Edit tour

Windows Analysis Report
http://buydotclearlynet.com

Overview

General Information

Sample URL:	http://buydotclearlynet.com
Analysis ID:	1502488
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2316 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1992,i,8964795359214049117,12185686515919073619,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://buydotclearlynet.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&rt=wsrt.3677,cbt.378,hst.376&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE	HTTP Parser: No favicon
Source: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE	HTTP Parser: No favicon
Source: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE	HTTP Parser: No favicon
Source: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE	HTTP Parser: No favicon
Source: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE	HTTP Parser: No favicon
Source: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source:	Binary string: _.m.lH=function(a){var b=this;return _.Pg(function(c){return c.yield(b.Wx.lH(a),0)})};_.zn(tRa,CRa);yd("I46Hvd","BngmTd");var DRa=_.Dd("I46Hvd",[]);var ERa=function(a){_.wn.call(this,a.Oa)};_.D(ERa,_.wn);ERa.Ta=_.wn.Ta;ERa.Ja=_.wn.Ja;ERa.prototype.get=function(){return window};ERa.prototype.Se=function(){return window.document};_.zn(DRa,ERa);var FRa={};FRa.a=pRa.prototype.getId;FRa.b=pRa.prototype.htb;FRa.c=pRa.prototype.getUrl;FRa.d=pRa.prototype.getUserData;pRa.prototype.a=FRa;var GRa={};GRa.a=qRa.prototype.Xo;GRa.b=qRa.prototype.pop;GRa.c=qRa.prototype.getState;GRa.d=qRa.prototype.Gi;GRa.e=qRa.prototype.Bp;qRa.prototype.a=GRa;var HRa={};HRa.b=kRa.prototype.ulb;HRa.c=kRa.prototype.pDb;HRa.d=kRa.prototype.m4b;HRa.e=kRa.prototype.i1b;kRa.prototype.a=HRa;var IRa={};IRa.a=ERa.prototype.get;IRa.b=ERa.prototype.Se;ERa.prototype.a=IRa; source: chromecache_463.2.dr
Source:	Binary string: _.wfb.prototype.Aa=function(a,b){if(!_.Jsa\|\|!this.oa\|\|!_.web(this.Ba,a.Tt())\|\|this.Ba.getType(a.Tt())!=1)return _.Kdb(a);var c=!!_.$p(a,_.Wp),d=_.$p(a,_.Pdb);if(this.oa.contains(a)&&!c)return vfb(a,this.oa.get(a).then(function(f){var g=new tfb;f=a.Tt().getResponse(d?f.yv():f.clone());return new _.aTa(f.toa,f.oa,(f.Aa==null?new _.NEa:f.Aa.clone()).Rb(ufb,g))}));var e=_.Ed();this.oa.put(a,e);b.then(function(f){f=f.oa;e.resolve(_.xfb?f.yv():f.clone())},function(f){e.reject(f)});return _.Kdb(a)}; source: chromecache_485.2.dr
Source:	Binary string: _.ew=function(a,b,c){var d=b.Nm();b.MTb(_.PDb(d,c,a.Aa,a.oa));b.jWc(function(h){var k=UDb(a);c.Uk(k,h)});var e=!1,f=new d,g=_.SDb(d,{D2:[function(h){var k=UDb(a);c.Uk(k,f);c.Uk(k,h);return h}],Sd:[function(){e\|\|(e=!0,VDb(a,{o7c:function(h){return b.transition(function(k){c.Uk(h,k);return k},_.Lv)},VTd:function(h){var k=new d;return b.toc(function(l){if(!c.oa)return!1;var p=_.ZAb(""),r,t;(t=(r=c.oa).Yl)==null\|\|t.call(r,l,p);h(p);var u,A;(A=(u=c.oa).Uk)==null\|\|A.call(u,p,k);return!_.sj(k,l)},function(){return k}, source: chromecache_358.2.dr, chromecache_539.2.dr
Source:	Binary string: _.Meb.prototype.Da=function(a,b,c){if(c instanceof _.Pq){var d=_.bf(c,2)?" ["+_.Le(c,2)+"]":"";d=_.HCa(new _.Wf,"RPC executor service threw an error"+d+"!");_.oj(c,9)&&_.Asa(d,_.Xh(c,9));(c=c.oa())&&(c=c.getExtension(Leb))&&_.zsa(d,_.$e(c,_.Sf,1,_.af()));var e=new _.Xf(d);_.Ra(_.cc(b),function(h){h.reject(e)})}else if(d=_.Le(c,6),a.hasOwnProperty(d)){if(_.bf(c,2)){a=a[d];var f=a.Tt().eYa(),g=Qeb(_.$e(c,Geb,7,_.af()));c=_.C(c,2);c=_.$p(a,_.Pdb)&&_.Reb?_.Wb(f,c).yv():_.Wb(f,c);c=a.Tt().getResponse(c, source: chromecache_485.2.dr
Source:	Binary string: _.Pdb=new _.Vp("returnFrozen"); source: chromecache_485.2.dr
Source:	Binary string: bRa=function(a,b,c,d,e){return ZQa(a,b,e,0,void 0,void 0,c).then(function(f){return _.UQa(f,d.messageKey,d.qb)})};_.$Qa=!1;_.zn(_.wra,_.YQa);var Cra,Dra,dRa,eRa;_.cRa=!!(MAa&&google&&google.jd&&google.jd.ms&&google.jd.md&&google.jd.il&&google.jd.gp);Dra=function(){this.counter=0;this.oa=new Map};dRa=function(a){return _.cRa?(0,google.jd.il)():a.counter>0};eRa=function(a,b){if(_.cRa)return new _.nf(function(d){(0,google.jd.gp)(b,d)});var c=_.ba.W_jd;return c&&(c=c[b],!dRa(a)\|\|c)?_.le(c\|\|null):new _.nf(function(d){a.oa.set(b,d)})};yd("x8cHvb","xiqEse");var fRa=_.Dd("x8cHvb");_.gRa=new Map;_.hRa=new Set;var iRa=function(a){_.wn.call(this,a.Oa)};_.D(iRa,_.wn);iRa.Ta=_.wn.Ta;iRa.Ja=_.wn.Ja;iRa.prototype.K6a=function(a){return eRa(_.Era(),a)};iRa.prototype.oa=function(a,b,c){if(_.gRa.has(c)&&a.hasAttribute("jsdata")){var d=a.getAttribute("jsdata");if((0,_.$g)(d).split(/\s+/).includes(c)){var e=_.gRa.get(c);_.gRa.delete(c);d=bIa.get(a)\|\|{};b=e instanceof _.q?e:new b(e);d[c]=b;bIa.set(a,d)}}return((b=bIa.get(a))&&c in b?_.le(b[c]):null)\|\|_.kMa(a,c)};_.zn(fRa,iRa);var Fra=function(a,b){this.jM=a;this.TVc=b};var psa=function(){this.logger=this.logger=fna};psa.prototype.x$c=function(){};psa.prototype.qud=function(a,b,c,d,e,f,g,h,k){Object.assign(c,{pwa:h,j9b:k});a=new tma(a,b,c,d,e,f);a.La=!0;this.logger.Ca(a,g)};var Jra,Ira;var jRa,kRa=function(){this.Aa=function(){};this.oa=null},osa=function(){jRa\|\|(jRa=new kRa);return jRa};_.m=kRa.prototype;_.m.mWc=function(a,b){b?this.pDb(a,b):this.ulb(a)};_.m.ulb=function(a,b){cra(a,b===void 0?!1:b)};_.m.pDb=function(a,b){jra(a,b)};_.m.m4b=function(a){var b=this,c=_.hf(_.Hra(a)),d=_.Nd(c,_.xd().oa),e=new Promise(function(f,g){_.Hd(d,f,g)});e.catch(function(f){b.Aa("Error looking up service, key="+a+", resolved serviceId="+(c+", err="+f))});return e}; source: chromecache_463.2.dr
Source:	Binary string: var QDb,RDb,TDb,UDb,VDb,WDb,XDb;_.LDb=function(a,b){this.set(b,a)};_.MDb=function(a,b){return b};_.NDb=function(a,b){b=b===void 0?new _.$Ab:b;b.Aa=a;return b};_.ODb=function(a,b,c){_.Ya((0,_.nb)(a.Ha));c.forEach(_.LDb,_.qj(a,b))};_.PDb=function(a,b,c,d){return new _.aBb(new Map([[a,b]]),c,d)};QDb=function(a,b){b=b===void 0?new Set:b;a=_.Pa(a);for(var c=a.next();!c.done;c=a.next())b.add(c.value);return b};RDb=function(a){this.oa=a=a===void 0?new Map:a}; source: chromecache_358.2.dr, chromecache_539.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.163
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: (g.lk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.lk(c,"www.youtube.com"),d=c.toString()):(c=Dva(d),UC(c)&&(d=c));c=new g.FL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: 0?"http":"https";this.Da=TC((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|TC(this.hf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=as(d,h,xJa):h&&(d="embedded");this.Ka=d;Hqa();h=null;d=b?b.playerStyle:a.ps;f=g.Sb(yJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Sb(yJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_440.2.dr	String found in binary or memory: DIa=function(a,b){if(!a.j["0"]){var c=new FE("0","fakesb",{video:new BE(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new XM(new g.FL("http://www.youtube.com/videoplayback"),c,"fake"):new nN(new g.FL("http://www.youtube.com/videoplayback"),c,new IM(0,0),new IM(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_738.2.dr, chromecache_649.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Vj:function(){e=Bb()},nd:function(){d()}}};var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_738.2.dr	String found in binary or memory: N.getElementsByTagName("iframe"),ma=R.length,la=0;la<ma;la++)if(!u&&c(R[la],H.Ee)){XI("https://www.youtube.com/iframe_api");u=!0;break}})}}else G(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.C="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_440.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Oi(a,{hl:d})),this.Cd(qY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.oY(a.errorMessage)):this.Cd(qY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Oi(c, equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,nE(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Id(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.S)(),SS(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Id(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_440.2.dr	String found in binary or memory: a.ismb);this.eq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=QO(this.Da)\|\|"www.youtube.com")):r="video.google.com";this.Qn=r;RO(this,a,!0);this.Ma=new lO;g.P(this,this.Ma);q=b?b.innertubeApiKey:cs("",a.innertube_api_key);p=b?b.innertubeApiVersion:cs("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:cs("",a.innertube_context_client_version);q=g.Rq("INNERTUBE_API_KEY")\|\|q;p=g.Rq("INNERTUBE_API_VERSION")\|\|p;l=g.Rq("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=eO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.VO(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.$Q(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.kD("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr, chromecache_632.2.dr	String found in binary or memory: function Z(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.l=this.g=this.h=null;this.i=0;this.s=!1;this.m=[];this.j=null;this.B={};if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a)if(Nb.yt_embedsEnableRsaforFromIframeApi&&zb(),c=a.tagName.toLowerCase()==="iframe",b.host\|\|(b.host=c?sb(a.src):"https://www.youtube.com"),this.h= equals www.youtube.com (Youtube)
Source: chromecache_334.2.dr, chromecache_632.2.dr	String found in binary or memory: function zb(){var a=new xb,b=["https://www.youtube.com"];b=b===void 0?wb:b;pa(function(c){switch(c.g){case 1:return C(c,yb(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var f;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(f=k.m,f.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: g.VO=function(a){a=QO(a.Da);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: g.hP=function(a){var b=g.VO(a);IJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_440.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.VO(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.MO(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),St&&(a=Uma())&&(b.ebc=a));return g.Oi(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_649.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Yg:e,Wg:f,Xg:g,Ih:k,Jh:m,Ee:n,Cb:b},q=D.YT;if(q)return q.ready&&q.ready(d),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HC(w,"iframe_api")\|\|HC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!yC&&FC(x[A],p.Ee))return xc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_733.2.dr, chromecache_387.2.dr, chromecache_459.2.dr	String found in binary or memory: return b}uC.J="internal.enableAutoEventOnTimer";var hc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: this.X.Ba&&(a.authuser=this.X.Ba);this.X.pageId&&(a.pageid=this.X.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Cb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(gO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.UN(this.B)?TN(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_729.2.dr, chromecache_440.2.dr	String found in binary or memory: var B2={};var Ocb={Gs:[{FB:/Unable to load player module/,weight:20},{FB:/Failed to fetch/,weight:500},{FB:/XHR API fetch failed/,weight:10},{FB:/JSON parsing failed after XHR fetch/,weight:10},{FB:/Retrying OnePlatform request/,weight:10},{FB:/CSN Missing or undefined during playback association/,weight:100}],Mr:[{callback:Q6a,weight:500}]};var c7a=/[&\?]action_proxy=1/,b7a=/[&\?]token=([\w-])/,d7a=/[&\?]video_id=([\w-])/,e7a=/[&\?]index=([\d-])/,f7a=/[&\?]m_pos_ms=([\d-])/,h7a=/[&\?]vvt=([\w-]*)/,U6a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),g7a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),X6a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_288.2.dr, chromecache_505.2.dr	String found in binary or memory: var lNb;_.nNb=function(a){return lNb("https://www.facebook.com/dialog/share",{app_id:"738026486351791",href:_.mNb(a),hashtag:"#GoogleDoodle"})};_.oNb=function(a){return lNb("https://twitter.com/intent/tweet",{text:a})};_.pNb=function(a,b){return lNb("mailto:",{subject:a,body:b})};_.mNb=function(a){var b=a;b&&b.indexOf("//")===0&&(b="https:"+a);return b};lNb=function(a,b){var c=new _.Om,d;for(d in b)c.add(d,b[d]);a=new _.Gm(a);_.Mm(a,c);return a.toString()}; equals www.facebook.com (Facebook)
Source: chromecache_288.2.dr, chromecache_505.2.dr	String found in binary or memory: var lNb;_.nNb=function(a){return lNb("https://www.facebook.com/dialog/share",{app_id:"738026486351791",href:_.mNb(a),hashtag:"#GoogleDoodle"})};_.oNb=function(a){return lNb("https://twitter.com/intent/tweet",{text:a})};_.pNb=function(a,b){return lNb("mailto:",{subject:a,body:b})};_.mNb=function(a){var b=a;b&&b.indexOf("//")===0&&(b="https:"+a);return b};lNb=function(a,b){var c=new _.Om,d;for(d in b)c.add(d,b[d]);a=new _.Gm(a);_.Mm(a,c);return a.toString()}; equals www.twitter.com (Twitter)
Source: chromecache_629.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/57c75fa4\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_440.2.dr	String found in binary or memory: vo.prototype.Ja=function(){return this.C};var dna=(new Date).getTime();var pla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),qla=/\bocr\b/;var sla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var X$a=0,Y$a=0,Z$a=0;var Bla;g.Do=null;g.Fo=!1;g.Ko=1;Bla=Symbol("SIGNAL");g.Lo={version:0,p_:0,Pm:!1,fg:void 0,Ry:void 0,yn:void 0,KL:0,jj:void 0,Nu:void 0,RE:!1,rP:!1,Q1:function(){return!1}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: buydotclearlynet.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: id.google.com
Source: global traffic	DNS traffic detected: DNS query: dns-tunnel-check.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: tunnel.googlezip.net
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: sustainability.google
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: googletagmanager.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1992,i,8964795359214049117,12185686515919073619,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://buydotclearlynet.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2088 --field-trial-handle=1992,i,8964795359214049117,12185686515919073619,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://buydotclearlynet.com	0%	Avira URL Cloud	safe
http://buydotclearlynet.com	0%	Virustotal		Browse

Source	Detection	Scanner	Link
buydotclearlynet.com	0%	Virustotal	Browse
csp.withgoogle.com	0%	Virustotal	Browse
static.doubleclick.net	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
i.ytimg.com	0%	Virustotal	Browse
google.com	1%	Virustotal	Browse
youtube-ui.l.google.com	0%	Virustotal	Browse
googletagmanager.com	0%	Virustotal	Browse
mail.google.com	0%	Virustotal	Browse
googleads.g.doubleclick.net	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse
dns-tunnel-check.googlezip.net	1%	Virustotal	Browse
id.google.com	0%	Virustotal	Browse
plus.l.google.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
sustainability.google	0%	Virustotal	Browse
www3.l.google.com	0%	Virustotal	Browse
tunnel.googlezip.net	1%	Virustotal	Browse
ghs-svc-https-sni.ghs-ssl.googlehosted.com	0%	Virustotal	Browse
googlehosted.l.googleusercontent.com	0%	Virustotal	Browse
blog.google	0%	Virustotal	Browse
ogs.google.com	0%	Virustotal	Browse
apis.google.com	0%	Virustotal	Browse
www.blog.google	0%	Virustotal	Browse
lh3.googleusercontent.com	0%	Virustotal	Browse
www.youtube.com	0%	Virustotal	Browse

IP	Domain	Country	ASN	ASN Name	Malicious
64.94.84.61	buydotclearlynet.com	United States	46373	CONCENTUSNETUS	false
216.58.212.142	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
142.250.186.110	unknown	United States	15169	GOOGLEUS	false
216.58.212.150	unknown	United States	15169	GOOGLEUS	false
216.58.206.81	csp.withgoogle.com	United States	15169	GOOGLEUS	false
216.58.206.40	googletagmanager.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
172.217.16.197	mail.google.com	United States	15169	GOOGLEUS	false
142.250.185.78	play.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	www3.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	unknown	United States	15169	GOOGLEUS	false
216.58.206.33	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.166	unknown	United States	15169	GOOGLEUS	false
216.58.206.38	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.246	unknown	United States	15169	GOOGLEUS	false
142.250.181.238	google.com	United States	15169	GOOGLEUS	false
216.239.34.21	blog.google	United States	15169	GOOGLEUS	false
216.239.38.21	sustainability.google	United States	15169	GOOGLEUS	false
142.250.185.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.186.97	unknown	United States	15169	GOOGLEUS	false
142.250.185.179	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
216.58.212.182	i.ytimg.com	United States	15169	GOOGLEUS	false
216.239.34.157	tunnel.googlezip.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1502488
Start date and time:	2024-09-01 22:14:12 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 59s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://buydotclearlynet.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/757@71/30
Cookbook Comments:	Browse: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE Browse: https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content= Browse: https://mail.google.com/mail/&ogbl Browse: https://google.com/search/howsearchworks/?fg=1 Browse: https://www.google.com/imghp?hl=en&ogbl

Input	Output
URL: https://www.google.com/ Model: jbxai	{ "brand":["Gmail", "Google"], "contains_trigger_text":false, "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE Model: jbxai	{ "brand":["paralympics", "paralympic"], "contains_trigger_text":false, "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/search?sca_esv=3a7d1c546fe2a382&sca_upv=1&q=archery+paralympics&oi=ddle&ct=335645716&hl=en&sa=X&ved=0ahUKEwiCidrZx6KIAxUY-QIHHQdSAAcQPQgE Model: jbxai	{ "brand":["paralympics", "paralympic"], "contains_trigger_text":false, "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/ Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/ Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/imghp?hl=en&ogbl Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/search/howsearchworks/?fg=1 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/intl/en-US/gmail/about/ Model: jbxai	{ "brand":["Gmail"], "contains_trigger_text":false, "prominent_button_name":"Create an account", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content= Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (772)
Category:	downloaded
Size (bytes):	780772
Entropy (8bit):	5.6474013525471705
Encrypted:	false
SSDEEP:	6144:RF6u7nIRl5u44XIt4n0ZvkqZDnNmMkz8+1VNoMrJYsguOrVAntuxohA3ZXNtpP:R+RlnwMoVXrinu4ohuF
MD5:	8DAD708D8907E2230565155A8BF58EA9
SHA1:	225D9699125F8B34773089757A7FEAECD997899D
SHA-256:	43CA104D2F8B1FB68C7AB4F46E823920A0ED7866B0FF7F03960618254CC89A5A
SHA-512:	180065F8A88B468EA5F4A7858C8BAFAB4903A9C1E0F1D2FA8AB6F7ADB488ADB3041D4612D6A1A2D87C86096B63C28B100BE1297D1FB7E4B445C2EA3B404117F2
Malicious:	false
Reputation:	low
URL:	"https://www.gstatic.com/_/mss/boq-search/_/js/k=boq-search.ViewPackageService.en.49axwNdckzs.es5.O/am=gBxECAAACEAEGkAAAAAAAAAAAAAAAAAAgAQAAAAAAAAAAQBQrEBNAoRDfwI7ACAAfoAfesL__08IAIAAEAg8vAAAxAIAgIQAjI4EibNCAMAYDoBGCgAEAIgAAAAAAADEIRwEAMAINBBECCJaAMSAAAkAAY5XJkJEgAAAIITAkTQMQLhbBbBFJQgABMD4KAEEAJEBJI2EEAgAkEcgABwABBEBAIAgHTCeAABgDnKAgQDAGgIIDgMBOAAAAAA4GR5ggAAAAAAAAAAAAAAAQFDIi4CKAAAAAAAAAAAAAAAAAAiAJgE/d=1/dg=0/rs=AH7-fg4Y5B5b7bC7LYXnfDqsWwtv-m0nSA/cb=loaded_0/ee=ADJUGe:nSzGM;ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:fBZcuf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CRubWc:GGHMXc;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;GzNeK:lwR3kb;HMDDWe:HPcd9d;HoYVKb:PkDN7e;HqeXPd:cmbnH;IZrNqe:P8ha2c;IcRVsb:iZsl5b;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KQzWid:ZMKkN;LBgRLc:SdcwHb,XVMNvd;LWyKNe:OGn9Jd;LXA8b:PiQ7Fb;LsNahb:ucGLNb;MWIbN:Oezo8e;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;NoD55:pyzU6b,tHLYle;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OGn9Jd:vP7cyb;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QHcAG:Osl0G;Qoo2ob:SWzGQe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;Rlgi2d:s4kmTe;SFqMfe:d7N0Ze;SLtqO:Kh1xYe;SNUn3:ZwDk9d,x8cHvb;SnFeMb:gIO09b;SzQQ3e:dNhofb;T9F76b:IGrxNe;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:W0fpg;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VxQ32b:k0XsBb;W1Xvfd:KwNFR;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;XcupOe:nPGmVc;YV5bee:IvPZ6d;ZMvdv:PHFPjb;ZSH6tc:QAvyLe;ZlOOMb:EQAhxc;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aZ61od:arTwJ;af0EJf:ghinId;aoM3kc:RmZU0e;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;cZGwze:Uq2Ztb;csKcjd:ciLywf;dIoSBb:SpsfSb;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:zbML3c;eBZ5Nd:audvde;eGOC9b:UFUkKb;eHDfl:ofjVkb;eO3lse:TC8ZNd;euOXY:OZjbQ;fcYTHe:rDv7Wc;flqRgb:ox2Q7c;fufDm:kGNN9b;g8nkx:U4MzKc;gPGwWe:ds8otb;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:wV5Pjc;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;jGHevf:wsoZ3c;jWrxGe:FHj41b;jlykkc:Ixcocc;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;kbIuKc:rDv7Wc;kyjn6b:CfXVTe;lkq0A:IbjKve;lx12yf:dzcQzd;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;okUaUd:Kg1rBc,wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:MdUzUe;pj82le:mg5CW;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:R9YHJc,d7YSfd,x4FYXe;qsajS:qGotLb;rQSrae:C6D5Fc;rebY5d:S5i2J;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slvZxc:FU6yf;tGdRVe:b5f3kc;tH4IIe:NoECLb,Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;ttWQK:um1fmf;uY49fb:COQbmf;uuQkY:u2V3ud;vAvu5d:O6oXm;vGrMZ:Y1W8Ad;vXy3B:yzQjhd;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:aIe7ef;wQlYve:aLUfP;wR5FRb:O1Gjze,siKnQd;wV5Pjc:L8KGxe,nQze3d;whEZac:F4AmNb;xBbsrc:NEW1Qc;xMUn6e:e0kzxe;xqZiqf:BBI74;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zaIgPb:Qtpxbd,l09DXe,q8mB0c;zxnPse:GkRiKb/m=_gbm,xUdipf,NwH0H,RMhBfe,w9hDv,VwDzFe,A7fCU"
Preview:	"use strict";loaded_0(function(_){var window=this;._._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x8441c80, 0x200000, 0x401a044, 0x0, 0x0, 0x0, 0x480000, 0x0, 0x1000000, 0x2b14000, 0x384024d4, 0xec09fd0, 0x3e002000, 0x9e87e01, 0x4fffffc, 0x200002, 0x3c3c0810, 0xb100002, 0x8480000, 0x123a300, 0x42b389, 0x386300, 0xa468, 0x220001, 0x0, 0x30871000, 0xc000041, 0x11040d02, 0x5a2208, 0x24020310, 0x38e01000, 0x11108995, 0x20000080, 0x12470210, 0x3b8400c3, 0x116c0156, 0x4000825, 0x4a3e300, 0x19100040, 0x21234900, 0x10000810, 0x3000811e, 0x11104001, 0x8200000, 0x9e301d, 0x8398000, 0x81807, 0x20086b0, 0x3801030e, 0x0, 0x1e19380, 0x2018, 0x0, 0x0, 0x5040000, 0x22a022f2, 0x0, 0x0, 0x0, 0x20020000, 0x126, ]);./.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././*. SPDX-License-Identifie

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://lens.google.com	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
https://lens.google.com/gen204	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.h-1D-JOvizc.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo_3dbjO7NaEjkPT0PwzLRJUFrcOJQ/cb=gapi.loaded_0	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&vet=12ahUKEwjGuJTix6KIAxXrgv0HHfsdI9QQ4dMLegQICBAA.aMvUZsD0ILaei-gPmISB-A8.s&bl=aPYC&s=web&zx=1725221735874&opi=89978449	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/6Q907Y7fYBiaW6VAnv1r8BHZnFXjJm138u89gr8j8NSikSES5OrnMMP0bDiTWR7YyY	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	0%	Virustotal		Browse
https://www.google.com/gen_204?atyp=i&ei=TsvUZoKqHpjyi-gPh6SBOA&ct=slh&v=t1&m=HV&pv=0.9262333908073086&me=1:1725221710816,V,0,0,1280,907:0,B,907:0,N,1,TsvUZoKqHpjyi-gPh6SBOA:0,R,1,1,0,0,1280,907:0,R,1,4,390,334,500,16:4116,x:857,e,B&zx=1725221715789&opi=89978449	0%	Avira URL Cloud	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.h-1D-JOvizc.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo_3dbjO7NaEjkPT0PwzLRJUFrcOJQ/cb=gapi.loaded_0	0%	Virustotal		Browse
https://www.google.com/intl/en/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/intl/hi/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/search/howsearchworks/assets/hIvGK13F.min.js	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=aMvUZsD0ILaei-gPmISB-A8&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.16,tjhs.22,jhsl.2173,dm.8&nv=ne.1,feid.a525abec-689b-404d-be6d-11fa47357a7a&hp=&rt=ttfb.1289,st.1290,bs.0,aaft.1449,acrt.1449,art.1449&zx=1725221735873&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/intl/zh-TW/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/intl/hi/search/howsearchworks/	1%	Virustotal		Browse
https://www.google.com/xjs/_/js/k=xjs.hd.en.eJLXiQqXlJU.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAACAEKAAAABQAAAAAAAAAAAAAAAAQIAQBEAQAAAgA4AAAEAQAEABAQAAAIEATgUSYAgAAwAQAAAAAQAAACQAAACAAAAAMAACAAAAAAAKAAAAAAAAAAAAAAAAAAwAACCAAAAAAAAAAAAAABAAAAQAcAAAAAAAEAAAEBADBABhAAAAgAAABAHwAED4BBCgsAAAAAAAAAAAAAAAQgQTAXElAQgAAAAAAAAAAAAAAAAABISRMXNg/d=0/dg=0/br=1/rs=ACT90oHid0j0ga0yFcae2fYObZ-YQ7gzFw/m=syuy,syux,VsqSCc,sy1g0,P10Owf,sy1es,sy1eq,syr9,gSZvdb,syzw,syzv,WlNQGd,syre,syrb,syra,syr8,DPreE,sy108,sy106,nabPbb,syzq,syzo,syju,sykz,CnSW2d,kQvlef,sy107,fXO0xe?xjs=s4	0%	Avira URL Cloud	safe
https://google.com/search/howsearchworks/?fg=1	0%	Avira URL Cloud	safe
https://blog.google/outreach-initiatives/sustainability/helping-monarch-butterflies-2024/	0%	Avira URL Cloud	safe
https://www.google.com/intl/zh-TW/search/howsearchworks/	1%	Virustotal		Browse
https://www.youtube.com	0%	Avira URL Cloud	safe
https://www.google.com/search/howsearchworks/assets/bAPu5B1A.min.js	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/0fVDL02i6kLapIFkzsaMkokcsyNFdTDEaCm2Dy_BVkH_zQKnEmF7x0A0aLzXII5cvU	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/ss/k=xjs.s.Z-Ki4esHVu0.L.B1.O/am=AOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAgAIAKJMAYQEA2ACAAADwAXAIQAAAAAAAABQAAEAAIIDFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEEAAIQAQQAICQACiEAAAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAICIAQAgAECgFAAACAIAAAgMAwEAAB2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA/d=1/ed=1/br=1/rs=ACT90oGy8o0hHa1rI13L8_gFm_r7z0Rc7w/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	0%	Avira URL Cloud	safe
https://google.com/search/howsearchworks/?fg=1	0%	Virustotal		Browse
https://www.google.com/search/howsearchworks/assets/J8wBfiw3.min.js	0%	Avira URL Cloud	safe
https://www.youtube.com	0%	Virustotal		Browse
https://www.google.com/intl/en-IN/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/ss/k=xjs.s.Z-Ki4esHVu0.L.B1.O/am=AAIAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAQAAAIAAAAAAAAgAIALJMAAAEA2ACAAAAAACAAQAAAAAAAABQAAEAAIIAFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEIAAIQAQQAICQACiEAAAAGEAAAAIAAMMAxAqABgAIAAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAIAIAQAgAEAABAAACAIAAAAEAQEAAA2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA/d=0/br=1/rs=ACT90oEAxHS7V_y05pLTxhv3d1bzrhohwQ/m=sykz,sy18p?xjs=s4	0%	Avira URL Cloud	safe
https://sustainability.google/static/index.min.js?cache=47ade0f	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/VzZoNfTFy0Q5bMd9mVfo4M7dp1-OXWmUWsSAttnwnbw6agWisqAeJeJUCzxiZq1UhJ	0%	Avira URL Cloud	safe
https://www.google.com/gmail/about/static-2.0/css/partials/app-downloads.css?fingerprint=9a6fb1bb67e1c16f7ce7c44e82c95da2	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/HX2vTdXOdmn1-AwipdtTylH6l-1DaI2BOwHwV7cKGy9WXDe7_BTaXdSQ7Yyrr3khwv	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	0%	Avira URL Cloud	safe
https://ogs.google.com/widget/callout?eom=1	0%	Avira URL Cloud	safe
https://www.google.com/search/howsearchworks/assets/BhmWRCy0.min.js	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/iRxTGREAOizQhtbCjDGShDHvBc39qEI004M8SClsSzIBgvBsbUMFNVMDfAfzoEzgvr	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	0%	Avira URL Cloud	safe
https://www.google.com/intl/no/search/howsearchworks/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvPvw0z9l_L7kOtfVZH07iQuasGIGWyFqhpdY=s0-rw-e365	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&vet=12ahUKEwjGuJTix6KIAxXrgv0HHfsdI9QQL3oECAkQBA..s&bl=aPYC&s=web&zx=1725221736109&opi=89978449	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/MfSkcsOaJkmnP-qxR6nZ3jiaIbyEqxGs7zCkorzmvi-Y9oVUkr0UThdrhaqhC2CT1h	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvP	0%	Avira URL Cloud	safe
https://www.google.com/intl/hr/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?cpn=	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&ct=slh&v=t1&im=M&aqid=YMvUZofUEryrjuwP6PyHiA4&pv=0.5580661669122233&me=72:1725221748958,V,0,0,0,0:4,h,1,CD4QAQ,o:0,h,1,CEAQAA,o:1,h,1,CCQQAw,o:0,h,1,CCAQAQ,o:0,h,1,CBwQAA,o:0,h,1,CAkQCQ,o:34,V,0,0,1280,907:11,h,1,CD4QAQ,i:0,h,1,CEAQAA,i:0,h,1,CCQQAw,i:0,h,1,CCAQAQ,i:0,h,1,CBwQAA,i:0,h,1,CAkQCQ,i:25,V,0,0,0,0:36,h,1,CD4QAQ,o:0,h,1,CEAQAA,o:0,h,1,CCQQAw,o:0,h,1,CCAQAQ,o:0,h,1,CBwQAA,o:0,h,1,CAkQCQ,o:10570,V,0,0,1280,907:33,h,1,CD4QAQ,i:0,h,1,CEAQAA,i:0,h,1,CCQQAw,i:0,h,1,CCAQAQ,i:0,h,1,CBwQAA,i:0,h,1,CAkQCQ,i:1,e,B&zx=1725221759673&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/js/k=xjs.s.en_US.35rwuv5VE-Y.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAEAoEAgAAAAUAAAAAAAAAAAAAAAAAIAgAQBQCAIAAAMABgCIQAIAAAAgIAAAQIBDA7z8BAAAAAAAAAAwAAsAEAAAAAAAXAAACQAAAAAEAAGAAAAAIAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAwgAPoBAAAAAAAAAAAAIAAAAAAAGCjCDwAAACAAAAAEBAAAB2QAAQAAAgAAALgPAJ4HDAcpLAAAAAAAAAAAAAAAQAASBHMg_QUBCAAAAAAAAAAAAAAAAABAStDE5Q0AkA/d=0/dg=0/br=1/rs=ACT90oFMweNSpOIVn864L6dBQZLcteg8Ng/m=kMFpHd,sy94,bm51tf?xjs=s4	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/VT4SCA4b12NEXu4W5qmH5nMdrHvYyXiasJ8kqJWUd7rtLUdO78YTV5v0ulPoXyXn8X	0%	Avira URL Cloud	safe
https://www.google.com/intl/es/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/intl/el/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/intl/es-419/search/howsearchworks/	0%	Avira URL Cloud	safe
https://about.google/	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/57c75fa4/player_ias.vflset/en_US/base.js	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/uEalHdGqJHrnhoH1O5rYmk5kO2c-xB5HxCobW5KSipKv22HsrmhZNjVvQmBdWcV06W	0%	Avira URL Cloud	safe
https://blog.google/products/search/generative-ai-google-search-may-2024/	0%	Avira URL Cloud	safe
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CIeEmeLHoogDFbyVgwcdaP4B4Q	0%	Avira URL Cloud	safe
https://github.com/shoelace-style/shoelace/blob/next/src/internal/slot.ts	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/fs2pYfDpV_ktdKUy3Tsfx44gSMoe50XLFzRMG0gxlF8aDmM1dKGDELLBDBibRd41nY	0%	Avira URL Cloud	safe
https://www.google.com/async/vpkg?vet=10ahUKEwjGuJTix6KIAxXrgv0HHfsdI9QQj5gNCBw..i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&opi=89978449&hl=en&sca_esv=3a7d1c546fe2a382&sca_upv=1&yv=3&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.35rwuv5VE-Y.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAEAoEAgAAAAUAAAAAAAAAAAAAAAAAIAgAQBQCAIAAAMABgCIQAIAAAAgIAAAQIBDA7z8BAAAAAAAAAAwAAsAEAAAAAAAXAAACQAAAAAEAAGAAAAAIAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAwgAPoBAAAAAAAAAAAAIAAAAAAAGCjCDwAAACAAAAAEBAAAB2QAAQAAAgAAALgPAJ4HDAcpLAAAAAAAAAAAAAAAQAASBHMg_QUBCAAAAAAAAAAAAAAAAABAStDE5Q0AkA%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFMweNSpOIVn864L6dBQZLcteg8Ng,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.Z-Ki4esHVu0.L.B1.O%2Fam%3DAOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAgAIAKJMAYQEA2ACAAADwAXAIQAAAAAAAABQAAEAAIIDFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEEAAIQAQQAICQACiEAAAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAICIAQAgAECgFAAACAIAAAgMAwEAAB2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA%2Fbr%3D1%2Frs%3DACT90oGy8o0hHa1rI13L8_gFm_r7z0Rc7w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.35rwuv5VE-Y.O%2Fck%3Dxjs.s.Z-Ki4esHVu0.L.B1.O%2Fam%3DAOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAkAoEKpMAYQUA2ACAAADwAXAIQAAAIAgAQBQCAMAAIMDFgCIQAIACAIgIEAIQNBDA7z8BAAAAgAMAAAwQAsIEEEAAIQAXQAICQACiEAEAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAAygBvsBBAgA0CMQAAaAICIAQAgAGCjHDwACAKAAAgMExEAAB2QAAQAAAgAAALgPAJ4HDAcpLAAAAAAAAAAAAAAAQAASBHMg_QUBCAAAAAAAAAAAAAAAAABAStDE5Q0AkA%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHSlW01r9dq5rNWY5SWTn8heh0KCQ,_fmt:prog,_id:QPwIld	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/57c75fa4/www-widgetapi.vflset/www-widgetapi.js	0%	Avira URL Cloud	safe
https://blog.google/outreach-initiatives/sustainability/google-pixel-nest-fitbit-plastic-free-packag	0%	Avira URL Cloud	safe
https://sustainability.google/static/index.min.css?cache=732a3af	0%	Avira URL Cloud	safe
https://www.google.com/favicon.ico	0%	Avira URL Cloud	safe
https://plus.google.com	0%	Avira URL Cloud	safe
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	0%	Avira URL Cloud	safe
https://www.google.com/intl/pt/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=i&ei=kMvUZte9DvuBi-gPo5qB6Ao&dt19=2&prm23=0&zx=1725221779552&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/intl/en-GB/search/howsearchworks/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmp	0%	Avira URL Cloud	safe
https://www.google.com/intl/da/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/intl/tr/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/search/howsearchworks/assets/NticlS_l.min.js	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/Cle-1GLl4P8zbJafbrnN8-7CgfVSduAR1j2DACNepAm5JL37GANl8tIM1h72Cyga71wO2lGcNPONnQl5MKFi_1TGSBQM8mV9qaKdQw=rw-e365-w2880	0%	Avira URL Cloud	safe
https://www.google.com/xjs/_/ss/k=xjs.s.Z-Ki4esHVu0.L.B1.O/am=AOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAgAIAKJMAYQEA2ACAAADwAXAIQAAAAAAAABQAAEAAIIDFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEEAAIQAQQAICQACiEAAAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAICIAQAgAECgFAAACAIAAAgMAwEAAB2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA/d=0/br=1/rs=ACT90oGy8o0hHa1rI13L8_gFm_r7z0Rc7w/m=cxU6rb,hHUugd,dOwROe,alTYCe,DcYenb,rnvJOe,fZp0ed,QU4Fq,qiMqId,WphjT,GnLh6e,sy8jb,sy1pv,SdcwHb,mzzZzc,sy754,sy27e,sy26l,sy26k,sy1p3,sy1n9,sy27d,sy271,sy27f,sy1p5,sy1ou,sy1ov,sy1ow,sy1ox,sy1oy,sy27c,sy27b,sy270,sy26z,sy1os,sy272,sy1pe,PlWST,umEChe,sy7up,sy2ix,sy2iy,sy7uq,sy7vg,sy7vh,sy7v4,sy7h8,sy2x2,sy268,sy1no,sy2x3,sy2k6,sy2k7,sy2k9,sy2e2,sy2ka,sy2k8,sy2e3,sy2kb,sy7vf,sy25r,sy25p,sy1mh,sy27u,sy25x,sy25v,sy1mi,sy25m,sy2ki,sy7ve,sy7v5,sy7v3,sy7v1,sy7vd,sy7v9,sy1nj,sy1nk,sy7vb,sy7va,sy7v8,sy2kd,sy2kh,sy2kg,sy2ke,sy2e6,sy2kf,sy7v7,sy2g1,sy7uz,sy7vc?xjs=s4	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=aMvUZtjVJdeli-gP1LW6iAk&s=async&astyp=vpkg&ima=0&imn=0&mem=ujhs.16,tjhs.22,jhsl.2173,dm.8&nv=ne.1,feid.a525abec-689b-404d-be6d-11fa47357a7a&hp=&rt=ttfb.1289,st.1464,bs.103092,aaft.1467,acrt.1467,art.1467&zx=1725221735898&opi=89978449	0%	Avira URL Cloud	safe
https://blog.google/products/search/overview-our-rater-guidelines-search/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmpEQDirGidE1rvGwp9BnCPpv0QfzLqnZ-noZLw=s0-rw-e365	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/-l2uCHxepneGNmf6MyjbK_YHkf7i3lgbrUWvNJL8CQInmOWrMChhC9vcKs27pJqtER	0%	Avira URL Cloud	safe
https://www.google.com/intl/bg/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/intl/vi/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&s=promo&rt=hpbas.5472&zx=1725221714922&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/gen_204?atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&s=webhp&t=all&imn=11&ima=1&imad=0&imac=1&wh=907&aftie=NF&aft=1&aftp=907&adh=&ime=1&imeae=0&imeap=0&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&cb=203144&ucb=203144&mem=ujhs.9,tjhs.13,jhsl.2173,dm.8&nv=ne.1,feid.087fea08-3eb8-452b-a2ca-7d1a563cd8d9&net=dl.10000,ect.4g,rtt.300&hp=&sys=hc.4&p=bs.true&rt=hst.376,cbt.378,prt.1366,afti.2045,aft.2045,aftqf.2046,xjses.2265,xjsee.3015,xjs.3016,lcp.2073,fcp.1375,wsrt.3677,cst.0,dnst.0,rqst.594,rspt.334,rqstt.3417,unt.3407,cstt.3407,dit.5049&zx=1725221712471&opi=89978449	0%	Avira URL Cloud	safe
https://www.google.com/log?format=json&hasfast=true	0%	Avira URL Cloud	safe
https://www.google.com/intl/id/search/howsearchworks/	0%	Avira URL Cloud	safe
https://www.google.com/search/howsearchworks/assets/RpI-OtYr.min.js	0%	Avira URL Cloud	safe
https://www.google.com/search/howsearchworks/assets/0-7k4-1q.min.js	0%	Avira URL Cloud	safe
http://youtube.com/streaming/metadata/segment/102015	0%	Avira URL Cloud	safe
https://www.google.com/intl/hu/search/howsearchworks/	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Antivirus Detection	Reputation
google.com	142.250.181.238	true	false	1%, Virustotal, Browse	unknown
csp.withgoogle.com	216.58.206.81	true	false	0%, Virustotal, Browse	unknown
plus.l.google.com	172.217.18.110	true	false	0%, Virustotal, Browse	unknown
i.ytimg.com	216.58.212.182	true	false	0%, Virustotal, Browse	unknown
mail.google.com	172.217.16.197	true	false	0%, Virustotal, Browse	unknown
googletagmanager.com	216.58.206.40	true	false	0%, Virustotal, Browse	unknown
static.doubleclick.net	216.58.206.38	true	false	0%, Virustotal, Browse	unknown
buydotclearlynet.com	64.94.84.61	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
youtube-ui.l.google.com	216.58.212.142	true	false	0%, Virustotal, Browse	unknown
www3.l.google.com	172.217.18.14	true	false	0%, Virustotal, Browse	unknown
play.google.com	142.250.185.78	true	false	0%, Virustotal, Browse	unknown
googleads.g.doubleclick.net	142.250.185.162	true	false	0%, Virustotal, Browse	unknown
dns-tunnel-check.googlezip.net	216.239.34.159	true	false	1%, Virustotal, Browse	unknown
tunnel.googlezip.net	216.239.34.157	true	false	1%, Virustotal, Browse	unknown
sustainability.google	216.239.38.21	true	false	0%, Virustotal, Browse	unknown
id.google.com	142.250.186.99	true	false	0%, Virustotal, Browse	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	142.250.185.179	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.185.100	true	false	0%, Virustotal, Browse	unknown
blog.google	216.239.34.21	true	false	0%, Virustotal, Browse	unknown
googlehosted.l.googleusercontent.com	216.58.206.33	true	false	0%, Virustotal, Browse	unknown
www.blog.google	unknown	unknown	false	0%, Virustotal, Browse	unknown
ogs.google.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
lh3.googleusercontent.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.youtube.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
apis.google.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.h-1D-JOvizc.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AABA/rs=AHpOoo_3dbjO7NaEjkPT0PwzLRJUFrcOJQ/cb=gapi.loaded_0	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&vet=12ahUKEwjGuJTix6KIAxXrgv0HHfsdI9QQ4dMLegQICBAA.aMvUZsD0ILaei-gPmISB-A8.s&bl=aPYC&s=web&zx=1725221735874&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=TsvUZoKqHpjyi-gPh6SBOA&ct=slh&v=t1&m=HV&pv=0.9262333908073086&me=1:1725221710816,V,0,0,1280,907:0,B,907:0,N,1,TsvUZoKqHpjyi-gPh6SBOA:0,R,1,1,0,0,1280,907:0,R,1,4,390,334,500,16:4116,x:857,e,B&zx=1725221715789&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/hIvGK13F.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=aMvUZsD0ILaei-gPmISB-A8&s=async&astyp=asyncContextualTask&ima=0&imn=0&mem=ujhs.16,tjhs.22,jhsl.2173,dm.8&nv=ne.1,feid.a525abec-689b-404d-be6d-11fa47357a7a&hp=&rt=ttfb.1289,st.1290,bs.0,aaft.1449,acrt.1449,art.1449&zx=1725221735873&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.eJLXiQqXlJU.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAACAEKAAAABQAAAAAAAAAAAAAAAAQIAQBEAQAAAgA4AAAEAQAEABAQAAAIEATgUSYAgAAwAQAAAAAQAAACQAAACAAAAAMAACAAAAAAAKAAAAAAAAAAAAAAAAAAwAACCAAAAAAAAAAAAAABAAAAQAcAAAAAAAEAAAEBADBABhAAAAgAAABAHwAED4BBCgsAAAAAAAAAAAAAAAQgQTAXElAQgAAAAAAAAAAAAAAAAABISRMXNg/d=0/dg=0/br=1/rs=ACT90oHid0j0ga0yFcae2fYObZ-YQ7gzFw/m=syuy,syux,VsqSCc,sy1g0,P10Owf,sy1es,sy1eq,syr9,gSZvdb,syzw,syzv,WlNQGd,syre,syrb,syra,syr8,DPreE,sy108,sy106,nabPbb,syzq,syzo,syju,sykz,CnSW2d,kQvlef,sy107,fXO0xe?xjs=s4	false	Avira URL Cloud: safe	unknown
https://google.com/search/howsearchworks/?fg=1	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/bAPu5B1A.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.s.Z-Ki4esHVu0.L.B1.O/am=AOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAgAIAKJMAYQEA2ACAAADwAXAIQAAAAAAAABQAAEAAIIDFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEEAAIQAQQAICQACiEAAAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAICIAQAgAECgFAAACAIAAAgMAwEAAB2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA/d=1/ed=1/br=1/rs=ACT90oGy8o0hHa1rI13L8_gFm_r7z0Rc7w/m=X3N0Bf,attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false	Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/J8wBfiw3.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.s.Z-Ki4esHVu0.L.B1.O/am=AAIAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAQAAAIAAAAAAAAgAIALJMAAAEA2ACAAAAAACAAQAAAAAAAABQAAEAAIIAFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEIAAIQAQQAICQACiEAAAAGEAAAAIAAMMAxAqABgAIAAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAIAIAQAgAEAABAAACAIAAAAEAQEAAA2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA/d=0/br=1/rs=ACT90oEAxHS7V_y05pLTxhv3d1bzrhohwQ/m=sykz,sy18p?xjs=s4	false	Avira URL Cloud: safe	unknown
https://sustainability.google/static/index.min.js?cache=47ade0f	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	Avira URL Cloud: safe	unknown
https://www.google.com/imghp?hl=en&ogbl	false		unknown
https://www.google.com/gmail/about/static-2.0/css/partials/app-downloads.css?fingerprint=9a6fb1bb67e1c16f7ce7c44e82c95da2	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/BhmWRCy0.min.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvPvw0z9l_L7kOtfVZH07iQuasGIGWyFqhpdY=s0-rw-e365	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&vet=12ahUKEwjGuJTix6KIAxXrgv0HHfsdI9QQL3oECAkQBA..s&bl=aPYC&s=web&zx=1725221736109&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&ct=slh&v=t1&im=M&aqid=YMvUZofUEryrjuwP6PyHiA4&pv=0.5580661669122233&me=72:1725221748958,V,0,0,0,0:4,h,1,CD4QAQ,o:0,h,1,CEAQAA,o:1,h,1,CCQQAw,o:0,h,1,CCAQAQ,o:0,h,1,CBwQAA,o:0,h,1,CAkQCQ,o:34,V,0,0,1280,907:11,h,1,CD4QAQ,i:0,h,1,CEAQAA,i:0,h,1,CCQQAw,i:0,h,1,CCAQAQ,i:0,h,1,CBwQAA,i:0,h,1,CAkQCQ,i:25,V,0,0,0,0:36,h,1,CD4QAQ,o:0,h,1,CEAQAA,o:0,h,1,CCQQAw,o:0,h,1,CCAQAQ,o:0,h,1,CBwQAA,o:0,h,1,CAkQCQ,o:10570,V,0,0,1280,907:33,h,1,CD4QAQ,i:0,h,1,CEAQAA,i:0,h,1,CCQQAw,i:0,h,1,CCAQAQ,i:0,h,1,CBwQAA,i:0,h,1,CAkQCQ,i:1,e,B&zx=1725221759673&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/k=xjs.s.en_US.35rwuv5VE-Y.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAEAoEAgAAAAUAAAAAAAAAAAAAAAAAIAgAQBQCAIAAAMABgCIQAIAAAAgIAAAQIBDA7z8BAAAAAAAAAAwAAsAEAAAAAAAXAAACQAAAAAEAAGAAAAAIAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAwgAPoBAAAAAAAAAAAAIAAAAAAAGCjCDwAAACAAAAAEBAAAB2QAAQAAAgAAALgPAJ4HDAcpLAAAAAAAAAAAAAAAQAASBHMg_QUBCAAAAAAAAAAAAAAAAABAStDE5Q0AkA/d=0/dg=0/br=1/rs=ACT90oFMweNSpOIVn864L6dBQZLcteg8Ng/m=kMFpHd,sy94,bm51tf?xjs=s4	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/57c75fa4/player_ias.vflset/en_US/base.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/pagead/1p-conversion/16521530460/?gad_source=1&adview_type=4&adview_query_id=CIeEmeLHoogDFbyVgwcdaP4B4Q	false	Avira URL Cloud: safe	unknown
https://www.google.com/async/vpkg?vet=10ahUKEwjGuJTix6KIAxXrgv0HHfsdI9QQj5gNCBw..i&ei=YMvUZsaIDuuF9u8P-7uMoQ0&opi=89978449&hl=en&sca_esv=3a7d1c546fe2a382&sca_upv=1&yv=3&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.35rwuv5VE-Y.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAEAoEAgAAAAUAAAAAAAAAAAAAAAAAIAgAQBQCAIAAAMABgCIQAIAAAAgIAAAQIBDA7z8BAAAAAAAAAAwAAsAEAAAAAAAXAAACQAAAAAEAAGAAAAAIAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAwgAPoBAAAAAAAAAAAAIAAAAAAAGCjCDwAAACAAAAAEBAAAB2QAAQAAAgAAALgPAJ4HDAcpLAAAAAAAAAAAAAAAQAASBHMg_QUBCAAAAAAAAAAAAAAAAABAStDE5Q0AkA%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFMweNSpOIVn864L6dBQZLcteg8Ng,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.Z-Ki4esHVu0.L.B1.O%2Fam%3DAOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAgAIAKJMAYQEA2ACAAADwAXAIQAAAAAAAABQAAEAAIIDFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEEAAIQAQQAICQACiEAAAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAICIAQAgAECgFAAACAIAAAgMAwEAAB2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA%2Fbr%3D1%2Frs%3DACT90oGy8o0hHa1rI13L8_gFm_r7z0Rc7w,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.s.en_US.35rwuv5VE-Y.O%2Fck%3Dxjs.s.Z-Ki4esHVu0.L.B1.O%2Fam%3DAOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAkAoEKpMAYQUA2ACAAADwAXAIQAAAIAgAQBQCAMAAIMDFgCIQAIACAIgIEAIQNBDA7z8BAAAAgAMAAAwQAsIEEEAAIQAXQAICQACiEAEAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAAygBvsBBAgA0CMQAAaAICIAQAgAGCjHDwACAKAAAgMExEAAB2QAAQAAAgAAALgPAJ4HDAcpLAAAAAAAAAAAAAAAQAASBHMg_QUBCAAAAAAAAAAAAAAAAABAStDE5Q0AkA%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHSlW01r9dq5rNWY5SWTn8heh0KCQ,_fmt:prog,_id:QPwIld	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/57c75fa4/www-widgetapi.vflset/www-widgetapi.js	false	Avira URL Cloud: safe	unknown
https://sustainability.google/static/index.min.css?cache=732a3af	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ei=kMvUZte9DvuBi-gPo5qB6Ao&dt19=2&prm23=0&zx=1725221779552&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/NticlS_l.min.js	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Cle-1GLl4P8zbJafbrnN8-7CgfVSduAR1j2DACNepAm5JL37GANl8tIM1h72Cyga71wO2lGcNPONnQl5MKFi_1TGSBQM8mV9qaKdQw=rw-e365-w2880	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/ss/k=xjs.s.Z-Ki4esHVu0.L.B1.O/am=AOIgIAQAAARABBpAAAAAAAAAAAAAAAAAAAASAAAIAAAAAEAAgAIAKJMAYQEA2ACAAADwAXAIQAAAAAAAABQAAEAAIIDFAAAAAAACAIAIEAIAFBAAAAAAAAAAgAMAAAAQAgIAEEAAIQAQQAICQACiEAAAAGEAAEAIAAMMAxAqABjAKQAAAAAAAAABRAAAAACgBgEABAgA0CMQAAaAICIAQAgAECgFAAACAIAAAgMAwEAAB2QAAQAAAAAAAIAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUAAAAAAAAAAAAAAAAAAAAACA/d=0/br=1/rs=ACT90oGy8o0hHa1rI13L8_gFm_r7z0Rc7w/m=cxU6rb,hHUugd,dOwROe,alTYCe,DcYenb,rnvJOe,fZp0ed,QU4Fq,qiMqId,WphjT,GnLh6e,sy8jb,sy1pv,SdcwHb,mzzZzc,sy754,sy27e,sy26l,sy26k,sy1p3,sy1n9,sy27d,sy271,sy27f,sy1p5,sy1ou,sy1ov,sy1ow,sy1ox,sy1oy,sy27c,sy27b,sy270,sy26z,sy1os,sy272,sy1pe,PlWST,umEChe,sy7up,sy2ix,sy2iy,sy7uq,sy7vg,sy7vh,sy7v4,sy7h8,sy2x2,sy268,sy1no,sy2x3,sy2k6,sy2k7,sy2k9,sy2e2,sy2ka,sy2k8,sy2e3,sy2kb,sy7vf,sy25r,sy25p,sy1mh,sy27u,sy25x,sy25v,sy1mi,sy25m,sy2ki,sy7ve,sy7v5,sy7v3,sy7v1,sy7vd,sy7v9,sy1nj,sy1nk,sy7vb,sy7va,sy7v8,sy2kd,sy2kh,sy2kg,sy2ke,sy2e6,sy2kf,sy7v7,sy2g1,sy7uz,sy7vc?xjs=s4	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=aMvUZtjVJdeli-gP1LW6iAk&s=async&astyp=vpkg&ima=0&imn=0&mem=ujhs.16,tjhs.22,jhsl.2173,dm.8&nv=ne.1,feid.a525abec-689b-404d-be6d-11fa47357a7a&hp=&rt=ttfb.1289,st.1464,bs.103092,aaft.1467,acrt.1467,art.1467&zx=1725221735898&opi=89978449	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmpEQDirGidE1rvGwp9BnCPpv0QfzLqnZ-noZLw=s0-rw-e365	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&s=promo&rt=hpbas.5472&zx=1725221714922&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&s=webhp&t=all&imn=11&ima=1&imad=0&imac=1&wh=907&aftie=NF&aft=1&aftp=907&adh=&ime=1&imeae=0&imeap=0&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&cb=203144&ucb=203144&mem=ujhs.9,tjhs.13,jhsl.2173,dm.8&nv=ne.1,feid.087fea08-3eb8-452b-a2ca-7d1a563cd8d9&net=dl.10000,ect.4g,rtt.300&hp=&sys=hc.4&p=bs.true&rt=hst.376,cbt.378,prt.1366,afti.2045,aft.2045,aftqf.2046,xjses.2265,xjsee.3015,xjs.3016,lcp.2073,fcp.1375,wsrt.3677,cst.0,dnst.0,rqst.594,rspt.334,rqstt.3417,unt.3407,cstt.3407,dit.5049&zx=1725221712471&opi=89978449	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/en-US/gmail/about/	false		unknown
https://www.google.com/search/howsearchworks/assets/RpI-OtYr.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/0-7k4-1q.min.js	false	Avira URL Cloud: safe	unknown
https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content=	false		unknown
https://www.google.com/search/howsearchworks/assets/lHimDk5Y.min.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/search/howsearchworks/assets/IFunn9hk.min.js	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_733.2.dr, chromecache_387.2.dr, chromecache_649.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_729.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/6Q907Y7fYBiaW6VAnv1r8BHZnFXjJm138u89gr8j8NSikSES5OrnMMP0bDiTWR7YyY	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/hi/search/howsearchworks/	chromecache_496.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.com/intl/en/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_474.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/zh-TW/search/howsearchworks/	chromecache_496.2.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://blog.google/outreach-initiatives/sustainability/helping-monarch-butterflies-2024/	chromecache_556.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com	chromecache_632.2.dr, chromecache_629.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/0fVDL02i6kLapIFkzsaMkokcsyNFdTDEaCm2Dy_BVkH_zQKnEmF7x0A0aLzXII5cvU	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.youtube.com	chromecache_729.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/en-IN/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/VzZoNfTFy0Q5bMd9mVfo4M7dp1-OXWmUWsSAttnwnbw6agWisqAeJeJUCzxiZq1UhJ	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/HX2vTdXOdmn1-AwipdtTylH6l-1DaI2BOwHwV7cKGy9WXDe7_BTaXdSQ7Yyrr3khwv	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://ogs.google.com/widget/callout?eom=1	chromecache_710.2.dr	false	Avira URL Cloud: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_729.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_474.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/iRxTGREAOizQhtbCjDGShDHvBc39qEI004M8SClsSzIBgvBsbUMFNVMDfAfzoEzgvr	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/no/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/MfSkcsOaJkmnP-qxR6nZ3jiaIbyEqxGs7zCkorzmvi-Y9oVUkr0UThdrhaqhC2CT1h	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvP	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/hr/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://yurt.corp.google.com	chromecache_729.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_358.2.dr, chromecache_485.2.dr, chromecache_499.2.dr, chromecache_481.2.dr, chromecache_539.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_729.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/VT4SCA4b12NEXu4W5qmH5nMdrHvYyXiasJ8kqJWUd7rtLUdO78YTV5v0ulPoXyXn8X	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/es/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/el/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://about.google/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/es-419/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/products/search/generative-ai-google-search-may-2024/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/uEalHdGqJHrnhoH1O5rYmk5kO2c-xB5HxCobW5KSipKv22HsrmhZNjVvQmBdWcV06W	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/shoelace-style/shoelace/blob/next/src/internal/slot.ts	chromecache_476.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/fs2pYfDpV_ktdKUy3Tsfx44gSMoe50XLFzRMG0gxlF8aDmM1dKGDELLBDBibRd41nY	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/outreach-initiatives/sustainability/google-pixel-nest-fitbit-plastic-free-packag	chromecache_556.2.dr	false	Avira URL Cloud: safe	unknown
https://plus.google.com	chromecache_323.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	chromecache_556.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/pt/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc1950	chromecache_508.2.dr, chromecache_729.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/en-GB/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmp	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/da/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/tr/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://blog.google/products/search/overview-our-rater-guidelines-search/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/-l2uCHxepneGNmf6MyjbK_YHkf7i3lgbrUWvNJL8CQInmOWrMChhC9vcKs27pJqtER	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/bg/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/intl/vi/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_463.2.dr, chromecache_681.2.dr, chromecache_292.2.dr	false	Avira URL Cloud: safe	unknown
https://lens.google.com	chromecache_463.2.dr, chromecache_681.2.dr, chromecache_292.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_729.2.dr, chromecache_440.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/id/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_334.2.dr, chromecache_632.2.dr	false	URL Reputation: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_729.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://lens.google.com/gen204	chromecache_383.2.dr, chromecache_358.2.dr, chromecache_485.2.dr, chromecache_434.2.dr, chromecache_539.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/hu/search/howsearchworks/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_729.2.dr, chromecache_440.2.dr	false	Avira URL Cloud: safe	unknown
https://sustainability.google/	chromecache_496.2.dr	false	Avira URL Cloud: safe	unknown

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 1, 2024 22:15:07.042669058 CEST	192.168.2.4	1.1.1.1	0xb458	Standard query (0)	buydotclearlynet.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:07.042814016 CEST	192.168.2.4	1.1.1.1	0x9c25	Standard query (0)	buydotclearlynet.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:07.832047939 CEST	192.168.2.4	1.1.1.1	0x75ef	Standard query (0)	buydotclearlynet.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:07.832319975 CEST	192.168.2.4	1.1.1.1	0x80d5	Standard query (0)	buydotclearlynet.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:09.467700005 CEST	192.168.2.4	1.1.1.1	0xecc	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:09.467860937 CEST	192.168.2.4	1.1.1.1	0x5009	Standard query (0)	google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:09.471149921 CEST	192.168.2.4	1.1.1.1	0x9c73	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:09.471596003 CEST	192.168.2.4	1.1.1.1	0x731b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:12.759855986 CEST	192.168.2.4	1.1.1.1	0x33cc	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:12.760584116 CEST	192.168.2.4	1.1.1.1	0x8c42	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:13.871402025 CEST	192.168.2.4	1.1.1.1	0xfa0b	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:13.871804953 CEST	192.168.2.4	1.1.1.1	0x9cfb	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:14.849669933 CEST	192.168.2.4	1.1.1.1	0xc44a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:14.849965096 CEST	192.168.2.4	1.1.1.1	0x860e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:15.440175056 CEST	192.168.2.4	1.1.1.1	0xaf6f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:15.440431118 CEST	192.168.2.4	1.1.1.1	0x4e09	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:16.163994074 CEST	192.168.2.4	1.1.1.1	0xa67e	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:16.164139986 CEST	192.168.2.4	1.1.1.1	0x9ff1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:16.623626947 CEST	192.168.2.4	1.1.1.1	0x71ba	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:16.624078989 CEST	192.168.2.4	1.1.1.1	0xf5f0	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:29.081001997 CEST	192.168.2.4	1.1.1.1	0x45f	Standard query (0)	id.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:29.081162930 CEST	192.168.2.4	1.1.1.1	0xf5be	Standard query (0)	id.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:29.597430944 CEST	192.168.2.4	1.1.1.1	0x2d7	Standard query (0)	dns-tunnel-check.googlezip.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:29.599155903 CEST	192.168.2.4	1.1.1.1	0xe3a3	Standard query (0)	tunnel.googlezip.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:30.178656101 CEST	192.168.2.4	1.1.1.1	0x18fd	Standard query (0)	tunnel.googlezip.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:31.446695089 CEST	192.168.2.4	1.1.1.1	0x7670	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:31.446845055 CEST	192.168.2.4	1.1.1.1	0xd7e5	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:33.410846949 CEST	192.168.2.4	1.1.1.1	0x1cd8	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:33.411071062 CEST	192.168.2.4	1.1.1.1	0x6e19	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:37.947139025 CEST	192.168.2.4	1.1.1.1	0xad72	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:37.947544098 CEST	192.168.2.4	1.1.1.1	0x2a8	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:38.374655962 CEST	192.168.2.4	1.1.1.1	0xad2f	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:38.380213022 CEST	192.168.2.4	1.1.1.1	0x62cf	Standard query (0)	sustainability.google	65	IN (0x0001)	false
Sep 1, 2024 22:15:42.121654987 CEST	192.168.2.4	1.1.1.1	0x9030	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:42.121970892 CEST	192.168.2.4	1.1.1.1	0x48d	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:43.251419067 CEST	192.168.2.4	1.1.1.1	0xf262	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:43.252773046 CEST	192.168.2.4	1.1.1.1	0x4159	Standard query (0)	sustainability.google	65	IN (0x0001)	false
Sep 1, 2024 22:15:44.642913103 CEST	192.168.2.4	1.1.1.1	0x7a2c	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:44.643150091 CEST	192.168.2.4	1.1.1.1	0x9419	Standard query (0)	www.blog.google	65	IN (0x0001)	false
Sep 1, 2024 22:15:45.710797071 CEST	192.168.2.4	1.1.1.1	0x6d1f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:45.711075068 CEST	192.168.2.4	1.1.1.1	0x1525	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:45.724668026 CEST	192.168.2.4	1.1.1.1	0x1d0a	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:45.725100040 CEST	192.168.2.4	1.1.1.1	0x37aa	Standard query (0)	blog.google	65	IN (0x0001)	false
Sep 1, 2024 22:15:48.071671963 CEST	192.168.2.4	1.1.1.1	0xe326	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:48.071997881 CEST	192.168.2.4	1.1.1.1	0xf0e2	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:50.193942070 CEST	192.168.2.4	1.1.1.1	0x8dc4	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:50.194190979 CEST	192.168.2.4	1.1.1.1	0xce6b	Standard query (0)	blog.google	65	IN (0x0001)	false
Sep 1, 2024 22:15:54.635195971 CEST	192.168.2.4	1.1.1.1	0xd2a0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:54.635451078 CEST	192.168.2.4	1.1.1.1	0x90c7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 1, 2024 22:15:54.653534889 CEST	192.168.2.4	1.1.1.1	0xecd9	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:54.653928995 CEST	192.168.2.4	1.1.1.1	0x51fc	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 1, 2024 22:15:55.256934881 CEST	192.168.2.4	1.1.1.1	0xdcb1	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:55.257338047 CEST	192.168.2.4	1.1.1.1	0x304d	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:56.514636040 CEST	192.168.2.4	1.1.1.1	0x34ce	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:56.514799118 CEST	192.168.2.4	1.1.1.1	0x633b	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 1, 2024 22:15:56.646239996 CEST	192.168.2.4	1.1.1.1	0x761d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:56.646833897 CEST	192.168.2.4	1.1.1.1	0x3718	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 1, 2024 22:15:57.702050924 CEST	192.168.2.4	1.1.1.1	0x8646	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:57.702050924 CEST	192.168.2.4	1.1.1.1	0x4b9c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:15:58.342468977 CEST	192.168.2.4	1.1.1.1	0xfa1a	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:15:58.342688084 CEST	192.168.2.4	1.1.1.1	0x3ae4	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 1, 2024 22:16:00.952908993 CEST	192.168.2.4	1.1.1.1	0x326b	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:16:00.953102112 CEST	192.168.2.4	1.1.1.1	0x81c5	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 1, 2024 22:16:01.467361927 CEST	192.168.2.4	1.1.1.1	0x4389	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:16:01.467582941 CEST	192.168.2.4	1.1.1.1	0x2e91	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Sep 1, 2024 22:16:07.089294910 CEST	192.168.2.4	1.1.1.1	0x15f7	Standard query (0)	googletagmanager.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:16:07.089415073 CEST	192.168.2.4	1.1.1.1	0x428	Standard query (0)	googletagmanager.com	65	IN (0x0001)	false
Sep 1, 2024 22:16:19.266531944 CEST	192.168.2.4	1.1.1.1	0x4826	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:16:19.266822100 CEST	192.168.2.4	1.1.1.1	0x6ce7	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 1, 2024 22:16:22.594310999 CEST	192.168.2.4	1.1.1.1	0x5d83	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 1, 2024 22:16:22.595200062 CEST	192.168.2.4	1.1.1.1	0xc8a9	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Sep 1, 2024 22:15:07.327028990 CEST	435	OUT	GET / HTTP/1.1 Host: buydotclearlynet.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 1, 2024 22:15:07.825067997 CEST	589	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 01 Sep 2024 20:15:07 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://buydotclearlynet.com/ Content-Length: 323 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: text/html; charset=iso-8859-1 Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 62 75 79 64 6f 74 63 6c 65 61 72 6c 79 6e 65 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 62 75 79 64 6f 74 63 6c 65 61 72 6c 79 6e 65 74 2e 63 6f 6d 20 50 6f 72 74 20 38 30 3c 2f 61 64 64 72 65 73 73 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://buydotclearlynet.com/">here</a>.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at buydotclearlynet.com Port 80</address></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:08 UTC	663	OUT	GET / HTTP/1.1 Host: buydotclearlynet.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-01 20:15:09 UTC	341	IN	HTTP/1.1 302 Found Date: Sun, 01 Sep 2024 20:15:08 GMT Server: Apache/2.4.52 (Ubuntu) Set-Cookie: PHPSESSID=qrv2nrs58jn79njlj1nl14nn58; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store Pragma: no-cache Location: https://google.com/ Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:10 UTC	653	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-01 20:15:10 UTC	854	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-EPfmf6FArWipe_DKRSKiVQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 01 Sep 2024 20:15:10 GMT Expires: Tue, 01 Oct 2024 20:15:10 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:10 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:10 UTC	657	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-01 20:15:10 UTC	1718	IN	HTTP/1.1 200 OK Date: Sun, 01 Sep 2024 20:15:10 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-WKBuQZN8hqz2wuCoA861Fw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; expires=Fri, 28-Feb-2025 20:15:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw; expires=Mon, 03-Mar-2025 20:15:10 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-01 20:15:10 UTC	1718	IN	Data Raw: 32 61 39 34 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 2a94<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-09-01 20:15:10 UTC	1718	IN	Data Raw: 6e 28 61 2c 62 2c 63 2c 64 2c 6b 2c 65 29 7b 65 3d 65 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 65 3b 63 7c 7c 28 63 3d 74 28 61 2c 62 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 Data Ascii: n(a,b,c,d,k,e){e=e===void 0?l:e;c\|\|(c=t(a,b,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google
2024-09-01 20:15:10 UTC	1718	IN	Data Raw: 76 61 72 20 70 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 7c 7c 7b 7d 3b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 74 3d 72 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 Data Ascii: var p=this\|\|self;window.google=window.google\|\|{};var r=window.performance&&window.performance.timing&&"navigationStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,t=r?aa\|\|window.performance.timing.navigationStart:void 0;function u(){retu
2024-09-01 20:15:10 UTC	1718	IN	Data Raw: 42 28 61 2c 62 2c 63 2c 64 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 2c 62 2c 63 2c 64 29 7b 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 69 6e 20 61 3f 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b Data Ascii: B(a,b,c,d){a.addEventListener?a.addEventListener(b,c,d\|\|!1):a.attachEvent&&a.attachEvent("on"+b,c)}function C(a,b,c,d){"addEventListener"in a?a.removeEventListener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var pa=function(a,b,c){this.g=a;this.v=[
2024-09-01 20:15:10 UTC	1718	IN	Data Raw: 61 2d 63 73 69 69 64 22 29 3b 65 7c 7c 28 65 3d 53 74 72 69 6e 67 28 2b 2b 71 61 29 2c 6f 61 26 26 28 65 3d 67 6f 6f 67 6c 65 2e 6b 45 49 2b 22 5f 22 2b 65 29 29 3b 48 5b 65 5d 7c 7c 28 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 73 69 69 64 22 2c 65 29 2c 48 5b 65 5d 3d 62 3f 62 28 61 29 3a 6e 65 77 20 70 61 28 61 2c 63 2c 64 29 29 3b 72 65 74 75 72 6e 20 48 5b 65 5d 7d 66 75 6e 63 74 69 6f 6e 20 4a 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 49 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 Data Ascii: a-csiid");e\|\|(e=String(++qa),oa&&(e=google.kEI+"_"+e));H[e]\|\|(a.setAttribute("data-csiid",e),H[e]=b?b(a):new pa(a,c,d));return H[e]}function J(a){for(var b=document.getElementsByTagName("img"),c=0,d=b.length;c<d;++c)a(I(b[c]))};function ra(a){if(a&&(a=a.t
2024-09-01 20:15:10 UTC	1718	IN	Data Raw: 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 61 3b 76 61 72 20 62 3b 74 26 26 28 62 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 61 29 29 3b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 66 68 74 22 2c 62 29 3b 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 51 28 61 29 7b 50 28 61 2e 74 69 6d 65 53 74 61 6d 70 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 49 6e 66 69 6e 69 74 79 3b 42 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 3b 50 28 30 29 Data Ascii: f(document.visibilityState==="hidden"){google.c.fh=a;var b;t&&(b=Math.floor(t+a));google.tick("load","fht",b);return!0}return!1}function Q(a){P(a.timeStamp)&&C(document,"visibilitychange",Q,!0)}google.c.fh=Infinity;B(document,"visibilitychange",Q,!0);P(0)
2024-09-01 20:15:10 UTC	600	IN	Data Raw: 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 30 3f 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 3a 6e 75 6c 6c 3b 62 21 3d 6e 75 6c 6c 26 26 61 2e 70 75 73 68 28 5b 22 6f 70 69 22 2c 62 2e 74 6f 53 74 72 69 6e 67 28 29 5d 29 3b 66 6f 72 28 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 7b 69 66 28 62 3d 3d 3d 30 7c 7c 62 3e 30 29 67 2b 3d 22 26 22 3b 67 2b 3d 61 5b 62 5d 5b 30 5d 2b 22 3d 22 2b 61 5b 62 5d 5b 31 5d 7d 61 3d 66 2b 67 3b 28 66 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 29 26 26 28 61 2b 3d 22 26 73 73 72 3d 31 22 29 3b 69 66 28 66 3f 66 2e 69 73 42 46 3a 53 28 29 3d 3d 3d 32 29 61 2b 3d 22 26 62 62 3d 31 22 3b 53 28 29 3d 3d 3d 31 26 26 28 61 2b 3d 22 26 72 3d 31 22 29 3b 22 67 73 61 73 72 74 Data Ascii: d 0&&window.google.kOPI!==0?window.google.kOPI:null;b!=null&&a.push(["opi",b.toString()]);for(b=0;b<a.length;b++){if(b===0\|\|b>0)g+="&";g+=a[b][0]+"="+a[b][1]}a=f+g;(f=google.stvsc)&&(a+="&ssr=1");if(f?f.isBF:S()===2)a+="&bb=1";S()===1&&(a+="&r=1");"gsasrt
2024-09-01 20:15:10 UTC	207	IN	Data Raw: 63 39 0d 0a 7c 7c 63 28 66 2c 6e 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6c 2c 71 29 7b 6c 3d 4d 61 74 68 2e 6d 61 78 28 66 2c 6c 29 3b 66 21 3d 3d 6c 26 26 28 6e 3d 66 2c 67 3d 71 29 3b 66 3d 6c 3b 2b 2b 6d 3b 64 28 29 7d 76 61 72 20 68 3d 21 30 2c 6b 3d 30 2c 6d 3d 30 2c 6e 3d 30 2c 66 3d 30 2c 67 3b 4a 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 61 28 6c 29 26 26 28 2b 2b 6b 2c 6c 2e 69 7c 7c 6c 2e 41 3f 65 28 6c 2e 69 7c 7c 30 2c 6c 2e 67 29 3a 6c 2e 76 2e 70 75 73 68 28 65 29 29 7d 29 3b 62 28 29 3b 68 3d 21 31 3b 64 28 29 7d 3b 76 61 72 20 57 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3b 0d 0a Data Ascii: c9\|\|c(f,n,g)}function e(l,q){l=Math.max(f,l);f!==l&&(n=f,g=q);f=l;++m;d()}var h=!0,k=0,m=0,n=0,f=0,g;J(function(l){a(l)&&(++k,l.i\|\|l.A?e(l.i\|\|0,l.g):l.v.push(e))});b();h=!1;d()};var W=window.performance;
2024-09-01 20:15:10 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 63 2e 63 34 74 26 26 57 26 26 57 2e 6d 61 72 6b 26 26 57 2e 74 69 6d 69 6e 67 29 7b 76 61 72 20 61 3d 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2c 62 3d 61 2e 77 73 72 74 3b 61 3d 61 2e 74 2e 61 66 74 3b 62 26 26 62 3e 30 26 26 61 26 26 61 3e 30 26 26 28 61 2d 3d 57 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 61 3e 30 26 26 28 57 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 41 46 54 53 74 61 72 74 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 62 7d 29 2c 57 2e 6d 61 72 6b 28 22 74 72 69 67 67 65 72 3a 53 65 61 72 63 68 41 46 54 45 6e 64 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 61 7d 29 29 29 7d 7d 3b 76 61 72 20 7a 61 3d 21 31 2c 58 3d 30 2c Data Ascii: 8000function ya(){if(google.c.c4t&&W&&W.mark&&W.timing){var a=google.timers.load,b=a.wsrt;a=a.t.aft;b&&b>0&&a&&a>0&&(a-=W.timing.navigationStart,a>0&&(W.mark("SearchAFTStart",{startTime:b}),W.mark("trigger:SearchAFTEnd",{startTime:a})))}};var za=!1,X=0,
2024-09-01 20:15:10 UTC	1390	IN	Data Raw: 45 61 3b 69 66 28 46 61 3e 30 29 7b 5a 3d 73 65 74 54 69 6d 65 6f 75 74 28 56 2c 46 61 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 74 2b 45 61 29 29 3b 62 72 65 61 6b 20 61 7d 56 28 29 7d 5a 3d 76 6f 69 64 20 30 7d 67 6f 6f 67 6c 65 2e 63 2e 6d 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 78 7c 7c 4a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 3b 7a 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 61 66 74 22 29 2c 7a 61 3d 21 30 29 3b 59 7c 7c 41 61 28 61 2c 62 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 6d 69 6d 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 76 61 72 20 65 3d 46 28 64 29 3b 64 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 Data Ascii: Ea;if(Fa>0){Z=setTimeout(V,Fa,Math.floor(t+Ea));break a}V()}Z=void 0}google.c.maft=function(a,b){x\|\|J(function(){});za\|\|(google.c.b("aft"),za=!0);Y\|\|Aa(a,b)};google.c.miml=function(a){function b(d){var e=F(d);d.g.setAttribute("data-atf",String(e));return

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:10 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-01 20:15:11 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=160229 Date: Sun, 01 Sep 2024 20:15:11 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://buydotclearlynet.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Windows Analysis Report
http://buydotclearlynet.com

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:11 UTC	1703	OUT	GET /xjs/_/ss/k=xjs.hd.V_kxjztwoQ8.L.B1.O/am=AFEAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAIAAAEAAAAAAAAQAGwkwAAAQBsAEAAAAAABAAIAAAAAABAAQAAAQSwAAAAAAAQAAAREAEACgQAAAAAhIAAAAQgQAgQQAICQBCFAAAAAAMAACEADDAMQKgAYBQgAAAAAICACAAAAABqBCBAAIAegQAwAAQRAABCQAcgAAACAASAAAAMBDBABhAAAAAAAAAAGQAAAAAAAAAAAAAAAAAAAAAAAAAAQAAQAFAAAAAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oEgJ-8bcbUy7mH84ErAFOjeJnxudw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:11 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 4232 Date: Sun, 01 Sep 2024 20:15:11 GMT Expires: Mon, 01 Sep 2025 20:15:11 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 30 Aug 2024 18:34:09 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:11 UTC	581	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 76 5a 65 30 6a 62 3a 23 61 38 63 37 66 61 3b 2d 2d 6e 77 58 6f 62 62 3a 23 36 33 38 65 64 34 3b 2d 2d 56 75 5a 58 42 64 3a 23 30 30 31 64 33 35 3b 2d 2d 75 4c 7a 33 37 63 3a 23 35 34 35 64 37 65 3b 2d 2d 6a 49 4e 75 36 63 3a 23 30 30 31 64 33 35 3b 2d 2d 54 79 56 59 6c 64 3a 23 30 62 35 37 64 30 3b 2d 2d 5a 45 70 50 6d 64 3a 23 63 33 64 39 66 62 3b 2d 2d 51 57 61 61 61 66 3a 23 36 33 38 65 64 34 3b 2d 2d 44 45 65 53 74 66 3a 23 66 35 66 38 66 66 3b 2d 2d 54 53 57 5a 49 62 3a 23 65 35 65 64 66 66 3b 2d 2d 42 52 4c 77 45 3a 23 64 33 65 33 66 64 3b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 Data Ascii: :root{--COEmY:#1f1f1f;--xhUGwc:#fff}:root{--vZe0jb:#a8c7fa;--nwXobb:#638ed4;--VuZXBd:#001d35;--uLz37c:#545d7e;--jINu6c:#001d35;--TyVYld:#0b57d0;--ZEpPmd:#c3d9fb;--QWaaaf:#638ed4;--DEeStf:#f5f8ff;--TSWZIb:#e5edff;--BRLwE:#d3e3fd;--gS5jXb:#dadce0;--Aqn7xd:#
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 56 69 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 51 79 4a 49 33 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 78 68 55 47 77 63 29 3b 63 6f 6c 6f 72 3a 23 36 36 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 31 36 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 7d 2e 6f 51 63 50 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 78 68 55 47 77 63 29 7d 2e 51 79 4a 49 33 64 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 39 31 32 30 7d 2e 6e 46 64 46 48 66 7b 61 6e 69 6d 61 74 69 6f 6e 3a 67 2d 62 75 62 62 6c 65 2d 73 68 6f 77 20 2e 32 73 20 Data Ascii: Vie{text-align:center}.QyJI3d{background-color:var(--xhUGwc);color:#666;box-shadow:0 4px 16px rgba(0,0,0,0.2)}.oQcPt{background-color:var(--xhUGwc)}.QyJI3d{border:1px solid rgba(0,0,0,.2);position:absolute;z-index:9120}.nFdFHf{animation:g-bubble-show .2s
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 46 47 75 66 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 63 35 61 5a 50 62 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 44 63 6c 74 72 65 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 2e 54 59 51 38 41 66 7b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 77 69 64 74 68 3a 31 70 78 3b 7a 2d 69 6e 64 65 78 3a 2d 31 30 30 30 3b 74 6f 70 3a 33 70 78 3b 72 69 67 68 74 3a 33 70 78 7d 2e 77 48 59 6c 54 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 Data Ascii: FGuf{display:none}.c5aZPb{cursor:pointer}.Dcltre{pointer-events:none}.TYQ8Af{clip:rect(1px,1px,1px,1px);height:1px;overflow:hidden;position:absolute;white-space:nowrap;width:1px;z-index:-1000;top:3px;right:3px}.wHYlTd{font-family:Roboto,Arial,sans-serif;f
2024-09-01 20:15:11 UTC	735	IN	Data Raw: 6f 72 3a 23 66 66 66 3b 66 6c 65 78 3a 31 20 31 20 61 75 74 6f 3b 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 38 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 36 39 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 35 36 39 70 78 29 7b 2e 4c 48 33 77 47 2c 2e 6a 68 5a 76 6f 64 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 57 75 30 76 39 62 2c 2e 79 4b 36 6a 71 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 35 36 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 62 37 37 48 Data Ascii: or:#fff;flex:1 1 auto;margin:14px 0;word-break:break-word}.sHFNYd{margin-right:-8px}@media (min-width:569px) and (min-height:569px){.LH3wG,.jhZvod{text-align:center}.Wu0v9b,.yK6jqe{display:inline-block;max-width:568px;min-width:288px;text-align:left}.b77H
2024-09-01 20:15:11 UTC	136	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 32 35 30 6d 73 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 69 6e 73 65 74 3a 30 7d 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 75 67 67 65 73 74 69 6f 6e 5f 67 72 6f 75 70 2e 63 73 73 2e 6d 61 70 20 2a 2f 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: ound-color 100ms,visibility 0s 250ms;position:fixed;visibility:hidden;inset:0}/# sourceMappingURL=suggestion_group.css.map /sentinel{}

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:11 UTC	1370	OUT	GET /logos/doodles/2024/paris-games-archery-6753651837110536-law.gif HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:11 UTC	661	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="doodle-eng" Report-To: {"group":"doodle-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/doodle-eng"}]} Content-Length: 161407 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 31 Aug 2024 12:19:30 GMT Expires: Sun, 31 Aug 2025 12:19:30 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 09 Aug 2024 16:37:40 GMT Content-Type: image/gif Age: 114941 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:11 UTC	729	IN	Data Raw: 47 49 46 38 39 61 f4 01 c8 00 f7 00 00 ff ff ff ea dc b7 5a 69 9a b2 bb ca b9 c7 d3 ed e9 bb e8 b7 95 08 8c f7 cc aa 7a 52 43 02 ef ec c6 da c7 99 b6 31 4a fb f7 dd cc b8 88 fd fa ec f7 ef c8 cb dc 99 65 54 11 dc ad 87 d7 de e9 dd cc a7 8c 74 18 00 00 00 6a 70 75 eb ec eb 4a 4f 54 07 32 64 99 8f 69 ef c7 ab 2e 2d 2b ee dd c9 d8 bb 95 69 58 27 74 6f 4a 73 67 30 e7 d7 ac c6 a5 21 aa 8e 18 9b c7 79 ea ce 98 ce d7 e7 c6 ce dc 96 b2 85 8d 97 a8 c7 37 50 c7 bc aa f7 d6 b7 cb d6 de eb ef f7 ce de a5 78 8c 69 20 42 75 b8 99 21 eb e7 da eb bc a6 31 55 b5 da b8 8c 86 77 4b 00 7b dd 99 a7 b5 59 49 0d f7 ee d9 86 a8 69 d3 b8 4e dc c5 6b db d9 ca f9 9d ac b6 ce 8c 76 81 8e a7 9b 75 a8 ad ba c6 9c 13 09 4a 92 d8 e7 aa 97 b9 77 00 68 b5 a1 2a 3c de ef b4 d9 da db 51 59 Data Ascii: GIF89aZizRC1JeTtjpuJOT2di.-+iX'toJsg0!y7Pxi Bu!1UwK{YIiNkvuJwh*<QY
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 3d 21 6b e0 44 61 8a ff f7 ff be e3 fc 08 08 08 5f 48 8f 0a 9c ff 09 7b cd bd 3a 53 3d 3d 3d 00 73 d6 c5 ac b7 bd d4 e7 09 7c d7 4b 8b bf 00 5a 9f ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 04 00 ff 00 2c 00 00 00 00 f4 01 c8 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 97 30 63 ca 9c 49 b3 a6 cd 9b 38 73 ea dc c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 93 2a 5d ca b4 a9 d3 a7 50 a3 4a 9d 4a b5 aa a4 ab 0f b2 3e 68 c0 b5 ab 57 ad 5b bd 8a 6d e0 c3 c7 d8 ae 59 cb a2 3d cb 16 6c d6 81 3e 14 04 98 5b b6 6c b7 0a 24 02 54 f0 21 f0 c3 07 81 0f 02 2c 80 50 b7 70 5d 05 15 02 b4 aa 20 49 a0 9e 37 02 25 Data Ascii: =!kDa_H{:S===s\|KZ!NETSCAPE2.0!,H\#JH3j CI(S\0cI8s@JH]PJJ>hW[mY=l>[l$T!,Pp] I7%
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 9e 34 23 a1 36 75 d2 42 ee 92 cc 0b 8d 37 4a 07 08 43 20 e2 40 a5 24 54 09 9f 50 5e ad 4d 3d 9c 4c 2c 85 e8 35 7e 05 e8 7b f9 f2 56 03 70 c3 a9 27 3c e0 46 d0 f8 cd 13 6e c1 a9 19 b8 f4 6f 08 c3 62 33 e3 f7 4c 2e d2 0f 95 d5 64 8a 0d 26 f1 07 36 80 d1 26 0f bc 4f 2b b6 b9 46 26 7d 00 04 ba b4 17 f8 de c4 a7 a7 e6 c5 72 85 51 52 62 c2 24 10 1f b4 b0 5e 88 a9 a7 5a a2 83 1c 03 16 b1 3e d1 ba 28 10 b9 f3 a0 7f 36 47 3e 7d a1 a4 0f 01 00 81 02 80 2f 85 0c 5d 97 9b 3c 19 27 6e 85 b2 6a 7b 2a 10 2a 1f a0 4a e3 75 ab a1 0e 08 a9 bb 00 e0 57 22 76 34 45 45 aa 57 4a ed c4 a3 5d 84 81 0d 71 92 29 4d bb c0 59 56 0c 44 99 07 73 df 4e b5 e8 53 9f ca 20 a6 38 11 05 1b fe 30 09 a0 06 15 21 19 50 c3 30 12 30 8d 04 ff 8c e0 0f 37 79 00 08 7e f3 06 f9 3c 08 2f f3 2a 00 54 Data Ascii: 4#6uB7JC @$TP^M=L,5~{Vp'<Fnob3L.d&6&O+F&}rQRb$^Z>(6G>}/]<'nj{*JuW"v4EEWJ]q)MYVDsNS 80!P007y~</T
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: d2 5f 1d 55 27 da 97 5f 71 e2 85 d0 53 22 e1 37 27 63 78 85 ab 04 3d 79 42 22 76 b5 2e 95 d2 20 c8 f5 1c 8b 05 00 a2 c0 29 a3 f0 59 52 f4 00 d8 20 04 13 36 03 70 d0 87 39 65 2a 14 c7 4c 98 d6 53 70 c0 05 ec 30 03 83 e0 61 90 67 12 9e 08 8a c9 a0 89 99 88 89 08 d0 03 2c 17 54 23 f0 05 1c c9 91 48 10 00 7f 30 0d 93 40 12 92 20 82 ce 81 29 f3 12 59 9f a3 07 62 e2 38 50 82 46 00 ff 64 1a 3c 46 18 4e 76 4e b4 f8 54 65 e2 17 3f 03 74 ba 97 18 f5 e2 8b 34 09 40 19 a3 25 48 47 4f 65 f5 40 88 e1 26 b5 68 3d 91 c2 31 42 27 09 60 80 06 a3 30 0a a5 50 0a 56 40 08 32 30 3f 11 97 8d 1f 70 4a b5 71 35 9a 04 5f e2 08 27 8f 52 86 ff e1 1f 5b 28 10 8b 50 21 3e c0 8e d1 03 97 e9 b2 2e 3c 54 7d e4 e8 96 8e e2 1e b6 14 22 01 77 3c 29 b2 6b 04 d1 4b 22 c0 1b c4 d1 18 b9 b1 68 Data Ascii: _U'_qS"7'cx=yB"v. )YR 6p9e*LSp0ag,T#H0@ )Yb8PFd<FNvNTe?t4@%HGOe@&h=1B'`0PV@20?pJq5_'R[(P!>.<T}"w<)kK"h
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 7c dc 1c d7 2b c8 79 a1 c0 8d 52 33 41 da 8a 30 ff e4 bf 6e 23 c1 76 32 39 54 0c 43 78 64 6b 05 80 a2 10 66 0c 61 60 0c 2c 92 61 21 ec 7f 11 30 08 2e e6 62 5d b0 87 30 eb 53 d3 d4 11 7a 00 6b 9b b8 c3 3d 4c bc 09 b0 92 61 e4 02 38 2c bc c4 2b c3 c9 90 b4 07 d8 11 42 0c a7 4a e0 06 a2 40 46 8e e3 47 b7 f2 32 88 9b 33 1f a3 1d 06 0c 1d 20 52 2b 15 d4 cc 62 11 1e 53 32 16 f2 24 16 79 b3 a6 84 60 05 68 60 05 da 3c 08 11 47 45 52 74 b7 72 8c 30 d8 b0 73 4e 76 b9 1f 43 cc 31 13 34 8b eb 31 82 3c c8 88 6c bd 71 26 c0 15 3c cf f4 cc b9 15 fc c5 28 02 b0 3c e6 1e e5 87 44 77 72 2b 43 44 3a fe 63 31 05 40 43 03 31 87 9a ec a9 73 3c 2a a1 15 2a 80 f3 3e 5c 30 08 b7 bb 68 c6 d0 aa a5 3c 3f 3d 7a 11 a2 d7 bb 1b c9 b3 39 ec ca a0 18 46 97 17 bc 9a 28 01 24 ed ca ac 96 Data Ascii: \|+yR3A0n#v29TCxdkfa`,a!0.b]0Szk=La8,+BJ@FG23 R+bS2$y`h`<GERtr0sNvC141<lq&<(<Dwr+CD:c1@C1s<**>\0h<?=z9F($
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: b2 12 de 2c 58 f0 96 ec 8b 9a 91 31 65 ce a4 59 d3 66 4d 51 6f 6e 82 d4 c1 d2 dc 17 73 29 2d f4 b8 b4 93 26 1a 85 32 b8 2c 81 d3 d0 c9 d3 a7 4a 88 70 f1 e8 a3 c2 d5 0a 0b b0 6e e5 8a b5 0d 09 12 6d 14 f8 70 f0 a1 c1 d9 b3 56 2b f8 40 db 40 41 85 45 6c db ce 85 00 a2 42 83 07 73 15 2c 52 30 f7 ec 82 be 0d 00 8c e2 02 07 ea 61 c4 87 1b 2e e4 32 68 49 52 87 d0 6c 20 10 f5 40 41 80 36 6d ae 2e 58 d4 d9 f3 e7 cf 0e 44 8b e6 53 da f4 e9 d2 0e 4c 8f 66 3d 7a 91 03 d0 8b 16 cc a6 2d bb 73 ff eb d3 b0 b1 2e 42 10 36 eb 02 07 62 15 0c 27 5e dc b8 f1 02 05 86 17 08 d0 5c c1 03 91 19 44 74 11 73 10 5a d2 87 0f 1b 3e 94 d8 1d 0e 30 60 70 38 8e cf 08 cc 58 75 a3 32 2f f5 60 59 e2 a7 39 95 3a d2 03 78 23 6a fe 7d fc 07 6d 20 d2 11 22 84 8e 4e 6c d8 a9 93 64 1a 59 c9 1b Data Ascii: ,X1eYfMQons)-&2,JpnmpV+@@AElBs,R0a.2hIRl @A6m.XDSLf=z-s.B6b'^\DtsZ>0`p8Xu2/`Y9:x#j}m "NldY
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 5f 70 cc aa 80 8f b0 22 0c ac 80 df 43 9c 80 8d 5b 74 a1 0b 18 10 85 24 08 15 19 00 dc 22 0c bb e0 44 76 f8 d7 1d f0 24 13 18 2b 10 20 01 1e 85 b5 09 ca 33 ff 17 ed 7c 27 1a 46 a2 83 6c c6 4a 12 64 3c 88 1a a6 d1 c0 70 de 07 11 3d 10 d0 25 4a 50 82 3c b4 21 6b ab 02 2d 37 43 a0 07 0e 48 e0 0b 12 e8 81 36 3d 88 bf 79 45 a0 30 78 83 4a 04 ac 50 0b 1b fc 93 47 5f f4 92 0f 0e 32 85 43 08 22 10 81 10 c4 1d ec d3 45 70 c6 e4 03 7c e2 11 90 ee 12 52 b6 44 31 00 1c d2 e8 16 b9 a8 95 8b f5 25 a4 2f 1a a9 28 4c b7 cf 26 b9 8b a5 8b 81 e9 42 96 41 47 86 3c c0 01 ad f8 40 05 da c0 47 8b 15 e0 91 0f e8 40 0e 42 c9 54 a5 72 75 89 6f 1d 0e 09 c4 f1 86 9e 82 60 94 83 bc 06 02 26 e0 3b 45 a6 af 61 05 c8 c1 74 fb fb df 4b 0a 98 aa 62 4d d3 02 52 f3 95 cb 98 b5 0d 37 95 13 Data Ascii: _p"C[t$"Dv$+ 3\|'FlJd<p=%JP<!k-7CH6=yE0xJPG_2C"Ep\|RD1%/(L&BAG<@G@BTruo`&;EatKbMR7
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 82 c9 3d 13 f9 43 0f 2b ab 89 69 24 41 e4 0c 8e 02 af 43 7c 8d db 59 b1 8f c0 25 82 d0 2b 56 58 9a 51 e8 82 5d 00 00 e9 8b 00 68 00 00 56 50 19 4a fc 04 25 f8 84 4e 40 8f 07 98 83 2e 70 83 ea 83 88 c3 da 19 0c 80 02 be 1a 80 23 20 83 6a bc 33 36 d0 81 01 2c c0 90 48 33 44 78 00 94 50 46 40 00 02 0e c0 45 62 bc 09 36 30 02 77 50 c6 d3 32 33 21 f8 a6 8f d0 03 9c 93 00 61 14 81 11 10 01 44 c0 c4 51 91 86 2d d0 46 a1 13 ba 2d b8 82 13 f8 81 60 99 17 26 69 ba 60 e3 92 ab 10 86 83 10 83 0b 80 02 64 08 05 26 b0 05 7e e0 87 50 38 00 da 3c 80 7a a8 4d dc cc 4d 67 e0 c7 0c 08 84 44 13 04 2e 32 c8 ff 28 22 01 ee 6a be 85 24 42 b3 d0 bb 22 82 1c e8 40 3a 8a 5c 2f c4 7b 85 29 cc ad 65 90 81 4c d0 02 ad 14 05 04 f8 00 00 c8 c2 f3 a9 80 17 a8 02 93 b4 3c f2 14 aa 9e d4 Data Ascii: =C+i$AC\|Y%+VXQ]hVPJ%N@.p# j36,H3DxPF@Eb60wP23!aDQ-F-`&i`d&~P8<zMMgD.2("j$B"@:\/{)eL<
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 82 0c 50 be 08 70 b8 60 3a ac 08 30 86 ec 7b 14 ee 3b 02 16 38 62 41 80 81 c1 5c 9a 3f f0 5d 20 c0 15 f6 38 52 d6 4d 80 0e ba 62 9a 00 a1 f6 20 33 09 50 1b d4 5a 86 04 f8 bf 21 45 05 08 f4 4c e3 45 e3 2c cd d2 6d dc c6 42 10 53 0b 89 1f 72 5c e0 19 b1 18 00 f0 cd ff 35 c0 04 74 b8 80 0d a0 86 0d f8 63 40 0e 64 d5 84 02 2e ca 2e c7 b9 0c c1 f0 81 56 60 c8 06 78 83 56 78 e4 d2 40 80 3c a2 64 c1 40 03 37 10 16 c0 83 42 d3 88 42 ec 6c 88 57 d0 82 86 78 00 52 ee ce 90 3c aa ce 30 e0 46 0a ca cb 40 80 55 22 bd 57 3e b5 0f 3e 44 56 06 2b 5b fe 43 11 0e e6 45 20 ea 02 60 b1 53 30 83 43 b0 0f b7 20 bd bd 30 ea d9 8b db 5f 05 0d 14 3e 69 2e 4a 61 f4 64 8e d0 f8 bd a7 9c e6 19 70 ae 21 c4 0c b1 0a 92 83 10 2c ba 4a 08 ad 7c 00 54 f8 84 bf 72 b8 89 38 c5 22 90 15 17 Data Ascii: Pp`:0{;8bA\?] 8RMb 3PZ!ELE,mBSr\5tc@d..V`xVx@<d@7BBlWxR<0F@U"W>>DV+[CE `S0C 0_>i.Jadp!,J\|Tr8"
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: e3 b3 8c 57 af 40 93 96 a1 65 59 26 2d a5 ab 62 5b f4 e1 81 82 00 7c 16 05 50 60 5b 81 e2 36 7c da f8 10 f6 66 91 b0 e0 3e f8 d4 8e 5d a0 40 80 02 b7 0b f0 19 cb 47 81 24 61 ad 2a 04 6f a0 fb 36 f6 ec b8 17 55 70 f0 c6 e0 a1 71 17 d6 24 aa 53 47 7c 11 83 3e 94 37 5f de bd cd ed ae b6 03 28 5e ec c0 c7 9b 37 15 f4 e4 f7 b1 c0 81 03 5f 69 37 5f 7d ff e1 a7 1f 7f f9 75 17 60 6d c8 75 d5 55 01 68 01 30 43 17 a8 40 03 0d 00 a3 74 b1 e1 1d 00 c8 10 c1 67 95 c8 00 47 04 95 54 02 c7 0c 50 60 c0 03 19 82 60 f0 e2 8b 72 1c 82 92 1e 13 a1 24 c4 08 65 48 f0 07 4b 9d 68 e4 4d 2e 3d bc 14 93 05 09 e8 c0 12 92 49 2a 89 90 1e 3d 0c 63 82 37 c9 d4 d0 c3 17 36 4d a2 92 28 1c 48 c4 41 06 16 49 22 a1 0b 65 1c 79 ff 11 2a 49 45 11 85 52 4b a9 72 42 52 5b 44 51 94 54 27 2c 01 Data Ascii: W@eY&-b[\|P`[6\|f>]@G$ao6Upq$SG\|>7_(^7_i7_}u`muUh0C@tgGTP``r$eHKhM.=I=c76M(HAI"ey*IERKrBR[DQT',

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:11 UTC	3873	OUT	GET /xjs/_/js/k=xjs.hd.en.eJLXiQqXlJU.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAACAEKAAAABQAAAAAAAAAAAAAAAAQIAQBEAQAAAgA4AAAEAQAEABAQAAAIEATgUSYAgAAwAQAAAAAQAAACQAAACAAAAAMAACAAAAAAAKAAAAAAAAAAAAAAAAAAwAACCAAAAAAAAAAAAAABAAAAQAcAAAAAAAEAAAEBADBABhAAAAgAAABAHwAED4BBCgsAAAAAAAAAAAAAAAQgQTAXElAQgAAAAAAAAAAAAAAAAABISRMXNg/d=1/ed=1/dg=3/br=1/rs=ACT90oHid0j0ga0yFcae2fYObZ-YQ7gzFw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eX [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:11 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1031221 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 30 Aug 2024 20:31:41 GMT Expires: Sat, 30 Aug 2025 20:31:41 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 30 Aug 2024 18:34:09 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 171810 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:11 UTC	558	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Id
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 63 61 2c 45 63 61 2c 46 63 61 2c 78 63 61 2c 47 63 61 2c 79 63 61 2c 48 63 61 2c 77 63 61 2c 49 63 61 2c 76 63 61 2c 4a 63 61 2c 4c 63 61 2c 53 63 61 2c 55 63 61 2c 56 63 61 2c 5a 63 61 2c 24 63 61 2c 64 64 61 2c 67 64 61 2c 61 64 61 2c 66 64 61 2c 65 64 61 2c 63 64 61 2c 62 64 61 2c 68 64 61 2c 69 64 61 2c 6a 64 61 2c 6b 64 61 2c 6e 64 61 2c 6f 64 61 2c 70 64 61 2c 71 64 61 2c 72 64 61 2c 75 64 61 2c 76 64 61 2c 77 64 61 2c 7a 64 61 2c 79 64 61 2c 44 64 61 2c 45 64 61 2c 4a 64 61 2c 4b 64 61 2c 4d 64 61 2c 4c 64 61 2c 4f 64 61 2c 51 64 61 2c 50 64 61 2c 53 64 61 2c 52 64 61 2c 56 64 61 2c 55 64 61 2c 58 64 61 2c 24 64 61 2c 63 65 61 2c 65 65 61 2c 66 65 61 2c 6b 65 61 2c 6d 65 61 2c 6e 65 61 2c 72 65 61 2c 74 65 61 2c 45 65 61 2c 46 65 61 2c 48 65 61 2c Data Ascii: ca,Eca,Fca,xca,Gca,yca,Hca,wca,Ica,vca,Jca,Lca,Sca,Uca,Vca,Zca,$ca,dda,gda,ada,fda,eda,cda,bda,hda,ida,jda,kda,nda,oda,pda,qda,rda,uda,vda,wda,zda,yda,Dda,Eda,Jda,Kda,Mda,Lda,Oda,Qda,Pda,Sda,Rda,Vda,Uda,Xda,$da,cea,eea,fea,kea,mea,nea,rea,tea,Eea,Fea,Hea,
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 62 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4e 22 29 3b 62 2e 70 75 73 68 28 36 35 Data Ascii: ck;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};baa=function(a,b){if(a)throw Error("N");b.push(65
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 69 66 28 62 26 26 28 6a 61 61 3f 21 61 2e 69 73 57 65 6c 6c 46 6f 72 6d 65 64 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 33 2a 61 2e 6c 65 6e 67 74 68 29 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 Data Ascii: if(b&&(jaa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("O");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var c=0,d=new Uint8Array(3*a.length),e=0;e<a.length;e++){var f=a.charCodeAt
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 61 61 28 29 3f 6e 61 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 5f 2e 68 61 28 22 45 64 67 2f 22 29 7d 3b 0a 5f 2e 76 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 46 69 72 65 66 6f 78 22 29 7c 7c 5f 2e 68 61 28 22 46 78 69 4f 53 22 29 7d 3b 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 69 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 68 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 74 61 61 28 29 7c 7c 5f 2e 75 61 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7c 7c Data Ascii: aa()?naa("Microsoft Edge"):_.ha("Edg/")};_.vaa=function(){return _.ha("Firefox")\|\|_.ha("FxiOS")};_.ja=function(){return _.ha("Safari")&&!(_.ia()\|\|(_.qaa()?0:_.ha("Coast"))\|\|_.raa()\|\|_.taa()\|\|_.uaa()\|\|(_.qaa()?naa("Opera"):_.ha("OPR"))\|\|_.vaa()\|\|_.waa()\|\|
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 3d 3d 3d 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 26 26 5f 2e 78 61 61 28 29 7c 7c 61 3d 3d 3d 22 53 69 6c 6b 22 26 26 5f 2e 77 61 61 28 29 3f 28 61 3d 62 5b 32 5d 29 26 26 0a 61 5b 31 5d 7c 7c 22 22 3a 22 22 7d 3b 5f 2e 42 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 65 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 76 65 72 73 69 6f 6e 2e 73 70 6c 69 74 28 22 2e 22 29 7d 65 6c 73 65 7b 62 3d 41 61 61 28 61 29 3b 69 66 28 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e Data Ascii: ==="Android Browser"&&_.xaa()\|\|a==="Silk"&&_.waa()?(a=b[2])&&a[1]\|\|"":""};_.Baa=function(a){if(_.qaa()&&a!=="Silk"){var b=_.ea.brands.find(function(c){return c.brand===a});if(!b\|\|!b.version)return NaN;b=b.version.split(".")}else{b=Aaa(a);if(b==="")return
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 5f 2e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 4c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 73 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: function(a){return a[a.length-1]};_.ra=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.Laa=function(a,b,c){b=_.sa(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.sa=function(a,
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 5f 2e 55 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 54 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 54 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3b 0a 5f 2e 56 61 61 3d 66 75 6e 63 74 69 Data Ascii: r(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.Uaa=function(a,b,c,d){return Array.prototype.splice.apply(a,Taa(arguments,1))};Taa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};_.Vaa=functi
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 66 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 64 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 66 61 28 5f 2e 64 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 77 65 62 6b 69 74 22 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 47 65 63 6b 6f 22 29 26 26 21 5f 2e 64 62 61 28 29 26 26 21 28 5f 2e 68 61 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 68 61 28 22 4d 53 49 45 22 29 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 0a Data Ascii: .apply(null,f);for(var g=0;g<f.length;g++)b.push(f[g])}else b.push(d)}return b};_.dba=function(){return _.fa(_.da().toLowerCase(),"webkit")&&!_.ha("Edge")};_.eba=function(){return _.ha("Gecko")&&!_.dba()&&!(_.ha("Trident")\|\|_.ha("MSIE"))&&!_.ha("Edge")};
2024-09-01 20:15:11 UTC	1390	IN	Data Raw: 69 6f 6e 22 7d 3b 0a 5f 2e 74 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3e 3e 3e 30 3b 5f 2e 4e 61 3d 62 3b 5f 2e 4f 61 3d 28 61 2d 62 29 2f 34 32 39 34 39 36 37 32 39 36 3e 3e 3e 30 7d 3b 5f 2e 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3c 30 29 7b 5f 2e 74 62 61 28 2d 61 29 3b 76 61 72 20 62 3d 5f 2e 50 61 28 75 62 61 28 5f 2e 4e 61 2c 5f 2e 4f 61 29 29 3b 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 5f 2e 4e 61 3d 61 3e 3e 3e 30 3b 5f 2e 4f 61 3d 62 3e 3e 3e 30 7d 65 6c 73 65 20 5f 2e 74 62 61 28 61 29 7d 3b 77 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 62 61 7c 7c 28 76 62 61 3d 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 Data Ascii: ion"};_.tba=function(a){var b=a>>>0;_.Na=b;_.Oa=(a-b)/4294967296>>>0};_.Qa=function(a){if(a<0){_.tba(-a);var b=_.Pa(uba(_.Na,_.Oa));a=b.next().value;b=b.next().value;_.Na=a>>>0;_.Oa=b>>>0}else _.tba(a)};wba=function(a){var b=vba\|\|(vba=new DataView(new Ar

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:11 UTC	1436	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&rt=wsrt.3677,cbt.378,hst.376&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:11 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-rkBwceSpv-cBYW8KFxxZCQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 01 Sep 2024 20:15:11 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:12 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-01 20:15:12 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=160228 Date: Sun, 01 Sep 2024 20:15:12 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-01 20:15:12 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:12 UTC	1360	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:12 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Sun, 01 Sep 2024 20:15:12 GMT Expires: Sun, 01 Sep 2024 20:15:12 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:12 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:13 UTC	766	OUT	GET /logos/doodles/2024/paris-games-archery-6753651837110536-law.gif HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:13 UTC	661	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="doodle-eng" Report-To: {"group":"doodle-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/doodle-eng"}]} Content-Length: 161407 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Sat, 31 Aug 2024 14:06:55 GMT Expires: Sun, 31 Aug 2025 14:06:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 09 Aug 2024 16:37:40 GMT Content-Type: image/gif Age: 108498 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:13 UTC	729	IN	Data Raw: 47 49 46 38 39 61 f4 01 c8 00 f7 00 00 ff ff ff ea dc b7 5a 69 9a b2 bb ca b9 c7 d3 ed e9 bb e8 b7 95 08 8c f7 cc aa 7a 52 43 02 ef ec c6 da c7 99 b6 31 4a fb f7 dd cc b8 88 fd fa ec f7 ef c8 cb dc 99 65 54 11 dc ad 87 d7 de e9 dd cc a7 8c 74 18 00 00 00 6a 70 75 eb ec eb 4a 4f 54 07 32 64 99 8f 69 ef c7 ab 2e 2d 2b ee dd c9 d8 bb 95 69 58 27 74 6f 4a 73 67 30 e7 d7 ac c6 a5 21 aa 8e 18 9b c7 79 ea ce 98 ce d7 e7 c6 ce dc 96 b2 85 8d 97 a8 c7 37 50 c7 bc aa f7 d6 b7 cb d6 de eb ef f7 ce de a5 78 8c 69 20 42 75 b8 99 21 eb e7 da eb bc a6 31 55 b5 da b8 8c 86 77 4b 00 7b dd 99 a7 b5 59 49 0d f7 ee d9 86 a8 69 d3 b8 4e dc c5 6b db d9 ca f9 9d ac b6 ce 8c 76 81 8e a7 9b 75 a8 ad ba c6 9c 13 09 4a 92 d8 e7 aa 97 b9 77 00 68 b5 a1 2a 3c de ef b4 d9 da db 51 59 Data Ascii: GIF89aZizRC1JeTtjpuJOT2di.-+iX'toJsg0!y7Pxi Bu!1UwK{YIiNkvuJwh*<QY
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 3d 21 6b e0 44 61 8a ff f7 ff be e3 fc 08 08 08 5f 48 8f 0a 9c ff 09 7b cd bd 3a 53 3d 3d 3d 00 73 d6 c5 ac b7 bd d4 e7 09 7c d7 4b 8b bf 00 5a 9f ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 04 00 ff 00 2c 00 00 00 00 f4 01 c8 00 00 08 ff 00 01 08 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 b1 a2 c5 8b 18 33 6a dc c8 b1 a3 c7 8f 20 43 8a 1c 49 b2 a4 c9 93 28 53 aa 5c c9 b2 a5 cb 97 30 63 ca 9c 49 b3 a6 cd 9b 38 73 ea dc c9 b3 a7 cf 9f 40 83 0a 1d 4a b4 a8 d1 a3 48 93 2a 5d ca b4 a9 d3 a7 50 a3 4a 9d 4a b5 aa a4 ab 0f b2 3e 68 c0 b5 ab 57 ad 5b bd 8a 6d e0 c3 c7 d8 ae 59 cb a2 3d cb 16 6c d6 81 3e 14 04 98 5b b6 6c b7 0a 24 02 54 f0 21 f0 c3 07 81 0f 02 2c 80 50 b7 70 5d 05 15 02 b4 aa 20 49 a0 9e 37 02 25 Data Ascii: =!kDa_H{:S===s\|KZ!NETSCAPE2.0!,H\#JH3j CI(S\0cI8s@JH]PJJ>hW[mY=l>[l$T!,Pp] I7%
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 9e 34 23 a1 36 75 d2 42 ee 92 cc 0b 8d 37 4a 07 08 43 20 e2 40 a5 24 54 09 9f 50 5e ad 4d 3d 9c 4c 2c 85 e8 35 7e 05 e8 7b f9 f2 56 03 70 c3 a9 27 3c e0 46 d0 f8 cd 13 6e c1 a9 19 b8 f4 6f 08 c3 62 33 e3 f7 4c 2e d2 0f 95 d5 64 8a 0d 26 f1 07 36 80 d1 26 0f bc 4f 2b b6 b9 46 26 7d 00 04 ba b4 17 f8 de c4 a7 a7 e6 c5 72 85 51 52 62 c2 24 10 1f b4 b0 5e 88 a9 a7 5a a2 83 1c 03 16 b1 3e d1 ba 28 10 b9 f3 a0 7f 36 47 3e 7d a1 a4 0f 01 00 81 02 80 2f 85 0c 5d 97 9b 3c 19 27 6e 85 b2 6a 7b 2a 10 2a 1f a0 4a e3 75 ab a1 0e 08 a9 bb 00 e0 57 22 76 34 45 45 aa 57 4a ed c4 a3 5d 84 81 0d 71 92 29 4d bb c0 59 56 0c 44 99 07 73 df 4e b5 e8 53 9f ca 20 a6 38 11 05 1b fe 30 09 a0 06 15 21 19 50 c3 30 12 30 8d 04 ff 8c e0 0f 37 79 00 08 7e f3 06 f9 3c 08 2f f3 2a 00 54 Data Ascii: 4#6uB7JC @$TP^M=L,5~{Vp'<Fnob3L.d&6&O+F&}rQRb$^Z>(6G>}/]<'nj{*JuW"v4EEWJ]q)MYVDsNS 80!P007y~</T
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: d2 5f 1d 55 27 da 97 5f 71 e2 85 d0 53 22 e1 37 27 63 78 85 ab 04 3d 79 42 22 76 b5 2e 95 d2 20 c8 f5 1c 8b 05 00 a2 c0 29 a3 f0 59 52 f4 00 d8 20 04 13 36 03 70 d0 87 39 65 2a 14 c7 4c 98 d6 53 70 c0 05 ec 30 03 83 e0 61 90 67 12 9e 08 8a c9 a0 89 99 88 89 08 d0 03 2c 17 54 23 f0 05 1c c9 91 48 10 00 7f 30 0d 93 40 12 92 20 82 ce 81 29 f3 12 59 9f a3 07 62 e2 38 50 82 46 00 ff 64 1a 3c 46 18 4e 76 4e b4 f8 54 65 e2 17 3f 03 74 ba 97 18 f5 e2 8b 34 09 40 19 a3 25 48 47 4f 65 f5 40 88 e1 26 b5 68 3d 91 c2 31 42 27 09 60 80 06 a3 30 0a a5 50 0a 56 40 08 32 30 3f 11 97 8d 1f 70 4a b5 71 35 9a 04 5f e2 08 27 8f 52 86 ff e1 1f 5b 28 10 8b 50 21 3e c0 8e d1 03 97 e9 b2 2e 3c 54 7d e4 e8 96 8e e2 1e b6 14 22 01 77 3c 29 b2 6b 04 d1 4b 22 c0 1b c4 d1 18 b9 b1 68 Data Ascii: _U'_qS"7'cx=yB"v. )YR 6p9e*LSp0ag,T#H0@ )Yb8PFd<FNvNTe?t4@%HGOe@&h=1B'`0PV@20?pJq5_'R[(P!>.<T}"w<)kK"h
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 7c dc 1c d7 2b c8 79 a1 c0 8d 52 33 41 da 8a 30 ff e4 bf 6e 23 c1 76 32 39 54 0c 43 78 64 6b 05 80 a2 10 66 0c 61 60 0c 2c 92 61 21 ec 7f 11 30 08 2e e6 62 5d b0 87 30 eb 53 d3 d4 11 7a 00 6b 9b b8 c3 3d 4c bc 09 b0 92 61 e4 02 38 2c bc c4 2b c3 c9 90 b4 07 d8 11 42 0c a7 4a e0 06 a2 40 46 8e e3 47 b7 f2 32 88 9b 33 1f a3 1d 06 0c 1d 20 52 2b 15 d4 cc 62 11 1e 53 32 16 f2 24 16 79 b3 a6 84 60 05 68 60 05 da 3c 08 11 47 45 52 74 b7 72 8c 30 d8 b0 73 4e 76 b9 1f 43 cc 31 13 34 8b eb 31 82 3c c8 88 6c bd 71 26 c0 15 3c cf f4 cc b9 15 fc c5 28 02 b0 3c e6 1e e5 87 44 77 72 2b 43 44 3a fe 63 31 05 40 43 03 31 87 9a ec a9 73 3c 2a a1 15 2a 80 f3 3e 5c 30 08 b7 bb 68 c6 d0 aa a5 3c 3f 3d 7a 11 a2 d7 bb 1b c9 b3 39 ec ca a0 18 46 97 17 bc 9a 28 01 24 ed ca ac 96 Data Ascii: \|+yR3A0n#v29TCxdkfa`,a!0.b]0Szk=La8,+BJ@FG23 R+bS2$y`h`<GERtr0sNvC141<lq&<(<Dwr+CD:c1@C1s<**>\0h<?=z9F($
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: b2 12 de 2c 58 f0 96 ec 8b 9a 91 31 65 ce a4 59 d3 66 4d 51 6f 6e 82 d4 c1 d2 dc 17 73 29 2d f4 b8 b4 93 26 1a 85 32 b8 2c 81 d3 d0 c9 d3 a7 4a 88 70 f1 e8 a3 c2 d5 0a 0b b0 6e e5 8a b5 0d 09 12 6d 14 f8 70 f0 a1 c1 d9 b3 56 2b f8 40 db 40 41 85 45 6c db ce 85 00 a2 42 83 07 73 15 2c 52 30 f7 ec 82 be 0d 00 8c e2 02 07 ea 61 c4 87 1b 2e e4 32 68 49 52 87 d0 6c 20 10 f5 40 41 80 36 6d ae 2e 58 d4 d9 f3 e7 cf 0e 44 8b e6 53 da f4 e9 d2 0e 4c 8f 66 3d 7a 91 03 d0 8b 16 cc a6 2d bb 73 ff eb d3 b0 b1 2e 42 10 36 eb 02 07 62 15 0c 27 5e dc b8 f1 02 05 86 17 08 d0 5c c1 03 91 19 44 74 11 73 10 5a d2 87 0f 1b 3e 94 d8 1d 0e 30 60 70 38 8e cf 08 cc 58 75 a3 32 2f f5 60 59 e2 a7 39 95 3a d2 03 78 23 6a fe 7d fc 07 6d 20 d2 11 22 84 8e 4e 6c d8 a9 93 64 1a 59 c9 1b Data Ascii: ,X1eYfMQons)-&2,JpnmpV+@@AElBs,R0a.2hIRl @A6m.XDSLf=z-s.B6b'^\DtsZ>0`p8Xu2/`Y9:x#j}m "NldY
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 5f 70 cc aa 80 8f b0 22 0c ac 80 df 43 9c 80 8d 5b 74 a1 0b 18 10 85 24 08 15 19 00 dc 22 0c bb e0 44 76 f8 d7 1d f0 24 13 18 2b 10 20 01 1e 85 b5 09 ca 33 ff 17 ed 7c 27 1a 46 a2 83 6c c6 4a 12 64 3c 88 1a a6 d1 c0 70 de 07 11 3d 10 d0 25 4a 50 82 3c b4 21 6b ab 02 2d 37 43 a0 07 0e 48 e0 0b 12 e8 81 36 3d 88 bf 79 45 a0 30 78 83 4a 04 ac 50 0b 1b fc 93 47 5f f4 92 0f 0e 32 85 43 08 22 10 81 10 c4 1d ec d3 45 70 c6 e4 03 7c e2 11 90 ee 12 52 b6 44 31 00 1c d2 e8 16 b9 a8 95 8b f5 25 a4 2f 1a a9 28 4c b7 cf 26 b9 8b a5 8b 81 e9 42 96 41 47 86 3c c0 01 ad f8 40 05 da c0 47 8b 15 e0 91 0f e8 40 0e 42 c9 54 a5 72 75 89 6f 1d 0e 09 c4 f1 86 9e 82 60 94 83 bc 06 02 26 e0 3b 45 a6 af 61 05 c8 c1 74 fb fb df 4b 0a 98 aa 62 4d d3 02 52 f3 95 cb 98 b5 0d 37 95 13 Data Ascii: _p"C[t$"Dv$+ 3\|'FlJd<p=%JP<!k-7CH6=yE0xJPG_2C"Ep\|RD1%/(L&BAG<@G@BTruo`&;EatKbMR7
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 82 c9 3d 13 f9 43 0f 2b ab 89 69 24 41 e4 0c 8e 02 af 43 7c 8d db 59 b1 8f c0 25 82 d0 2b 56 58 9a 51 e8 82 5d 00 00 e9 8b 00 68 00 00 56 50 19 4a fc 04 25 f8 84 4e 40 8f 07 98 83 2e 70 83 ea 83 88 c3 da 19 0c 80 02 be 1a 80 23 20 83 6a bc 33 36 d0 81 01 2c c0 90 48 33 44 78 00 94 50 46 40 00 02 0e c0 45 62 bc 09 36 30 02 77 50 c6 d3 32 33 21 f8 a6 8f d0 03 9c 93 00 61 14 81 11 10 01 44 c0 c4 51 91 86 2d d0 46 a1 13 ba 2d b8 82 13 f8 81 60 99 17 26 69 ba 60 e3 92 ab 10 86 83 10 83 0b 80 02 64 08 05 26 b0 05 7e e0 87 50 38 00 da 3c 80 7a a8 4d dc cc 4d 67 e0 c7 0c 08 84 44 13 04 2e 32 c8 ff 28 22 01 ee 6a be 85 24 42 b3 d0 bb 22 82 1c e8 40 3a 8a 5c 2f c4 7b 85 29 cc ad 65 90 81 4c d0 02 ad 14 05 04 f8 00 00 c8 c2 f3 a9 80 17 a8 02 93 b4 3c f2 14 aa 9e d4 Data Ascii: =C+i$AC\|Y%+VXQ]hVPJ%N@.p# j36,H3DxPF@Eb60wP23!aDQ-F-`&i`d&~P8<zMMgD.2("j$B"@:\/{)eL<
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 82 0c 50 be 08 70 b8 60 3a ac 08 30 86 ec 7b 14 ee 3b 02 16 38 62 41 80 81 c1 5c 9a 3f f0 5d 20 c0 15 f6 38 52 d6 4d 80 0e ba 62 9a 00 a1 f6 20 33 09 50 1b d4 5a 86 04 f8 bf 21 45 05 08 f4 4c e3 45 e3 2c cd d2 6d dc c6 42 10 53 0b 89 1f 72 5c e0 19 b1 18 00 f0 cd ff 35 c0 04 74 b8 80 0d a0 86 0d f8 63 40 0e 64 d5 84 02 2e ca 2e c7 b9 0c c1 f0 81 56 60 c8 06 78 83 56 78 e4 d2 40 80 3c a2 64 c1 40 03 37 10 16 c0 83 42 d3 88 42 ec 6c 88 57 d0 82 86 78 00 52 ee ce 90 3c aa ce 30 e0 46 0a ca cb 40 80 55 22 bd 57 3e b5 0f 3e 44 56 06 2b 5b fe 43 11 0e e6 45 20 ea 02 60 b1 53 30 83 43 b0 0f b7 20 bd bd 30 ea d9 8b db 5f 05 0d 14 3e 69 2e 4a 61 f4 64 8e d0 f8 bd a7 9c e6 19 70 ae 21 c4 0c b1 0a 92 83 10 2c ba 4a 08 ad 7c 00 54 f8 84 bf 72 b8 89 38 c5 22 90 15 17 Data Ascii: Pp`:0{;8bA\?] 8RMb 3PZ!ELE,mBSr\5tc@d..V`xVx@<d@7BBlWxR<0F@U"W>>DV+[CE `S0C 0_>i.Jadp!,J\|Tr8"
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: e3 b3 8c 57 af 40 93 96 a1 65 59 26 2d a5 ab 62 5b f4 e1 81 82 00 7c 16 05 50 60 5b 81 e2 36 7c da f8 10 f6 66 91 b0 e0 3e f8 d4 8e 5d a0 40 80 02 b7 0b f0 19 cb 47 81 24 61 ad 2a 04 6f a0 fb 36 f6 ec b8 17 55 70 f0 c6 e0 a1 71 17 d6 24 aa 53 47 7c 11 83 3e 94 37 5f de bd cd ed ae b6 03 28 5e ec c0 c7 9b 37 15 f4 e4 f7 b1 c0 81 03 5f 69 37 5f 7d ff e1 a7 1f 7f f9 75 17 60 6d c8 75 d5 55 01 68 01 30 43 17 a8 40 03 0d 00 a3 74 b1 e1 1d 00 c8 10 c1 67 95 c8 00 47 04 95 54 02 c7 0c 50 60 c0 03 19 82 60 f0 e2 8b 72 1c 82 92 1e 13 a1 24 c4 08 65 48 f0 07 4b 9d 68 e4 4d 2e 3d bc 14 93 05 09 e8 c0 12 92 49 2a 89 90 1e 3d 0c 63 82 37 c9 d4 d0 c3 17 36 4d a2 92 28 1c 48 c4 41 06 16 49 22 a1 0b 65 1c 79 ff 11 2a 49 45 11 85 52 4b a9 72 42 52 5b 44 51 94 54 27 2c 01 Data Ascii: W@eY&-b[\|P`[6\|f>]@G$ao6Upq$SG\|>7_(^7_i7_}u`muUh0C@tgGTP``r$eHKhM.=I=c76M(HAI"ey*IERKrBR[DQT',

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:13 UTC	3329	OUT	GET /xjs/_/js/k=xjs.hd.en.eJLXiQqXlJU.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAAAAAAAACAEKAAAABQAAAAAAAAAAAAAAAAQIAQBEAQAAAgA4AAAEAQAEABAQAAAIEATgUSYAgAAwAQAAAAAQAAACQAAACAAAAAMAACAAAAAAAKAAAAAAAAAAAAAAAAAAwAACCAAAAAAAAAAAAAABAAAAQAcAAAAAAAEAAAEBADBABhAAAAgAAABAHwAED4BBCgsAAAAAAAAAAAAAAAQgQTAXElAQgAAAAAAAAAAAAAAAAABISRMXNg/d=1/ed=1/dg=3/br=1/rs=ACT90oHid0j0ga0yFcae2fYObZ-YQ7gzFw/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IZrNqe:P8ha2c;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eX [TRUNCATED] Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:13 UTC	832	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1031221 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 30 Aug 2024 20:09:40 GMT Expires: Sat, 30 Aug 2025 20:09:40 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 30 Aug 2024 18:34:09 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 173133 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-01 20:15:13 UTC	558	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Id
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 63 61 2c 45 63 61 2c 46 63 61 2c 78 63 61 2c 47 63 61 2c 79 63 61 2c 48 63 61 2c 77 63 61 2c 49 63 61 2c 76 63 61 2c 4a 63 61 2c 4c 63 61 2c 53 63 61 2c 55 63 61 2c 56 63 61 2c 5a 63 61 2c 24 63 61 2c 64 64 61 2c 67 64 61 2c 61 64 61 2c 66 64 61 2c 65 64 61 2c 63 64 61 2c 62 64 61 2c 68 64 61 2c 69 64 61 2c 6a 64 61 2c 6b 64 61 2c 6e 64 61 2c 6f 64 61 2c 70 64 61 2c 71 64 61 2c 72 64 61 2c 75 64 61 2c 76 64 61 2c 77 64 61 2c 7a 64 61 2c 79 64 61 2c 44 64 61 2c 45 64 61 2c 4a 64 61 2c 4b 64 61 2c 4d 64 61 2c 4c 64 61 2c 4f 64 61 2c 51 64 61 2c 50 64 61 2c 53 64 61 2c 52 64 61 2c 56 64 61 2c 55 64 61 2c 58 64 61 2c 24 64 61 2c 63 65 61 2c 65 65 61 2c 66 65 61 2c 6b 65 61 2c 6d 65 61 2c 6e 65 61 2c 72 65 61 2c 74 65 61 2c 45 65 61 2c 46 65 61 2c 48 65 61 2c Data Ascii: ca,Eca,Fca,xca,Gca,yca,Hca,wca,Ica,vca,Jca,Lca,Sca,Uca,Vca,Zca,$ca,dda,gda,ada,fda,eda,cda,bda,hda,ida,jda,kda,nda,oda,pda,qda,rda,uda,vda,wda,zda,yda,Dda,Eda,Jda,Kda,Mda,Lda,Oda,Qda,Pda,Sda,Rda,Vda,Uda,Xda,$da,cea,eea,fea,kea,mea,nea,rea,tea,Eea,Fea,Hea,
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 3b 62 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4e 22 29 3b 62 2e 70 75 73 68 28 36 35 Data Ascii: ck;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.call(this,c+a[d])};baa=function(a,b){if(a)throw Error("N");b.push(65
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 69 66 28 62 26 26 28 6a 61 61 3f 21 61 2e 69 73 57 65 6c 6c 46 6f 72 6d 65 64 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 33 2a 61 2e 6c 65 6e 67 74 68 29 2c 65 3d 30 3b 65 3c 61 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 7b 76 61 72 20 66 3d 61 2e 63 68 61 72 43 6f 64 65 41 74 Data Ascii: if(b&&(jaa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("O");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var c=0,d=new Uint8Array(3*a.length),e=0;e<a.length;e++){var f=a.charCodeAt
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 61 61 28 29 3f 6e 61 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 5f 2e 68 61 28 22 45 64 67 2f 22 29 7d 3b 0a 5f 2e 76 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 46 69 72 65 66 6f 78 22 29 7c 7c 5f 2e 68 61 28 22 46 78 69 4f 53 22 29 7d 3b 5f 2e 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 69 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 68 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c 5f 2e 74 61 61 28 29 7c 7c 5f 2e 75 61 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 68 61 28 22 4f 50 52 22 29 29 7c 7c 5f 2e 76 61 61 28 29 7c 7c 5f 2e 77 61 61 28 29 7c 7c Data Ascii: aa()?naa("Microsoft Edge"):_.ha("Edg/")};_.vaa=function(){return _.ha("Firefox")\|\|_.ha("FxiOS")};_.ja=function(){return _.ha("Safari")&&!(_.ia()\|\|(_.qaa()?0:_.ha("Coast"))\|\|_.raa()\|\|_.taa()\|\|_.uaa()\|\|(_.qaa()?naa("Opera"):_.ha("OPR"))\|\|_.vaa()\|\|_.waa()\|\|
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 3d 3d 3d 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 26 26 5f 2e 78 61 61 28 29 7c 7c 61 3d 3d 3d 22 53 69 6c 6b 22 26 26 5f 2e 77 61 61 28 29 3f 28 61 3d 62 5b 32 5d 29 26 26 0a 61 5b 31 5d 7c 7c 22 22 3a 22 22 7d 3b 5f 2e 42 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 65 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e 76 65 72 73 69 6f 6e 29 72 65 74 75 72 6e 20 4e 61 4e 3b 62 3d 62 2e 76 65 72 73 69 6f 6e 2e 73 70 6c 69 74 28 22 2e 22 29 7d 65 6c 73 65 7b 62 3d 41 61 61 28 61 29 3b 69 66 28 62 3d 3d 3d 22 22 29 72 65 74 75 72 6e Data Ascii: ==="Android Browser"&&_.xaa()\|\|a==="Silk"&&_.waa()?(a=b[2])&&a[1]\|\|"":""};_.Baa=function(a){if(_.qaa()&&a!=="Silk"){var b=_.ea.brands.find(function(c){return c.brand===a});if(!b\|\|!b.version)return NaN;b=b.version.split(".")}else{b=Aaa(a);if(b==="")return
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 5f 2e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 4c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 73 61 28 61 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 62 3c 30 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 63 68 61 72 41 74 28 62 29 3a 61 5b 62 5d 7d 3b 5f 2e 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c Data Ascii: function(a){return a[a.length-1]};_.ra=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.Laa=function(a,b,c){b=_.sa(a,b,c);return b<0?null:typeof a==="string"?a.charAt(b):a[b]};_.sa=function(a,
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 5f 2e 55 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 54 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 54 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 29 3a 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 2c 62 2c 63 29 7d 3b 0a 5f 2e 56 61 61 3d 66 75 6e 63 74 69 Data Ascii: r(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.Uaa=function(a,b,c,d){return Array.prototype.splice.apply(a,Taa(arguments,1))};Taa=function(a,b,c){return arguments.length<=2?Array.prototype.slice.call(a,b):Array.prototype.slice.call(a,b,c)};_.Vaa=functi
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 66 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 64 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 66 61 28 5f 2e 64 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 77 65 62 6b 69 74 22 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 22 47 65 63 6b 6f 22 29 26 26 21 5f 2e 64 62 61 28 29 26 26 21 28 5f 2e 68 61 28 22 54 72 69 64 65 6e 74 22 29 7c 7c 5f 2e 68 61 28 22 4d 53 49 45 22 29 29 26 26 21 5f 2e 68 61 28 22 45 64 67 65 22 29 7d 3b 0a Data Ascii: .apply(null,f);for(var g=0;g<f.length;g++)b.push(f[g])}else b.push(d)}return b};_.dba=function(){return _.fa(_.da().toLowerCase(),"webkit")&&!_.ha("Edge")};_.eba=function(){return _.ha("Gecko")&&!_.dba()&&!(_.ha("Trident")\|\|_.ha("MSIE"))&&!_.ha("Edge")};
2024-09-01 20:15:13 UTC	1390	IN	Data Raw: 69 6f 6e 22 7d 3b 0a 5f 2e 74 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 3e 3e 3e 30 3b 5f 2e 4e 61 3d 62 3b 5f 2e 4f 61 3d 28 61 2d 62 29 2f 34 32 39 34 39 36 37 32 39 36 3e 3e 3e 30 7d 3b 5f 2e 51 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 3c 30 29 7b 5f 2e 74 62 61 28 2d 61 29 3b 76 61 72 20 62 3d 5f 2e 50 61 28 75 62 61 28 5f 2e 4e 61 2c 5f 2e 4f 61 29 29 3b 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 5f 2e 4e 61 3d 61 3e 3e 3e 30 3b 5f 2e 4f 61 3d 62 3e 3e 3e 30 7d 65 6c 73 65 20 5f 2e 74 62 61 28 61 29 7d 3b 77 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 76 62 61 7c 7c 28 76 62 61 3d 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 Data Ascii: ion"};_.tba=function(a){var b=a>>>0;_.Na=b;_.Oa=(a-b)/4294967296>>>0};_.Qa=function(a){if(a<0){_.tba(-a);var b=_.Pa(uba(_.Na,_.Oa));a=b.next().value;b=b.next().value;_.Na=a>>>0;_.Oa=b>>>0}else _.tba(a)};wba=function(a){var b=vba\|\|(vba=new DataView(new Ar

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:13 UTC	1522	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=TsvUZoKqHpjyi-gPh6SBOA&rt=wsrt.3677,aft.2045,afti.2045,cbt.378,hst.376,prt.1366&imn=11&ima=1&imad=0&imac=1&wh=907&aftie=NF&aft=1&aftp=907&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:14 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-xNAmUKrmj_CCQlMnqP0jjA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Sun, 01 Sep 2024 20:15:13 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-01 20:15:15 UTC	1370	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=TsvUZoKqHpjyi-gPh6SBOA.1725221712539&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crzkd8QGhmDmws13ifXMTcrwSiGAbX7tmwGRZw75_-odr4HHhzb9Q; NID=517=KxRXy5tlXnXiCjC8TgHz3vOAll4AthEo8WUuAKaD8DAxG2soDE8NMVLFvE9hYPu-jGZhtT81j7j_uaiXV6UPb8Yo8sWrwYtpbhZZYYo9VNiHaqUxEz_bvQomr4MO5AMTLnsqiRR_x4SMQ9_XvziW3xdfnIB94Y927br0nxdBXMD5hj032WNKd4rdTw
2024-09-01 20:15:15 UTC	1270	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Sun, 01 Sep 2024 20:15:15 GMT Expires: Sun, 01 Sep 2024 20:15:15 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-UJ0fSqccYd7whzwuUDQLQA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-01 20:15:15 UTC	120	IN	Data Raw: 31 33 65 30 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 6b 61 6f 73 20 6e 65 74 66 6c 69 78 20 67 72 65 65 6b 20 6d 79 74 68 6f 6c 6f 67 79 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 6b 61 6f 73 20 6e 65 74 66 6c 69 78 20 67 72 65 65 6b 20 6d 79 74 68 6f 6c 6f 67 79 22 Data Ascii: 13e0)]}'[[["kaos netflix greek mythology",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"kaos netflix greek mythology"
2024-09-01 20:15:15 UTC	1390	IN	Data Raw: 2c 22 7a 69 22 3a 22 4b 61 6f 73 20 5c 75 32 30 31 34 20 43 6f 6d 65 64 79 20 73 65 72 69 65 73 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 56 50 31 7a 63 30 7a 44 41 75 73 79 69 32 4d 44 59 77 59 50 53 53 79 55 37 4d 4c 31 62 49 53 79 31 4a 79 38 6d 73 55 45 67 76 53 6b 33 4e 56 73 69 74 4c 4d 6e 49 7a 38 6c 50 72 77 51 41 4f 77 67 50 4c 77 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 43 45 41 41 6b 47 42 77 67 48 42 67 6b 49 42 77 67 4b 43 67 6b 4c 44 52 59 50 44 51 77 4d 44 52 73 55 46 52 41 57 49 42 30 69 49 69 41 64 48 78 38 6b 4b 44 51 73 4a 43 59 78 4a 78 38 66 Data Ascii: ,"zi":"Kaos \u2014 Comedy series","zl":8,"zp":{"gs_ssp":"eJzj4tVP1zc0zDAusyi2MDYwYPSSyU7ML1bISy1Jy8msUEgvSk3NVsitLMnIz8lPrwQAOwgPLw"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBwgHBgkIBwgKCgkLDRYPDQwMDRsUFRAWIB0iIiAdHx8kKDQsJCYxJx8f
2024-09-01 20:15:15 UTC	1390	IN	Data Raw: 75 4e 4e 4a 4b 6c 48 75 72 6a 56 35 76 4c 39 77 6e 76 79 4a 4d 6c 44 53 56 6e 4c 66 53 4c 77 6c 49 7a 6f 6b 65 48 37 30 7a 37 63 33 70 55 6d 51 69 30 78 6a 31 47 69 4f 6c 49 2b 4a 77 6a 51 65 41 42 2b 5a 35 59 72 6d 64 38 6c 42 32 52 36 4f 30 72 4c 54 4a 36 78 48 42 53 2b 5a 38 4f 56 56 39 4f 63 57 69 47 77 68 4a 6c 52 58 41 6c 4a 6b 78 2b 2f 44 68 30 2b 6c 55 6a 64 47 6d 70 6b 64 31 42 57 55 6f 56 36 30 67 59 42 42 47 44 67 63 65 65 61 46 56 68 51 79 43 4f 32 6d 4e 61 42 33 4d 63 35 71 35 4c 4d 78 49 53 56 4e 45 45 46 74 77 44 51 38 64 4e 61 64 4c 44 49 6e 71 6d 4d 76 4c 54 76 38 41 71 31 64 4b 36 55 62 76 66 31 75 58 4d 6e 79 50 62 53 6a 43 6c 50 4c 67 4d 7a 75 69 36 61 45 34 6a 31 69 74 66 55 75 70 47 46 44 50 77 35 77 43 4f 52 79 61 4f 74 62 55 49 4d Data Ascii: uNNJKlHurjV5vL9wnvyJMlDSVnLfSLwlIzokeH70z7c3pUmQi0xj1GiOlI+JwjQeAB+Z5Yrmd8lB2R6O0rLTJ6xHBS+Z8OVV9OcWiGwhJlRXAlJkx+/Dh0+lUjdGmpkd1BWUoV60gYBBGDgceeaFVhQyCO2mNaB3Mc5q5LMxISVNEEFtwDQ8dNadLDInqmMvLTv8Aq1dK6Ubvf1uXMnyPbSjClPLgMzui6aE4j1itfUupGFDPw5wCORyaOtbUIM
2024-09-01 20:15:15 UTC	1390	IN	Data Raw: 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 73 79 72 61 63 75 73 65 20 66 6f 6f 74 62 61 6c 6c 22 2c 34 36 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 6c 6d 22 3a 5b 5d 2c 22 7a 66 22 3a 33 33 2c 22 7a 68 22 3a 22 53 79 72 61 63 75 73 65 20 4f 72 61 6e 67 65 20 66 6f 6f 74 62 61 6c 6c 22 2c 22 7a 69 22 3a 22 46 6f 6f 74 62 61 6c 6c 20 74 65 61 6d 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 4c 50 31 54 63 77 4e 61 5f 49 71 53 77 30 59 50 51 53 4c 4b 34 73 53 6b 77 75 4c 55 35 56 53 4d 76 50 4c 30 6c 4b 7a 4d 6b 42 41 4a 36 2d 43 72 67 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 Data Ascii: l":8,"zp":{"gs_ss":"1"}}],["syracuse football",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Syracuse Orange football","zi":"Football team","zl":8,"zp":{"gs_ssp":"eJzj4tLP1TcwNa_IqSw0YPQSLK4sSkwuLU5VSMvPL0lKzMkBAJ6-Crg"},"zs":"data:image/png;base64,iVBORw
2024-09-01 20:15:15 UTC	806	IN	Data Raw: 6a 42 30 53 4a 41 51 6b 6a 6d 62 51 4d 37 4c 74 7a 77 33 75 48 4b 49 55 55 54 44 45 48 6b 6b 78 5a 53 51 57 53 64 49 2f 6b 7a 6b 38 2b 57 4c 52 34 34 63 4f 64 4b 45 33 7a 63 4a 57 69 50 78 42 47 70 52 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 22 7d 5d 2c 5b 22 76 79 62 7a 20 6b 61 72 74 65 6c 20 63 6f 6e 63 65 72 74 20 74 69 63 6b 65 74 73 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 79 65 6c 6c 6f 77 73 74 6f 6e 65 20 74 72 61 69 6c 65 72 20 73 65 61 73 6f 6e 20 35 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 Data Ascii: jB0SJAQkjmbQM7Ltzw3uHKIUUTDEHkkxZSQWSdI/kzk8+WLR44cOdKE3zcJWiPxBGpRAAAAAElFTkSuQmCC"}],["vybz kartel concert tickets",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["yellowstone trailer season 5",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"g
2024-09-01 20:15:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0