C042006DC810A73C242105F21CD6B95B9D4F01CC99F3131B11AFFFDA1ECC84E6C336241571E685D32A1AFB864A82
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/atari/_/js/k=atari.vw.en_US.vKkd2P35cao.O/am=AAxA/d=0/rs=AGEqA5kcsYD0gSzWgiEH3khWeG401bQIUw/m=IZT63,vfuNJf,sy75,sy79,sy7b,sy7m,sy7k,sy7l,siKnQd,sy73,sy7a,sy7c,YNjGDd,sy7d,PrPYRd,iFQyKf,hc6Ubd,sy7n,SpsfSb,sy76,sy78,wR5FRb,pXdRYb,dIoSBb,zbML3c"
Preview:	"use strict";this.default_vw=this.default_vw\|\|{};(function(_){var window=this;.try{._.p("IZT63");.var dZb=function(){var a=_.Wc("nQyAE",window),c;if((c=_.Wc("TSDtV",window))&&typeof c==="string"){var e=_.Sh(_.Mi(c,_.Iia),_.Li,1,_.Mh())[0];if(e){c={};e=_.y(_.Sh(e,_.Fi,2,_.Mh()));for(var f=e.next();!f.done;f=e.next()){var g=f.value;f=_.K(g,7);switch(_.Ph(g,_.Ki)){case 3:c[f]=_.J(g,_.Ih(g,_.Ki,3));break;case 2:c[f]=_.bi(g,_.Ih(g,_.Ki,2));break;case 4:c[f]=_.via(g,_.Ih(g,_.Ki,4));break;case 5:c[f]=_.K(g,_.Ih(g,_.Ki,5));break;case 8:switch(g=_.Qh(g,_.Gia,_.Ih(g,_.Ki,8)),_.Ph(g,_.Ei)){case 1:c[f]="%.@."+._.K(g,_.Ih(g,_.Ei,1)).substring(1)}}}}else c={}}else c={};if(c&&Object.keys(c).length>0)for(e=_.y(Object.keys(c)),f=e.next();!f.done;f=e.next())f=f.value,f in a\|\|(a[f]=c[f]);return a};_.h9=function(){_.hm.call(this)};_.H(_.h9,_.jm);_.h9.la=_.jm.la;_.h9.prototype.get=function(a){var c=dZb()[a];return c!==void 0?new _.df("nQyAE."+a,c):null};_.h9.prototype.getAll=function(){return(new _.df("nQy

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	4955
Entropy (8bit):	5.3252243011550915
Encrypted:	false
SSDEEP:	96:HYg1aipJc+u7Yg1aijNKYgEatJc+u7YgEafNKYgpaiKJc+u7YgpaigNKO1a+Jc+d:4niJ3nilOF3OBrii3rihuILM1C2MS
MD5:	684F9458CC57E4E3D10A7371167FDD65
SHA1:	A1416D4521EE15728690F1E69C38AC5D3BA0C0D5
SHA-256:	809DF0321E4C22FB83008EFCA44B5F5E7AA10B7BB1CA6234A78D0795A7EC6EA8
SHA-512:	0636A9500F3B9BB81CD365D75449E3DA36EBC8CAF5E8AAB9BB23F72FB40C8FE783A3DCB1EC12D532196AC4718394A07BAC53D897E98EE1B71D66DC1807BBF1A2
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Lato%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_FQft1dw.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u_w4BMUTPHjxsI9w2_Gwft.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Lato';. font-style: italic;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/lato/v24/S6u8w

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:56 UTC	579	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-encoding,content-type,x-goog-authuser Origin: https://sites.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:55:57 UTC	547	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,content-encoding,content-type,x-goog-authuser,origin Content-Type: text/plain; charset=UTF-8 Date: Wed, 26 Mar 2025 17:55:57 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:57 UTC	791	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
2025-03-26 17:55:57 UTC	1303	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:55:57 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-3zPofAbf65LJUiwmAue8Qg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-26 17:55:57 UTC	854	IN	Data Raw: 33 34 66 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 72 6f 63 6b 73 74 61 72 20 67 74 61 20 36 22 2c 22 66 6c 61 76 6f 72 65 64 20 76 61 70 65 73 20 75 74 61 68 22 2c 22 6d 61 72 63 68 20 6d 61 64 6e 65 73 73 20 6d 65 6e 20 62 61 73 6b 65 74 62 61 6c 6c 22 2c 22 70 65 61 6e 75 74 73 20 73 6e 6f 6f 70 79 20 73 74 61 72 62 75 63 6b 73 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 62 6c 6f 6f 64 62 6f 72 6e 65 20 31 30 74 68 20 61 6e 6e 69 76 65 72 73 61 72 79 22 2c 22 63 61 6e 61 64 61 20 74 72 61 76 65 6c 20 77 61 72 6e 69 6e 67 73 22 2c 22 69 6e 73 74 61 6e 74 20 6c 6f 61 6e 73 20 63 68 69 6d 65 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a Data Ascii: 34f)]}'["",["rockstar gta 6","flavored vapes utah","march madness men basketball","peanuts snoopy starbucks","weather storms tornadoes","bloodborne 10th anniversary","canada travel warnings","instant loans chime"],["","","","","","","",""],[],{"google:
2025-03-26 17:55:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:57 UTC	1020	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1488 sec-ch-ua-platform: "Windows" Content-Encoding: gzip User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/binary X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
2025-03-26 17:55:57 UTC	1488	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a ad d7 59 6f 1c 37 12 00 e0 bf 32 98 a7 04 68 cb 75 57 11 79 12 ec f5 01 c7 d9 5c 5e 05 18 0d 0c 59 1a 67 65 2b 92 23 c9 91 e3 5f bf a8 22 7b ac c3 bb 49 76 17 03 0c bf e1 51 24 9b ec 9e e6 6a 85 d3 e9 fb 93 93 3f fd b5 fa 5c e6 72 73 7a ef c5 0f cb cf 37 90 09 d6 eb f5 44 c0 3c ad 56 4b 74 61 40 74 55 12 f9 7c 93 6b 81 57 ab 6b 1d e2 74 bd 31 01 c0 9d ce 56 b7 6b ac 47 d3 91 3a da 36 d6 7a 3d ad f6 97 0f 9e fb 13 7b ff f7 b3 5f 9f 5e 3d 7c f4 dd cb c3 8f 3f ef 1e 3d b8 7a a1 df 5f ed 2f 6f f4 87 d9 df 36 43 1c 05 8c a6 fd e5 ee 93 67 3f fd f2 35 6c 4e 4e de ff f6 f8 6f ff 80 17 27 e7 e2 1f ce df 3c 3c 3f dc bb dc d5 37 17 e7 fa f4 e3 f3 6f f4 fc db ef 1e 7d ff 81 be bd 78 fc f6 a7 37 f4 48 5e fc 7c fc 6e ef 70 f7 f0 e1 af 6f Data Ascii: Yo72huWy\^Yge+#_"{IvQ$j?\rsz7D<VKta@tU\|kWkt1VkG:6z={_^=\|?=z_/o6Cg?5lNNo'<<?7o}x7H^\|npo
2025-03-26 17:55:57 UTC	957	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA; expires=Thu, 25-Sep-2025 17:55:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Wed, 26 Mar 2025 17:55:57 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Wed, 26 Mar 2025 17:55:57 GMT Cache-Control: private Connection: close Transfer-Encoding: chunked
2025-03-26 17:55:57 UTC	40	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["
2025-03-26 17:55:57 UTC	97	IN	Data Raw: 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-03-26 17:55:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:57 UTC	1001	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=gapi_rpc/exm=client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_1?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
2025-03-26 17:55:57 UTC	911	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 261 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 26 Mar 2025 17:19:49 GMT Expires: Thu, 26 Mar 2026 17:19:49 GMT Cache-Control: public, max-age=31536000 Age: 2168 Last-Modified: Tue, 04 Mar 2025 15:24:42 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:57 UTC	86	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 31 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 41 28 22 67 61 70 69 2e 72 70 63 2e 73 65 74 75 70 22 2c 5f 2e 70 6c 29 3b 5f 2e 41 28 22 67 61 70 69 2e 72 70 63 2e 72 65 Data Ascii: gapi.loaded_1(function(_){var window=this;_.A("gapi.rpc.setup",_.pl);_.A("gapi.rpc.re
2025-03-26 17:55:57 UTC	175	IN	Data Raw: 67 69 73 74 65 72 22 2c 5f 2e 64 6c 29 3b 5f 2e 41 28 22 67 61 70 69 2e 72 70 63 2e 63 61 6c 6c 22 2c 5f 2e 68 6c 29 3b 5f 2e 41 28 22 67 61 70 69 2e 72 70 63 2e 75 6e 72 65 67 69 73 74 65 72 22 2c 5f 2e 65 6c 29 3b 5f 2e 41 28 22 67 61 70 69 2e 72 70 63 2e 73 65 6e 64 48 61 6e 64 73 68 61 6b 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 5f 2e 70 6c 28 61 29 28 29 3b 5f 2e 5a 6b 2e 73 65 6e 64 28 61 2c 5f 2e 5a 6b 2e 48 49 28 62 29 2c 22 2a 22 29 7d 29 3b 0a 7d 29 3b 0a 2f 2f 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 0a Data Ascii: gister",_.dl);_.A("gapi.rpc.call",_.hl);_.A("gapi.rpc.unregister",_.el);_.A("gapi.rpc.sendHandshake",function(a,b){_.pl(a)();_.Zk.send(a,_.Zk.HI(b),"*")});});// Google Inc.

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:57 UTC	1196	OUT	GET /auth_warmup HTTP/1.1 Host: drive.google.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=C8PsoDuKW_vXPuZREuUk0YcdG9HuGAdRCryzyXkcONqLXRXZ8DF0gyGOZk_jcb2SWICJ8knr-qyVaFNa4-lJVRjckc4IXrf3QdeWUlr5F3tAsi44EfDvcdOG7LmmAHtUnN9OrpwVMDQXj-SoHEwEMIqsjy_7_pageP1Y3wzU66RjM8NCnxGGlmmG7fBZ6UOkzrMTEw
2025-03-26 17:55:57 UTC	1730	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 26 Mar 2025 17:55:57 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/DriveOsidBootstrap/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-x5m0HtrgkWEQ5vzx8_vrsA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/DriveOsidBootstrap/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/DriveOsidBootstrap/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/DriveOsidBootstrap/web-reports?context=eJzj4tDikmII1JBiEOLhWPt_wn42gQVdV9qZlVST8gvjU4oyy1IzSkoKEgsyi1OLylKL4o0MjEwNjA2N9QyM4gsMAFpTE8Q" Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:58 UTC	715	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEIguXOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
2025-03-26 17:55:58 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Wed, 26 Mar 2025 17:55:58 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:58 UTC	727	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2025-03-26 17:55:58 UTC	828	IN	Data Raw: 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 31 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 70 78 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 31 39 32 64 70 69 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 30 25 20 30 25 2f 31 30 30 25 20 31 30 30 25 3b 2d 6d 6f 7a 2d 62 6f 72 Data Ascii: ng/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-bor

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:58 UTC	915	OUT	GET /js/api.js?checkCookie=1 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.gstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
2025-03-26 17:55:59 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 14456 Date: Wed, 26 Mar 2025 17:55:59 GMT Expires: Wed, 26 Mar 2025 17:55:59 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "e1b9b1c68700b6ef" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:59 UTC	160	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 Data Ascii: (function(){var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.v
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 2c 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 Data Ascii: alue;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 4f 62 6a 65 63 74 2e 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 62 3d 3d 3d 63 3f 62 21 3d 3d 30 7c 7c 31 2f 62 3d 3d 3d 31 2f 63 3a 62 21 3d 3d 62 26 26 63 21 3d 3d 63 7d 7d 29 3b 0a 67 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 63 6c 75 64 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 74 68 69 73 3b 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 64 3d 53 74 72 69 6e 67 28 64 29 29 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 3b 63 3d 63 7c 7c 30 3b 66 6f 72 28 63 3c 30 26 26 28 63 3d 4d 61 74 68 2e 6d 61 78 28 63 2b 65 2c 30 Data Ascii: Object.is",function(a){return a?a:function(b,c){return b===c?b!==0\|\|1/b===1/c:b!==b&&c!==c}});g("Array.prototype.includes",function(a){return a?a:function(b,c){var d=this;d instanceof String&&(d=String(d));var e=d.length;c=c\|\|0;for(c<0&&(c=Math.max(c+e,0
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 79 2e 22 29 7d 3b 41 2e 69 6e 64 65 78 4f 66 28 44 29 3d 3d 3d 2d 31 26 26 41 2e 70 75 73 68 28 44 29 3b 2f 2a 0a 20 67 61 70 69 2e 6c 6f 61 64 65 72 2e 4f 42 4a 45 43 54 5f 43 52 45 41 54 45 5f 54 45 53 54 5f 4f 56 45 52 52 49 44 45 20 26 26 2a 2f 0a 76 61 72 20 45 3d 77 69 6e 64 6f 77 2c 46 3d 64 6f 63 75 6d 65 6e 74 2c 65 61 3d 45 2e 6c 6f 63 61 74 69 6f 6e 2c 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 68 61 3d 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 5b 62 5d 3d 61 5b 62 5d 7c 7c 63 7d 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 2e 73 6f 72 74 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 5b 5d 2c 63 3d 76 6f 69 64 20 30 2c 64 3d 30 3b 64 3c 61 2e 6c Data Ascii: y.")};A.indexOf(D)===-1&&A.push(D);/* gapi.loader.OBJECT_CREATE_TEST_OVERRIDE &&*/var E=window,F=document,ea=E.location,fa=function(){},ha=/\[native code\]/,H=function(a,b,c){return a[b]=a[b]\|\|c},ia=function(a){a=a.sort();for(var b=[],c=void 0,d=0;d<a.l
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 64 3d 50 2e 72 3b 74 79 70 65 6f 66 20 64 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 64 28 61 2c 62 2c 63 29 3a 64 2e 70 75 73 68 28 5b 61 2c 62 2c 63 5d 29 7d 2c 54 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 26 26 62 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 3d 6d 61 28 62 29 2c 63 26 26 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 62 2b 3d 22 5f 5f 5f 22 2b 6d 61 28 63 29 29 2c 62 2e 6c 65 6e 67 74 68 3e 32 38 26 26 28 62 3d 62 2e 73 75 62 73 74 72 28 30 2c 32 38 29 2b 28 62 2e 6c 65 6e 67 74 68 2d 32 38 29 29 2c 63 3d 62 2c 62 3d 48 28 6b 61 2c 22 5f 70 22 2c 49 28 29 29 2c 48 28 62 2c 63 2c 49 28 29 29 5b 61 5d 3d 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 28 29 2c 52 28 61 2c 22 5f 70 22 2c 63 29 29 7d 2c 6d 61 3d 66 75 6e 63 74 69 6f 6e Data Ascii: d=P.r;typeof d==="function"?d(a,b,c):d.push([a,b,c])},T=function(a,b,c){b&&b.length>0&&(b=ma(b),c&&c.length>0&&(b+="___"+ma(c)),b.length>28&&(b=b.substr(0,28)+(b.length-28)),c=b,b=H(ka,"_p",I()),H(b,c,I())[a]=(new Date).getTime(),R(a,"_p",c))},ma=function
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 67 74 68 3d 3d 3d 31 7c 7c 56 28 22 66 61 69 6c 65 64 20 73 61 6e 69 74 79 3a 20 22 2b 61 29 3b 74 72 79 7b 61 3d 22 3f 22 3b 69 66 28 65 26 26 65 2e 6c 65 6e 67 74 68 3e 30 29 7b 63 3d 62 3d 30 3b 66 6f 72 28 64 3d 7b 7d 3b 63 3c 65 2e 6c 65 6e 67 74 68 3b 29 7b 76 61 72 20 71 3d 65 5b 63 2b 2b 5d 3b 66 3d 76 6f 69 64 20 30 3b 6b 3d 74 79 70 65 6f 66 20 71 3b 66 3d 6b 3d 3d 22 6f 62 6a 65 63 74 22 26 26 71 21 3d 0a 6e 75 6c 6c 7c 7c 6b 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 22 6f 22 2b 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 71 2c 6e 29 26 26 71 5b 6e 5d 7c 7c 28 71 5b 6e 5d 3d 2b 2b 64 61 29 29 3a 28 74 79 70 65 6f 66 20 71 29 2e 63 68 61 72 41 74 28 30 29 2b 71 3b 4f 62 6a 65 63 Data Ascii: gth===1\|\|V("failed sanity: "+a);try{a="?";if(e&&e.length>0){c=b=0;for(d={};c<e.length;){var q=e[c++];f=void 0;k=typeof q;f=k=="object"&&q!=null\|\|k=="function"?"o"+(Object.prototype.hasOwnProperty.call(q,n)&&q[n]\|\|(q[n]=++da)):(typeof q).charAt(0)+q;Objec
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 76 65 20 64 69 72 65 63 74 6f 72 79 22 29 3b 65 6c 73 65 20 69 66 28 61 2e 69 6e 64 65 78 4f 66 28 22 3d 22 29 3e 30 29 7b 62 2e 75 6e 73 68 69 66 74 28 61 29 3b 62 72 65 61 6b 7d 63 2e 70 75 73 68 28 61 29 7d 61 3d 7b 7d 3b 66 6f 72 28 76 61 72 20 64 3d 30 2c 65 3d 62 2e 6c 65 6e 67 74 68 3b 64 3c 65 3b 2b 2b 64 29 7b 76 61 72 20 66 3d 62 5b 64 5d 2e 73 70 6c 69 74 28 22 3d 22 29 2c 6b 3d 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 5b 30 5d 29 2c 6c 3d 0a 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 66 5b 31 5d 29 3b 66 2e 6c 65 6e 67 74 68 3d 3d 32 26 26 6b 26 26 6c 26 26 28 61 5b 6b 5d 3d 61 5b 6b 5d 7c 7c 6c 29 7d 62 3d 22 2f 22 2b 63 2e 6a 6f 69 6e 28 22 2f 22 29 3b 6f 61 2e 74 65 73 74 28 62 29 7c 7c 56 28 22 69 6e 76 61 Data Ascii: ve directory");else if(a.indexOf("=")>0){b.unshift(a);break}c.push(a)}a={};for(var d=0,e=b.length;d<e;++d){var f=b[d].split("="),k=decodeURIComponent(f[0]),l=decodeURIComponent(f[1]);f.length==2&&k&&l&&(a[k]=a[k]\|\|l)}b="/"+c.join("/");oa.test(b)\|\|V("inva
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 28 66 3d 65 29 7b 61 3a 7b 66 6f 72 28 66 3d 30 3b 66 3c 62 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 69 66 28 62 5b 66 5d 3d 3d 3d 65 29 62 72 65 61 6b 20 61 3b 66 3d 2d 31 7d 66 3d 66 3c 30 7d 66 26 26 63 2e 70 75 73 68 28 65 29 7d 72 65 74 75 72 6e 20 63 7d 2c 43 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 4d 2e 6e 6f 6e 63 65 3b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 3f 61 26 26 61 3d 3d 3d 53 74 72 69 6e 67 28 61 29 26 26 61 2e 6d 61 74 63 68 28 41 61 29 3f 61 3a 4d 2e 6e 6f 6e 63 65 3d 6e 75 6c 6c 3a 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 3f 28 61 3d 46 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 73 63 72 69 70 74 5b 6e 6f 6e 63 65 5d 22 29 29 3f 28 61 3d 61 2e 6e 6f 6e 63 65 7c 7c 61 2e 67 65 74 41 74 74 72 69 62 75 74 Data Ascii: (f=e){a:{for(f=0;f<b.length;f++)if(b[f]===e)break a;f=-1}f=f<0}f&&c.push(e)}return c},Ca=function(){var a=M.nonce;return a!==void 0?a&&a===String(a)&&a.match(Aa)?a:M.nonce=null:F.querySelector?(a=F.querySelector("script[nonce]"))?(a=a.nonce\|\|a.getAttribut
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 65 5d 5b 30 5d 2c 6b 3d 55 5b 65 5d 5b 31 5d 3b 6b 26 26 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 64 2c 66 29 26 26 6b 28 64 5b 66 5d 2c 61 2c 62 29 7d 62 3d 5b 5d 3b 61 3f 62 3d 61 2e 73 70 6c 69 74 28 22 3a 22 29 3a 63 2e 66 65 61 74 75 72 65 73 26 26 28 62 3d 63 2e 66 65 61 74 75 72 65 73 29 3b 69 66 28 21 28 61 3d 63 2e 68 29 26 26 28 61 3d 4e 28 29 2c 21 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 42 61 64 20 68 69 6e 74 3a 20 21 68 69 6e 74 22 29 3b 48 61 28 62 7c 7c 5b 5d 2c 63 2c 61 29 7d 2c 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 61 3d 69 61 28 61 29 7c 7c 5b 5d 3b 76 61 72 20 64 3d 62 2e 63 61 6c 6c 62 61 63 6b 2c 65 3d 62 2e 63 6f 6e 66 69 67 2c 66 3d 62 Data Ascii: e][0],k=U[e][1];k&&Object.prototype.hasOwnProperty.call(d,f)&&k(d[f],a,b)}b=[];a?b=a.split(":"):c.features&&(b=c.features);if(!(a=c.h)&&(a=N(),!a))throw Error("Bad hint: !hint");Ha(b\|\|[],c,a)},Ha=function(a,b,c){a=ia(a)\|\|[];var d=b.callback,e=b.config,f=b
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 42 28 43 29 7d 3a 42 28 43 29 7d 3b 69 66 28 72 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 53 3d 22 6c 6f 61 64 65 64 5f 22 2b 4d 2e 49 2b 2b 3b 4a 5b 53 5d 3d 66 75 6e 63 74 69 6f 6e 28 77 29 7b 75 5b 76 5d 28 77 29 3b 4a 5b 53 5d 3d 6e 75 6c 6c 7d 3b 61 3d 77 61 28 63 2c 72 2c 22 67 61 70 69 2e 22 2b 53 2c 6c 2c 4d 61 29 3b 6c 2e 70 75 73 68 2e 61 70 70 6c 79 28 6c 2c 72 29 3b 54 28 22 6d 6c 30 22 2c 72 2c 4b 29 3b 62 2e 73 79 6e 63 7c 7c 45 2e 5f 5f 5f 67 61 70 69 73 79 6e 63 3f 45 61 28 61 29 3a 44 61 28 61 29 7d 65 6c 73 65 20 75 5b 76 5d 28 66 61 29 7d 65 6c 73 65 20 6c 61 28 72 29 26 26 64 26 26 64 28 29 7d 2c 4a 61 3b 76 61 72 20 4b 61 3d 6e 75 6c 6c 2c 5a 3d 6d 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 5a 26 26 Data Ascii: unction(){B(C)}:B(C)};if(r.length){var S="loaded_"+M.I++;J[S]=function(w){u[v](w);J[S]=null};a=wa(c,r,"gapi."+S,l,Ma);l.push.apply(l,r);T("ml0",r,K);b.sync\|\|E.___gapisync?Ea(a):Da(a)}else u[v](fa)}else la(r)&&d&&d()},Ja;var Ka=null,Z=m.trustedTypes;if(Z&&

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:59 UTC	1032	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.gstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
2025-03-26 17:55:59 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 52002 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 20 Mar 2025 18:18:27 GMT Expires: Fri, 20 Mar 2026 18:18:27 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 04 Mar 2025 15:24:42 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 517052 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:55:59 UTC	82	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(ty
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 61 61 2c 65 61 2c 6c 61 2c 70 61 2c 7a 61 2c 45 61 2c 46 61 3b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 65 61 3d 74 79 70 65 Data Ascii: peof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var aa,ea,la,pa,za,Ea,Fa;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=type
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 75 65 3a 68 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 31 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 70 61 28 22 53 79 6d 62 6f 6c 2e Data Ascii: ue:h})};b.prototype.toString=function(){return this.I1};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});pa("Symbol.
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 76 61 3d 21 31 7d 74 61 3d 76 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 7a 61 3d 74 61 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 72 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 7a 61 29 7a 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a Data Ascii: va=!1}ta=va?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}za=ta;_.r=function(a,b){a.prototype=ra(b.prototype);a.prototype.constructor=a;if(za)za(a,b);else for(var c in b)if(c!="prototype")if(Obj
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 68 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 74 68 69 73 2e 42 66 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 42 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 70 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 6c 38 28 29 7d 29 7d 74 68 69 73 2e 42 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6e 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 70 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 42 66 26 26 74 68 69 73 2e 42 66 2e 6c 65 6e 67 74 68 Data Ascii: unction(k){k(h)})}if(a)return a;b.prototype.oP=function(h){if(this.Bf==null){this.Bf=[];var k=this;this.pP(function(){k.l8()})}this.Bf.push(h)};var d=_.na.setTimeout;b.prototype.pP=function(h){d(h,0)};b.prototype.l8=function(){for(;this.Bf&&this.Bf.length
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 76 6f 69 64 20 30 3b 74 72 79 7b 6b 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 66 4b 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 6b 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 59 66 61 28 6b 2c 68 29 3a 74 68 69 73 2e 4c 53 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 4b 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 78 5f 28 32 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 53 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 78 5f 28 31 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 78 5f 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 69 66 28 74 68 69 73 2e 43 61 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 60 22 2b 68 2b 22 60 22 2b Data Ascii: ion(h){var k=void 0;try{k=h.then}catch(l){this.fK(l);return}typeof k=="function"?this.Yfa(k,h):this.LS(h)};e.prototype.fK=function(h){this.x_(2,h)};e.prototype.LS=function(h){this.x_(1,h)};e.prototype.x_=function(h,k){if(this.Ca!=0)throw Error("c`"+h+"`"+
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 65 2e 58 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 72 46 28 29 3b 68 2e 6f 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 72 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 71 2c 75 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 71 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6d 28 Data Ascii: e.Xfa=function(h){var k=this.rF();h.oy(k.resolve,k.reject)};e.prototype.Yfa=function(h,k){var l=this.rF();try{h.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(h,k){function l(q,u){return typeof q=="function"?function(v){try{m(
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 Data Ascii: ext();while(!l.done)})};return e});var Ga=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 65 61 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 Data Ascii: l,f)){var m=new b;ea(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new
2025-03-26 17:55:59 UTC	997	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 41 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6c 2e 67 65 74 28 6b 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 6c 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 Data Ascii: nction(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var k=Object.seal({x:4}),l=new a(_.Aa([[k,"s"]]));if(l.get(k)!="s"\|\|l.size!=1\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|l.size!=2)return!1;var

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:55:59 UTC	1028	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1666 sec-ch-ua-platform: "Windows" Content-Encoding: gzip User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/binary X-Goog-AuthUser: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://sites.google.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://sites.google.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
2025-03-26 17:55:59 UTC	1666	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 0a c5 98 5b 73 15 47 0e 80 ff 8a 6b 9e 92 aa c6 e8 2e f5 e6 89 85 e5 52 04 36 37 96 54 8d 4f 51 c6 3e 10 83 b1 89 6d 62 c2 af df 52 77 cf c1 c6 24 21 bb d9 e5 65 f4 8d 5a 52 ab 35 3d 7d 8e 66 9e b1 1c bd 39 3c fc e4 cb fc 31 e5 b4 3e ba f6 e8 fb e9 8a ed 3c 4f 37 7f 3a 39 7e 75 f0 e6 d5 54 26 64 99 56 65 9e 1e 1e 9f fd ed c6 b5 bf 9f ec 1e ed 4f 65 a2 ae bc 73 7c fc fc 70 bd d5 cc d7 8b f1 aa 40 99 1e 1f 1c ed 1f 9f 9f a6 0e b6 61 1b a6 32 bd 0d 9b ca d4 ad b6 61 db 6a 8d 6d b6 8c 23 05 56 ab 55 21 60 2e f3 3c a1 0b 03 a2 6b 88 e0 95 fc 3e 5c c5 3c 5f 58 1d 95 8d b3 92 54 00 b8 b2 f6 79 9e a3 7a 41 0a 58 95 b9 86 74 5c ad fe 5c 49 3f 5a e6 19 0a 7c 52 1c f9 ef 27 fb e0 02 ab 55 c1 25 8d 0f 8b 30 72 c2 21 95 d1 62 29 18 ad 2e 96 Data Ascii: [sGk.R67TOQ>mbRw$!eZR5=}f9<1><O7:9~uT&dVeOes\|p@a2ajm#VU!`.<k>\<_XTyzAXt\\I?Z\|R'U%0r!b).
2025-03-26 17:56:00 UTC	496	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://sites.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Wed, 26 Mar 2025 17:56:00 GMT Server: Playlog X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-26 17:56:00 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2025-03-26 17:56:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:00 UTC	1237	OUT	GET /embeds/16cb204cf3a9d4d223a0a3fd8b0eec5d/inner-frame-minified.html?jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.fwXSHnIYz-4.O%2Fd%3D1%2Frs%3DAHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ%2Fm%3D__features__ HTTP/1.1 Host: 272868631-atari-embeds.googleusercontent.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://www.gstatic.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:00 UTC	701	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="apps-sites" Report-To: {"group":"apps-sites","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-sites"}]} Content-Length: 2021 Date: Wed, 26 Mar 2025 17:56:00 GMT Expires: Thu, 26 Mar 2026 17:56:00 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 12 Dec 2023 13:42:01 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:56:00 UTC	296	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 73 74 79 6c 65 3e 62 6f 64 79 2c 68 74 6d 6c 2c 69 66 72 61 6d 65 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 66 6f 72 63 65 49 6f 73 53 63 72 6f 6c 6c 69 6e 67 7b 6f 76 65 72 66 6c 6f 77 3a 73 63 72 6f 6c 6c 3b 2d 77 65 62 6b 69 74 2d 6f 76 65 72 66 6c 6f 77 2d 73 63 72 6f 6c 6c 69 6e 67 3a 74 6f 75 63 68 7d 3c 2f 73 74 79 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 0a 3c 62 6f 64 79 3e 0a 3c 69 66 72 61 6d 65 20 69 64 3d 27 75 73 65 72 48 74 6d 6c 46 72 61 6d 65 27 20 66 72 61 6d 65 62 6f 72 64 65 72 3d 27 30 27 20 73 63 72 6f 6c Data Ascii: <!DOCTYPE html><html><head> <style>body,html,iframe{margin:0;padding:0;height:100%;width:100%;overflow:hidden}.forceIosScrolling{overflow:scroll;-webkit-overflow-scrolling:touch}</style></head><body><iframe id='userHtmlFrame' frameborder='0' scrol
2025-03-26 17:56:00 UTC	997	IN	Data Raw: 6f 61 64 47 61 70 69 28 29 7b 76 61 72 20 6c 6f 61 64 65 72 53 63 72 69 70 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 6c 6f 61 64 65 72 53 63 72 69 70 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 27 73 72 63 27 2c 27 68 74 74 70 73 3a 2f 2f 61 70 69 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 6a 73 2f 61 70 69 2e 6a 73 3f 63 68 65 63 6b 43 6f 6f 6b 69 65 3d 31 27 29 3b 6c 6f 61 64 65 72 53 63 72 69 70 74 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 6c 6f 61 64 47 61 70 69 43 6c 69 65 6e 74 28 29 3b 7d 3b 6c 6f 61 64 65 72 53 63 72 69 70 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 Data Ascii: oadGapi(){var loaderScript=document.createElement('script');loaderScript.setAttribute('src','https://apis.google.com/js/api.js?checkCookie=1');loaderScript.onload=function(){this.onload=function(){};loadGapiClient();};loaderScript.onreadystatechange=funct
2025-03-26 17:56:00 UTC	728	IN	Data Raw: 70 69 49 6e 69 74 69 61 6c 69 7a 65 64 27 29 3b 67 61 70 69 2e 72 70 63 2e 72 65 67 69 73 74 65 72 28 27 75 70 64 61 74 65 55 73 65 72 48 74 6d 6c 46 72 61 6d 65 27 2c 75 70 64 61 74 65 55 73 65 72 48 74 6d 6c 46 72 61 6d 65 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 6c 6f 61 64 47 61 70 69 43 6c 69 65 6e 74 28 29 7b 67 61 70 69 2e 6c 6f 61 64 28 27 67 61 70 69 2e 72 70 63 27 2c 6f 6e 47 61 70 69 49 6e 69 74 69 61 6c 69 7a 65 64 29 3b 7d 69 66 28 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 27 63 6f 6d 70 6c 65 74 65 27 29 7b 6c 6f 61 64 47 61 70 69 28 29 3b 7d 65 6c 73 65 7b 73 65 6c 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 6c 6f 61 64 27 2c 6c 6f 61 64 47 61 70 69 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 63 6c 65 61 72 43 6f 6f Data Ascii: piInitialized');gapi.rpc.register('updateUserHtmlFrame',updateUserHtmlFrame);}function loadGapiClient(){gapi.load('gapi.rpc',onGapiInitialized);}if(document.readyState=='complete'){loadGapi();}else{self.addEventListener('load',loadGapi);}function clearCoo

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Windows Analysis Report
https://www.google.as/url?q=https%3A%2F%2Fsites.google.com%2Fview%2Fjhgfgyfghbj%2Fhome&sa=D&sntz=1&usg=AOvVaw2QVFATlpDN2yC96BoBvv7c

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:01 UTC	1061	OUT	GET /_/scs/abc-static/_/js/k=gapi.lb.en.fwXSHnIYz-4.O/m=gapi_rpc/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_SvulQ5pP6FvvJyrQeIOJ4MStGTQ/cb=gapi.loaded_0?le=scs HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlKHLAQiJo8sBCIWgzQEI9s/OAQiB1s4BCNLgzgEIr+TOAQji5M4BCILlzgEIi+XOAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://272868631-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: NID=522=1nDOkwS7-Tus_h_I2prNjxH6mZy9zE1t6XBvjojlRqo_CSdNBIFlBBGoMtF35f91e9XrnVkvoonezuLpAFjZvA8nXUX9BSg_H5IGN02w_jJDVUova4O1MxcHDX6C01AllEIIq3uifGorLIrs2UVHAn4wcMqoba9EFsS3HoINTtVBz6uF4g1B6Wr8znwEE3vv02I6Og2quyWEaA
2025-03-26 17:56:01 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 52002 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 20 Mar 2025 18:18:27 GMT Expires: Fri, 20 Mar 2026 18:18:27 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 04 Mar 2025 15:24:42 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 517054 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-26 17:56:01 UTC	82	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(ty
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 5d 29 3b 0a 76 61 72 20 61 61 2c 65 61 2c 6c 61 2c 70 61 2c 7a 61 2c 45 61 2c 46 61 3b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 3b 65 61 3d 74 79 70 65 Data Ascii: peof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([]);var aa,ea,la,pa,za,Ea,Fa;aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}};ea=type
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 75 65 3a 68 7d 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 49 31 7d 3b 76 61 72 20 63 3d 22 6a 73 63 6f 6d 70 5f 73 79 6d 62 6f 6c 5f 22 2b 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 31 45 39 3e 3e 3e 30 29 2b 22 5f 22 2c 64 3d 30 2c 65 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 63 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 64 2b 2b 2c 66 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 70 61 28 22 53 79 6d 62 6f 6c 2e Data Ascii: ue:h})};b.prototype.toString=function(){return this.I1};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f){if(this instanceof e)throw new TypeError("Symbol is not a constructor");return new b(c+(f\|\|"")+"_"+d++,f)};return e});pa("Symbol.
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 76 61 3d 21 31 7d 74 61 3d 76 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 7a 61 3d 74 61 3b 0a 5f 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 72 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 7a 61 29 7a 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 63 21 3d 22 70 72 6f 74 6f 74 79 70 65 22 29 69 66 28 4f 62 6a Data Ascii: va=!1}ta=va?function(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}za=ta;_.r=function(a,b){a.prototype=ra(b.prototype);a.prototype.constructor=a;if(za)za(a,b);else for(var c in b)if(c!="prototype")if(Obj
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 68 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 74 68 69 73 2e 42 66 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 42 66 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 70 50 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 6c 38 28 29 7d 29 7d 74 68 69 73 2e 42 66 2e 70 75 73 68 28 68 29 7d 3b 76 61 72 20 64 3d 5f 2e 6e 61 2e 73 65 74 54 69 6d 65 6f 75 74 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 70 50 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 64 28 68 2c 30 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 3b 74 68 69 73 2e 42 66 26 26 74 68 69 73 2e 42 66 2e 6c 65 6e 67 74 68 Data Ascii: unction(k){k(h)})}if(a)return a;b.prototype.oP=function(h){if(this.Bf==null){this.Bf=[];var k=this;this.pP(function(){k.l8()})}this.Bf.push(h)};var d=_.na.setTimeout;b.prototype.pP=function(h){d(h,0)};b.prototype.l8=function(){for(;this.Bf&&this.Bf.length
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 76 6f 69 64 20 30 3b 74 72 79 7b 6b 3d 68 2e 74 68 65 6e 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 66 4b 28 6c 29 3b 72 65 74 75 72 6e 7d 74 79 70 65 6f 66 20 6b 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 74 68 69 73 2e 59 66 61 28 6b 2c 68 29 3a 74 68 69 73 2e 4c 53 28 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 4b 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 78 5f 28 32 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 4c 53 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 74 68 69 73 2e 78 5f 28 31 2c 68 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 78 5f 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 69 66 28 74 68 69 73 2e 43 61 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 63 60 22 2b 68 2b 22 60 22 2b Data Ascii: ion(h){var k=void 0;try{k=h.then}catch(l){this.fK(l);return}typeof k=="function"?this.Yfa(k,h):this.LS(h)};e.prototype.fK=function(h){this.x_(2,h)};e.prototype.LS=function(h){this.x_(1,h)};e.prototype.x_=function(h,k){if(this.Ca!=0)throw Error("c`"+h+"`"+
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 65 2e 58 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 72 46 28 29 3b 68 2e 6f 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 59 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 72 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 2c 6c 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6d 29 7b 6c 2e 72 65 6a 65 63 74 28 6d 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 75 6e 63 74 69 6f 6e 20 6c 28 71 2c 75 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 71 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 66 75 6e 63 74 69 6f 6e 28 76 29 7b 74 72 79 7b 6d 28 Data Ascii: e.Xfa=function(h){var k=this.rF();h.oy(k.resolve,k.reject)};e.prototype.Yfa=function(h,k){var l=this.rF();try{h.call(k,l.resolve,l.reject)}catch(m){l.reject(m)}};e.prototype.then=function(h,k){function l(q,u){return typeof q=="function"?function(v){try{m(
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 65 78 74 28 29 3b 77 68 69 6c 65 28 21 6c 2e 64 6f 6e 65 29 7d 29 7d 3b 72 65 74 75 72 6e 20 65 7d 29 3b 76 61 72 20 47 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 54 68 65 20 27 74 68 69 73 27 20 76 61 6c 75 65 20 66 6f 72 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6e 75 6c 6c 20 6f 72 20 75 6e 64 65 66 69 6e 65 64 22 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 Data Ascii: ext();while(!l.done)})};return e});var Ga=function(a,b,c){if(a==null)throw new TypeError("The 'this' value for String.prototype."+c+" must not be null or undefined");if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 6c 2c 66 29 29 7b 76 61 72 20 6d 3d 6e 65 77 20 62 3b 65 61 28 6c 2c 66 2c 7b 76 61 6c 75 65 3a 6d 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 29 7b 76 61 72 20 6d 3d 4f 62 6a 65 63 74 5b 6c 5d 3b 6d 26 26 28 4f 62 6a 65 63 74 5b 6c 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 72 65 74 75 72 6e 20 6e 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6e 29 26 26 64 28 6e 29 3b 72 65 74 75 72 6e 20 6d 28 6e 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6d 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6e 3d 6e 65 77 Data Ascii: l,f)){var m=new b;ea(l,f,{value:m})}}function e(l){var m=Object[l];m&&(Object[l]=function(n){if(n instanceof b)return n;Object.isExtensible(n)&&d(n);return m(n)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var l=Object.seal({}),m=Object.seal({}),n=new
2025-03-26 17:56:01 UTC	997	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 5f 2e 41 61 28 5b 5b 6b 2c 22 73 22 5d 5d 29 29 3b 69 66 28 6c 2e 67 65 74 28 6b 29 21 3d 22 73 22 7c 7c 6c 2e 73 69 7a 65 21 3d 31 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 6c 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 Data Ascii: nction(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototype.entries\|\|typeof Object.seal!="function")return!1;try{var k=Object.seal({x:4}),l=new a(_.Aa([[k,"s"]]));if(l.get(k)!="s"\|\|l.size!=1\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|l.size!=2)return!1;var

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:01 UTC	650	OUT	GET /ajax/libs/jquery/3.5.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://272868631-atari-embeds.googleusercontent.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://272868631-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:01 UTC	960	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:56:01 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb09ed3-15d84" Last-Modified: Mon, 04 May 2020 23:01:39 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 10870 Expires: Mon, 16 Mar 2026 17:56:01 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2BN1LggYiZ8vZYkvqKlCtFuMZGDkzR6%2B1ke9U35y5FHwL7IfTuPjJ%2BCdkXf4xbTjavCbjK8BG8KEci0kDCCl4%2FRuUHtZ0c7bnIqfRTbfXoZRnBhMSKTWx47lMInPXYg4EEYBIz6V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 926885b7cd8a4251-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 17:56:01 UTC	409	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 7bee/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e Data Ascii: ypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a Data Ascii: -1)},even:function(){return this.pushStack(S.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(S.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 65 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 70 28 4f 62 6a 65 63 74 28 65 29 29 3f 53 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b 65 5d 3a 65 29 3a 75 2e 63 61 6c 6c 28 6e 2c 65 29 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 Data Ascii: e},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(p(Object(e))?S.merge(n,"string"==typeof e?[e]:e):u.call(n,e)),n},inArray:function(e,t,n){return null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];re
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 49 2b 22 29 29 7c 29 22 2b 4d 2b 22 2a 5c 5c 5d 22 2c 46 3d 22 3a 28 22 2b 49 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 57 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 2b 22 2c 22 67 22 29 2c 24 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e Data Ascii: ))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+I+"))\|)"+M+"\\]",F=":("+I+")(?:\\((('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+W+"))\|.)\\)\|)",B=new RegExp(M+"+","g"),$=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=n
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 7b 54 28 29 7d 2c 61 65 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 30 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 26 26 22 66 69 65 6c 64 73 65 74 22 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 7b 64 69 72 3a 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 65 78 74 3a 22 6c 65 67 65 6e 64 22 7d 29 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 74 3d 4f 2e 63 61 6c 6c 28 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 70 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 74 5b 70 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 Data Ascii: {T()},ae=be(function(e){return!0===e.disabled&&"fieldset"===e.nodeName.toLowerCase()},{dir:"parentNode",next:"legend"});try{H.apply(t=O.call(p.childNodes),p.childNodes),t[p.childNodes.length].nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.c
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 74 75 72 6e 20 72 2e 70 75 73 68 28 74 2b 22 20 22 29 3e 62 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 65 5b 72 2e 73 68 69 66 74 28 29 5d 2c 65 5b 74 2b 22 20 22 5d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 53 5d 3d 21 30 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 63 65 28 65 29 7b 76 61 72 20 74 3d 43 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 69 65 6c 64 73 65 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 65 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 Data Ascii: turn r.push(t+" ")>b.cacheLength&&delete e[r.shift()],e[t+" "]=n}}function le(e){return e[S]=!0,e}function ce(e){var t=C.createElement("fieldset");try{return!!e(t)}catch(e){return!1}finally{t.parentNode&&t.parentNode.removeChild(t),t=null}}function fe(e,t
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 Data Ascii: !=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.appendChild(e)
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 64 22 29 29 26 26 6e 2e 76 61 6c 75 65 3d 3d 3d 65 29 72 65 74 75 72 6e 5b 6f 5d 7d 72 65 74 75 72 6e 5b 5d 7d 7d 29 2c 62 2e 66 69 6e 64 2e 54 41 47 3d 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3f 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 3a 64 2e 71 73 61 3f 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3a 76 6f 69 64 20 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 65 29 Data Ascii: d"))&&n.value===e)return[o]}return[]}}),b.find.TAG=d.getElementsByTagName?function(e,t){return"undefined"!=typeof t.getElementsByTagName?t.getElementsByTagName(e):d.qsa?t.querySelectorAll(e):void 0}:function(e,t){var n,r=[],i=0,o=t.getElementsByTagName(e)
2025-03-26 17:56:01 UTC	1369	IN	Data Raw: 22 2c 22 68 69 64 64 65 6e 22 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4d 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 76 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 64 69 73 61 62 6c 65 64 3d 21 30 2c 32 21 3d 3d 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 64 69 73 Data Ascii: ","hidden"),e.appendChild(t).setAttribute("name","D"),e.querySelectorAll("[name=d]").length&&v.push("name"+M+"[^$\|!~]?="),2!==e.querySelectorAll(":enabled").length&&v.push(":enabled",":disabled"),a.appendChild(e).disabled=!0,2!==e.querySelectorAll(":dis

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:01 UTC	630	OUT	GET /turnstile/v0/api.js?compat=recaptcha HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://272868631-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:01 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 26 Mar 2025 17:56:01 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/708f7a809116/api.js Server: cloudflare CF-RAY: 926885b7cec1fd86-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:02 UTC	628	OUT	GET /turnstile/v0/b/708f7a809116/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://272868631-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:02 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 26 Mar 2025 17:56:02 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48123 Connection: close accept-ranges: bytes last-modified: Tue, 18 Mar 2025 12:36:20 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 926885ba68b4b4c6-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 17:56:02 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function jt(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 5a 7c 7c 28 5a 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 3d 22 72 Data Ascii: anual",e.Auto="auto"})(Z\|\|(Z={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render="r
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 Data Ascii: tion pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test(e)
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 Data Ascii: "ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"fbD
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 65 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 Data Ascii: .setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},ee(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writ
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 65 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 Data Ascii: nfigurable:!0}}),ee(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,ar
2025-03-26 17:56:02 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b Data Ascii: tion(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(a);

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:02 UTC	660	OUT	GET /img/cf-bg.jpg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://272868631-atari-embeds.googleusercontent.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:02 UTC	1150	IN	HTTP/1.1 404 Not Found Date: Wed, 26 Mar 2025 17:56:02 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 12 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Set-Cookie: __cf_bm=XvONuH379ggTK5asePbv_530rQVWuF1n_xOL0FNZIZE-1743011762-1.0.1.1-0Lnq4lZkAPWCWn0RaVt8kpoi.8_Rzx3UPRHg.xcY2iPLsku9ALB9Nzympnz3vTVIZhSitWs8n9oCwOjl5hKgXH7iJWGFODKgfLpaOz5ptsFY2BXcDUIkZgV9jNnzgbSs; path=/; expires=Wed, 26-Mar-25 18:26:02 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4RBX22cdt%2FKYiaa7BUHPufVL7vrlR6rYf5kFiL2QBLZDLsv3KMdZmRYR2jEKGnkyLu3he%2B%2FeBD%2FkuVOyYG%2FBiteKEhTpTfgfEZZU6BwM7kZshFkQvouY23dCc%2BaichPKY7Ogcg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 926885bcce0619ae-EWR alt-svc: h3=":443"; ma=86400
2025-03-26 17:56:02 UTC	12	IN	Data Raw: 6e 6f 74 20 66 6f 75 6e 64 20 3a 28 Data Ascii: not found :(

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:56 UTC	551	OUT	OPTIONS /report/v4?s=n%2BN1LggYiZ8vZYkvqKlCtFuMZGDkzR6%2B1ke9U35y5FHwL7IfTuPjJ%2BCdkXf4xbTjavCbjK8BG8KEci0kDCCl4%2FRuUHtZ0c7bnIqfRTbfXoZRnBhMSKTWx47lMInPXYg4EEYBIz6V HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://cdnjs.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:56 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Wed, 26 Mar 2025 17:56:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:56 UTC	557	OUT	OPTIONS /report/v4?s=4RBX22cdt%2FKYiaa7BUHPufVL7vrlR6rYf5kFiL2QBLZDLsv3KMdZmRYR2jEKGnkyLu3he%2B%2FeBD%2FkuVOyYG%2FBiteKEhTpTfgfEZZU6BwM7kZshFkQvouY23dCc%2BaichPKY7Ogcg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.cloudflare.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:56 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Wed, 26 Mar 2025 17:56:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:56 UTC	532	OUT	POST /report/v4?s=4RBX22cdt%2FKYiaa7BUHPufVL7vrlR6rYf5kFiL2QBLZDLsv3KMdZmRYR2jEKGnkyLu3he%2B%2FeBD%2FkuVOyYG%2FBiteKEhTpTfgfEZZU6BwM7kZshFkQvouY23dCc%2BaichPKY7Ogcg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 458 Content-Type: application/reports+json Origin: https://www.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:56 UTC	458	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 33 32 31 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 35 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 32 37 32 38 36 38 36 33 31 2d 61 74 61 72 69 2d 65 6d 62 65 64 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 36 2e 31 32 33 2e 39 36 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 Data Ascii: [{"age":53219,"body":{"elapsed_time":556,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://272868631-atari-embeds.googleusercontent.com/","sampling_fraction":1.0,"server_ip":"104.16.123.96","status_code":404,"type":"http.error
2025-03-26 17:56:56 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 17:56:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:56 UTC	526	OUT	POST /report/v4?s=n%2BN1LggYiZ8vZYkvqKlCtFuMZGDkzR6%2B1ke9U35y5FHwL7IfTuPjJ%2BCdkXf4xbTjavCbjK8BG8KEci0kDCCl4%2FRuUHtZ0c7bnIqfRTbfXoZRnBhMSKTWx47lMInPXYg4EEYBIz6V HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 475 Content-Type: application/reports+json Origin: https://cdnjs.cloudflare.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:56 UTC	475	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 33 39 35 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 31 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 32 37 32 38 36 38 36 33 31 2d 61 74 61 72 69 2d 65 6d 62 65 64 73 2e 67 6f 6f 67 6c 65 75 73 65 72 63 6f 6e 74 65 6e 74 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2e 30 31 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 31 37 2e 32 34 2e 31 34 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 6f 6b 22 7d 2c 22 74 79 70 65 Data Ascii: [{"age":53958,"body":{"elapsed_time":617,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://272868631-atari-embeds.googleusercontent.com/","sampling_fraction":0.01,"server_ip":"104.17.24.14","status_code":200,"type":"ok"},"type
2025-03-26 17:56:56 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Wed, 26 Mar 2025 17:56:56 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-26 17:56:56 UTC	353	OUT	POST /domainreliability/upload HTTP/1.1 Host: google.com Connection: keep-alive Content-Length: 307 Content-Type: application/json; charset=utf-8 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-26 17:56:56 UTC	307	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 66 61 69 6c 75 72 65 5f 64 61 74 61 22 3a 7b 22 63 75 73 74 6f 6d 5f 65 72 72 6f 72 22 3a 22 6e 65 74 3a 3a 45 52 52 5f 41 42 4f 52 54 45 44 22 7d 2c 22 68 74 74 70 5f 72 65 73 70 6f 6e 73 65 5f 63 6f 64 65 22 3a 32 30 34 2c 22 6e 65 74 77 6f 72 6b 5f 63 68 61 6e 67 65 64 22 3a 66 61 6c 73 65 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 48 54 54 50 22 2c 22 72 65 71 75 65 73 74 5f 61 67 65 5f 6d 73 22 3a 36 30 34 37 38 2c 22 72 65 71 75 65 73 74 5f 65 6c 61 70 73 65 64 5f 6d 73 22 3a 31 39 35 2c 22 73 61 6d 70 6c 65 5f 72 61 74 65 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 22 2c 22 73 74 61 74 75 73 22 3a 22 61 62 6f 72 74 65 64 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 73 69 74 65 73 2e 67 6f 6f Data Ascii: {"entries":[{"failure_data":{"custom_error":"net::ERR_ABORTED"},"http_response_code":204,"network_changed":false,"protocol":"HTTP","request_age_ms":60478,"request_elapsed_ms":195,"sample_rate":1.0,"server_ip":"","status":"aborted","url":"https://sites.goo
2025-03-26 17:56:56 UTC	806	IN	HTTP/1.1 200 OK Report-To: {"group":"ntbdioescrec:47:0","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ntbdioescrec:47:0"}],} NEL: {"failure_fraction":1,"include_subdomains":false,"max_age":300,"report_to":"nel","success_fraction":0.25} Content-Type: application/javascript; charset=utf-8 Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ntbdioescrec:47:0 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=ntbdioescrec:47:0 Date: Wed, 26 Mar 2025 17:56:56 GMT Server: Domain Reliability Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close