Edit tour

Windows Analysis Report
https://petition.parliament.uk/petitions/721006

Overview

General Information

Sample URL:	https://petition.parliament.uk/petitions/721006
Analysis ID:	1671884
Infos:

Detection

Score:	0
Range:	0 - 100
Confidence:	100%

Signatures

No high impact signatures.

Classification

Process Tree

System is w11x64_office

chrome.exe (PID: 2096 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 2268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,15419871082775976200,10586923797022310731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2008 /prefetch:11 MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

chrome.exe (PID: 6424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://petition.parliament.uk/petitions/721006" MD5: DBE43C1D0092437B88CFF7BD9ABC336C)

cleanup

String found in binary or memory: <a rel="external" target="_blank" href="https://www.facebook.com/sharer/sharer.php?ref=responsive&u=https%3A%2F%2Fpetition.parliament.uk%2Fpetitions%2F721006"><span class="icon icon-share-facebook"></span> Facebook</a> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: petition.parliament.uk

Source: chromecache_50.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_50.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_69.2.dr	String found in binary or memory: https://petition.parliament.uk/assets/os-social/opengraph-image-74d2a08295a6290b3e3c5b57a8d37deedf3d
Source: chromecache_69.2.dr	String found in binary or memory: https://petition.parliament.uk/petitions/721006
Source: chromecache_69.2.dr	String found in binary or memory: https://petitionmap.unboxedconsulting.com/?petition=721006
Source: chromecache_69.2.dr	String found in binary or memory: https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/
Source: chromecache_69.2.dr	String found in binary or memory: https://www.nationalarchives.gov.uk/information-management/our-services/crown-copyright.htm
Source: chromecache_69.2.dr	String found in binary or memory: https://x.com/intent/post?text=Petition%3A%20Implement%20recommendations%20of%20the%20Independent%20

Source: unknown	Network traffic detected: HTTP traffic on port 60848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60817
Source: unknown	Network traffic detected: HTTP traffic on port 60854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60850
Source: unknown	Network traffic detected: HTTP traffic on port 60838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60858
Source: unknown	Network traffic detected: HTTP traffic on port 60844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60852
Source: unknown	Network traffic detected: HTTP traffic on port 60849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60869
Source: unknown	Network traffic detected: HTTP traffic on port 60845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60863
Source: unknown	Network traffic detected: HTTP traffic on port 60846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60838
Source: unknown	Network traffic detected: HTTP traffic on port 60879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60871
Source: unknown	Network traffic detected: HTTP traffic on port 60836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60837
Source: unknown	Network traffic detected: HTTP traffic on port 60842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60833
Source: unknown	Network traffic detected: HTTP traffic on port 60865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60849
Source: unknown	Network traffic detected: HTTP traffic on port 60853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60840
Source: unknown	Network traffic detected: HTTP traffic on port 60837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60844
Source: unknown	Network traffic detected: HTTP traffic on port 60864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60841

Source: unknown	HTTPS traffic detected: 192.178.49.164:443 -> 192.168.2.24:60833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.63:443 -> 192.168.2.24:60836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.63:443 -> 192.168.2.24:60837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.21:443 -> 192.168.2.24:60849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.21:443 -> 192.168.2.24:60848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.21:443 -> 192.168.2.24:60851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.21:443 -> 192.168.2.24:60852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.154.132.63:443 -> 192.168.2.24:60855 version: TLS 1.2

Source: classification engine

Classification label: clean0.win@21/45@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,15419871082775976200,10586923797022310731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2008 /prefetch:11
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://petition.parliament.uk/petitions/721006"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,15419871082775976200,10586923797022310731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2008 /prefetch:11	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://petition.parliament.uk/petitions/721006	0%	Avira URL Cloud	safe

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://petition.parliament.uk/petitions/721006/count.json	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/graphics/graphic_portcullis-large-grey-d899e51ab62f8c73fecccc0483c1f35f166ac49bc87c26139bdacaa48087fbd6.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/icons/icon_share-email-c7a65884985149509543fb4340c9a5413220c33dd303a05ba62d986727f863ac.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/application-4e54e69e6fa8e798bdb91d943934c9f458bd361a4f9569860a25ee2629a19abe.js	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/icons/icon_share-x-1e1ec0a9a662f85b30b88ccaab976bb616ef37a90f829b8ba880d0edd5c9ad78.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/icons/icon_share-facebook-8a6e61b4d9f66c733aea67278184ea5362eced40f47b52f4d624dbca09fec3a4.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/os-social/android/launcher-icon-3x-823a71b98c8e29673a8d1505ceff2a35374edcdeb0585bc11042aebfc179c7c3.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/manifest.json	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/graphics/graphic_crest-large-grey-b0bb0e89c9a14bbe78b7534d986ab804d4833c46c92059eafb1dc2b064f13734.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/graphics/graphic_open-government-licence-b9fcd44eaef5b05d110b3232cbcd249540cbcf24a32d76529f17babbdb354b4d.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/graphics/graphic_portcullis-white-7d327e93267ddd23662cf46e69b6f643f3953a4a2131fdaa96036b84bb05e44a.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/favicon.ico	0%	Avira URL Cloud	safe
https://petitionmap.unboxedconsulting.com/?petition=721006	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/graphics/graphic_portcullis-ecf9f03ff1640d4199abc5866939e813e375467bb78b1b0f331a75fea3cacf91.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/graphics/graphic_crown-7b3bf16db66e3ca01d4ecd09afb99f7854c5b0e96a07bcafbf4ca9801ec36c84.png	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/auto-updater-12397d0451d898298f78a779d6bd9f23b872a64cf582adfc1c3fd05220b6fb79.js	0%	Avira URL Cloud	safe
https://petition.parliament.uk/assets/os-social/opengraph-image-74d2a08295a6290b3e3c5b57a8d37deedf3d	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
petition.parliament.uk	18.154.132.63	true	false		unknown
www.google.com	192.178.49.164	true	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://petition.parliament.uk/petitions/721006/signatures/new	false		unknown
https://petition.parliament.uk/assets/graphics/graphic_portcullis-large-grey-d899e51ab62f8c73fecccc0483c1f35f166ac49bc87c26139bdacaa48087fbd6.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/icons/icon_share-facebook-8a6e61b4d9f66c733aea67278184ea5362eced40f47b52f4d624dbca09fec3a4.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/icons/icon_share-email-c7a65884985149509543fb4340c9a5413220c33dd303a05ba62d986727f863ac.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/petitions/721006/count.json	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/application-4e54e69e6fa8e798bdb91d943934c9f458bd361a4f9569860a25ee2629a19abe.js	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/os-social/android/launcher-icon-3x-823a71b98c8e29673a8d1505ceff2a35374edcdeb0585bc11042aebfc179c7c3.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/icons/icon_share-x-1e1ec0a9a662f85b30b88ccaab976bb616ef37a90f829b8ba880d0edd5c9ad78.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/manifest.json	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/graphics/graphic_crest-large-grey-b0bb0e89c9a14bbe78b7534d986ab804d4833c46c92059eafb1dc2b064f13734.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/favicon.ico	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/graphics/graphic_portcullis-ecf9f03ff1640d4199abc5866939e813e375467bb78b1b0f331a75fea3cacf91.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/graphics/graphic_open-government-licence-b9fcd44eaef5b05d110b3232cbcd249540cbcf24a32d76529f17babbdb354b4d.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/graphics/graphic_crown-7b3bf16db66e3ca01d4ecd09afb99f7854c5b0e96a07bcafbf4ca9801ec36c84.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/petitions/721006	false		unknown
https://petition.parliament.uk/assets/graphics/graphic_portcullis-white-7d327e93267ddd23662cf46e69b6f643f3953a4a2131fdaa96036b84bb05e44a.png	false	Avira URL Cloud: safe	unknown
https://petition.parliament.uk/assets/auto-updater-12397d0451d898298f78a779d6bd9f23b872a64cf582adfc1c3fd05220b6fb79.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://opensource.org/licenses/MIT	chromecache_50.2.dr	false		high
https://petitionmap.unboxedconsulting.com/?petition=721006	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
http://daneden.me/animate	chromecache_50.2.dr	false		high
https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/	chromecache_69.2.dr	false		high
https://petition.parliament.uk/assets/os-social/opengraph-image-74d2a08295a6290b3e3c5b57a8d37deedf3d	chromecache_69.2.dr	false	Avira URL Cloud: safe	unknown
https://www.nationalarchives.gov.uk/information-management/our-services/crown-copyright.htm	chromecache_69.2.dr	false		high
https://x.com/intent/post?text=Petition%3A%20Implement%20recommendations%20of%20the%20Independent%20	chromecache_69.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.154.132.63	petition.parliament.uk	United States	16509	AMAZON-02US	false
18.154.132.21	unknown	United States	16509	AMAZON-02US	false
192.178.49.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.24
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1671884
Start date and time:	2025-04-23 11:45:54 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://petition.parliament.uk/petitions/721006
Analysis system description:	Windows 11 23H2 with Office Professional Plus 2021, Chrome 131, Firefox 133, Adobe Reader DC 24, Java 8 Update 431, 7zip 24.09
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@21/45@6/5

Warnings

Exclude process from analysis (whitelisted): SystemSettingsBroker.exe, SIHClient.exe, appidcertstorecheck.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.69.14, 142.250.68.227, 142.251.2.84, 199.232.210.172, 192.178.49.170, 192.178.49.202, 142.250.68.234, 142.250.69.10, 192.178.49.195, 23.220.73.19, 184.29.183.29, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
VT rate limit hit for: https://petition.parliament.uk/petitions/721006

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.66
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 18 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	263
Entropy (8bit):	6.3681215851979385
Encrypted:	false
SSDEEP:	6:6v/lhPzeB/6TogjnDspxB1XIEgISY4uL9l6G/DWjDp:6v/77eB/6Tog8Z6EbSE9l9Dot
MD5:	839FB5FA3590C42D28F56BCBA928B840
SHA1:	1D9D50E3D40CDD1B3A2ECD9AE0C568F15AEAD026
SHA-256:	C7A65884985149509543FB4340C9A5413220C33DD303A05BA62D986727F863AC
SHA-512:	D44262E7206E6AFB5E02FE3BD242C2F09B656C90E5527BC5B74FCDC0E4552B7014D5DDE7E559C288BE9EAB653D49E041E702DBC41FEA3609A5A9050F9FBDEC00
Malicious:	false
Reputation:	low
URL:	https://petition.parliament.uk/assets/icons/icon_share-email-c7a65884985149509543fb4340c9a5413220c33dd303a05ba62d986727f863ac.png
Preview:	.PNG........IHDR..............N>.....pHYs.................tEXtSoftware.Adobe ImageReadyq.e<....IDATx.b.....@....?...2.0.b.....x?........&....A4..X.0....b. ....f.H.....A.@...F6......F..}..y..+...h."...R.R..E...i.z.3.2.H- &......f.#4.P...........'>.B.......IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 23, 2025 11:46:52.931929111 CEST	53	54125	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:53.016361952 CEST	53	56490	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:54.093496084 CEST	53	50526	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:54.095024109 CEST	53	52692	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:57.099092007 CEST	50448	53	192.168.2.24	1.1.1.1
Apr 23, 2025 11:46:57.099092007 CEST	60573	53	192.168.2.24	1.1.1.1
Apr 23, 2025 11:46:57.241152048 CEST	53	60573	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:57.241179943 CEST	53	50448	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:58.243195057 CEST	56135	53	192.168.2.24	1.1.1.1
Apr 23, 2025 11:46:58.243426085 CEST	50706	53	192.168.2.24	1.1.1.1
Apr 23, 2025 11:46:58.395962954 CEST	53	50706	1.1.1.1	192.168.2.24
Apr 23, 2025 11:46:58.440794945 CEST	53	56135	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:01.487186909 CEST	59906	53	192.168.2.24	1.1.1.1
Apr 23, 2025 11:47:01.487317085 CEST	59597	53	192.168.2.24	1.1.1.1
Apr 23, 2025 11:47:01.647814989 CEST	53	59597	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:01.666544914 CEST	53	59906	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:11.035674095 CEST	53	61088	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:13.404548883 CEST	53	54168	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:20.269077063 CEST	137	137	192.168.2.24	192.168.2.255
Apr 23, 2025 11:47:21.004182100 CEST	137	137	192.168.2.24	192.168.2.255
Apr 23, 2025 11:47:21.769771099 CEST	137	137	192.168.2.24	192.168.2.255
Apr 23, 2025 11:47:22.211735010 CEST	53	63008	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:30.062680960 CEST	53	57403	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:52.405936956 CEST	53	51478	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:52.554719925 CEST	53	54374	1.1.1.1	192.168.2.24
Apr 23, 2025 11:47:55.818023920 CEST	53	61787	1.1.1.1	192.168.2.24

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:46:58 UTC	688	OUT	GET /petitions/721006 HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 09:46:59 UTC	1737	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 11388 Connection: close Date: Wed, 23 Apr 2025 09:46:59 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin X-UA-Compatible: IE=edge link: </assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css>; rel=preload; as=style; type=text/css; nopush,</assets/application-4e54e69e6fa8e798bdb91d943934c9f458bd361a4f9569860a25ee2629a19abe.js>; rel=preload; as=script; type=text/javascript; nopush,</assets/auto-updater-12397d0451d898298f78a779d6bd9f23b872a64cf582adfc1c3fd05220b6fb79.js>; rel=preload; as=script; type=text/javascript; nopush ETag: W/"f8c2639586a6b64d58cc8232b386de52" Cache-Control: max-age=0, private, must-revalidate Feature-Policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'none'; payment 'none' Content-Security-Policy: default-src 'self'; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' Set-Cookie: seen_cookie_message=yes; path=/; expires=Thu, 23 Apr 2026 09:46:59 GMT; HttpOnly; SameSite=Lax; secure X-Request-Id: 69a889aa-383f-48c5-aaff-81607ab62057 X-Runtime: 0.016633 X-Cache: Miss from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: bfnPybRTx7ZP3H5kX1wQjBEhdT8t9LN8g_ueFYliqUjO0NuaSf3D1Q==
2025-04-23 09:46:59 UTC	6647	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 6d 70 6c 65 6d 65 6e 74 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 52 65 76 69 65 77 20 6f 66 20 50 6f 72 6e 6f 67 72 61 70 68 79 20 52 65 67 75 6c 61 74 69 6f 6e 20 2d 20 50 65 74 69 74 69 6f 6e 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 68 72 65 66 Data Ascii: <!DOCTYPE html><html lang="en-GB"> <head> <title>Implement recommendations of the Independent Review of Pornography Regulation - Petitions</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <link rel="preload" href
2025-04-23 09:46:59 UTC	4741	IN	Data Raw: 73 73 3d 22 73 69 67 6e 61 74 75 72 65 2d 63 6f 75 6e 74 2d 70 72 6f 67 72 65 73 73 22 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 76 69 73 75 61 6c 6c 79 68 69 64 64 65 6e 22 3e 50 72 6f 67 72 65 73 73 20 6f 66 20 74 68 65 20 70 65 74 69 74 69 6f 6e 20 74 6f 77 61 72 64 73 20 69 74 73 20 6e 65 78 74 20 74 61 72 67 65 74 3a 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 70 72 6f 67 72 65 73 73 20 76 61 6c 75 65 3d 22 33 30 22 20 6d 61 78 3d 22 31 30 30 30 30 22 3e 0a 20 20 20 20 20 20 20 20 33 30 20 6f 66 20 31 30 2c 30 30 30 20 73 69 67 6e 61 74 75 72 65 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 67 65 74 20 61 20 67 6f 76 65 72 6e 6d 65 6e 74 20 72 65 73 70 6f 6e 73 65 0a 3c 2f 70 72 6f 67 72 65 73 73 3e 20 20 3c 2f 6c 61 62 65 6c 3e 0a 0a 20 Data Ascii: ss="signature-count-progress"> <span class="visuallyhidden">Progress of the petition towards its next target:</span> <progress value="30" max="10000"> 30 of 10,000 signatures required to get a government response</progress> </label>

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:46:59 UTC	686	OUT	GET /assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:00 UTC	537	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 76086 Connection: close Date: Wed, 23 Apr 2025 09:47:00 GMT Last-Modified: Mon, 24 Feb 2025 03:40:19 GMT ETag: "b17f8cc8c600a529a542dd61f4244124" x-amz-server-side-encryption: AES256 x-amz-version-id: qzQDJZ4ESmtXaTVy386rvkzDXjeT_6fE Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: _x2CuKedohWD_V4m3qcm8eCdkdWHqBDz8ntCK3PsEglUsl9BwVBgLg==
2025-04-23 09:47:00 UTC	16384	IN	Data Raw: ef bb bf 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 7b 77 69 64 74 68 3a 64 65 76 69 63 65 2d 77 69 64 74 68 7d 40 2d 6f 2d 76 69 65 77 70 6f 72 74 7b 77 69 64 74 68 3a 64 65 76 69 63 65 2d 77 69 64 74 68 7d 40 2d 6d 73 2d 76 69 65 77 70 6f 72 74 7b 77 69 64 74 68 3a 64 65 76 69 63 65 2d 77 69 64 74 68 7d 40 2d 6f 2d 76 69 65 77 70 6f 72 74 7b 77 69 64 74 68 3a 64 65 76 69 63 65 2d 77 69 64 74 68 7d 2e 67 72 69 64 2d 72 6f 77 3a 61 66 74 65 72 2c 66 69 65 6c 64 73 65 74 3a 61 66 74 65 72 2c 2e 66 6f 72 6d 2d 73 65 63 74 69 6f 6e 3a 61 66 74 65 72 2c 2e 66 6f 72 6d 2d 67 72 6f 75 70 3a 61 66 74 65 72 2c 2e 70 61 6e 65 6c 2d 69 6e 64 65 6e 74 3a 61 66 74 65 72 2c 23 63 6f 6e 74 65 6e 74 3a 61 66 74 65 72 2c 2e 70 65 74 69 74 69 6f 6e 2d 73 68 61 72 65 3a 61 66 Data Ascii: @-ms-viewport{width:device-width}@-o-viewport{width:device-width}@-ms-viewport{width:device-width}@-o-viewport{width:device-width}.grid-row:after,fieldset:after,.form-section:after,.form-group:after,.panel-indent:after,#content:after,.petition-share:af
2025-04-23 09:47:00 UTC	545	IN	Data Raw: 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 2e 32 37 37 37 37 37 37 37 37 38 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 2e 38 33 33 33 33 33 33 33 33 33 65 6d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 7b 2e 6c 65 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 38 38 38 38 38 38 38 38 39 7d 7d 40 6d 65 64 69 61 20 28 Data Ascii: ily:"Helvetica Neue", Helvetica, Arial, sans-serif;font-size:24px;line-height:1.25;font-weight:400;text-transform:none;margin-top:0.2777777778em;margin-bottom:0.8333333333em}@media (max-width: 640px){.lede{font-size:18px;line-height:1.3888888889}}@media (
2025-04-23 09:47:00 UTC	16384	IN	Data Raw: 36 38 34 32 31 30 35 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 2e 30 35 32 36 33 31 35 37 38 39 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 2e 38 33 33 33 33 33 33 33 33 33 65 6d 7d 61 7b 63 6f 6c 6f 72 3a 23 30 30 35 65 61 35 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 74 68 69 63 6b 6e 65 73 73 3a 6d 61 78 28 31 70 78 2c 20 30 2e 30 35 72 65 6d 29 3b 74 65 78 74 2d 75 6e 64 65 72 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 30 2e 31 35 37 38 65 6d 7d 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 30 30 35 65 61 35 7d 61 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 30 30 33 30 37 38 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 2d 74 68 69 63 6b 6e 65 73 73 3a 6d 61 78 28 33 70 78 2c 20 30 2e 31 35 72 65 6d 29 3b 74 65 78 74 2d Data Ascii: 6842105em;padding-bottom:0.0526315789em;margin-bottom:0.8333333333em}a{color:#005ea5;text-decoration-thickness:max(1px, 0.05rem);text-underline-offset:0.1578em}a:visited{color:#005ea5}a:hover{color:#003078;text-decoration-thickness:max(3px, 0.15rem);text-
2025-04-23 09:47:00 UTC	16384	IN	Data Raw: 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2f 61 73 73 65 74 73 2f 69 63 6f 6e 73 2f 69 63 6f 6e 5f 6c 6f 63 61 74 69 6f 6e 2d 77 68 69 74 65 2d 61 38 36 62 32 35 62 33 61 32 36 66 30 30 30 66 34 64 35 64 30 34 34 37 37 39 33 30 33 66 33 30 35 37 64 63 31 65 35 32 33 64 64 32 36 62 30 31 39 65 30 64 31 61 61 36 30 30 66 37 39 30 34 63 2e 70 6e 67 29 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 2d 6d 6f 7a 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 Data Ascii: 8px;background-image:url(/assets/icons/icon_location-white-a86b25b3a26f000f4d5d044779303f3057dc1e523dd26b019e0d1aa600f7904c.png)}@media only screen and (-webkit-min-device-pixel-ratio: 2), only screen and (min--moz-device-pixel-ratio: 2), only screen and
2025-04-23 09:47:00 UTC	16384	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 2e 33 31 32 35 65 6d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 31 70 78 29 7b 2e 70 65 74 69 74 69 6f 6e 2d 69 74 65 6d 20 68 32 2c 2e 70 65 74 69 74 69 6f 6e 2d 69 74 65 6d 20 68 33 2c 2e 70 65 74 69 74 69 6f 6e 2d 69 74 65 6d 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 2e 32 36 33 31 35 37 38 39 34 37 65 6d 7d 7d 2e 70 65 74 69 74 69 6f 6e 2d 69 74 65 6d 20 2e 63 6f 75 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 2f 32 34 7d 2e 70 65 74 69 74 69 6f 6e 2d 69 74 65 6d 20 2e 61 64 64 69 74 69 6f 6e 61 6c 2d 64 65 74 61 69 6c 73 7b 63 6f 6c 6f 72 3a 23 30 62 30 63 30 63 7d 2e 70 65 74 69 74 69 6f 6e 2d 69 74 65 6d 20 2e 70 61 6e Data Ascii: margin-bottom:0.3125em}@media (min-width: 641px){.petition-item h2,.petition-item h3,.petition-item p{margin-bottom:0.2631578947em}}.petition-item .count{font-size:24px;line-height:30/24}.petition-item .additional-details{color:#0b0c0c}.petition-item .pan
2025-04-23 09:47:00 UTC	5394	IN	Data Raw: 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 34 31 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 36 34 30 70 78 29 7b 2e 63 72 65 61 74 65 2d 77 61 72 6e 69 6e 67 20 73 70 61 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 30 39 33 37 35 7d 7d 2e 6e 6f 2d 70 65 74 69 74 69 6f 6e 73 2d 79 65 74 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 35 70 78 7d 2e 61 63 74 69 6f 6e 65 64 2d 70 65 74 69 74 69 6f 6e 73 20 75 6c 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 33 30 70 78 20 30 20 30 20 30 7d 2e 61 63 74 69 6f 6e 65 64 2d 70 65 74 69 74 69 6f 6e 73 20 6c 69 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a Data Ascii: sform:none}}@media (min-width: 641px) and (max-width: 640px){.create-warning span{font-size:32px;line-height:1.09375}}.no-petitions-yet{padding-top:15px}.actioned-petitions ul{display:flex;margin:30px 0 0 0}.actioned-petitions li{margin:0;padding:0;width:
2025-04-23 09:47:00 UTC	4611	IN	Data Raw: 69 64 74 68 3a 20 36 34 31 70 78 29 7b 2e 6c 6f 63 61 6c 2d 74 6f 2d 79 6f 75 20 68 32 2c 2e 73 74 61 72 74 2d 70 65 74 69 74 69 6f 6e 20 68 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 2e 35 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 2e 38 33 33 33 33 33 33 33 33 33 65 6d 7d 7d 2e 73 65 61 72 63 68 2d 70 65 74 69 74 69 6f 6e 73 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 33 30 70 78 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 73 65 61 72 63 68 2d 70 65 74 69 74 69 6f 6e 73 20 68 32 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 22 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 Data Ascii: idth: 641px){.local-to-you h2,.start-petition h2{margin-top:2.5em;margin-bottom:0.8333333333em}}.search-petitions{margin-top:30px;padding-bottom:0}.search-petitions h2{font-family:"Helvetica Neue", Helvetica, Arial, sans-serif;font-size:36px;line-height:1

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:46:59 UTC	671	OUT	GET /assets/application-4e54e69e6fa8e798bdb91d943934c9f458bd361a4f9569860a25ee2629a19abe.js HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:00 UTC	544	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 87651 Connection: close Date: Wed, 23 Apr 2025 09:47:01 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "1091169d3b956171da9c54383d944dc1" x-amz-server-side-encryption: AES256 x-amz-version-id: H0M4NlxMqetK43hv6Sc1tTxIvr3SftG3 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: jqWgzI0RL0Y-Mig2WMiZiREnUdmQBTbZl7b411-zYh5-q1aL9ffX6Q==
2025-04-23 09:47:00 UTC	16384	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 74 28 65 29 7d 3a 74 28 65 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e Data Ascii: !function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?win
2025-04-23 09:47:00 UTC	570	IN	Data Raw: 29 2c 6e 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 66 65 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 69 73 58 4d 4c 44 6f 63 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 21 43 65 2e 74 65 73 74 28 74 7c 7c 6e 26 26 6e 2e 6e 6f 64 65 4e 61 6d 65 7c 7c 22 48 54 4d 4c 22 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 Data Ascii: ),n},inArray:function(e,t,n){return null==t?-1:fe.call(t,e,n)},isXMLDoc:function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|\|e).documentElement;return!Ce.test(t\|\|n&&n.nodeName\|\|"HTML")},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)
2025-04-23 09:47:00 UTC	8949	IN	Data Raw: 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 53 65 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 61 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 53 65 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 70 65 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 74 2b 22 5d 22 5d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 29 3b 76 61 72 20 45 65 3d 61 65 2e 70 6f 70 2c 6b 65 3d 61 65 2e 73 6f 72 74 2c 6a 65 3d 61 65 2e 73 70 6c 69 Data Ascii: }),"function"==typeof Symbol&&(Se.fn[Symbol.iterator]=ae[Symbol.iterator]),Se.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),(function(e,t){pe["[object "+t+"]"]=t.toLowerCase()}));var Ee=ae.pop,ke=ae.sort,je=ae.spli
2025-04-23 09:47:00 UTC	16384	IN	Data Raw: 29 29 28 72 2c 74 2c 21 4c 2c 6e 2c 21 74 7c 7c 69 65 2e 74 65 73 74 28 65 29 26 26 66 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 74 29 2c 6e 7d 76 61 72 20 45 2c 6b 2c 6a 2c 41 2c 44 2c 4e 2c 71 2c 4c 2c 48 2c 4f 2c 50 3d 4c 65 2c 52 3d 53 65 2e 65 78 70 61 6e 64 6f 2c 4d 3d 30 2c 49 3d 30 2c 57 3d 72 28 29 2c 46 3d 72 28 29 2c 24 3d 72 28 29 2c 42 3d 72 28 29 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 26 26 28 44 3d 21 30 29 2c 30 7d 2c 58 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 Data Ascii: ))(r,t,!L,n,!t\|\|ie.test(e)&&f(t.parentNode)\|\|t),n}var E,k,j,A,D,N,q,L,H,O,P=Le,R=Se.expando,M=0,I=0,W=r(),F=r(),$=r(),B=r(),_=function(e,t){return e===t&&(D=!0),0},X="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|mult
2025-04-23 09:47:00 UTC	8949	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 2e 67 65 74 28 65 2c 74 29 3a 28 74 68 69 73 2e 73 65 74 28 65 2c 74 2c 6e 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 3a 74 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 72 29 7b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 7b 6e 3d 28 74 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 6d 61 70 28 67 29 3a 28 74 3d 67 28 74 29 29 69 6e 20 72 3f 5b 74 5d 3a 74 2e 6d 61 74 63 68 28 24 65 29 7c 7c 5b 5d 29 2e 6c 65 Data Ascii: tion(e,t,n){return void 0===t\|\|t&&"string"==typeof t&&void 0===n?this.get(e,t):(this.set(e,t,n),void 0!==n?n:t)},remove:function(e,t){var n,r=e[this.expando];if(void 0!==r){if(void 0!==t){n=(t=Array.isArray(t)?t.map(g):(t=g(t))in r?[t]:t.match($e)\|\|[]).le
2025-04-23 09:47:00 UTC	11264	IN	Data Raw: 53 74 6f 70 70 65 64 3d 45 2c 65 26 26 21 74 68 69 73 2e 69 73 53 69 6d 75 6c 61 74 65 64 26 26 65 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 2c 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 3b 74 68 69 73 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 3d 45 2c 65 26 26 21 74 68 69 73 2e 69 73 53 69 6d 75 6c 61 74 65 64 26 26 65 2e 73 74 6f 70 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 2c 74 68 69 73 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 7d 7d 2c 53 65 2e 65 61 63 68 28 7b 61 6c 74 4b 65 79 3a 21 30 2c 62 75 62 62 6c 65 73 3a 21 Data Ascii: Stopped=E,e&&!this.isSimulated&&e.stopPropagation()},stopImmediatePropagation:function(){var e=this.originalEvent;this.isImmediatePropagationStopped=E,e&&!this.isSimulated&&e.stopImmediatePropagation(),this.stopPropagation()}},Se.each({altKey:!0,bubbles:!
2025-04-23 09:47:00 UTC	9000	IN	Data Raw: 68 69 73 2e 63 72 65 61 74 65 54 77 65 65 6e 28 65 2c 74 29 3b 72 65 74 75 72 6e 20 78 28 6e 2e 65 6c 65 6d 2c 65 2c 5a 65 2e 65 78 65 63 28 74 29 2c 6e 29 2c 6e 7d 5d 7d 2c 74 77 65 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6d 65 28 65 29 3f 28 74 3d 65 2c 65 3d 5b 22 2a 22 5d 29 3a 65 3d 65 2e 6d 61 74 63 68 28 24 65 29 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 6e 3d 65 5b 72 5d 2c 51 2e 74 77 65 65 6e 65 72 73 5b 6e 5d 3d 51 2e 74 77 65 65 6e 65 72 73 5b 6e 5d 7c 7c 5b 5d 2c 51 2e 74 77 65 65 6e 65 72 73 5b 6e 5d 2e 75 6e 73 68 69 66 74 28 74 29 7d 2c 70 72 65 66 69 6c 74 65 72 73 3a 5b 47 5d 2c 70 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 3f 51 2e Data Ascii: his.createTween(e,t);return x(n.elem,e,Ze.exec(t),n),n}]},tweener:function(e,t){me(e)?(t=e,e=["*"]):e=e.match($e);for(var n,r=0,i=e.length;r<i;r++)n=e[r],Q.tweeners[n]=Q.tweeners[n]\|\|[],Q.tweeners[n].unshift(t)},prefilters:[G],prefilter:function(e,t){t?Q.
2025-04-23 09:47:00 UTC	16151	IN	Data Raw: 61 6d 65 73 70 61 63 65 3d 74 2e 6e 61 6d 65 73 70 61 63 65 3f 6e 65 77 20 52 65 67 45 78 70 28 22 28 5e 7c 5c 5c 2e 29 22 2b 67 2e 6a 6f 69 6e 28 22 5c 5c 2e 28 3f 3a 2e 2a 5c 5c 2e 7c 29 22 29 2b 22 28 5c 5c 2e 7c 24 29 22 29 3a 6e 75 6c 6c 2c 74 2e 72 65 73 75 6c 74 3d 76 6f 69 64 20 30 2c 74 2e 74 61 72 67 65 74 7c 7c 28 74 2e 74 61 72 67 65 74 3d 72 29 2c 6e 3d 6e 75 6c 6c 3d 3d 6e 3f 5b 74 5d 3a 53 65 2e 6d 61 6b 65 41 72 72 61 79 28 6e 2c 5b 74 5d 29 2c 66 3d 53 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 68 5d 7c 7c 7b 7d 2c 69 7c 7c 21 66 2e 74 72 69 67 67 65 72 7c 7c 21 31 21 3d 3d 66 2e 74 72 69 67 67 65 72 2e 61 70 70 6c 79 28 72 2c 6e 29 29 29 7b 69 66 28 21 69 26 26 21 66 2e 6e 6f 42 75 62 62 6c 65 26 26 21 78 65 28 72 29 29 7b 66 6f 72 Data Ascii: amespace=t.namespace?new RegExp("(^\|\\.)"+g.join("\\.(?:.*\\.\|)")+"(\\.\|$)"):null,t.result=void 0,t.target\|\|(t.target=r),n=null==n?[t]:Se.makeArray(n,[t]),f=Se.event.special[h]\|\|{},i\|\|!f.trigger\|\|!1!==f.trigger.apply(r,n))){if(!i&&!f.noBubble&&!xe(r)){for

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:46:59 UTC	672	OUT	GET /assets/auto-updater-12397d0451d898298f78a779d6bd9f23b872a64cf582adfc1c3fd05220b6fb79.js HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:00 UTC	543	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 2676 Connection: close Date: Wed, 23 Apr 2025 09:47:01 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "c92acb9d600cd49aa72f410ef8c8f029" x-amz-server-side-encryption: AES256 x-amz-version-id: 8sX7Rh1nFMXFXn6rHEqR0M79zIHV2aR1 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 8EwO1NnfHCutqGrL813vJ6Cx65nN4Pv2nkJPFXNOREnHBQQFnPI1Vw==
2025-04-23 09:47:00 UTC	2676	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 74 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 74 28 6a 51 75 65 72 79 29 7d 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 46 69 78 65 64 28 65 2e 64 65 63 69 6d 61 6c 73 29 7d 76 61 72 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 3d 74 28 65 29 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 74 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 2e 44 45 Data Ascii: !function(t){"function"==typeof define&&define.amd?define(["jquery"],t):"object"==typeof exports?t(require("jquery")):t(jQuery)}((function(t){function e(t,e){return t.toFixed(e.decimals)}var o=function(e,n){this.$element=t(e),this.options=t.extend({},o.DE

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:00 UTC	825	OUT	GET /assets/graphics/graphic_portcullis-white-7d327e93267ddd23662cf46e69b6f643f3953a4a2131fdaa96036b84bb05e44a.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:01 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 643 Connection: close Date: Wed, 23 Apr 2025 09:47:02 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "32b34ed6f1d495e49bdf46f74271b49c" x-amz-server-side-encryption: AES256 x-amz-version-id: mQGTEZdn.hu7juvQVF_VhlLceu084ZLo Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 8ecce36e4f9c7d96fcc3b7140122ffce.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: B4_TxDGqY7nUIDT6jkYK9QTBj9r6cRtlkr5c7gDMUm1dUn9h7yDCVA==
2025-04-23 09:47:01 UTC	643	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 20 08 06 00 00 00 0c ab 68 05 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 02 10 49 44 41 54 78 da bc 56 81 71 83 30 0c 04 8e 01 e8 06 64 83 64 82 b2 41 b3 41 33 42 36 28 1b 70 4c 40 33 01 97 09 b8 4e 40 3b 41 d2 09 9c 0d 5c 29 7d 51 e1 e0 b4 e1 dc e8 ee cf 48 46 8f 24 cb c6 51 e4 11 6b 6d ee e8 19 a1 b4 3f 52 c2 96 f9 7c fe 24 e4 64 b4 23 3d 37 20 e6 b1 53 cf 85 0a c4 5c 23 cc 09 ed 44 06 16 44 8c 8d ca a4 27 1c 94 5e c1 ff 9c ad 8f 3b 21 bd 67 63 1c c7 47 45 da 91 e9 48 d8 c0 87 83 78 27 2c 08 7b c2 8e f0 00 1b cf 9d 08 2f 3c 22 5b e6 28 61 67 1c 22 44 Data Ascii: PNGIHDR hpHYstEXtSoftwareAdobe ImageReadyqe<IDATxVq0ddAA3B6(pL@3N@;A\)}QHF$Qkm?R\|$d#=7 S\#DD'^;!gcGEHx',{/<"[(ag"D

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:00 UTC	814	OUT	GET /assets/graphics/graphic_crown-7b3bf16db66e3ca01d4ecd09afb99f7854c5b0e96a07bcafbf4ca9801ec36c84.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:01 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 1014 Connection: close Date: Wed, 23 Apr 2025 09:47:02 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "d813dc14f776e1d444065ef8f06f3f2f" x-amz-server-side-encryption: AES256 x-amz-version-id: 9SBmZ.U5lrineMNf.JHrhJF4yZzSzJpg Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 451146ac16b95679df1cbebbf8a889ba.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: wUDu8B_4xSHcqd29gPayGM96tp4PmidqV-m3gsdw_BVjcx44lQSv_g==
2025-04-23 09:47:01 UTC	1014	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1b 00 00 00 19 08 06 00 00 00 c0 1c 55 5e 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 78 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 02 a0 02 00 04 00 00 00 01 00 00 00 1b a0 03 00 04 00 00 00 01 00 00 00 19 00 00 00 00 30 3d e2 28 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 1c 69 44 4f 54 00 00 00 02 00 00 00 00 00 00 00 0d 00 00 00 28 00 00 00 0d 00 00 00 0c 00 00 01 5c 66 ca 32 cf 00 00 02 ef 49 44 41 54 48 0d b4 93 31 4b 42 61 Data Ascii: PNGIHDRU^sRGBxeXIfMM*JR(iZHH0=(pHYsiDOT(\f2IDATH1KBa

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:01 UTC	817	OUT	GET /assets/icons/icon_share-facebook-8a6e61b4d9f66c733aea67278184ea5362eced40f47b52f4d624dbca09fec3a4.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:01 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 185 Connection: close Date: Wed, 23 Apr 2025 09:47:02 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "ed0f451b75b89885a996949eaca6032f" x-amz-server-side-encryption: AES256 x-amz-version-id: 0QwNcYwcnHTqw.Fj19ExYurQAJJv9W3J Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ddUnsdZqBJ-oPOJN7zH9yfPYk_YMxYpVh3HdACcowjVCpKSTj9JmGw==
2025-04-23 09:47:01 UTC	185	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 07 00 00 00 10 08 06 00 00 00 da 81 65 f0 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 46 49 44 41 54 78 da 62 64 80 02 6e 5e 5e 03 20 b5 1e 88 15 60 62 8c 48 92 f7 91 25 40 80 09 89 8d 22 01 02 2c 0c 58 c0 d7 cf 9f 19 d1 75 62 00 46 a0 5d ff 71 49 e2 d5 89 df 58 24 af fc 27 c9 41 43 4b 12 20 c0 00 e4 94 0a 87 e9 f8 31 7c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRepHYstEXtSoftwareAdobe ImageReadyqe<FIDATxbdn^^ `bH%@",XubF]qIX$'ACK 1\|IENDB`

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	2713
Entropy (8bit):	7.609171093803645
Encrypted:	false
SSDEEP:	48:LqQvnLGlkEbJJ3DZWBmbPRNMuzVk7WyLknE1hv0oueu4rRn/xe2kk:WQa3zZ/bPXMuxDoknIdvZe2N
MD5:	4F1FCE7B07CDB6CB552EC41858F89F5E
SHA1:	26CFAFD597326278551D1AD0AEF49A305BE87F10
SHA-256:	823A71B98C8E29673A8D1505CEFF2A35374EDCDEB0585BC11042AEBFC179C7C3
SHA-512:	E7741A70242CEEF94D56B5040A1451BF378F17EB4BC4C66344874FFE68FD6F6CF8236634DE86AA5755BD7CF8706C41FF5BD9E14BAD962B6C1D2ADD849A7D7622
Malicious:	false
Reputation:	low
URL:	https://petition.parliament.uk/assets/os-social/android/launcher-icon-3x-823a71b98c8e29673a8d1505ceff2a35374edcdeb0585bc11042aebfc179c7c3.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...hiTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmpMM:OriginalDocumentID="xmp.did:414BAB1511206811822AD6D2791CC171" xmpMM:DocumentID="xmp.did:38C27938FD6811E49CCFFA22039F1BF1" xmpMM:InstanceID="xmp.iid:38C27937FD6811E49CCFFA22039F1BF1" xmp:CreatorTool="Adobe Photoshop CS6 (Macintosh)"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:424BAB1511206811822AD6D2791CC171" stRef:documentID="xmp.did:414BAB1511206811822AD6D2791CC171"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.\|.....0PLTEZ.Z...................).)......w.w?.

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:01 UTC	814	OUT	GET /assets/icons/icon_share-email-c7a65884985149509543fb4340c9a5413220c33dd303a05ba62d986727f863ac.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:02 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 263 Connection: close Date: Wed, 23 Apr 2025 09:47:03 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "839fb5fa3590c42d28f56bcba928b840" x-amz-server-side-encryption: AES256 x-amz-version-id: xln3DLy6XpZIWSp81EozBBZSPX78x9_K Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 11d03513e24ed18e6e64eb0feecdef0e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 6QeaprlGTRf5H14T8bmctB8sUFOE0w_3hj6gsU837hPd_1poJYfSMw==
2025-04-23 09:47:02 UTC	263	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 12 00 00 00 0d 08 06 00 00 00 a4 4e 3e 19 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 00 94 49 44 41 54 78 da 62 e4 e6 e5 fd cf 40 05 c0 02 a5 3f 00 f1 05 32 cd 30 00 62 01 06 90 8b 80 78 3f b9 2e 01 e9 05 99 c1 84 26 98 00 c4 f7 41 34 1e 8d 58 d5 30 a1 a9 ab 07 62 05 20 9e 8f ae 18 66 00 48 0e aa a6 1e 9f 41 8d 40 fc 00 ca 46 36 10 d9 00 06 a8 9a 46 9c 06 7d fd fc 79 01 10 2b 02 99 89 68 06 22 1b 90 08 52 03 52 8b cf 45 b8 0c c4 69 00 7a f4 33 e0 32 10 48 2d 20 26 f6 98 18 a8 04 a8 66 10 23 34 8b 50 9c b2 19 a9 95 d7 00 02 0c 00 d7 27 3e c3 42 0f fc b2 00 00 00 00 Data Ascii: PNGIHDRN>pHYstEXtSoftwareAdobe ImageReadyqe<IDATxb@?20bx?.&A4X0b fHA@F6F}y+h"RREiz32H- &f#4P'>B

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:01 UTC	810	OUT	GET /assets/icons/icon_share-x-1e1ec0a9a662f85b30b88ccaab976bb616ef37a90f829b8ba880d0edd5c9ad78.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:02 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 590 Connection: close Date: Wed, 23 Apr 2025 09:47:03 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "b447eeb5ffcd2c0f9a9500e7e2f9b0b7" x-amz-server-side-encryption: AES256 x-amz-version-id: 0MXk_WdL9nKUgjjy6erN8T01bFuBknrU Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 2e8c8fc7f80802bb6dcb544378ac6298.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: Qy925tEzmXEJ4td-Jr98FgrD1eHer0aG-t33el-rlR06AgnZZiu-BA==
2025-04-23 09:47:02 UTC	590	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 0d 08 06 00 00 00 a0 bb ee 24 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 78 65 58 49 66 4d 4d 00 2a 00 00 00 08 00 05 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 4a 01 1b 00 05 00 00 00 01 00 00 00 52 01 28 00 03 00 00 00 01 00 02 00 00 87 69 00 04 00 00 00 01 00 00 00 5a 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 02 a0 02 00 04 00 00 00 01 00 00 00 10 a0 03 00 04 00 00 00 01 00 00 00 0d 00 00 00 00 10 d7 c7 70 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 1c 69 44 4f 54 00 00 00 02 00 00 00 00 00 00 00 07 00 00 00 28 00 00 00 07 00 00 00 06 00 00 00 db e1 bf 58 6b 00 00 00 a7 49 44 41 54 38 11 94 d0 bf aa c1 61 Data Ascii: PNGIHDR$sRGBxeXIfMM*JR(iZHHppHYsiDOT(XkIDAT8a

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:01 UTC	832	OUT	GET /assets/graphics/graphic_open-government-licence-b9fcd44eaef5b05d110b3232cbcd249540cbcf24a32d76529f17babbdb354b4d.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:02 UTC	536	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 523 Connection: close Date: Wed, 23 Apr 2025 09:47:03 GMT Last-Modified: Mon, 24 Feb 2025 03:40:19 GMT ETag: "8c74cd15ac905aaba2530999886ee990" x-amz-server-side-encryption: AES256 x-amz-version-id: z9V4OhvVuqaWoUikiuv8mHIVKQTmOAOP Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 e06f1884e3b8f2d22eb184102aa03e4a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: saZmmZbV9vvX5PE9PtpbVBHcB0oAoLvOBVVfyNkWOokG_PYlJjfACw==
2025-04-23 09:47:02 UTC	523	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 29 00 00 00 11 08 06 00 00 00 40 49 85 36 00 00 01 d2 49 44 41 54 48 c7 b5 96 c1 6d c2 40 10 45 1f 88 02 28 01 2a 08 ee 00 2a 08 b9 58 f2 c1 4a a8 20 a1 82 24 15 24 54 90 44 7b 58 69 2f b8 03 e8 00 53 41 48 07 ee 20 b9 cc a2 d5 32 b6 31 28 ff e6 5d be f9 fe 33 7f 76 7b 44 48 b3 7c 04 3c 03 73 60 18 6c 55 40 01 ac 9c 35 25 0a d2 2c 9f 02 8f c2 0d 71 08 b8 07 6a 90 66 f9 1c 78 73 d6 8c c3 f5 5e f4 a3 37 e0 89 76 bc 3b 6b 96 01 6f 08 ac 81 69 0b af 02 5e 9d 35 ef 8a 31 1f 9e ef ac e9 a9 22 d3 2c df 01 13 ce 47 e9 ac 49 44 e0 a6 23 f7 d3 59 b3 10 ee 93 54 ee 08 55 64 07 07 4f 1c 15 71 d3 0b b8 77 ce 9a 22 cd f2 df 78 23 16 39 10 ab eb 04 16 c0 1e b8 51 fa 8c 06 9e ef df 1f e0 56 71 79 0b 94 e7 7e cd 20 Data Ascii: PNGIHDR)@I6IDATHm@E(**XJ $$TD{Xi/SAH 21(]3v{DH\|<s`lU@5%,qjfxs^7v;koi^51",GID#YTUdOqw"x#9QVqy~

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:02 UTC	825	OUT	GET /assets/graphics/graphic_crest-large-grey-b0bb0e89c9a14bbe78b7534d986ab804d4833c46c92059eafb1dc2b064f13734.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:02 UTC	547	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 5464 Connection: close Date: Wed, 23 Apr 2025 08:23:54 GMT Last-Modified: Mon, 24 Feb 2025 03:40:19 GMT ETag: "a45c369bdfd1bc8b7a13e835fb50da5f" x-amz-server-side-encryption: AES256 x-amz-version-id: 0bkJjBoH_.AfEFiliA2cIgQE3SrYWCd5 Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 460e9d24b366353afa89e5dea8489bc0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 7HQkcRVgX2GSa-HCyg3SiNUssdWl3XDAL89xtw_J6hj0M_q3zbwCOQ== Age: 4989
2025-04-23 09:47:02 UTC	5464	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 40 08 06 00 00 00 8d c7 f0 36 00 00 15 1f 49 44 41 54 78 da ed 9c 79 94 15 d5 b5 c6 7f 0c ad 88 a0 80 32 28 12 04 51 31 4d d3 82 0a 79 32 88 68 34 0e 8f 98 a8 65 4a 2d a3 82 b3 11 47 c4 48 14 8d c4 48 1c 83 bc 60 70 2e 63 c5 32 c6 31 8a a2 28 a2 a8 0c 51 9b 6e 22 22 44 1c 98 94 41 e6 41 bb df 1f fc 6a 59 b9 eb 36 83 9a 48 b2 72 d6 ba ab bb eb 9e 5b 75 ce 3e 7b 7f df b7 f7 39 b7 eb b0 95 b6 20 8c 76 01 2e 04 2e 03 7e 0c bc 91 26 f1 bc ad 6d 9c 75 d9 7a db 2f 80 6d 81 79 c0 b1 c0 11 5b e3 20 b7 66 03 7e 01 ac 01 6a 80 55 5b eb 20 b7 66 03 5e ab f1 5a 01 4f 03 4f fe d7 80 5b d6 d6 03 dd fc fd f0 34 89 3f f9 af 01 b7 ac 9d 0a f4 35 8c cf 09 c2 e8 80 ad 71 90 75 b6 32 e6 dd 15 38 11 78 4c d2 Data Ascii: PNGIHDRP@6IDATxy2(Q1My2h4eJ-GHH`p.c21(Qn""DAAjY6Hr[u>{9 v..~&muz/my[ f~jU[ f^ZOO[4?5qu28xL

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:02 UTC	656	OUT	GET /favicon.ico HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:03 UTC	437	IN	HTTP/1.1 200 OK Content-Type: image/x-icon Content-Length: 29990 Connection: close Date: Wed, 23 Apr 2025 09:47:03 GMT Last-Modified: Sun, 23 Feb 2025 21:59:49 GMT ETag: "67bb9a55-7526" Accept-Ranges: bytes Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: rIcpU5Mh2ZgRkxWVRt1cOBy5sgaFUUoj9iP6SCLGY5HCFJ881dAL6Q==
2025-04-23 09:47:03 UTC	15947	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 28 05 00 00 46 00 00 00 18 18 00 00 01 00 20 00 68 0b 00 00 6e 05 00 00 20 20 00 00 01 00 20 00 28 14 00 00 d6 10 00 00 40 40 00 00 01 00 20 00 28 50 00 00 fe 24 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 05 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 88 00 00 00 88 00 00 00 88 00 af 00 88 00 71 00 88 00 13 00 88 00 00 00 88 00 19 00 88 00 00 00 88 00 19 00 88 00 00 00 88 00 19 00 88 00 00 00 88 00 13 00 88 00 6d 00 88 00 a8 00 88 00 00 00 88 00 00 00 88 00 00 00 88 00 aa 00 88 00 2c 00 88 00 9a 00 88 00 03 00 88 00 c6 00 88 00 07 00 88 00 c6 00 88 00 07 00 88 00 c6 00 88 00 04 00 88 00 99 00 88 00 2e 00 88 00 b2 00 88 00 00 00 88 00 00 00 88 00 00 00 88 00 af 00 88 00 71 00 Data Ascii: (F hn (@@ (P$( qm,.q
2025-04-23 09:47:03 UTC	14043	IN	Data Raw: 88 00 ff 00 88 00 e6 00 88 00 49 00 88 00 00 00 88 00 00 00 88 00 ff 00 88 00 3c 00 88 00 3b 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 3c 00 88 00 3b 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 3c 00 88 00 3b 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 3c 00 88 00 3b 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 ff 00 88 00 3c 00 88 00 3b 00 88 00 ff 00 88 00 00 00 88 00 00 00 88 00 49 00 88 00 e6 00 88 00 ff 00 88 00 ff 00 88 00 e6 00 88 00 49 00 88 00 00 00 88 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 88 00 00 00 88 00 00 00 88 00 00 00 88 00 00 00 88 00 ff Data Ascii: I<;<;<;<;<;II

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:02 UTC	564	OUT	GET /manifest.json HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-04-23 09:47:03 UTC	1295	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 1142 Connection: close Date: Wed, 23 Apr 2025 09:47:03 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin X-UA-Compatible: IE=edge Cache-Control: max-age=3600, public ETag: W/"418c6dc9330d6f63c6f66915f27c5dea" Feature-Policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'none'; payment 'none' Content-Security-Policy: default-src 'self'; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' Set-Cookie: seen_cookie_message=yes; path=/; expires=Thu, 23 Apr 2026 09:47:03 GMT; HttpOnly; SameSite=Lax; secure X-Request-Id: 164a0fb4-ad3a-41f1-ab06-5174b98af04f X-Runtime: 0.004876 Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Cache: Miss from cloudfront Via: 1.1 f86847f56467a24ee3617872b36786c8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: jY9UoDxHPiIU9w5t4ayiJXC2uLgK37dVcVwdGZV3DFIS_Z6pV-kzPQ==
2025-04-23 09:47:03 UTC	1142	IN	Data Raw: 7b 22 6e 61 6d 65 22 3a 22 50 65 74 69 74 69 6f 6e 73 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 6f 72 69 65 6e 74 61 74 69 6f 6e 22 3a 22 70 6f 72 74 72 61 69 74 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 2f 61 73 73 65 74 73 2f 6f 73 2d 73 6f 63 69 61 6c 2f 61 6e 64 72 6f 69 64 2f 6c 61 75 6e 63 68 65 72 2d 69 63 6f 6e 2d 30 2d 37 35 78 2d 38 33 35 31 63 37 66 36 61 30 64 66 64 33 64 38 37 34 32 64 30 66 64 61 31 36 30 34 62 30 33 30 32 31 63 62 61 65 63 36 33 35 36 34 64 61 66 37 35 38 36 39 34 65 64 62 39 32 31 30 36 65 35 38 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 33 36 78 33 36 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 64 65 Data Ascii: {"name":"Petitions","display":"standalone","orientation":"portrait","start_url":"/","icons":[{"src":"/assets/os-social/android/launcher-icon-0-75x-8351c7f6a0dfd3d8742d0fda1604b03021cbaec63564daf758694edb92106e58.png","sizes":"36x36","type":"image/png","de

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:03 UTC	755	OUT	GET /assets/os-social/android/launcher-icon-3x-823a71b98c8e29673a8d1505ceff2a35374edcdeb0585bc11042aebfc179c7c3.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:04 UTC	537	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2713 Connection: close Date: Wed, 23 Apr 2025 09:47:05 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "4f1fce7b07cdb6cb552ec41858f89f5e" x-amz-server-side-encryption: AES256 x-amz-version-id: Fz5MM6wG4hX7rWFEManUu9IkmRIWHZga Accept-Ranges: bytes Server: AmazonS3 X-Cache: Miss from cloudfront Via: 1.1 37d6a7866914f4479b2ebf8191aa9a4c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: 8LlEpENGHNHPAzlNHbPfCIMKbgaTvIde2sDsBYhk6FbLokfUpl7Jrg==
2025-04-23 09:47:04 UTC	2713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 03 00 00 00 d0 98 12 8a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:04 UTC	529	OUT	GET /assets/os-social/android/launcher-icon-3x-823a71b98c8e29673a8d1505ceff2a35374edcdeb0585bc11042aebfc179c7c3.png HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:05 UTC	544	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 2713 Connection: close Date: Wed, 23 Apr 2025 09:47:05 GMT Last-Modified: Sun, 23 Feb 2025 16:13:27 GMT ETag: "4f1fce7b07cdb6cb552ec41858f89f5e" x-amz-server-side-encryption: AES256 x-amz-version-id: Fz5MM6wG4hX7rWFEManUu9IkmRIWHZga Accept-Ranges: bytes Server: AmazonS3 X-Cache: Hit from cloudfront Via: 1.1 d196b3182ad74e7b80ce14b0ee8558c6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: j8R5LNREX77m62euiY8wdMwNbMk-MoRsPesEZgsD7edtr4_EvcFyKQ== Age: 1
2025-04-23 09:47:05 UTC	2713	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 90 00 00 00 90 08 03 00 00 00 d0 98 12 8a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 68 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<hiTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:11 UTC	642	OUT	GET /petitions/721006/count.json HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:11 UTC	1287	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 22 Connection: close Date: Wed, 23 Apr 2025 09:47:11 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin X-UA-Compatible: IE=edge Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept ETag: W/"e5076ca25267e3e6076aa3827c94e738" Feature-Policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'none'; payment 'none' Content-Security-Policy: default-src 'self'; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' X-Request-Id: 7c34f596-e1ac-49b4-9095-eabbf8fb1d8d X-Runtime: 0.008998 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Miss from cloudfront Via: 1.1 73c3df19e5d007c253fa1378c993078e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: ca68UaESr4anFsH1BQOVrvjr28SDS66oxaRtkkFw92T1MbRTfXLbrA==
2025-04-23 09:47:11 UTC	22	IN	Data Raw: 7b 22 73 69 67 6e 61 74 75 72 65 5f 63 6f 75 6e 74 22 3a 33 30 7d Data Ascii: {"signature_count":30}

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:12 UTC	446	OUT	GET /petitions/721006/count.json HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:12 UTC	1294	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Content-Length: 22 Connection: close Date: Wed, 23 Apr 2025 09:47:11 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin X-UA-Compatible: IE=edge Cache-Control: no-store Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept ETag: W/"e5076ca25267e3e6076aa3827c94e738" Feature-Policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'none'; payment 'none' Content-Security-Policy: default-src 'self'; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' X-Request-Id: 7c34f596-e1ac-49b4-9095-eabbf8fb1d8d X-Runtime: 0.008998 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Cache: Hit from cloudfront Via: 1.1 8897bf8922c44da1149553da5a03142a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: dKoODuTssEHE7JGYLZ6otUTie-gN-elb0wlZs9UkG-WEhqGCyxSs5w== Age: 1
2025-04-23 09:47:12 UTC	22	IN	Data Raw: 7b 22 73 69 67 6e 61 74 75 72 65 5f 63 6f 75 6e 74 22 3a 33 30 7d Data Ascii: {"signature_count":30}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://petition.parliament.uk/petitions/721006

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Static File Info

Network Behavior

Windows Analysis Report
https://petition.parliament.uk/petitions/721006

Timestamp	Bytes transferred	Direction	Data
2025-04-23 09:47:12 UTC	801	OUT	GET /petitions/721006/signatures/new HTTP/1.1 Host: petition.parliament.uk Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://petition.parliament.uk/petitions/721006 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: seen_cookie_message=yes
2025-04-23 09:47:13 UTC	1875	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Content-Length: 18467 Connection: close Date: Wed, 23 Apr 2025 09:47:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Vary: Accept-Encoding X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 X-Content-Type-Options: nosniff X-Permitted-Cross-Domain-Policies: none Referrer-Policy: strict-origin-when-cross-origin X-UA-Compatible: IE=edge Cache-Control: no-store link: </assets/application-24945709f2165364c998c9cd6380dc36c77d3e11d3cb572bbb80eee2357e8028.css>; rel=preload; as=style; type=text/css; nopush,</assets/application-4e54e69e6fa8e798bdb91d943934c9f458bd361a4f9569860a25ee2629a19abe.js>; rel=preload; as=script; type=text/javascript; nopush ETag: W/"a8873dee7512ae3fbcd9f1de35ae08a3" Feature-Policy: camera 'none'; gyroscope 'none'; microphone 'none'; usb 'none'; fullscreen 'none'; payment 'none' Content-Security-Policy: default-src 'self'; connect-src 'self' https://www.google-analytics.com; img-src 'self' https://www.google-analytics.com; script-src 'self' 'unsafe-inline' https://www.googletagmanager.com https://www.google-analytics.com; style-src 'self' 'unsafe-inline' Set-Cookie: _epets_session=x5ZvOjidRzAWw3TB0bzoAZRVWJXqIUMcCzMxeKKx1Dnxi526SmTQiEYKXzvdpXiRVOWkdLmnomhcm1vnOxen1LpEUHNUGQ3zqZI3KMUHyOuL6ngf8U%2Bc7EKzZd2XNtN72SJSwWyYlXoKmAZmrw9Bu5CPMpkvrUf5FJ5SoaB3lm4txRdBkPmMK9Sh%2BBvUKA5H07p7DFcINsURdXcnPCfkU3SwAISRiqbBc5qgD7sJSAcs98YDvXQoA2uGR92suAjfyEC%2FWMFzRokJtKV%2B8UalpWC3%2FGl69w%3D%3D--wimPH7YmZN%2F38iyG--sL%2BiODQLAxVPVBiWdWrszw%3D%3D; path=/; secure; HttpOnly; SameSite=Strict X-Request-Id: 268233e6-6c86-4b09-a45b-52c2f6b83e3d X-Runtime: 0.016529 X-Cache: Miss from cloudfront Via: 1.1 cf0406bc67043378998de4d2ebe1b638.cloudfront.net (CloudFront) X-Amz-Cf-Pop: LAX50-P3 X-Amz-Cf-Id: FMcf7RNVV3n16qKcZV32-fmg6ox0uVPxYHSxTFEcSJvYbLDu2_7x1g==
2025-04-23 09:47:13 UTC	14509	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 49 6d 70 6c 65 6d 65 6e 74 20 72 65 63 6f 6d 6d 65 6e 64 61 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 49 6e 64 65 70 65 6e 64 65 6e 74 20 52 65 76 69 65 77 20 6f 66 20 50 6f 72 6e 6f 67 72 61 70 68 79 20 52 65 67 75 6c 61 74 69 6f 6e 20 2d 20 53 69 67 6e 20 74 68 69 73 20 70 65 74 69 74 69 6f 6e 20 2d 20 50 65 74 69 74 69 6f 6e 73 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 0a 20 20 20 20 3c 6c 69 Data Ascii: <!DOCTYPE html><html lang="en-GB"> <head> <title>Implement recommendations of the Independent Review of Pornography Regulation - Sign this petition - Petitions</title> <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> <li
2025-04-23 09:47:13 UTC	3390	IN	Data Raw: 6e 20 76 61 6c 75 65 3d 22 42 53 22 3e 54 68 65 20 42 61 68 61 6d 61 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 47 4d 22 3e 54 68 65 20 47 61 6d 62 69 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 50 53 22 3e 54 68 65 20 4f 63 63 75 70 69 65 64 20 50 61 6c 65 73 74 69 6e 69 61 6e 20 54 65 72 72 69 74 6f 72 69 65 73 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 54 47 22 3e 54 6f 67 6f 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 54 4f 22 3e 54 6f 6e 67 61 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 54 54 22 3e 54 72 69 6e 69 64 61 64 20 61 6e 64 20 54 6f 62 61 67 6f 3c 2f 6f 70 74 69 6f 6e 3e 0a 3c 6f Data Ascii: n value="BS">The Bahamas</option><option value="GM">The Gambia</option><option value="PS">The Occupied Palestinian Territories</option><option value="TG">Togo</option><option value="TO">Tonga</option><option value="TT">Trinidad and Tobago</option><o
2025-04-23 09:47:13 UTC	568	IN	Data Raw: 20 20 3c 70 3e 41 6c 6c 20 63 6f 6e 74 65 6e 74 20 69 73 20 61 76 61 69 6c 61 62 6c 65 20 75 6e 64 65 72 20 74 68 65 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6e 61 74 69 6f 6e 61 6c 61 72 63 68 69 76 65 73 2e 67 6f 76 2e 75 6b 2f 64 6f 63 2f 6f 70 65 6e 2d 67 6f 76 65 72 6e 6d 65 6e 74 2d 6c 69 63 65 6e 63 65 2f 76 65 72 73 69 6f 6e 2f 33 2f 22 20 72 65 6c 3d 22 65 78 74 65 72 6e 61 6c 20 6c 69 63 65 6e 73 65 22 3e 4f 70 65 6e 20 47 6f 76 65 72 6e 6d 65 6e 74 20 4c 69 63 65 6e 63 65 20 76 33 2e 30 3c 2f 61 3e 2c 20 65 78 63 65 70 74 20 77 68 65 72 65 20 6f 74 68 65 72 77 69 73 65 c2 a0 73 74 61 74 65 64 3c 2f 70 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 70 79 72 69 67 68 74 22 Data Ascii: <p>All content is available under the <a href="https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/" rel="external license">Open Government Licence v3.0</a>, except where otherwisestated</p> </div> <div class="copyright"

Target ID:	0
Start time:	05:46:49
Start date:	23/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6ef400000
File size:	3'384'928 bytes
MD5 hash:	DBE43C1D0092437B88CFF7BD9ABC336C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	05:46:50
Start date:	23/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1828,i,15419871082775976200,10586923797022310731,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250316-180048.776000 --mojo-platform-channel-handle=2008 /prefetch:11
Imagebase:	0x7ff6ef400000
File size:	3'384'928 bytes
MD5 hash:	DBE43C1D0092437B88CFF7BD9ABC336C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	5
Start time:	05:46:56
Start date:	23/04/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://petition.parliament.uk/petitions/721006"
Imagebase:	0x7ff6ef400000
File size:	3'384'928 bytes
MD5 hash:	DBE43C1D0092437B88CFF7BD9ABC336C
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre