Edit tour

Windows Analysis Report
https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer

Overview

General Information

Sample URL:	https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer
Analysis ID:	1520177
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Found iframes

HTML body contains password input but no form action

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2920 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6600 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4880 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6380 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 909sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://groups.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://groups.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=p0KA4bOMouCceP2V2lH1FUFMcSxSOgS0x7FgZZlAXTsUEuIFLP5uYzW5hAvZuITiy2J428X4m6Xe_4f6PZ_5ywMnne5o3kj5eT0GH5dtle35CoAvZ-amUTai7_AadbtOi01BsaSsmp3V0Yaz5VUFOTRtEdq_P-xo49nPizmK_5D52-pMwA

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=572632672&timestamp=1727410250804
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=572632672&timestamp=1727410250804
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=572632672&timestamp=1727410250804
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1462865046&timestamp=1727410297599
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1462865046&timestamp=1727410297599
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-1462865046&timestamp=1727410297599
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No favicon
Source: https://about.google/products/?tab=gh	HTTP Parser: No favicon
Source: https://about.google/products/?tab=gh	HTTP Parser: No favicon
Source: https://about.google/products/?tab=gh	HTTP Parser: No favicon
Source: https://about.google/products/?tab=gh	HTTP Parser: No favicon
Source: https://about.google/products/?tab=gh	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrrU6A1pu0R6hlSDt168tDCszJ8TJKD1GW9PVsAiFMYbRuyuqQabw&rip=1&sacu=1&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1930097166%3A1727410245809500&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1895918901%3A1727410292075830&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.youtube.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link" equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.facebook.com/Google" equals www.facebook.com (Facebook)
Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.linkedin.com/company/google" equals www.linkedin.com (Linkedin)
Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.youtube.com/user/Google" equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/musicpremium"> equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/yt/about/"> equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.youtube.com/musicpremium" equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.youtube.com/yt/about/" equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC" equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr	String found in binary or memory: href="https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC" equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=iwa(d),jE(c)&&(d=c));c=new g.XL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=iE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|iE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=is(d,h,GJa):h&&(d="embedded");this.Ja=d;Qqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: Io.prototype.Ia=function(){return this.C};var kna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var Ro;g.Ko=null;g.Mo=!1;g.So=1;Ro=Symbol("SIGNAL");g.To={version:0,r_:0,Om:!1,eg:void 0,Sy:void 0,An:void 0,LL:0,hj:void 0,Ou:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_219.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=S.length,na=0;na<la;na++)if(!u&&c(S[na],H.Ge)){hJ("https://www.youtube.com/iframe_api");u=!0;break}})}}else F(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new VF("0","fakesb",{video:new RF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new oN(new g.XL("http://www.youtube.com/videoplayback"),c,"fake"):new FN(new g.XL("http://www.youtube.com/videoplayback"),c,new $M(0,0),new $M(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_219.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_505.2.dr, chromecache_566.2.dr	String found in binary or memory: Mf=w(["https://sandbox.google.com/tools/feedback/"]),Nf=w(["https://www.google.cn/tools/feedback/"]),Of=w(["https://help.youtube.com/tools/feedback/"]),Pf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Qf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Rf=w(["https://localhost.corp.google.com/inapp/"]),Sf=w(["https://localhost.proxy.googlers.com/inapp/"]),Tf=V(vf),Uf=[V(wf),V(xf)],Vf=[V(yf),V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff),V(Gf),V(Hf)],Wf=[V(If),V(Jf)],Xf= equals www.youtube.com (Youtube)
Source: chromecache_266.2.dr	String found in binary or memory: U.prototype.init=function(){var a=this,c=new Event("Event");c.initEvent(cd.API_INITIALIZED,!0,!1);this.apiInitialized?document.dispatchEvent(c):this.apiInitPromise=new Promise(function(e){window.onYouTubeIframeAPIReady=function(){a.apiInitialized=!0;document.dispatchEvent(c);e()}});if(!window.YT){var d=document.createElement("script");document.body.appendChild(d);d.src="https://www.youtube.com/iframe_api"}};U.prototype.isApiReady=function(){return"object"===typeof window.YT&&"function"===typeof window.YT.Player}; equals www.youtube.com (Youtube)
Source: chromecache_266.2.dr	String found in binary or memory: Xc.TABSET_PANELCONTAINER="glue-tabs__panelgroup";Xc.TABSET_PAGE="glue-tabs__panel";var Yc,Zc=Yc\|\|(Yc={});Zc.PANELS_KEY="data-glue-expansion-panels-key";Zc.TOGGLEFOR="data-glue-expansion-panel-toggle-for";Zc.INITIAL="data-glue-expansion-panel-initial";var $c,ad=$c\|\|($c={});ad.MISSING_PAGE_LIST="No element with glue-tabpanels__page-list class was found. TabPanels requires a Panels Page List";ad.MISSING_PANEL_LIST="No element with glue-tabpanels__panel-list class was found. TabPanels requires a Panel List";var bd;(bd\|\|(bd={})).IFRAME_SCRIPT_URL="https://www.youtube.com/iframe_api";var cd,dd=cd\|\|(cd={});dd.YT_IFRAME_READY_EVENT="onYouTubeIframeAPIReady";dd.API_INITIALIZED="glue.ui.ytVideo.IframeApiInitalized";dd.IS_VISIBLE="glue.isVisible";dd.IS_HIDDEN="glue.isHidden";var ed,fd=ed\|\|(ed={});fd.VIDEO_ID="glueYtVideoId";fd.PLAYER_ID="glueYtPlayerId";fd.HEIGHT="glueYtVideoHeight";fd.WIDTH="glueYtVideoWidth";fd.PLAYER_VARS="glueYtVideoPlayerVars";function U(){this.apiInitialized=this.isApiReady();this.videoObjects=new Map;this.init()}U.getManager=function(){U.instance\|\|(U.instance=new U);return U.instance};U.destroyManager=function(){U.instance=void 0}; equals www.youtube.com (Youtube)
Source: chromecache_210.2.dr	String found in binary or memory: _.iq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.iq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.iq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.iq(_.rq(c))+"&hl="+_.iq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.iq(m)+"/chromebook/termsofservice.html?languageCode="+_.iq(d)+"&regionCode="+_.iq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(rY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.pY(a.errorMessage)):this.Cd(rY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,DF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.It)(),iT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=sP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Qn=r;tP(this,a,!0);this.La=new OO;g.P(this,this.La);q=b?b.innertubeApiKey:ks("",a.innertube_api_key);p=b?b.innertubeApiVersion:ks("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ks("",a.innertube_context_client_version);q=g.$q("INNERTUBE_API_KEY")\|\|q;p=g.$q("INNERTUBE_API_VERSION")\|\|p;l=g.$q("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=HO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.xP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.DR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.AE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: g.KP=function(a){var b=g.xP(a);RJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.xP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.oP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),au&&(a=ana())&&(b.ebc=a));return g.Ui(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: g.xP=function(a){a=sP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_205.2.dr, chromecache_467.2.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_473.2.dr, chromecache_495.2.dr, chromecache_653.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(JO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.lO(this.B)?kO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_223.2.dr	String found in binary or memory: var D2={};var Mdb={Fs:[{IB:/Unable to load player module/,weight:20},{IB:/Failed to fetch/,weight:500},{IB:/XHR API fetch failed/,weight:10},{IB:/JSON parsing failed after XHR fetch/,weight:10},{IB:/Retrying OnePlatform request/,weight:10},{IB:/CSN Missing or undefined during playback association/,weight:100}],Mr:[{callback:K7a,weight:500}]};var X7a=/[&\?]action_proxy=1/,W7a=/[&\?]token=([\w-])/,Y7a=/[&\?]video_id=([\w-])/,Z7a=/[&\?]index=([\d-])/,$7a=/[&\?]m_pos_ms=([\d-])/,b8a=/[&\?]vvt=([\w-]*)/,O7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),a8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),R7a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_494.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/b0557ce3\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: groups.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: about.google
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: scone-pa.clients6.google.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4880 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2336 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4880 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5604 --field-trial-handle=2272,i,8591034370291407407,9032133310609538472,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/googleapis.proxy.js?onload=startup	0%	Avira URL Cloud	safe
https://youtu.be/	0%	URL Reputation	safe
https://grow.google/applied-digital-skills/?utm_source=gDigital&utm_medium=empro-aboutsite&u	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam	0%	Avira URL Cloud	safe
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	0%	Avira URL Cloud	safe
https://play.google.com/work/enroll?identifier=	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsb	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUD	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120	0%	Avira URL Cloud	safe
https://www.google.com/retail/shopping-campaigns/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3Rb	0%	Avira URL Cloud	safe
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhg	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7L	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xr	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82Mi	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz	0%	Avira URL Cloud	safe
https://scholar.google.com/intl/en-US/scholar/about.html	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTz	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79t	0%	Avira URL Cloud	safe
https://grow.google/certificates/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaig	0%	Avira URL Cloud	safe
https://wallet.google/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI06	0%	Avira URL Cloud	safe
https://pay.google.com/about/	0%	Avira URL Cloud	safe
https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9m	0%	Avira URL Cloud	safe
https://www.google.com/sheets/about/?utm_source=gaboutpage&utm_medium=sheetslink&utm_campaig	0%	Avira URL Cloud	safe

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/client.js	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js	false	Avira URL Cloud: safe	unknown
https://about.google/assets-products/img/glue-icons.svg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/remote.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120	false	Avira URL Cloud: safe	unknown
https://about.google/assets-products/img/glue-google-color-logo.svg	false	Avira URL Cloud: safe	unknown
https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/KKfAuQrwzTY/sddefault.jpg	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/mjVS_Izc6fGAvuaT0v--gb2so5mZvAbI5EUMUB41cWB7tpy81trBCR8rIlj8NoKgPzDWGN-Hs97NlW0T9W57YJ5z9A8QQWwXUYa_Zg=h120	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/7j1-9AjGTjyFcEDU5lJw2BpZNYWNKgkxegHVv012Pm5OPBratN5ZsNVtpILRwXqE5Givogcj2VMswYdKR1dKvLvo2EQFSM0p7yTxYw=h120	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_505.2.dr, chromecache_566.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsb	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUD	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://grow.google/applied-digital-skills/?utm_source=gDigital&utm_medium=empro-aboutsite&u	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_505.2.dr, chromecache_566.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_444.2.dr, chromecache_210.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3Rb	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7L	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/retail/shopping-campaigns/	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhg	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xr	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82Mi	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/v/widget/save	chromecache_205.2.dr, chromecache_467.2.dr	false	URL Reputation: safe	unknown
https://scholar.google.com/intl/en-US/scholar/about.html	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTz	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://grow.google/certificates/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaig	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79t	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_505.2.dr, chromecache_566.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9m	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://wallet.google/	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI06	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://pay.google.com/about/	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/sheets/about/?utm_source=gaboutpage&utm_medium=sheetslink&utm_campaig	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qa	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_223.2.dr	false	Avira URL Cloud: safe	unknown
https://sandbox.google.com/inapp/%	chromecache_505.2.dr, chromecache_566.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/api.js	chromecache_392.2.dr, chromecache_409.2.dr, chromecache_588.2.dr	false	URL Reputation: safe	unknown
https://artsandculture.google.com/?utm_medium=referral&utm_source=about.google	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-q	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_205.2.dr, chromecache_467.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmL	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://lh3.googleusercontent.com/bTCEdj_CIN7JchQHPPZaDQfS-zd-ubGjDb-kaEWcKuBbed54w1zLWdO9IQkJxw6HND	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://shopping.google.com/?nord=1?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_443.2.dr	false	Avira URL Cloud: safe	unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_505.2.dr, chromecache_566.2.dr	false	URL Reputation: safe	unknown

Name	IP	Active	Malicious	Reputation
scone-pa.clients6.google.com	216.58.212.170	true	false	unknown
groups-alv.google.com	216.239.36.177	true	false	unknown
plus.l.google.com	142.250.185.238	true	false	unknown
i.ytimg.com	142.250.186.118	true	false	unknown
static.doubleclick.net	142.250.185.166	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
about.google	216.239.32.29	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
youtube-ui.l.google.com	142.250.186.46	true	false	unknown
play.google.com	216.58.212.142	true	false	unknown
www3.l.google.com	142.250.186.110	true	false	unknown
googleads.g.doubleclick.net	142.250.185.66	true	false	unknown
groups.google.com	64.233.166.138	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	142.250.186.51	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.186.65	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
blog.google	216.239.38.21	true	false	unknown
googlehosted.l.googleusercontent.com	216.58.206.65	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
www.blog.google	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
accounts.youtube.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.225	unknown	United States	15169	GOOGLEUS	false
142.250.186.118	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.182	unknown	United States	15169	GOOGLEUS	false
142.250.186.110	www3.l.google.com	United States	15169	GOOGLEUS	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
142.250.185.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.193	unknown	United States	15169	GOOGLEUS	false
142.250.185.238	plus.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
142.250.185.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
216.239.38.21	blog.google	United States	15169	GOOGLEUS	false
142.250.186.51	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
216.239.36.177	groups-alv.google.com	United States	15169	GOOGLEUS	false
216.239.32.29	about.google	United States	15169	GOOGLEUS	false
216.58.206.65	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
64.233.166.138	groups.google.com	United States	15169	GOOGLEUS	false
142.250.186.65	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520177
Start date and time:	2024-09-27 06:09:33 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@27/696@70/28
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://accounts.google.com/AccountChooser?continue=https://groups.google.com/g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium%3Demail%26utm_source%3Dfooter&faa=1 Browse: https://groups.google.com/g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium=email&utm_source=footer Browse: https://www.google.com/intl/en/about/products?tab=gh Browse: https://groups.google.com/my-groups

Input	Output
URL: https://groups.google.com/access-error?continue=https://groups.google.com/g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium%3Demail%26utm_source%3Dfooter Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrr Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fg%2Fdiplomat-list%2Fc%2F16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com%3Futm_medium%3Demail%26utm_source%3Dfooter&faa=1&ifkv=ARpgrqf8EXJGVLbkxOmNzFz9HYrr Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a well-established domain name.", "The input fields 'Email or phone' and 'Password' are typical for a login page associated with Google services."], "brand_matches":[true], "url_match":true, "brand_input":"Google", "input_fields":"Email or phone, Password"}

URL: https://about.google/products/?tab=gh Model: jbxai	{ "brand":["Globi"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=120 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=120 Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fgroups.google.com%2Fmy-groups&followup=https%3A%2F%2Fgroups.google.com%2Fmy-groups&ifkv=ARpgrqe6lzqbQHOavwSsjZviFkrZDdlxeCP7ru-vcuuNvKnp8JMdF7Cxx9qCU-dAmynghHVG4Wpm&osid=1&passive=120 Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a well-established domain name.", "The input fields 'Email or phone' and 'Password' are typical for a login page associated with Google services."], "brand_matches":[true], "url_match":true, "brand_input":"Google", "input_fields":"Email or phone, Password"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	7.667621565226602
Encrypted:	false
SSDEEP:	48:3p6uEdAl1D4ZoyRIIYDwFi2mfaJ4nhjK0V6X+N:3kuDWZoyRMr1f+whjZQQ
MD5:	0B6D9F3D556E046FA43AD9C31F966968
SHA1:	67325397FC4C0434C3EC60CA1A4601271E5BE389
SHA-256:	33FBAB52B8F48572CB07BA5A739EB72BC11D8DE1234C5AE8C43584B3F948A0CA
SHA-512:	B07FDC7FA7FD06BFD2FA0014891C2CF55C07A292328CB7984ED1396B2F3B874B2080EE9F87F879273BD29E1DD10095AA40944F6EC03FC3CD1902AC88D3D4AD6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F.....[PLTE...{..kx.ds.....mz...hu...x....]l....Te................}..CT.?Q.CU.>P.JU.AM.@Q.:N....AO.<J.GQ.>O.@P.;L.:K.>J.cq.bq.bp.ap.`o.`n._n.^m.^l.Wf.Rb.Qa.Pa.P`.O_.N_.M^.M].L].L]....Sc.L\.Te.K\.Sc.JZ....K[....K\......J[....lz.IZ.IY......IZ.Q`....JZ.IY.HW.fq......J[.HY.@O.?L.=L.=L.=K.<J.<J.;I.;J.;J.;J.<K.GW.BQ.?N.?N.>M.=L.=M.=L.=M.GV.AP.@N.AN.@N.@M.?L.?M.>M.HY.GX.BQ.@P.@O.?N.>N.IY.GX.BS.AR.AS.@Q.@P.?O.CS.BS.BR.BQ.AP.AQ.@P.GY.CS.BR.AP.DS.BS.AQ.FX.DT.CR.BQ.FX.BR.FW.ET.DS.GX.DU.CT.BS.AS.DT.CS.BS.FV.CT.BT.FW.EU.DT.CU.EV.DU.EV.CT.DU....DV.DV.DU....CT.BT.AS.AR.@R.@R.BS.?Q.>P.BS.>P.@P.?P.>O.>N.=N.<M./aG....(tRNS.6..h..S.J3K.M.OPOONOWl..-+...../...-P.......IDATx...$E.E...S......z^.........-pw..wmo...U...NOK.9..M)....@..W.P.......q...D\|...$y$.3.Md..6...9...1.>.....l.......a7..-s..w..C.....M..#..FE7..w.......@MQoXh(......."...X.D%.M...M: .W...w,6/.K..X..._%...R......9......R......4 ......I;.h..>8P.......c...............e.P.`.....

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 06:10:30.818164110 CEST	192.168.2.4	1.1.1.1	0xd29a	Standard query (0)	groups.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:30.818517923 CEST	192.168.2.4	1.1.1.1	0xf9e7	Standard query (0)	groups.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:32.773938894 CEST	192.168.2.4	1.1.1.1	0x49c6	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:32.774164915 CEST	192.168.2.4	1.1.1.1	0xae7	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:35.939323902 CEST	192.168.2.4	1.1.1.1	0x197f	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:35.939718962 CEST	192.168.2.4	1.1.1.1	0x568d	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:36.306293964 CEST	192.168.2.4	1.1.1.1	0xcb66	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:36.306559086 CEST	192.168.2.4	1.1.1.1	0xc5df	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:38.492129087 CEST	192.168.2.4	1.1.1.1	0x9b01	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:38.492657900 CEST	192.168.2.4	1.1.1.1	0x5aa2	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:40.127454042 CEST	192.168.2.4	1.1.1.1	0xce5d	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:40.127645016 CEST	192.168.2.4	1.1.1.1	0x5e9c	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:40.797879934 CEST	192.168.2.4	1.1.1.1	0x1e86	Standard query (0)	groups.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:40.798438072 CEST	192.168.2.4	1.1.1.1	0xd9ad	Standard query (0)	groups.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:51.600016117 CEST	192.168.2.4	1.1.1.1	0x2a47	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:51.600016117 CEST	192.168.2.4	1.1.1.1	0x25f2	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:10:55.617834091 CEST	192.168.2.4	1.1.1.1	0xcf1	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:10:55.618170977 CEST	192.168.2.4	1.1.1.1	0xa36c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:00.980253935 CEST	192.168.2.4	1.1.1.1	0xc00a	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:00.980376005 CEST	192.168.2.4	1.1.1.1	0xc82f	Standard query (0)	about.google	65	IN (0x0001)	false
Sep 27, 2024 06:11:03.181907892 CEST	192.168.2.4	1.1.1.1	0x7d5	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:03.182164907 CEST	192.168.2.4	1.1.1.1	0x20c5	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:04.159077883 CEST	192.168.2.4	1.1.1.1	0x128d	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:04.159429073 CEST	192.168.2.4	1.1.1.1	0xa785	Standard query (0)	about.google	65	IN (0x0001)	false
Sep 27, 2024 06:11:05.126501083 CEST	192.168.2.4	1.1.1.1	0xd363	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:05.126642942 CEST	192.168.2.4	1.1.1.1	0x11e8	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:05.223469019 CEST	192.168.2.4	1.1.1.1	0x57d5	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:05.223669052 CEST	192.168.2.4	1.1.1.1	0x6b1f	Standard query (0)	www.blog.google	65	IN (0x0001)	false
Sep 27, 2024 06:11:06.109452009 CEST	192.168.2.4	1.1.1.1	0x9fe3	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:06.109616041 CEST	192.168.2.4	1.1.1.1	0x787d	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:06.110079050 CEST	192.168.2.4	1.1.1.1	0x48d2	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:06.110290051 CEST	192.168.2.4	1.1.1.1	0x6d1d	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:06.408006907 CEST	192.168.2.4	1.1.1.1	0xe895	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:06.408358097 CEST	192.168.2.4	1.1.1.1	0xec25	Standard query (0)	blog.google	65	IN (0x0001)	false
Sep 27, 2024 06:11:07.303551912 CEST	192.168.2.4	1.1.1.1	0x69ec	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:07.303934097 CEST	192.168.2.4	1.1.1.1	0x2fb4	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:07.306005001 CEST	192.168.2.4	1.1.1.1	0xb9f8	Standard query (0)	blog.google	65	IN (0x0001)	false
Sep 27, 2024 06:11:07.306005001 CEST	192.168.2.4	1.1.1.1	0xf554	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:09.976038933 CEST	192.168.2.4	1.1.1.1	0x1959	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:09.976336956 CEST	192.168.2.4	1.1.1.1	0x1054	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:11.102755070 CEST	192.168.2.4	1.1.1.1	0xb5f2	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:11.103071928 CEST	192.168.2.4	1.1.1.1	0x8687	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:12.590027094 CEST	192.168.2.4	1.1.1.1	0x844d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:12.590544939 CEST	192.168.2.4	1.1.1.1	0xeaea	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:14.151555061 CEST	192.168.2.4	1.1.1.1	0x554f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:14.151766062 CEST	192.168.2.4	1.1.1.1	0x8bae	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:16.125602007 CEST	192.168.2.4	1.1.1.1	0xa05f	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:16.125863075 CEST	192.168.2.4	1.1.1.1	0x85bd	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:17.136584044 CEST	192.168.2.4	1.1.1.1	0x35c9	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:17.136725903 CEST	192.168.2.4	1.1.1.1	0xc4c7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:11:17.143944025 CEST	192.168.2.4	1.1.1.1	0x3258	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:17.144068003 CEST	192.168.2.4	1.1.1.1	0x2de	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:11:17.297444105 CEST	192.168.2.4	1.1.1.1	0x1ab0	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:17.313621044 CEST	192.168.2.4	1.1.1.1	0xa5c8	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:17.740899086 CEST	192.168.2.4	1.1.1.1	0xc669	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:17.741146088 CEST	192.168.2.4	1.1.1.1	0xcae8	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:18.066905975 CEST	192.168.2.4	1.1.1.1	0xc55d	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:18.067203999 CEST	192.168.2.4	1.1.1.1	0x14cb	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:11:18.156668901 CEST	192.168.2.4	1.1.1.1	0xf500	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:18.156810045 CEST	192.168.2.4	1.1.1.1	0x9353	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:18.323107958 CEST	192.168.2.4	1.1.1.1	0xb583	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:18.323251009 CEST	192.168.2.4	1.1.1.1	0x4f96	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:19.226164103 CEST	192.168.2.4	1.1.1.1	0x77ca	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:19.226486921 CEST	192.168.2.4	1.1.1.1	0x537e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 27, 2024 06:11:19.626105070 CEST	192.168.2.4	1.1.1.1	0x850	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:19.626665115 CEST	192.168.2.4	1.1.1.1	0x26fa	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:39.576960087 CEST	192.168.2.4	1.1.1.1	0x363f	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:39.577629089 CEST	192.168.2.4	1.1.1.1	0xcb7e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 27, 2024 06:11:41.496614933 CEST	192.168.2.4	1.1.1.1	0x73dd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 06:11:41.497008085 CEST	192.168.2.4	1.1.1.1	0xd832	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:31 UTC	910	OUT	GET /d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer HTTP/1.1 Host: groups.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:10:31 UTC	2678	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:10:31 GMT Location: https://groups.google.com/g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium=email&utm_source=footer P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/GroupsFrontendRedirectsUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-hgxVdX9INVkR7gZ2FCn-sA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/GroupsFrontendRedirectsUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/GroupsFrontendRedirectsUi/cspreport/allowlist Cross-Origin-Opener-Policy: same-origin Content-Security-Policy-Report-Only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-groups/_/js/k=boq-groups.GroupsFrontendRedirectsUi.en_US.pAMMtf5fkC4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/;report-uri /_/GroupsFrontendRedirectsUi/cspreport/fine-allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=517=p0KA4bOMouCceP2V2lH1FUFMcSxSOgS0x7FgZZlAXTsUEuIFLP5uYzW5hAvZuITiy2J428X4m6Xe_4f6PZ_5ywMnne5o3kj5eT0GH5dtle35CoAvZ-amUTai7_AadbtOi01BsaSsmp3V0Yaz5VUFOTRtEdq_P-xo49nPizmK_5D52-pMwA; expires=Sat, 29-Mar-2025 04:10:31 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:31 UTC	1393	OUT	GET /g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium=email&utm_source=footer HTTP/1.1 Host: groups.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=p0KA4bOMouCceP2V2lH1FUFMcSxSOgS0x7FgZZlAXTsUEuIFLP5uYzW5hAvZuITiy2J428X4m6Xe_4f6PZ_5ywMnne5o3kj5eT0GH5dtle35CoAvZ-amUTai7_AadbtOi01BsaSsmp3V0Yaz5VUFOTRtEdq_P-xo49nPizmK_5D52-pMwA
2024-09-27 04:10:31 UTC	1944	IN	HTTP/1.1 302 Found Content-Type: application/binary Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:10:31 GMT Location: https://groups.google.com/access-error?continue=https://groups.google.com/g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium%3Demail%26utm_source%3Dfooter Cross-Origin-Opener-Policy: unsafe-none Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: script-src 'report-sample' 'nonce-gwlwC54aNELdUBA3LIKBQw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/GroupsFrontendUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/GroupsFrontendUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/GroupsFrontendUi/cspreport Cross-Origin-Resource-Policy: same-site Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:32 UTC	1447	OUT	GET /access-error?continue=https://groups.google.com/g/diplomat-list/c/16c74709-91ab-4240-9c95-e5b6e7d03189n@googlegroups.com?utm_medium%3Demail%26utm_source%3Dfooter HTTP/1.1 Host: groups.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-wow64: ?0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=p0KA4bOMouCceP2V2lH1FUFMcSxSOgS0x7FgZZlAXTsUEuIFLP5uYzW5hAvZuITiy2J428X4m6Xe_4f6PZ_5ywMnne5o3kj5eT0GH5dtle35CoAvZ-amUTai7_AadbtOi01BsaSsmp3V0Yaz5VUFOTRtEdq_P-xo49nPizmK_5D52-pMwA
2024-09-27 04:10:32 UTC	2264	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:10:32 GMT Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/GroupsFrontendUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-7kbMEajiqmKgWonADY9cIw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/GroupsFrontendUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/GroupsFrontendUi/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: unsafe-none Cross-Origin-Resource-Policy: same-site reporting-endpoints: default="/_/GroupsFrontendUi/web-reports?context=eJzjesGoxSXF4KohxbBacQfT8Vc7mM683cGkoLeTycJgJ9OPuJ1MWfk7mUJ7djIZb9rJZArEDid2Mj29sYvpnvRuppfqu5k-AzGX1m4mESBW9L_JpAPEc9pvMnkcuMkUBMQxDreY0oB47p5HTMuBeN_VJ0wngDhm8jOmNCCW-PqSSQuIuQ9NZxUFYmvZGayuQOyUPoM1BIjtJ81g9QTi1pvnWKcD8ffQ86yMYedZk_6dZy0B4iN8F1jPAfFKsQusm4F4ScRF1iOJF1kNFS6xOgNxkcQV1hYgFuLh2PHgxnY2gQVnvn9hUlJPyi-MTy_KLy0oTivKzytJzUspTi0qSy2KNzIwMjGwNDTTMzCPLzAAAIibdec" Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 72 6f 75 70 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 65 73 73 2d 65 72 72 6f 72 22 3e 3c 6d 65 74 Data Ascii: 8000<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://groups.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><link rel="canonical" href="https://groups.google.com/access-error"><met
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 38 37 35 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 75 64 73 4a 51 65 5c 22 5d 2c 5b 34 35 34 34 37 39 33 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 56 43 54 4d 51 62 5c 22 5d 2c 5b 34 35 36 34 36 37 39 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 51 38 37 37 41 62 5c 22 5d 2c 5b 34 35 34 34 37 39 34 33 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 52 4b 31 58 41 5c 22 5d 2c 5b 34 35 34 34 37 39 35 30 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 6c 55 30 61 6c 64 5c 22 5d 2c 5b 34 35 34 34 37 39 35 33 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c Data Ascii: 875,null,true,null,null,null,\"udsJQe\"],[45447931,null,false,null,null,null,\"VCTMQb\"],[45646796,null,false,null,null,null,\"Q877Ab\"],[45447943,null,true,null,null,null,\"RK1XA\"],[45447950,null,false,null,null,null,\"lU0ald\"],[45447953,null,false,nul
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 64 4d 56 76 63 22 3a 22 74 72 75 65 22 2c 22 4f 65 52 63 33 64 22 3a 22 74 72 75 65 22 2c 22 70 61 5a 77 4a 22 3a 22 74 72 75 65 22 2c 22 63 6b 66 6e 67 65 22 3a 22 74 72 75 65 22 2c 22 4d 67 79 6f 68 66 22 3a 22 66 61 6c 73 65 22 2c 22 75 64 73 4a 51 65 22 3a 22 74 72 75 65 22 2c 22 56 43 54 4d 51 62 22 3a 22 66 61 6c 73 65 22 2c 22 6a 62 54 73 41 65 22 3a 22 66 61 6c 73 65 22 2c 22 57 68 37 6f 6e 22 3a 22 74 72 75 65 22 2c 22 72 45 4e 45 46 64 22 3a 22 74 72 75 65 22 2c 22 69 7a 65 6c 77 63 22 3a 22 74 72 75 65 22 2c 22 68 4d 50 55 33 63 22 3a 22 74 72 75 65 22 2c 22 67 76 47 4c 4b 22 3a 22 68 74 74 70 73 3a 2f 2f 66 6f 72 6d 73 2e 67 6c 65 2f 44 75 51 55 59 61 76 48 68 77 66 45 6f 34 73 70 39 22 2c 22 6a 6c 4a 5a 49 22 3a 22 66 61 6c 73 65 22 2c 22 6a Data Ascii: dMVvc":"true","OeRc3d":"true","paZwJ":"true","ckfnge":"true","Mgyohf":"false","udsJQe":"true","VCTMQb":"false","jbTsAe":"false","Wh7on":"true","rENEFd":"true","izelwc":"true","hMPU3c":"true","gvGLK":"https://forms.gle/DuQUYavHhwfEo4sp9","jlJZI":"false","j
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 76 61 72 20 62 3d 6e 28 22 70 72 74 22 29 3b 61 2e 70 72 74 3d 62 7d 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 6c 28 27 6a 43 66 44 65 63 27 29 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 37 6b 62 4d 45 61 6a 69 71 6d 4b 67 57 6f 6e 41 44 59 39 63 49 77 22 3e 76 61 72 20 5f 46 5f 63 73 73 52 6f 77 4b 65 79 20 3d 20 27 62 6f 71 2d 67 72 6f 75 70 73 2e 47 72 6f 75 70 73 46 72 6f 6e 74 65 6e 64 55 69 2e 4a 4e 41 65 55 36 74 61 4a 76 59 2e 4c 2e 42 31 2e 4f 27 3b 76 61 72 20 5f 46 5f 63 6f 6d 62 69 6e 65 64 53 69 67 6e 61 74 75 72 65 20 3d 20 27 41 4c 41 64 78 44 6b 5a 68 7a 37 41 69 66 67 79 79 42 72 4e 57 2d 74 55 57 77 61 32 4b 64 6d 6a 56 67 27 3b 66 75 6e 63 74 69 6f 6e 20 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 Data Ascii: var b=n("prt");a.prt=b}};}).call(this);l('jCfDec')</script><script nonce="7kbMEajiqmKgWonADY9cIw">var _F_cssRowKey = 'boq-groups.GroupsFrontendUi.JNAeU6taJvY.L.B1.O';var _F_combinedSignature = 'ALAdxDkZhz7AifgyyBrNW-tUWwa2KdmjVg';function _DumpException(
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 32 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 75 61 6e 74 75 6d 57 69 7a 52 61 64 69 61 6c 49 6e 6b 53 70 72 65 61 64 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 2e 35 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 2e 35 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 75 61 6e 74 75 6d 57 69 7a 52 61 64 69 61 6c 49 6e 6b 46 6f 63 75 73 50 75 6c 73 65 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 29 3b 6f 70 61 63 69 74 79 3a 30 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 32 2e 35 29 3b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 55 Data Ascii: anslate(-50%,-50%) scale(2);opacity:1}}@keyframes quantumWizRadialInkSpread{0%{transform:scale(1.5);opacity:0}to{transform:scale(2.5);opacity:1}}@keyframes quantumWizRadialInkFocusPulse{0%{transform:scale(2);opacity:0}to{transform:scale(2.5);opacity:1}}.U
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 31 39 6b 66 20 2e 54 70 51 6d 39 64 3a 68 6f 76 65 72 2c 2e 41 6e 31 39 6b 66 20 2e 54 70 51 6d 39 64 3a 6c 69 6e 6b 2c 2e 41 6e 31 39 6b 66 20 2e 54 70 51 6d 39 64 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 31 39 36 37 64 32 7d 2e 59 68 51 4a 6a 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 31 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 2c 30 20 31 70 78 20 31 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 34 31 29 2c 30 20 31 70 78 20 33 70 78 20 30 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 32 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 31 61 37 33 65 38 7d 2e 59 68 51 4a 6a 2e 71 73 34 31 71 65 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 33 70 78 20 35 Data Ascii: 19kf .TpQm9d:hover,.An19kf .TpQm9d:link,.An19kf .TpQm9d:visited{color:#1967d2}.YhQJj{box-shadow:0 2px 1px -1px rgba(0,0,0,0.2),0 1px 1px 0 rgba(0,0,0,0.141),0 1px 3px 0 rgba(0,0,0,0.122);background-color:#fff;color:#1a73e8}.YhQJj.qs41qe{box-shadow:0 3px 5
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 2e 32 2c 31 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 2c 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 20 30 2e 33 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 30 2e 32 2c 31 29 3b 74 72 61 6e 73 69 Data Ascii: .2,1),-webkit-transform 0.3s cubic-bezier(0,0,0.2,1);-webkit-transition:opacity .2s cubic-bezier(0,0,0.2,1),-webkit-transform 0.3s cubic-bezier(0,0,0.2,1);transition:opacity .2s cubic-bezier(0,0,0.2,1),-webkit-transform 0.3s cubic-bezier(0,0,0.2,1);transi
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 20 31 32 70 78 7d 2e 44 52 73 47 79 64 2e 59 35 73 45 38 64 20 2e 6c 34 56 37 77 62 2c 2e 44 52 73 47 79 64 2e 59 68 51 4a 6a 20 2e 6c 34 56 37 77 62 7b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 7d 2e 6c 34 56 37 77 62 2e 63 64 32 39 53 64 7b 70 61 64 64 69 6e 67 3a 30 20 31 36 70 78 20 30 20 31 32 70 78 7d 2e 6c 34 56 37 77 62 2e 63 64 32 39 53 64 2e 6f 6c 74 74 56 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 2d 72 65 76 65 72 73 65 3b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 20 30 20 31 36 70 78 7d 2e 41 65 41 41 6b 66 2e 71 73 34 31 71 65 20 2e Data Ascii: 12px}.DRsGyd.Y5sE8d .l4V7wb,.DRsGyd.YhQJj .l4V7wb{padding:0 12px}.l4V7wb.cd29Sd{padding:0 16px 0 12px}.l4V7wb.cd29Sd.olttVd{display:flex;-webkit-box-orient:horizontal;box-orient:horizontal;flex-direction:row-reverse;padding:0 12px 0 16px}.AeAAkf.qs41qe .
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 2e 33 35 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2e 36 32 37 30 33 35 2c 30 2e 36 2c 30 2e 39 30 32 30 32 36 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 32 39 2e 34 39 37 32 37 34 25 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 31 30 35 2e 33 38 38 38 39 31 25 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 61 75 78 69 6c 69 61 72 79 2d 69 6e 64 65 74 65 72 6d 69 6e 61 74 65 2d 74 72 61 6e 73 6c 61 74 65 2d 72 65 76 65 72 73 65 7b 30 25 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 31 35 2c 30 2c 30 2e 35 31 35 30 35 38 2c 30 2e Data Ascii: .35%{animation-timing-function:cubic-bezier(0.4,0.627035,0.6,0.902026);transform:translateX(29.497274%)}to{transform:translateX(105.388891%)}}@keyframes auxiliary-indeterminate-translate-reverse{0%{animation-timing-function:cubic-bezier(0.15,0,0.515058,0.
2024-09-27 04:10:32 UTC	2264	IN	Data Raw: 73 69 7a 65 3a 31 30 70 78 20 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 27 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 2c 25 33 43 73 76 67 25 32 30 76 65 72 73 69 6f 6e 25 33 44 25 32 37 31 2e 31 25 32 37 25 32 30 78 6d 6c 6e 73 25 33 44 25 32 37 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 32 30 30 30 25 32 46 73 76 67 25 32 37 25 32 30 78 6d 6c 6e 73 25 33 41 78 6c 69 6e 6b 25 33 44 25 32 37 68 74 74 70 25 33 41 25 32 46 25 32 46 77 77 77 2e 77 33 2e 6f 72 67 25 32 46 31 39 39 39 25 32 46 78 6c 69 6e 6b 25 32 37 25 32 30 78 25 33 44 25 32 37 30 70 78 25 32 Data Ascii: size:10px 4px;background-repeat:repeat-x;background-image:url('data:image/svg+xml;charset=UTF-8,%3Csvg%20version%3D%271.1%27%20xmlns%3D%27http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%27%20xmlns%3Axlink%3D%27http%3A%2F%2Fwww.w3.org%2F1999%2Fxlink%27%20x%3D%270px%2

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:35 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:10:35 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45339 Date: Fri, 27 Sep 2024 04:10:35 GMT Connection: close X-CID: 2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 215

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 222

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Windows Analysis Report
https://groups.google.com/d/msgid/diplomat-list/16c74709-91ab-4240-9c95-e5b6e7d03189n%40googlegroups.com?utm_medium=email&utm_source=footer

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:36 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 04:10:36 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=45284 Date: Fri, 27 Sep 2024 04:10:36 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 04:10:36 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:36 UTC	1306	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=p0KA4bOMouCceP2V2lH1FUFMcSxSOgS0x7FgZZlAXTsUEuIFLP5uYzW5hAvZuITiy2J428X4m6Xe_4f6PZ_5ywMnne5o3kj5eT0GH5dtle35CoAvZ-amUTai7_AadbtOi01BsaSsmp3V0Yaz5VUFOTRtEdq_P-xo49nPizmK_5D52-pMwA
2024-09-27 04:10:36 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 126135 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 26 Sep 2024 00:21:53 GMT Expires: Fri, 26 Sep 2025 00:21:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 06 Sep 2024 22:07:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 100123 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:10:36 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 Data Ascii: rn a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 Data Ascii: defined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 30 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 Data Ascii: 0;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=funct
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 Data Ascii: ototype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolv
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d Data Ascii: regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 Data Ascii: this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 78 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 Data Ascii: xt,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.protot
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 Data Ascii: size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-09-27 04:10:36 UTC	1390	IN	Data Raw: 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: 14111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:37 UTC	1285	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 909 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://groups.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=p0KA4bOMouCceP2V2lH1FUFMcSxSOgS0x7FgZZlAXTsUEuIFLP5uYzW5hAvZuITiy2J428X4m6Xe_4f6PZ_5ywMnne5o3kj5eT0GH5dtle35CoAvZ-amUTai7_AadbtOi01BsaSsmp3V0Yaz5VUFOTRtEdq_P-xo49nPizmK_5D52-pMwA
2024-09-27 04:10:37 UTC	909	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 37 34 31 30 32 33 34 34 31 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1727410234414",null,null,nu
2024-09-27 04:10:37 UTC	938	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://groups.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA; expires=Sat, 29-Mar-2025 04:10:37 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Fri, 27 Sep 2024 04:10:37 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Fri, 27 Sep 2024 04:10:37 GMT Connection: close Transfer-Encoding: chunked
2024-09-27 04:10:37 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-09-27 04:10:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:38 UTC	545	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://groups.google.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: same-site Sec-Fetch-Dest: empty Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 04:10:38 UTC	518	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://groups.google.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Fri, 27 Sep 2024 04:10:38 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:39 UTC	805	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA
2024-09-27 04:10:40 UTC	915	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 126135 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 26 Sep 2024 10:43:14 GMT Expires: Fri, 26 Sep 2025 10:43:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 06 Sep 2024 22:07:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 62845 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:10:40 UTC	475	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 Data Ascii: n a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw E
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e Data Ascii: efined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object.
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 69 Data Ascii: ;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=functi
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 65 Data Ascii: totype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolve
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d 7d Data Ascii: egular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}}
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 Data Ascii: his.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&&
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 Data Ascii: t,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.prototy
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 Data Ascii: ize!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-09-27 04:10:40 UTC	1390	IN	Data Raw: 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 Data Ascii: 4111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:40 UTC	1302	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1351 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://groups.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA
2024-09-27 04:10:40 UTC	1351	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 22 62 6f 71 5f 67 72 6f 75 70 73 66 72 6f 6e 74 65 6e 64 73 65 72 76 65 72 5f 32 30 32 34 30 39 31 36 2e 30 37 5f 70 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 34 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 38 37 33 2c 5b 5b 22 31 37 32 37 34 31 30 32 33 36 37 33 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 34 34 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,"boq_groupsfrontendserver_20240916.07_p0",null,null,[4,0,0,0,0]]],873,[["1727410236738",null,null,null,null,null,null,null,null,null,null,null,null,null,14400,null,null,nul
2024-09-27 04:10:40 UTC	521	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://groups.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 27 Sep 2024 04:10:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:10:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-09-27 04:10:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:40 UTC	1293	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 914 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://groups.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA
2024-09-27 04:10:40 UTC	914	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 2d 55 53 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 37 34 31 30 32 33 36 38 32 36 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en-US",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1727410236826",null,null,nu
2024-09-27 04:10:40 UTC	521	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://groups.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Fri, 27 Sep 2024 04:10:40 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:10:40 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-09-27 04:10:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:40 UTC	1451	OUT	POST /_/GroupsFrontendUi/browserinfo?f.sid=7488684934487393668&bl=boq_groupsfrontendserver_20240916.07_p0&hl=en-US&soc-app=696&soc-platform=1&soc-device=1&_reqid=640&rt=j HTTP/1.1 Host: groups.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://groups.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA
2024-09-27 04:10:40 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-09-27 04:10:40 UTC	1155	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 27 Sep 2024 04:10:40 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/GroupsFrontendUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-27 04:10:40 UTC	97	IN	Data Raw: 35 62 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 32 35 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 34 2c 22 2d 33 35 33 33 33 35 32 32 32 30 39 34 30 35 36 31 32 32 33 22 2c 37 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 31 5d 5d 5d 0d 0a Data Ascii: 5b)]}'[[["f.mt"],["di",25],["af.httprm",24,"-3533352220940561223",7],["e",4,null,null,91]]]
2024-09-27 04:10:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:40 UTC	668	OUT	GET /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA
2024-09-27 04:10:41 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Fri, 27 Sep 2024 04:10:40 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:10:41 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-09-27 04:10:41 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Timestamp	Bytes transferred	Direction	Data
2024-09-27 04:10:40 UTC	1184	OUT	GET /_/GroupsFrontendUi/manifest.json HTTP/1.1 Host: groups.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://groups.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=6-_if08cjLGAv_Ppw3lWteYk7DAGh3Ki_9-fv2Z1EsyehT-ikRL-bLzaPOr179bFECSauwda8xSNh9sHsoEUnUZvHUalYyNalEHhol0sT8XoJ-2_URhXU-d48zkkkTwfRbwHOhlWwS4Bkq7eatCuqDK186xT_Enbo0oEjrfNHBLMr_hgUiqydmh6TA
2024-09-27 04:10:41 UTC	1744	IN	HTTP/1.1 200 OK Content-Type: application/manifest+json; charset=utf-8 Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site Expires: Fri, 27 Sep 2024 04:10:41 GMT Date: Fri, 27 Sep 2024 04:10:41 GMT Cache-Control: private, max-age=86400 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: same-site Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/GroupsFrontendUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-0lrZjs9PItPiRGFF5MBOVg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/GroupsFrontendUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/GroupsFrontendUi/cspreport/allowlist Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-27 04:10:41 UTC	226	IN	Data Raw: 64 63 0d 0a 7b 22 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 47 72 6f 75 70 73 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 47 6f 6f 67 6c 65 20 47 72 6f 75 70 73 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 3f 6c 66 68 73 5c 75 30 30 33 64 32 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 70 72 6f 64 75 63 74 2f 31 78 2f 67 72 6f 75 70 73 5f 33 32 64 70 2e 70 6e 67 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 33 32 78 33 32 22 7d 5d 7d 0d 0a Data Ascii: dc{"name":"Google Groups","short_name":"Google Groups","start_url":"/?lfhs\u003d2","display":"standalone","icons":[{"src":"//www.gstatic.com/images/branding/product/1x/groups_32dp.png","type":"image/png","sizes":"32x32"}]}
2024-09-27 04:10:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0