Edit tour

Windows Analysis Report
https://ygfdhfrgieyrteyu545.godaddysites.com/

Overview

General Information

Sample URL:	https://ygfdhfrgieyrteyu545.godaddysites.com/
Analysis ID:	1521171
Infos:

Detection

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Found iframes

HTML body contains password input but no form action

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3336 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4144 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7100 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6376 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ygfdhfrgieyrteyu545.godaddysites.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://ygfdhfrgieyrteyu545.godaddysites.com/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: ygfdhfrgieyrteyu545.godaddysites.com

Virustotal: Detection: 11%

Perma Link

Multi AV Scanner detection for submitted file

Source: https://ygfdhfrgieyrteyu545.godaddysites.com/

Virustotal: Detection: 5%

Perma Link

Phishing

AI detected phishing page

Source: https://ygfdhfrgieyrteyu545.godaddysites.com/

LLM: Score: 9 Reasons: The brand 'Orange' is a well-known telecommunications company., The legitimate domain for Orange is 'orange.com'., The provided URL 'ygfdhfrgieyrteyu545.godaddysites.com' does not match the legitimate domain., The URL contains a random string and uses 'godaddysites.com', which is a hosting service and not directly associated with Orange., The use of a hosting service domain with a random string is a common tactic in phishing attempts. DOM: 0.0.pages.csv

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-788112468&timestamp=1727493946934
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: Iframe src: /_/bscframe
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: Iframe src: https://accounts.youtube.com/accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-788112468&timestamp=1727493946934
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: Iframe src: /_/bscframe

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ygfdhfrgieyrteyu545.godaddysites.com/

HTTP Parser: Base64 decoded: https://ygfdhfrgieyrteyu545.godaddysites.com:443

HTTP Parser: <input type="password" .../> found

Source: https://ygfdhfrgieyrteyu545.godaddysites.com/	HTTP Parser: No favicon
Source: https://ygfdhfrgieyrteyu545.godaddysites.com/	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://policies.google.com/privacy	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No favicon
Source: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=fr-fr_corp_applications_base	HTTP Parser: No favicon
Source: https://policies.google.com/privacy#inforetaining	HTTP Parser: No favicon
Source: https://policies.google.com/privacy#inforetaining	HTTP Parser: No favicon
Source: https://policies.google.com/privacy#inforetaining	HTTP Parser: No favicon
Source: https://policies.google.com/privacy#inforetaining	HTTP Parser: No favicon
Source: https://policies.google.com/privacy#inforetaining	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/465?authuser=0#auto-delete	HTTP Parser: No favicon
Source: https://support.google.com/accounts/answer/465?authuser=0#auto-delete	HTTP Parser: No favicon

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No <meta name="author".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No <meta name="author".. found

Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No <meta name="copyright".. found
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passive=1209600&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S571683924%3A1727493942295106&ddm=0	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49787 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:49844 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.4:50170 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /v3/recaptcha HTTP/1.1Host: contact.apps-api.instantpage.secureserver.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://ygfdhfrgieyrteyu545.godaddysites.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /politique-de-confidentialit%C3%A9 HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /v3/recaptcha HTTP/1.1Host: contact.apps-api.instantpage.secureserver.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XCYrgaczg5+SeaT&MD=H8oRZPny HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /galerie HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /privacy HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /contactez-nous HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_74x24dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
Source: global traffic	HTTP traffic detected: GET /embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly95Z2ZkaGZyZ2lleXJ0ZXl1NTQ1LmdvZGFkZHlzaXRlcy5jb206NDQz&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=9p8r6ku6d9c1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-player.css HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_74x24dp.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
Source: global traffic	HTTP traffic detected: GET /vi_webp/48l-xdS4pXg/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly95Z2ZkaGZyZ2lleXJ0ZXl1NTQ1LmdvZGFkZHlzaXRlcy5jb206NDQz&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=9p8r6ku6d9c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
Source: global traffic	HTTP traffic detected: GET /js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ggoJFaE71W8/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ZdEIZNg3epQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/YlmVKT3Zvhw/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_&co=aHR0cHM6Ly95Z2ZkaGZyZ2lleXJ0ZXl1NTQ1LmdvZGFkZHlzaXRlcy5jb206NDQz&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=invisible&cb=9p8r6ku6d9c1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?jHHspg HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?9vCWLw HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?IVdNkg HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?yX4HRg HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/dubcxWuhhbqw8uaLSFFGvELnk5WmffD3wjoYeQZ33gk.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=x51Ycm2SBdapZXrZW-bxNeqPg3uUVAh4gLJJUEJvPAoZErzDMoQx8clr1PrnWgU6ozukOKL6aylPnTRAjbL6pzILMNwfXjpZI-VIcVHEyx7pnfYEufuf4O_frANlK6xNm4hIUqy4ZbyOh_3TKtPUE9TIxQodQ0KlyGgqdbnUiliJnCcWW8SFReW-QA
Source: global traffic	HTTP traffic detected: GET /js/th/Kwl4UTqRlZdwo60dxzGVsyg_CEkasAzkebPPx38d0Do.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=x51Ycm2SBdapZXrZW-bxNeqPg3uUVAh4gLJJUEJvPAoZErzDMoQx8clr1PrnWgU6ozukOKL6aylPnTRAjbL6pzILMNwfXjpZI-VIcVHEyx7pnfYEufuf4O_frANlK6xNm4hIUqy4ZbyOh_3TKtPUE9TIxQodQ0KlyGgqdbnUiliJnCcWW8SFReW-QA
Source: global traffic	HTTP traffic detected: GET /vi_webp/48l-xdS4pXg/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ggoJFaE71W8/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ZdEIZNg3epQ/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/YlmVKT3Zvhw/sddefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=hRhVo1Yp0v9dTvFYdYMNikQ7r8PxpuHU8L8EFT57i_Z1QSo6jAzIFs_sCY_sV85GESNgO3YC6ZCYXMb59kAhWrvU8lHKVrSzgtMw90Oc2oNsTq5LAAIZgiwSgF45MRQD5QwYjgZxuWnmYuTWcuh3QqapXfsnYQHj6qF_y_Wmd_YCjoG0fQJnn_qbwQ
Source: global traffic	HTTP traffic detected: GET /viNp17XpEF-AwWwOZSj_TvgobO1CGmUUgcTtQoAG40YaYctYMoUqaRup0rTxxxfQvWw3MvhXesw=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/IdentityPoliciesUi/manifest.json HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga_CVQP9NPQGY=GS1.1.1727493940.1.0.1727493940.0.0.0; _ga=GA1.1.536669148.1727493940
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/IdentityPoliciesUi/browserinfo?f.sid=-8258712897520430556&bl=boq_identitypoliciesserver_20240926.00_p0&hl=en-US&_reqid=84342&rt=j HTTP/1.1Host: policies.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.0.1727493943.0.0.0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /accounts/CheckConnection?pmpo=https%3A%2F%2Faccounts.google.com&v=-788112468&timestamp=1727493946934 HTTP/1.1Host: accounts.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://accounts.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/politique-de-confidentialit%C3%A9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /markup/ad HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=2&C_TOUCH=2024-09-28T03:25:52.437Z
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: ygfdhfrgieyrteyu545.godaddysites.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=2&C_TOUCH=2024-09-28T03:25:52.437ZIf-None-Match: 318a946875876c2f430a2ea837b4c13c
Source: global traffic	HTTP traffic detected: GET /faq HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.0.1727493943.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.0.1727493943.0.0.0
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493966.0.0.0
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XCYrgaczg5+SeaT&MD=H8oRZPny HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /technologies HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493968.0.0.0; OTZ=7753166_72_76_104100_72_446760
Source: global traffic	HTTP traffic detected: GET /privacy HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493968.0.0.0; OTZ=7753166_72_76_104100_72_446760
Source: global traffic	HTTP traffic detected: GET /privacy HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493968.0.0.0; OTZ=7753166_72_76_104100_72_446760
Source: global traffic	HTTP traffic detected: GET /embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ggoJFaE71W8/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/YlmVKT3Zvhw/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ZdEIZNg3epQ/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/48l-xdS4pXg/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?TPHsxQ HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?DLnHpw HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?C3hlUw HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?EXoaDw HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?vFjngg HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/ggoJFaE71W8?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?0U9Zeg HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/48l-xdS4pXg?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?bIHVqw HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ggoJFaE71W8/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/YlmVKT3Zvhw/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?q4NNRQ HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube-nocookie.com/embed/YlmVKT3Zvhw?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/48l-xdS4pXg/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/ZdEIZNg3epQ/default.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/IdentityPoliciesUi/browserinfo?f.sid=-3227493684227718074&bl=boq_identitypoliciesserver_20240926.00_p0&hl=en-US&_reqid=84378&rt=j HTTP/1.1Host: policies.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; OTZ=7753166_72_76_104100_72_446760; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493979.0.0.0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/IdentityPoliciesUi/browserinfo?f.sid=-4083913038185668931&bl=boq_identitypoliciesserver_20240926.00_p0&hl=en-US&_reqid=84382&rt=j HTTP/1.1Host: policies.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; OTZ=7753166_72_76_104100_72_446760; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493979.0.0.0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_/IdentityPoliciesUi/browserinfo?f.sid=2174883568654264813&bl=boq_identitypoliciesserver_20240926.00_p0&hl=en-US&_reqid=84383&rt=j HTTP/1.1Host: policies.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; OTZ=7753166_72_76_104100_72_446760; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493979.0.0.0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /accounts/answer/465?authuser=0 HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /3_l97rr0GvhSP2XV5OoCkV2ZDTIisAOczrSdzNCBxhIKWrjXjHucxNwocghoUa39gw=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /AgfN8vQ9tC2x4pIsRWrQmbGX1EpeUJmr1evP38DkGvyIa46i6unh6WXzgd-Gg5A1ITg=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nMjspMgoPU3bPe3GURL-wOio75ADLYV5NoTCg83lM0-2p2HbkHRS8ShKQ0JAlSN-Aq4=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bgCsDNu0FhWKa_U1FXEdijnsON7JbaNSUOMyru9UP6_UXuk9h-crX-IX1QR8YmKRNTOk=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /AgfN8vQ9tC2x4pIsRWrQmbGX1EpeUJmr1evP38DkGvyIa46i6unh6WXzgd-Gg5A1ITg=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bgCsDNu0FhWKa_U1FXEdijnsON7JbaNSUOMyru9UP6_UXuk9h-crX-IX1QR8YmKRNTOk=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /nMjspMgoPU3bPe3GURL-wOio75ADLYV5NoTCg83lM0-2p2HbkHRS8ShKQ0JAlSN-Aq4=w36-h36 HTTP/1.1Host: lh3.googleusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: support.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://support.google.com/accounts/answer/465?authuser=0Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; SUPPORT_CONTENT=638630908117146725-1849909811; _ga_H30R9PNQFN=GS1.1.1727494011.1.0.1727494011.0.0.0; _ga=GA1.3.1190192710.1727494012; _gid=GA1.3.1489587574.1727494016; _gat_gtag_UA_175894890_5=1
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /_/IdentityPoliciesUi/gen204/?tmambps=0.00008771929824561403&rtembps=-1&rttms=86&ct=undefined HTTP/1.1Host: policies.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://policies.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w; _ga=GA1.1.536669148.1727493940; OTZ=7753166_72_76_104100_72_446760; _ga_CVQP9NPQGY=GS1.1.1727493940.1.1.1727493979.0.0.0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=517=Q5FVe1pRnzaLfGtMUiCUot6jR6ks6R4sb0kbewTyu8LE-sunwrrcDgbx8DynZhUGANimMKMj3G1HkBhby8GFTFm5j1Il9kwM7OMSu5B4CoXLPcgPcRwEWdjLPGq2CXC9m_89TYoDgorYgLuKbryUfgMUO8spTtgQ5U3U32Vj_T-ZfHBasq6Y5hlS9w

Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=iwa(d),jE(c)&&(d=c));c=new g.XL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=iE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|iE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=is(d,h,GJa):h&&(d="embedded");this.Ja=d;Qqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: ;function lr(){this.part="snippet,id,contentDetails,localizations,statistics";this.Fk=new Xq({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: ;var jga=wa(["//www.youtube.com/player_api"]),kga=Qn(jga),mr=[],lga=!1;function nr(){if(!lga){window.onYouTubeIframeAPIReady=mga;var a=dp("SCRIPT");zn(a,kga);document.head.appendChild(a);lga=!0}} equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: ;var tra=wa(["//www.youtube.com/player_api"]),oA=4/3,ura=16/9,pA={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function qA(a){var b=a.Eb;var c=a.Ml===void 0?!1:a.Ml;a=a.playerVars===void 0?pA:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Eb=b;this.Ml=c;this.id=this.Eb.getId();this.playerVars=a;b=this.Eb.mediumThumbnail.width;c=this.Eb.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===oA?oA:ura:oA;this.watch(this.Eb)} equals www.youtube.com (Youtube)
Source: chromecache_455.2.dr	String found in binary or memory: Io.prototype.Ia=function(){return this.C};var kna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var Ro;g.Ko=null;g.Mo=!1;g.So=1;Ro=Symbol("SIGNAL");g.To={version:0,r_:0,Om:!1,eg:void 0,Sy:void 0,An:void 0,LL:0,hj:void 0,Ou:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_455.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new VF("0","fakesb",{video:new RF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new oN(new g.XL("http://www.youtube.com/videoplayback"),c,"fake"):new FN(new g.XL("http://www.youtube.com/videoplayback"),c,new $M(0,0),new $M(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_515.2.dr, chromecache_536.2.dr	String found in binary or memory: Mf=w(["https://sandbox.google.com/tools/feedback/"]),Nf=w(["https://www.google.cn/tools/feedback/"]),Of=w(["https://help.youtube.com/tools/feedback/"]),Pf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Qf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Rf=w(["https://localhost.corp.google.com/inapp/"]),Sf=w(["https://localhost.proxy.googlers.com/inapp/"]),Tf=V(vf),Uf=[V(wf),V(xf)],Vf=[V(yf),V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff),V(Gf),V(Hf)],Wf=[V(If),V(Jf)],Xf= equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: Ua=Ua.split("-")[0].toLowerCase();if(Ra===Ua\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Fa(0);Go("youtube_video_model/load/success");return Qa(c,0)}Sa(c);a.state=3;a.Fa(0);Go("youtube_video_model/load/failure");Oa(c)})} equals www.youtube.com (Youtube)
Source: chromecache_307.2.dr	String found in binary or memory: _.iq(p)+"/familylink/privacy/notice/embedded?langCountry="+_.iq(p);break;case "PuZJUb":a+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.iq(m);break;case "fxTQxb":a+="https://youtube.com/t/terms?gl="+_.iq(_.rq(c))+"&hl="+_.iq(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":a+="https://www.google.com/intl/"+_.iq(m)+"/chromebook/termsofservice.html?languageCode="+_.iq(d)+"&regionCode="+_.iq(c);break;case "NfnTze":a+="https://policies.google.com/privacy/google-partners"+(f?"/embedded": equals www.youtube.com (Youtube)
Source: chromecache_455.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(rY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.pY(a.errorMessage)):this.Cd(rY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,DF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.It)(),iT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_455.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=sP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Qn=r;tP(this,a,!0);this.La=new OO;g.P(this,this.La);q=b?b.innertubeApiKey:ks("",a.innertube_api_key);p=b?b.innertubeApiVersion:ks("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ks("",a.innertube_context_client_version);q=g.$q("INNERTUBE_API_KEY")\|\|q;p=g.$q("INNERTUBE_API_VERSION")\|\|p;l=g.$q("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=HO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.xP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.DR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.AE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_333.2.dr	String found in binary or memory: function uA(a){if(no())z().rs==2?window.YT&&window.YT.Player?wA(a,a.o):(mr.push(function(f){wA(this,f)}.bind(a,a.o)),nr()):uo("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: g.KP=function(a){var b=g.xP(a);RJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_455.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.xP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.oP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),au&&(a=ana())&&(b.ebc=a));return g.Ui(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: g.xP=function(a){a=sP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_626.2.dr, chromecache_566.2.dr, chromecache_395.2.dr, chromecache_580.2.dr, chromecache_450.2.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(JO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.lO(this.B)?kO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_519.2.dr, chromecache_455.2.dr	String found in binary or memory: var D2={};var Mdb={Fs:[{IB:/Unable to load player module/,weight:20},{IB:/Failed to fetch/,weight:500},{IB:/XHR API fetch failed/,weight:10},{IB:/JSON parsing failed after XHR fetch/,weight:10},{IB:/Retrying OnePlatform request/,weight:10},{IB:/CSN Missing or undefined during playback association/,weight:100}],Mr:[{callback:K7a,weight:500}]};var X7a=/[&\?]action_proxy=1/,W7a=/[&\?]token=([\w-])/,Y7a=/[&\?]video_id=([\w-])/,Z7a=/[&\?]index=([\d-])/,$7a=/[&\?]m_pos_ms=([\d-])/,b8a=/[&\?]vvt=([\w-]*)/,O7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),a8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),R7a={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: ygfdhfrgieyrteyu545.godaddysites.com
Source: global traffic	DNS traffic detected: DNS query: img1.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: isteam.wsimg.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: contact.apps-api.instantpage.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: events.api.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: csp.secureserver.net
Source: global traffic	DNS traffic detected: DNS query: policies.google.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube-nocookie.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: accounts.youtube.com
Source: global traffic	DNS traffic detected: DNS query: www.godaddy.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com

Source: unknown

HTTP traffic detected: POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube-nocookie.comConnection: keep-aliveContent-Length: 6865sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1727493935894sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonsec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 56X-YouTube-Client-Version: 1.20240924.01.00X-Goog-Visitor-Id: Cgsyd2dOcjB2Slpscyip7t23BjIKCgJVUxIEGgAgGg%3D%3DX-YouTube-Ad-Signals: dt=1727493930798&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C550%2C308&vis=1&wgl=true&ca_type=imageAccept: */*Origin: https://www.youtube-nocookie.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundLink: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.33.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossoriginCache-Control: max-age=30Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.comContent-Type: text/html;charset=utf-8Vary: Accept-EncodingServer: DPS/2.0.0+sha-227ca78X-Version: 227ca78X-SiteId: us-east-1Set-Cookie: dps_site_id=us-east-1; path=/; secureDate: Sat, 28 Sep 2024 03:25:25 GMTConnection: closeTransfer-Encoding: chunked

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ygfdhfrgieyrteyu545.godaddysites.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4144 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2300 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4144 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5700 --field-trial-handle=2236,i,13457607588053707098,10082083696331822770,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://ygfdhfrgieyrteyu545.godaddysites.com/	5%	Virustotal		Browse
https://ygfdhfrgieyrteyu545.godaddysites.com/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Link
i.ytimg.com	0%	Virustotal	Browse
policies.google.com	0%	Virustotal	Browse
plus.l.google.com	0%	Virustotal	Browse
play.google.com	0%	Virustotal	Browse
proxy.k8s.pnc.phx.secureserver.net	0%	Virustotal	Browse
ygfdhfrgieyrteyu545.godaddysites.com	11%	Virustotal	Browse
photos-ugc.l.googleusercontent.com	0%	Virustotal	Browse
support.google.com	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
lh3.googleusercontent.com	0%	Virustotal	Browse
yt3.ggpht.com	0%	Virustotal	Browse
img1.wsimg.com	0%	Virustotal	Browse
accounts.youtube.com	0%	Virustotal	Browse
contact.apps-api.instantpage.secureserver.net	0%	Virustotal	Browse
csp.secureserver.net	0%	Virustotal	Browse
www.godaddy.com	0%	Virustotal	Browse
www3.l.google.com	0%	Virustotal	Browse
apis.google.com	0%	Virustotal	Browse
isteam.wsimg.com	0%	Virustotal	Browse
events.api.secureserver.net	0%	Virustotal	Browse
youtube-ui.l.google.com	0%	Virustotal	Browse
www.youtube-nocookie.com	0%	Virustotal	Browse

Source	Detection	Scanner	Label	Link
https://policies.google.com/privacy	0%	URL Reputation	safe
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://policies.google.com/terms/service-specific	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://policies.google.com/technologies/cookies	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/tools/feedback/%	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.de/tools/feedback/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://feedback.googleusercontent.com/resources/render_frame2.html	0%	URL Reputation	safe
https://sandbox.google.com/tools/feedback/%	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://support.google.com/embed/tagging/install	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://support.google.com/inapp/	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/inapp/	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	0%	URL Reputation	safe
https://domains.google.com/suggest/flow	0%	URL Reputation	safe
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://feedback2-test.corp.google.com/inapp/%	0%	URL Reputation	safe
https://i.ytimg.com/vi_webp/ZdEIZNg3epQ/sddefault.webp	0%	Virustotal		Browse
https://play.google.com/work/enroll?identifier=	0%	Virustotal		Browse
https://www.youtube.com/embed/	0%	Virustotal		Browse
https://policies.google.com/faq	0%	Virustotal		Browse
https://support.google.com/accounts/answer/3118687	0%	Virustotal		Browse
https://support.google.com/accounts?p=privpol_whyad	0%	Virustotal		Browse
https://www.youtube-nocookie.com/embed/	0%	Virustotal		Browse
https://content-googleapis-test.sandbox.google.com	0%	Virustotal		Browse
https://www.youtube.com/t/terms?chromeless=1&hl=	0%	Virustotal		Browse
https://myaccount.google.com/privacypolicy?hl=	0%	Virustotal		Browse
https://privacy.google.com/businesses/affiliates	0%	Virustotal		Browse
https://www.google.com/tools/feedback	0%	Virustotal		Browse

Name	IP	Active	Malicious	Antivirus Detection	Reputation
plus.l.google.com	142.250.186.174	true	false	0%, Virustotal, Browse	unknown
proxy.k8s.pnc.phx.secureserver.net	45.40.130.49	true	false	0%, Virustotal, Browse	unknown
i.ytimg.com	142.250.184.214	true	false	0%, Virustotal, Browse	unknown
support.google.com	172.217.18.14	true	false	0%, Virustotal, Browse	unknown
policies.google.com	142.250.186.46	true	false	0%, Virustotal, Browse	unknown
isteam.wsimg.com	3.121.64.201	true	false	0%, Virustotal, Browse	unknown
youtube-ui.l.google.com	216.58.206.78	true	false	0%, Virustotal, Browse	unknown
play.google.com	142.250.184.206	true	false	0%, Virustotal, Browse	unknown
www3.l.google.com	142.250.185.174	true	false	0%, Virustotal, Browse	unknown
ygfdhfrgieyrteyu545.godaddysites.com	13.248.243.5	true	true	11%, Virustotal, Browse	unknown
photos-ugc.l.googleusercontent.com	142.250.185.97	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.100	true	false	0%, Virustotal, Browse	unknown
googlehosted.l.googleusercontent.com	142.250.186.161	true	false		unknown
img1.wsimg.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
events.api.secureserver.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
yt3.ggpht.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
lh3.googleusercontent.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
contact.apps-api.instantpage.secureserver.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
csp.secureserver.net	unknown	unknown	false	0%, Virustotal, Browse	unknown
accounts.youtube.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.godaddy.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
www.youtube-nocookie.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
apis.google.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.youtube-nocookie.com/generate_204?C3hlUw	false		unknown
https://i.ytimg.com/vi_webp/ZdEIZNg3epQ/sddefault.webp	false	0%, Virustotal, Browse	unknown
https://www.youtube-nocookie.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js	false		unknown
https://policies.google.com/faq	false	0%, Virustotal, Browse	unknown
https://i.ytimg.com/vi_webp/YlmVKT3Zvhw/default.webp	false		unknown
https://www.youtube-nocookie.com/generate_204?TPHsxQ	false		unknown
https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_74x24dp.png	false		unknown
https://www.youtube-nocookie.com/s/player/b0557ce3/www-player.css	false		unknown
https://lh3.googleusercontent.com/bgCsDNu0FhWKa_U1FXEdijnsON7JbaNSUOMyru9UP6_UXuk9h-crX-IX1QR8YmKRNTOk=w36-h36	false		unknown
https://www.google.com/favicon.ico	false		unknown
https://www.youtube-nocookie.com/generate_204?jHHspg	false		unknown
https://support.google.com/accounts/answer/465?authuser=0#auto-delete	false		unknown
https://policies.google.com/_/IdentityPoliciesUi/browserinfo?f.sid=-3227493684227718074&bl=boq_identitypoliciesserver_20240926.00_p0&hl=en-US&_reqid=84378&rt=j	false		unknown
https://policies.google.com/privacy	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/nMjspMgoPU3bPe3GURL-wOio75ADLYV5NoTCg83lM0-2p2HbkHRS8ShKQ0JAlSN-Aq4=w36-h36	false		unknown
https://policies.google.com/_/IdentityPoliciesUi/gen204/?tmambps=0.00008771929824561403&rtembps=-1&rttms=86&ct=undefined	false		unknown
https://i.ytimg.com/vi_webp/48l-xdS4pXg/sddefault.webp	false		unknown
https://ygfdhfrgieyrteyu545.godaddysites.com/favicon.ico	true		unknown
https://www.youtube-nocookie.com/embed/ZdEIZNg3epQ?rel=0&showinfo=0&theme=light&version=3&hl=en&cc_lang_pref=en&cc_load_policy=1	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	false	URL Reputation: safe	unknown
https://support.google.com/apis/logjourney?hl=en&key=support-content&request_source=1&mendel_ids=10800112%2C1706538%2C1714250%2C10800303%2C10800561%2C10800621%2C10800672%2C10800695%2C10800700%2C10800707%2C10800738%2C10800761%2C10800763%2C10800848%2C10800880%2C10800922%2C10800950%2C10800957%2C10801032%2C10801042%2C10801150%2C10801288%2C10801345%2C10801510%2C10801539%2C10801601%2C10801704%2C10801736%2C10801757%2C10802104%2C10802277%2C10802281%2C10802381%2C10802419%2C10802571%2C10802616%2C10802624%2C10802781%2C10802794%2C10803018%2C10803233%2C10803447%2C10803751%2C10803805%2C10803950%2C97601634&authuser=0&v=1&helpcenter=accounts	false		unknown
https://www.youtube-nocookie.com/generate_204?EXoaDw	false		unknown
https://ygfdhfrgieyrteyu545.godaddysites.com/contactez-nous	true		unknown
https://policies.google.com/	false		unknown
https://i.ytimg.com/vi_webp/ggoJFaE71W8/default.webp	false		unknown
https://www.youtube-nocookie.com/generate_204?DLnHpw	false		unknown
https://www.youtube-nocookie.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false		unknown
https://support.google.com/apis/prefinsert?v=0&helpcenter=accounts&hl=en&key=support-content&request_source=1&service_configuration=&mendel_ids=10800112,1706538,1714250,10800303,10800561,10800621,10800672,10800695,10800700,10800707,10800738,10800761,10800763,10800848,10800880,10800922,10800950,10800957,10801032,10801042,10801150,10801288,10801345,10801510,10801539,10801601,10801704,10801736,10801757,10802104,10802277,10802281,10802381,10802419,10802571,10802616,10802624,10802781,10802794,10803018,10803233,10803447,10803751,10803805,10803950,97601634&authuser=0	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_626.2.dr, chromecache_566.2.dr, chromecache_580.2.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_519.2.dr, chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_588.2.dr, chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/client.js	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts/answer/3118687	chromecache_333.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com	chromecache_333.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_333.2.dr	false	0%, Virustotal, Browse	unknown
http://localhost.proxy.googlers.com/inapp/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://play.google.com/work/enroll?identifier=	chromecache_447.2.dr, chromecache_307.2.dr	false	0%, Virustotal, Browse	unknown
https://policies.google.com/terms/service-specific	chromecache_447.2.dr, chromecache_307.2.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_597.2.dr, chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/technologies/cookies	chromecache_447.2.dr, chromecache_307.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts?p=privpol_whyad	chromecache_385.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube-nocookie.com/embed/	chromecache_385.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/photos?p=privpol_manage	chromecache_385.2.dr	false		unknown
https://www.youtube.com/t/terms?chromeless=1&hl=	chromecache_447.2.dr, chromecache_307.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_588.2.dr, chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_519.2.dr, chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://content-googleapis-test.sandbox.google.com	chromecache_333.2.dr	false	0%, Virustotal, Browse	unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_454.2.dr	false	URL Reputation: safe	unknown
https://myaccount.google.com/privacypolicy?hl=	chromecache_333.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha	chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_536.2.dr	false	0%, Virustotal, Browse	unknown
https://privacy.google.com/businesses/affiliates	chromecache_385.2.dr	false	0%, Virustotal, Browse	unknown
https://myactivity.google.com/activitycontrols	chromecache_385.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUAnx4RHw.woff2)	chromecache_544.2.dr, chromecache_499.2.dr, chromecache_585.2.dr, chromecache_558.2.dr	false		unknown
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	chromecache_333.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WhnGFucE.woff2)	chromecache_544.2.dr, chromecache_499.2.dr, chromecache_585.2.dr, chromecache_558.2.dr	false		unknown
https://sandbox.google.com/inapp/%	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/api.js	chromecache_632.2.dr, chromecache_490.2.dr, chromecache_446.2.dr, chromecache_466.2.dr, chromecache_622.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback/	chromecache_515.2.dr, chromecache_536.2.dr	false		unknown
https://support.google.com/communities/answer/7424249	chromecache_333.2.dr	false		unknown
https://schema.org	chromecache_333.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/tools/feedback/%	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://plus.google.com	chromecache_521.2.dr	false		unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_588.2.dr, chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.de/tools/feedback/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://feedback.googleusercontent.com/resources/render_frame2.html	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/tools/feedback/%	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/accounts/answer/465?authuser=0&co=GENIE.Platform%3DiOS	chromecache_333.2.dr	false		unknown
https://transparencyreport.google.com/user-data/overview	chromecache_385.2.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_357.2.dr, chromecache_592.2.dr, chromecache_519.2.dr, chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://content-googleapis-staging.sandbox.google.com	chromecache_333.2.dr	false		unknown
https://support.google.com/accounts/answer/465?authuser=0&co=GENIE.Platform%3DDesktop	chromecache_333.2.dr	false		unknown
https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUA3x4RHw.woff2)	chromecache_544.2.dr, chromecache_499.2.dr, chromecache_585.2.dr, chromecache_558.2.dr	false		unknown
https://support.google.com/embed/tagging/install	chromecache_333.2.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_333.2.dr	false		unknown
https://support.google.com/chrome/answer/95589	chromecache_333.2.dr	false		unknown
https://support.google.com/inapp/%	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true&onload=	chromecache_333.2.dr	false		unknown
https://angular.dev/license	chromecache_519.2.dr, chromecache_455.2.dr	false		unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_519.2.dr, chromecache_455.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_588.2.dr, chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2)	chromecache_544.2.dr, chromecache_499.2.dr, chromecache_585.2.dr, chromecache_558.2.dr	false		unknown
https://youtu.be/	chromecache_519.2.dr, chromecache_455.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/about/datacenters/inside/locations	chromecache_385.2.dr	false		unknown
https://support.google.com/chrome?p=privpol_chrsync	chromecache_385.2.dr	false		unknown
https://support.google.com/inapp/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://asx-frontend-autopush.corp.google.co.uk/inapp/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com	chromecache_345.2.dr, chromecache_521.2.dr, chromecache_643.2.dr, chromecache_433.2.dr	false	URL Reputation: safe	unknown
https://contacts.google.com	chromecache_385.2.dr	false		unknown
https://www.google.com/recaptcha/api2/	chromecache_351.2.dr, chromecache_588.2.dr, chromecache_340.2.dr	false		unknown
https://asx-frontend-autopush.corp.youtube.com/tools/feedback/	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown
https://github.com/ThomasJockin/JosefinSansFont-master)	chromecache_544.2.dr, chromecache_499.2.dr, chromecache_585.2.dr, chromecache_558.2.dr	false		unknown
https://domains.google.com/suggest/flow	chromecache_521.2.dr	false	URL Reputation: safe	unknown
https://apis.google.com/js/rpc:shindig_random.js?onload=credentialservice.postMessage	chromecache_447.2.dr, chromecache_307.2.dr	false	URL Reputation: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_588.2.dr, chromecache_340.2.dr	false	URL Reputation: safe	unknown
https://feedback2-test.corp.google.com/inapp/%	chromecache_515.2.dr, chromecache_536.2.dr	false	URL Reputation: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.74.206	unknown	United States	15169	GOOGLEUS	false
45.40.130.49	proxy.k8s.pnc.phx.secureserver.net	United States	26496	AS-26496-GO-DADDY-COM-LLCUS	false
142.250.185.142	unknown	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
13.248.243.5	ygfdhfrgieyrteyu545.godaddysites.com	United States	16509	AMAZON-02US	true
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
172.217.16.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.46	policies.google.com	United States	15169	GOOGLEUS	false
172.217.18.14	support.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
172.217.18.118	unknown	United States	15169	GOOGLEUS	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
142.250.184.206	play.google.com	United States	15169	GOOGLEUS	false
3.121.64.201	isteam.wsimg.com	United States	16509	AMAZON-02US	false
142.250.186.161	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.16.129	unknown	United States	15169	GOOGLEUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
142.250.185.174	www3.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.228	unknown	United States	15169	GOOGLEUS	false
142.250.184.214	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521171
Start date and time:	2024-09-28 05:24:16 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 9s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ygfdhfrgieyrteyu545.godaddysites.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@32/551@78/27
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://policies.google.com/privacy Browse: https://ygfdhfrgieyrteyu545.godaddysites.com/politique-de-confidentialit%C3%A9 Browse: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=fr-fr_corp_applications_base Browse: https://policies.google.com/faq Browse: https://policies.google.com/technologies Browse: https://policies.google.com/privacy#inforetaining

Input	Output
URL: https://policies.google.com/privacy Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"When you use our services, you're trusting us with your information. We understand this is a big responsibility and work hard to protect your information and put you in control.", "prominent_button_name":"Sign in", "text_input_field_labels":[], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ygfdhfrgieyrteyu545.godaddysites.com/ Model: jbxai	{ "brand":["Orange"], "contains_trigger_text":true, "trigger_text":"Pour vous identifier", "prominent_button_name":"SUIVANT", "text_input_field_labels":["Email", "Mot de pas*****"], "pdf_icon_visible":false, "has_visible_captcha":true, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ygfdhfrgieyrteyu545.godaddysites.com/ Model: jbxai	{ "phishing_score":9, "brands":"Orange", "legit_domain":"orange.com", "classification":"wellknown", "reasons":["The brand 'Orange' is a well-known telecommunications company.", "The legitimate domain for Orange is 'orange.com'.", "The provided URL 'ygfdhfrgieyrteyu545.godaddysites.com' does not match the legitimate domain.", "The URL contains a random string and uses 'godaddysites.com', which is a hosting service and not directly associated with Orange.", "The use of a hosting service domain with a random string is a common tactic in phishing attempts."], "brand_matches":[false], "url_match":false, "brand_input":"Orange", "input_fields":"Email, Mot de pas*****"}

URL: https://policies.google.com/privacy Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Looking to change your privacy settings?", "Take the Privacy Checkup"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passi Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Forgot email?", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone", "Forgot email?"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://policies.google.com/ Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passi Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Forgot email?", "prominent_button_name":"Next", "text_input_field_labels":["Email or phone"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ec=GAZAoQQ&followup=https%3A%2F%2Fpolicies.google.com%2Fprivacy&ifkv=ARpgrqdCDrLErBMsi-m4Er5OjZesYsF45a2rDFcAPiyfNSf2j4EgwsaJn0QLSgplcPLC0Q8U05aYXg&passi Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The URL 'accounts.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google is a well-known brand with a strong online presence.", "The input fields 'Email or phone' are consistent with Google's account login page."], "brand_matches":[true], "url_match":true, "brand_input":"Google", "input_fields":"Email or phone"}

URL: https://www.godaddy.com/websites/website-builder?isc=pwugc&utm_source=wsb&utm_medium=applications&utm_campaign=fr-fr_corp_applications_base Model: jbxai	"{ \"brand\": [\"Godaddy\"], \"contains_trigger_text\": true, \"trigger_text\": \"You don't have permission to access \\\\\"http://www.godaddy.com/websites/website-builder?\\\\\" on this server.\", \"prominent_button_name\": \"unknown\", \"text_input_field_labels\": \"unknown\", \"pdf_icon_visible\": false, \"has_visible_captcha\": false, \"has_urgent_text\": false } "

URL: https://policies.google.com/privacy#inforetaining Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"You can read more about Google's data retention periods, including how long it takes us to delete your information.", "prominent_button_name":"Sign in", "text_input_field_labels":["Phone", "email", "username"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://policies.google.com/privacy#inforetaining Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"RETAINING YOUR INFORMATION", "prominent_button_name":"Sign in", "text_input_field_labels":["Your privacy controls", "Sharing your information", "Keeping your information secure", "Exporting & deleting your information", "Compliance & cooperation with regulators", "About this policy", "Related privacy practices"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://policies.google.com/privacy#inforetaining Model: jbxai	{ "phishing_score":1, "brands":"Google", "legit_domain":"google.com", "classification":"wellknown", "reasons":["The brand 'Google' is well-known and widely recognized.", "The URL 'policies.google.com' is a subdomain of 'google.com', which is the legitimate domain for Google.", "Google often uses subdomains for different services and policy pages.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions."], "brand_matches":[false], "url_match":true, "brand_input":"Google", "input_fields":"Phone, email, username"}

URL: https://support.google.com/accounts/answer/465?authuser=0#auto-delete Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Delete activity in other places, Turn off & delete activity, Turn off, Turn off and delete activity", "prominent_button_name":"Sign in", "text_input_field_labels":["Go to your Google Account", "Data & privacy", "History settings"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://support.google.com/accounts/answer/465?authuser=0#auto-delete Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Delete your activity automatically", "prominent_button_name":"Sign in", "text_input_field_labels":["Google Account", "Data & privacy", "Turn off & delete activity"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit gray+alpha, non-interlaced
Category:	dropped
Size (bytes):	166
Entropy (8bit):	6.2247860857941175
Encrypted:	false
SSDEEP:	3:yionv//thPlT/XtIsyxdu2OJ7fxHsEhmQbWhvveovchbwE5LkDlQJ8xjoUbYYHpa:6v/lhPXR+u2gVMImkWheo0hcPljVHuTp
MD5:	C7DAED84666A91A831FCB2DE33B650C7
SHA1:	E53FFB27DA4C646AA288C046F71ABCD9C013C774
SHA-256:	93AF9F0D9905AECEF83F45348BE1BA878BCD736E08E8AF04089F8CCBFD58573B
SHA-512:	038DB78C175959621E4D3E4E139591ED4BEAB179F21218DFC94222A37785CBF44BD0904DDDEEB2646FA92225A0597628E4AA68B9C396BC3D80CE464B92453B12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............J~.s...mIDAT8.c`.+(._...1r4.z.>.I.K=P5<......j.CP...J..J.$.....Q..\.tO...=.rDj(....nb5\|.j.D%...............=I.@4..~:1..@.....IEND.B`.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 28, 2024 05:25:13.973711014 CEST	192.168.2.4	1.1.1.1	0xb250	Standard query (0)	ygfdhfrgieyrteyu545.godaddysites.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:13.974091053 CEST	192.168.2.4	1.1.1.1	0x9aa1	Standard query (0)	ygfdhfrgieyrteyu545.godaddysites.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:14.590737104 CEST	192.168.2.4	1.1.1.1	0xd301	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:14.590996981 CEST	192.168.2.4	1.1.1.1	0xdb7e	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:14.593327045 CEST	192.168.2.4	1.1.1.1	0x4a75	Standard query (0)	isteam.wsimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:14.593472958 CEST	192.168.2.4	1.1.1.1	0x50eb	Standard query (0)	isteam.wsimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:15.793787956 CEST	192.168.2.4	1.1.1.1	0x6883	Standard query (0)	img1.wsimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:15.794070959 CEST	192.168.2.4	1.1.1.1	0xd922	Standard query (0)	img1.wsimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:15.896842957 CEST	192.168.2.4	1.1.1.1	0x818c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:15.934123039 CEST	192.168.2.4	1.1.1.1	0x36fe	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:19.149420977 CEST	192.168.2.4	1.1.1.1	0xad56	Standard query (0)	ygfdhfrgieyrteyu545.godaddysites.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:19.150240898 CEST	192.168.2.4	1.1.1.1	0x338c	Standard query (0)	ygfdhfrgieyrteyu545.godaddysites.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:24.577047110 CEST	192.168.2.4	1.1.1.1	0xe7f4	Standard query (0)	contact.apps-api.instantpage.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:24.577567101 CEST	192.168.2.4	1.1.1.1	0xb5d2	Standard query (0)	contact.apps-api.instantpage.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:25:24.600991964 CEST	192.168.2.4	1.1.1.1	0xb433	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:24.601236105 CEST	192.168.2.4	1.1.1.1	0xd2f	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:25:24.843697071 CEST	192.168.2.4	1.1.1.1	0x4a1e	Standard query (0)	csp.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:24.843879938 CEST	192.168.2.4	1.1.1.1	0x7d1d	Standard query (0)	csp.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:25:25.406200886 CEST	192.168.2.4	1.1.1.1	0x7a63	Standard query (0)	contact.apps-api.instantpage.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:25.406407118 CEST	192.168.2.4	1.1.1.1	0x428c	Standard query (0)	contact.apps-api.instantpage.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:25:25.846529007 CEST	192.168.2.4	1.1.1.1	0x7956	Standard query (0)	events.api.secureserver.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:25.846771955 CEST	192.168.2.4	1.1.1.1	0x4d48	Standard query (0)	events.api.secureserver.net	65	IN (0x0001)	false
Sep 28, 2024 05:25:25.938026905 CEST	192.168.2.4	1.1.1.1	0x511f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:25.938327074 CEST	192.168.2.4	1.1.1.1	0x2ddc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:26.868019104 CEST	192.168.2.4	1.1.1.1	0x24e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:26.868197918 CEST	192.168.2.4	1.1.1.1	0xf486	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:26.944403887 CEST	192.168.2.4	1.1.1.1	0xd954	Standard query (0)	policies.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:26.944405079 CEST	192.168.2.4	1.1.1.1	0xcc3b	Standard query (0)	policies.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:28.409293890 CEST	192.168.2.4	1.1.1.1	0xf0c1	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:28.409490108 CEST	192.168.2.4	1.1.1.1	0x69bc	Standard query (0)	www.youtube-nocookie.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:28.976126909 CEST	192.168.2.4	1.1.1.1	0xb7f7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:28.976918936 CEST	192.168.2.4	1.1.1.1	0x6495	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:29.633829117 CEST	192.168.2.4	1.1.1.1	0xa404	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:29.634167910 CEST	192.168.2.4	1.1.1.1	0x35e	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:34.588888884 CEST	192.168.2.4	1.1.1.1	0x8bbd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:34.589515924 CEST	192.168.2.4	1.1.1.1	0x306f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:34.592637062 CEST	192.168.2.4	1.1.1.1	0x1dc0	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:34.592902899 CEST	192.168.2.4	1.1.1.1	0x8e2	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:35.548460960 CEST	192.168.2.4	1.1.1.1	0xe18d	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:35.548708916 CEST	192.168.2.4	1.1.1.1	0x4cfa	Standard query (0)	www.youtube-nocookie.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:35.952763081 CEST	192.168.2.4	1.1.1.1	0xc354	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:35.952980995 CEST	192.168.2.4	1.1.1.1	0x7d74	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:39.751763105 CEST	192.168.2.4	1.1.1.1	0x6c84	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:39.752181053 CEST	192.168.2.4	1.1.1.1	0x8195	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:40.378660917 CEST	192.168.2.4	1.1.1.1	0xd4bc	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:40.379018068 CEST	192.168.2.4	1.1.1.1	0xe857	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:40.404441118 CEST	192.168.2.4	1.1.1.1	0xd21e	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:40.404778004 CEST	192.168.2.4	1.1.1.1	0x468	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:40.687330008 CEST	192.168.2.4	1.1.1.1	0xcdad	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:40.687649012 CEST	192.168.2.4	1.1.1.1	0x257d	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:40.715629101 CEST	192.168.2.4	1.1.1.1	0x17d5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:40.715864897 CEST	192.168.2.4	1.1.1.1	0xf42e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:43.149836063 CEST	192.168.2.4	1.1.1.1	0xe14e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:43.150576115 CEST	192.168.2.4	1.1.1.1	0x3fa5	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:46.171571016 CEST	192.168.2.4	1.1.1.1	0x892f	Standard query (0)	policies.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:46.171571016 CEST	192.168.2.4	1.1.1.1	0x26bb	Standard query (0)	policies.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:48.203856945 CEST	192.168.2.4	1.1.1.1	0xef4d	Standard query (0)	accounts.youtube.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:48.204346895 CEST	192.168.2.4	1.1.1.1	0xf277	Standard query (0)	accounts.youtube.com	65	IN (0x0001)	false
Sep 28, 2024 05:25:53.918282986 CEST	192.168.2.4	1.1.1.1	0x9a79	Standard query (0)	www.godaddy.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:25:53.918428898 CEST	192.168.2.4	1.1.1.1	0x4bfc	Standard query (0)	www.godaddy.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:33.503271103 CEST	192.168.2.4	1.1.1.1	0xed20	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:33.503556967 CEST	192.168.2.4	1.1.1.1	0xac7d	Standard query (0)	www.youtube-nocookie.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:35.656228065 CEST	192.168.2.4	1.1.1.1	0x6a24	Standard query (0)	www.youtube-nocookie.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:35.656514883 CEST	192.168.2.4	1.1.1.1	0xd89f	Standard query (0)	www.youtube-nocookie.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:40.393723965 CEST	192.168.2.4	1.1.1.1	0xae9c	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:40.394035101 CEST	192.168.2.4	1.1.1.1	0x5a1	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:41.387945890 CEST	192.168.2.4	1.1.1.1	0xf4f1	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:41.388175964 CEST	192.168.2.4	1.1.1.1	0x294b	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:47.307476044 CEST	192.168.2.4	1.1.1.1	0xdbdd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:47.307859898 CEST	192.168.2.4	1.1.1.1	0x92a7	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:50.821446896 CEST	192.168.2.4	1.1.1.1	0x8eff	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:50.821588039 CEST	192.168.2.4	1.1.1.1	0x4c72	Standard query (0)	support.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:52.389739990 CEST	192.168.2.4	1.1.1.1	0xd7a0	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:52.389919043 CEST	192.168.2.4	1.1.1.1	0xa49e	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:54.926223993 CEST	192.168.2.4	1.1.1.1	0x9929	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:54.926276922 CEST	192.168.2.4	1.1.1.1	0x231a	Standard query (0)	support.google.com	65	IN (0x0001)	false
Sep 28, 2024 05:26:54.928678989 CEST	192.168.2.4	1.1.1.1	0xc1cc	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 05:26:54.928798914 CEST	192.168.2.4	1.1.1.1	0xa1cd	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:14 UTC	679	OUT	GET / HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:25:14 UTC	1019	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.33.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: d062164987bdef15564189f7fce05e47 Date: Sat, 28 Sep 2024 03:25:14 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:14 UTC	15365	IN	Data Raw: 62 34 64 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 79 67 66 64 68 66 72 67 69 65 79 72 74 65 79 75 35 34 35 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: b4d3<!DOCTYPE html><html lang="fr-FR"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>ygfdhfrgieyrteyu545</title><meta name="author" content="
2024-09-28 03:25:14 UTC	16384	IN	Data Raw: 3a 75 6e 73 65 74 7d 2e 78 20 2e 63 31 2d 34 64 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 78 20 2e 63 31 2d 34 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 75 6e 73 65 74 7d 2e 78 20 2e 63 31 2d 34 66 7b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 75 6e 73 65 74 7d 2e 78 20 2e 63 31 2d 34 67 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 75 6e 73 65 74 7d 2e 78 20 2e 63 31 2d 34 68 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 7d 2e 78 20 2e 63 31 2d 34 6b 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 7d 2e 78 20 2e 63 31 2d 34 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 78 20 2e 63 31 2d 34 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 2e 78 20 2e 63 31 2d 34 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 32 34 Data Ascii: :unset}.x .c1-4d{color:inherit}.x .c1-4e{font-family:unset}.x .c1-4f{letter-spacing:unset}.x .c1-4g{text-transform:unset}.x .c1-4h{flex-basis:100%}.x .c1-4k{line-height:1.25}.x .c1-4l{margin-bottom:24px}.x .c1-4m{font-size:22px}.x .c1-4s{padding-bottom:24
2024-09-28 03:25:14 UTC	14555	IN	Data Raw: 74 61 2d 75 78 3d 22 47 72 69 64 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 31 31 20 63 31 2d 33 6a 20 63 31 2d 33 6b 20 63 31 2d 33 6c 20 63 31 2d 31 32 20 63 31 2d 33 6d 20 63 31 2d 31 34 20 63 31 2d 33 6e 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 33 6f 20 63 31 2d 33 70 20 63 31 2d 33 71 20 63 31 2d 33 72 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 43 65 6c 6c 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 33 6a 20 63 31 2d 33 73 20 63 31 2d 33 74 20 63 31 2d 33 75 20 63 31 2d 31 7a 20 63 31 2d 32 35 20 63 31 2d 33 76 20 63 31 2d 32 37 20 63 31 2d 33 77 Data Ascii: ta-ux="Grid" class="x-el x-el-div c1-1 c1-2 c1-11 c1-3j c1-3k c1-3l c1-12 c1-3m c1-14 c1-3n c1-b c1-c c1-3o c1-3p c1-3q c1-3r c1-d c1-e c1-f c1-g"><div data-ux="GridCell" class="x-el x-el-div c1-1 c1-2 c1-3j c1-3s c1-3t c1-3u c1-1z c1-25 c1-3v c1-27 c1-3w

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:17 UTC	593	OUT	GET /markup/ad HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1
2024-09-28 03:25:17 UTC	655	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html; charset=utf-8 Pragma: no-cache Expires: 0 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Date: Sat, 28 Sep 2024 03:25:17 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:17 UTC	5499	IN	Data Raw: 31 35 36 65 0d 0a 3c 64 69 76 20 69 64 3d 22 47 4f 44 41 44 44 59 5f 46 52 45 45 4d 49 55 4d 5f 41 44 22 20 63 6c 61 73 73 3d 22 67 64 2d 61 64 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 47 44 20 53 68 65 72 70 61 22 3b 0a 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 62 6c 6f 62 62 79 2f 67 6f 2f 75 78 2f 66 6f 6e 74 73 2f 73 68 65 72 70 61 2f 31 2e 31 2f 67 64 73 68 65 72 70 61 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 7d 0a Data Ascii: 156e<div id="GODADDY_FREEMIUM_AD" class="gd-ad-wrapper"> <style type="text/css"> @font-face { font-family: "GD Sherpa"; src: url('//img1.wsimg.com/blobby/go/ux/fonts/sherpa/1.1/gdsherpa-regular.woff2'); font-display: swap; }

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:19 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 03:25:19 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=220783 Date: Sat, 28 Sep 2024 03:25:19 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:19 UTC	554	OUT	GET /markup/ad HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
2024-09-28 03:25:20 UTC	655	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html; charset=utf-8 Pragma: no-cache Expires: 0 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Date: Sat, 28 Sep 2024 03:25:20 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:20 UTC	5499	IN	Data Raw: 31 35 36 65 0d 0a 3c 64 69 76 20 69 64 3d 22 47 4f 44 41 44 44 59 5f 46 52 45 45 4d 49 55 4d 5f 41 44 22 20 63 6c 61 73 73 3d 22 67 64 2d 61 64 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 20 20 20 20 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 47 44 20 53 68 65 72 70 61 22 3b 0a 20 20 20 20 20 20 73 72 63 3a 20 75 72 6c 28 27 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 62 6c 6f 62 62 79 2f 67 6f 2f 75 78 2f 66 6f 6e 74 73 2f 73 68 65 72 70 61 2f 31 2e 31 2f 67 64 73 68 65 72 70 61 2d 72 65 67 75 6c 61 72 2e 77 6f 66 66 32 27 29 3b 0a 20 20 20 20 20 20 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 20 73 77 61 70 3b 0a 20 20 20 20 7d 0a Data Ascii: 156e<div id="GODADDY_FREEMIUM_AD" class="gd-ad-wrapper"> <style type="text/css"> @font-face { font-family: "GD Sherpa"; src: url('//img1.wsimg.com/blobby/go/ux/fonts/sherpa/1.1/gdsherpa-regular.woff2'); font-display: swap; }

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:20 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 03:25:21 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=220811 Date: Sat, 28 Sep 2024 03:25:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 03:25:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:25 UTC	813	OUT	GET /favicon.ico HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
2024-09-28 03:25:25 UTC	986	IN	HTTP/1.1 404 Not Found Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.33.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure Date: Sat, 28 Sep 2024 03:25:25 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:25 UTC	15398	IN	Data Raw: 39 38 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 79 67 66 64 68 66 72 67 69 65 79 72 74 65 79 75 35 34 35 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 9817<!DOCTYPE html><html lang="fr-FR"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>ygfdhfrgieyrteyu545</title><meta name="author" content="
2024-09-28 03:25:25 UTC	16384	IN	Data Raw: 31 2d 34 65 7b 63 6f 6c 6f 72 3a 72 67 62 28 39 34 2c 20 39 34 2c 20 39 34 29 7d 2e 78 20 2e 63 31 2d 34 66 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 32 70 78 7d 2e 78 20 2e 63 31 2d 34 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 20 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 20 2e 63 31 2d 34 6c 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 78 20 2e 63 31 2d 34 6d 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 78 20 2e 63 31 2d 34 6e 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 78 20 2e 63 31 2d 34 6f 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 2e 78 20 2e 63 31 2d 34 70 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6c 69 6e 65 2d 74 68 72 6f 75 67 68 7d 2e 78 20 2e 63 31 2d 34 71 7b 74 65 78 74 2d 64 65 Data Ascii: 1-4e{color:rgb(94, 94, 94)}.x .c1-4f{font-size:22px}.x .c1-4k{font-size:inherit !important}.x .c1-4l{color:inherit}.x .c1-4m{font-weight:600}.x .c1-4n{line-height:inherit}.x .c1-4o{font-style:italic}.x .c1-4p{text-decoration:line-through}.x .c1-4q{text-de
2024-09-28 03:25:25 UTC	7166	IN	Data Raw: 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 3e 20 3c 73 65 63 74 69 6f 6e 20 64 61 74 61 2d 75 78 3d 22 53 65 63 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 73 65 63 74 69 6f 6e 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 35 30 20 63 31 2d 35 34 20 63 31 2d 35 35 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 6c 20 63 31 2d 6d 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 61 20 63 31 2d 32 62 20 63 31 2d 73 20 63 31 2d 74 20 63 31 2d 31 7a 20 63 31 2d 62 20 63 31 Data Ascii: c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><div> <section data-ux="Section" class="x-el x-el-section c1-1 c1-2 c1-50 c1-54 c1-55 c1-b c1-c c1-l c1-m c1-d c1-e c1-f c1-g"><div data-ux="Container" class="x-el x-el-div c1-1 c1-2 c1-2a c1-2b c1-s c1-t c1-1z c1-b c1

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:25 UTC	678	OUT	GET /sw.js HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
2024-09-28 03:25:25 UTC	663	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/javascript Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 318a946875876c2f430a2ea837b4c13c Date: Sat, 28 Sep 2024 03:25:25 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:25 UTC	15721	IN	Data Raw: 38 31 31 30 0d 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 3d 7b 38 39 35 3a 28 29 3d 3e 7b 74 72 79 7b 73 65 6c 66 5b 22 77 6f 72 6b 62 6f 78 3a 63 61 63 68 65 61 62 6c 65 2d 72 65 73 70 6f 6e 73 65 3a 36 2e 34 2e 31 22 5d 26 26 5f 28 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 2c 32 35 39 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 42 3a 28 29 3d 3e 61 7d 29 2c 73 28 39 31 33 29 3b 63 6c 61 73 73 20 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 28 28 65 2c 74 29 3d 3e 7b 74 68 69 73 2e 72 65 73 6f 6c 76 65 3d 65 2c 74 68 69 73 2e 72 65 6a 65 63 74 3d 74 7d 29 29 7d 7d 7d 2c 31 32 35 3a 28 65 2c 74 2c 73 29 3d 3e 7b 73 2e 64 28 74 2c 7b 56 3a Data Ascii: 8110(()=>{"use strict";var e={895:()=>{try{self["workbox:cacheable-response:6.4.1"]&&_()}catch(e){}},259:(e,t,s)=>{s.d(t,{B:()=>a}),s(913);class a{constructor(){this.promise=new Promise(((e,t)=>{this.resolve=e,this.reject=t}))}}},125:(e,t,s)=>{s.d(t,{V:
2024-09-28 03:25:25 UTC	16384	IN	Data Raw: 65 2c 74 29 7c 7c 52 2e 68 61 73 28 65 2c 74 29 7d 2c 73 28 35 35 30 29 3b 63 6f 6e 73 74 20 76 3d 22 63 61 63 68 65 2d 65 6e 74 72 69 65 73 22 2c 62 3d 65 3d 3e 7b 63 6f 6e 73 74 20 74 3d 6e 65 77 20 55 52 4c 28 65 2c 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 29 3b 72 65 74 75 72 6e 20 74 2e 68 61 73 68 3d 22 22 2c 74 2e 68 72 65 66 7d 3b 63 6c 61 73 73 20 78 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 68 69 73 2e 5f 64 62 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 61 63 68 65 4e 61 6d 65 3d 65 7d 5f 75 70 67 72 61 64 65 44 62 28 65 29 7b 63 6f 6e 73 74 20 74 3d 65 2e 63 72 65 61 74 65 4f 62 6a 65 63 74 53 74 6f 72 65 28 76 2c 7b 6b 65 79 50 61 74 68 3a 22 69 64 22 7d 29 3b 74 2e 63 72 65 61 74 65 49 6e 64 65 78 28 22 63 61 63 68 65 4e 61 6d 65 22 2c 22 Data Ascii: e,t)\|\|R.has(e,t)},s(550);const v="cache-entries",b=e=>{const t=new URL(e,location.href);return t.hash="",t.href};class x{constructor(e){this._db=null,this._cacheName=e}_upgradeDb(e){const t=e.createObjectStore(v,{keyPath:"id"});t.createIndex("cacheName","
2024-09-28 03:25:25 UTC	948	IN	Data Raw: 74 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 73 3a 5b 32 30 30 5d 7d 29 5d 7d 29 29 2c 28 30 2c 65 2e 72 65 67 69 73 74 65 72 52 6f 75 74 65 29 28 28 28 7b 72 65 71 75 65 73 74 3a 65 7d 29 3d 3e 22 73 74 79 6c 65 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 7c 7c 22 73 63 72 69 70 74 22 3d 3d 3d 65 2e 64 65 73 74 69 6e 61 74 69 6f 6e 29 2c 6e 65 77 20 74 2e 53 74 61 6c 65 57 68 69 6c 65 52 65 76 61 6c 69 64 61 74 65 28 7b 63 61 63 68 65 4e 61 6d 65 3a 22 73 74 61 74 69 63 2d 72 65 73 6f 75 72 63 65 73 22 2c 70 6c 75 67 69 6e 73 3a 5b 6e 65 77 20 61 2e 43 61 63 68 65 61 62 6c 65 52 65 73 70 6f 6e 73 65 50 6c 75 67 69 6e 28 7b 73 74 61 74 75 73 65 Data Ascii: t",plugins:[new a.CacheableResponsePlugin({statuses:[200]})]})),(0,e.registerRoute)((({request:e})=>"style"===e.destination\|\|"script"===e.destination),new t.StaleWhileRevalidate({cacheName:"static-resources",plugins:[new a.CacheableResponsePlugin({statuse

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ygfdhfrgieyrteyu545.godaddysites.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Windows Analysis Report
https://ygfdhfrgieyrteyu545.godaddysites.com/

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:25 UTC	627	OUT	GET /v3/recaptcha HTTP/1.1 Host: contact.apps-api.instantpage.secureserver.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://ygfdhfrgieyrteyu545.godaddysites.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:25:25 UTC	300	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 03:25:25 GMT Content-Type: application/json; charset=utf-8 Content-Length: 54 Connection: close x-powered-by: Slay Access-Control-Allow-Origin: * ETag: W/"36-/JybxMl8Y5PwwWjo7fmcJSDGXLQ" Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-09-28 03:25:25 UTC	54	IN	Data Raw: 7b 22 73 69 74 65 4b 65 79 22 3a 22 36 4c 66 6a 73 70 67 55 41 41 41 41 41 42 73 62 6a 47 39 69 64 36 71 58 51 4b 5a 6b 71 62 36 5f 48 70 63 65 36 75 69 5f 22 7d Data Ascii: {"siteKey":"6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_"}

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:26 UTC	576	OUT	GET /manifest.webmanifest HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:25:26 UTC	666	IN	HTTP/1.1 200 OK Link: <https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: application/manifest+json Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: cb689d7179d81c187a89d6f2ee5fd2c3 Date: Sat, 28 Sep 2024 03:25:26 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:26 UTC	519	IN	Data Raw: 31 66 62 0d 0a 7b 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 73 74 61 6e 64 61 6c 6f 6e 65 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 69 7a 65 73 22 3a 22 31 39 32 78 31 39 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 73 72 63 22 3a 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 33 35 37 38 31 62 38 2d 63 36 63 31 2d 34 30 31 32 2d 62 62 33 65 2d 34 66 38 65 63 36 30 34 38 36 32 33 2f 74 25 43 33 25 41 39 6c 25 43 33 25 41 39 63 68 61 72 67 65 6d 65 6e 74 25 32 30 6f 72 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 31 39 32 2c 68 3a 31 39 32 2c 6d 22 7d 2c 7b 22 73 69 7a 65 73 22 3a 22 35 31 32 78 35 31 32 22 2c 22 74 79 70 65 22 Data Ascii: 1fb{"scope":"/","start_url":"/","display":"standalone","icons":[{"sizes":"192x192","type":"image/png","src":"//img1.wsimg.com/isteam/ip/035781b8-c6c1-4012-bb3e-4f8ec6048623/t%C3%A9l%C3%A9chargement%20or.png/:/rs=w:192,h:192,m"},{"sizes":"512x512","type"

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:26 UTC	689	OUT	GET /politique-de-confidentialit%C3%A9 HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
2024-09-28 03:25:26 UTC	1019	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.33.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: de96d64b402268766a55ab1a1020de57 Date: Sat, 28 Sep 2024 03:25:26 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:26 UTC	15365	IN	Data Raw: 39 37 34 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 79 67 66 64 68 66 72 67 69 65 79 72 74 65 79 75 35 34 35 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 974e<!DOCTYPE html><html lang="fr-FR"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>ygfdhfrgieyrteyu545</title><meta name="author" content="
2024-09-28 03:25:26 UTC	16384	IN	Data Raw: 72 61 70 3a 77 72 61 70 7d 2e 78 20 2e 63 31 2d 34 33 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 34 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 34 39 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 78 20 2e 63 31 2d 34 61 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 7d 2e 78 20 2e 63 31 2d 34 62 7b 66 6c 65 78 2d 62 61 73 69 73 3a 30 25 7d 2e 78 20 2e 63 31 2d 34 63 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 32 70 78 7d 2e 78 20 2e 63 31 2d 34 64 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 32 70 78 7d 2e 78 20 2e 63 31 2d 34 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 34 36 2c 20 32 34 36 2c 20 32 34 36 29 7d 2e 78 20 2e 63 31 2d 34 70 7b 70 61 64 64 69 6e Data Ascii: rap:wrap}.x .c1-43{margin-right:-12px}.x .c1-44{margin-left:-12px}.x .c1-49{flex-grow:1}.x .c1-4a{flex-shrink:1}.x .c1-4b{flex-basis:0%}.x .c1-4c{padding-right:12px}.x .c1-4d{padding-left:12px}.x .c1-4o{background-color:rgb(246, 246, 246)}.x .c1-4p{paddin
2024-09-28 03:25:26 UTC	6998	IN	Data Raw: 61 2d 75 78 3d 22 43 6f 6e 74 61 69 6e 65 72 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 32 61 20 63 31 2d 32 62 20 63 31 2d 73 20 63 31 2d 74 20 63 31 2d 31 7a 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 33 68 20 63 31 2d 64 20 63 31 2d 33 69 20 63 31 2d 65 20 63 31 2d 33 6a 20 63 31 2d 66 20 63 31 2d 33 6b 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 4c 61 79 6f 75 74 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 Data Ascii: a-ux="Container" class="x-el x-el-div c1-1 c1-2 c1-2a c1-2b c1-s c1-t c1-1z c1-b c1-c c1-3h c1-d c1-3i c1-e c1-3j c1-f c1-3k c1-g"><div data-ux="Layout" class="x-el x-el-div c1-1 c1-2 c1-b c1-c c1-d c1-e c1-f c1-g"><div data-ux="Grid" class="x-el x-el-div

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:26 UTC	695	OUT	GET /recaptcha/api.js?render=6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:25:26 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Sat, 28 Sep 2024 03:25:26 GMT Date: Sat, 28 Sep 2024 03:25:26 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:26 UTC	641	IN	Data Raw: 35 62 63 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 5bc/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-09-28 03:25:26 UTC	834	IN	Data Raw: 59 66 66 78 72 4d 38 54 6d 5a 54 36 52 41 72 57 47 51 56 43 4a 30 4c 52 69 76 44 37 67 6c 63 41 55 41 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 Data Ascii: YffxrM8TmZT6RArWGQVCJ0LRivD7glcAUAAACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecati
2024-09-28 03:25:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:26 UTC	381	OUT	GET /v3/recaptcha HTTP/1.1 Host: contact.apps-api.instantpage.secureserver.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:25:27 UTC	300	IN	HTTP/1.1 200 OK Date: Sat, 28 Sep 2024 03:25:27 GMT Content-Type: application/json; charset=utf-8 Content-Length: 54 Connection: close x-powered-by: Slay Access-Control-Allow-Origin: * ETag: W/"36-/JybxMl8Y5PwwWjo7fmcJSDGXLQ" Strict-Transport-Security: max-age=15724800; includeSubDomains
2024-09-28 03:25:27 UTC	54	IN	Data Raw: 7b 22 73 69 74 65 4b 65 79 22 3a 22 36 4c 66 6a 73 70 67 55 41 41 41 41 41 42 73 62 6a 47 39 69 64 36 71 58 51 4b 5a 6b 71 62 36 5f 48 70 63 65 36 75 69 5f 22 7d Data Ascii: {"siteKey":"6LfjspgUAAAAABsbjG9id6qXQKZkqb6_Hpce6ui_"}

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:27 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=XCYrgaczg5+SeaT&MD=H8oRZPny HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-09-28 03:25:27 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: bc30a303-843b-4bc6-849b-47dd6a561b79 MS-RequestId: 270be87b-34d8-4f8c-adb3-6510ced7c421 MS-CV: v3yCqzUSr0+LUW7p.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sat, 28 Sep 2024 03:25:26 GMT Connection: close Content-Length: 24490
2024-09-28 03:25:27 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-09-28 03:25:27 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:27 UTC	663	OUT	GET /galerie HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
2024-09-28 03:25:27 UTC	1019	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.33.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 28a5bbfec03f4af8c173ca97ba2544f2 Date: Sat, 28 Sep 2024 03:25:27 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:27 UTC	15365	IN	Data Raw: 31 31 34 64 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 79 67 66 64 68 66 72 67 69 65 79 72 74 65 79 75 35 34 35 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: 114df<!DOCTYPE html><html lang="fr-FR"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>ygfdhfrgieyrteyu545</title><meta name="author" content=
2024-09-28 03:25:27 UTC	16384	IN	Data Raw: 2d 34 33 20 3e 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 30 2e 37 35 73 20 2d 30 2e 32 34 73 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 38 2c 20 30 2e 31 38 2c 20 31 2e 30 38 29 3b 7d 2e 78 20 2e 63 31 2d 34 34 20 3e 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f 61 64 65 72 73 63 61 6c 65 20 30 2e 37 35 73 20 2d 30 2e 31 32 73 20 69 6e 66 69 6e 69 74 65 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 2c 20 30 2e 36 38 2c 20 30 2e 31 38 2c 20 31 2e 30 38 29 3b 7d 2e 78 20 2e 63 31 2d 34 35 20 3e 20 73 76 67 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 61 6e 69 6d 61 74 69 6f 6e 3a 6c 6f Data Ascii: -43 > svg:nth-child(1){animation:loaderscale 0.75s -0.24s infinite cubic-bezier(0.2, 0.68, 0.18, 1.08);}.x .c1-44 > svg:nth-child(2){animation:loaderscale 0.75s -0.12s infinite cubic-bezier(0.2, 0.68, 0.18, 1.08);}.x .c1-45 > svg:nth-child(3){animation:lo
2024-09-28 03:25:27 UTC	16384	IN	Data Raw: 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 30 25 2c 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 29 20 31 30 30 25 29 2c 20 75 72 6c 28 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 75 78 78 32 36 71 79 57 67 67 63 57 56 79 34 59 52 2f 3a 2f 72 73 3d 77 3a 37 36 37 2c 6d 22 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 35 31 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 6d 69 6e 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 34 35 31 Data Ascii: nd-image:linear-gradient(to bottom, rgba(0, 0, 0, 0) 0%, rgba(0, 0, 0, 0) 100%), url("//img1.wsimg.com/isteam/stock/uxx26qyWggcWVy4YR/:/rs=w:767,m")}}@media (min-width: 451px) and (max-width: 767px) and (-webkit-min-device-pixel-ratio: 2), (min-width: 451
2024-09-28 03:25:27 UTC	16384	IN	Data Raw: 31 2d 31 70 20 63 31 2d 31 71 20 63 31 2d 31 72 20 63 31 2d 31 73 20 63 31 2d 31 61 20 63 31 2d 31 74 20 63 31 2d 31 75 20 63 31 2d 31 76 20 63 31 2d 31 77 20 63 31 2d 31 78 20 63 31 2d 31 79 20 63 31 2d 31 7a 20 63 31 2d 32 30 20 63 31 2d 62 20 63 31 2d 32 31 20 63 31 2d 63 20 63 31 2d 32 32 20 63 31 2d 32 33 20 63 31 2d 32 34 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 22 20 64 61 74 61 2d 74 63 63 6c 3d 22 75 78 32 2e 48 45 41 44 45 52 2e 68 65 61 64 65 72 39 2e 4c 6f 67 6f 2e 44 65 66 61 75 6c 74 2e 4c 69 6e 6b 2e 44 65 66 61 75 6c 74 2e 34 34 34 36 36 2e 63 6c 69 63 6b 2c 63 6c 69 63 6b 22 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 42 6c 6f 63 6b 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 Data Ascii: 1-1p c1-1q c1-1r c1-1s c1-1a c1-1t c1-1u c1-1v c1-1w c1-1x c1-1y c1-1z c1-20 c1-b c1-21 c1-c c1-22 c1-23 c1-24 c1-d c1-e c1-f c1-g" data-tccl="ux2.HEADER.header9.Logo.Default.Link.Default.44466.click,click"><div data-ux="Block" class="x-el x-el-div c1-1 c
2024-09-28 03:25:27 UTC	6376	IN	Data Raw: 31 20 63 31 2d 32 20 63 31 2d 31 73 20 63 31 2d 31 61 20 63 31 2d 37 70 20 63 31 2d 31 32 20 63 31 2d 31 34 20 63 31 2d 62 20 63 31 2d 38 35 20 63 31 2d 63 20 63 31 2d 33 70 20 63 31 2d 64 20 63 31 2d 38 36 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d 67 20 78 2d 72 74 22 3e 3c 70 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 22 3e 3c 73 70 61 6e 3e 43 6f 70 79 72 69 67 68 74 20 c2 a9 20 32 30 32 33 20 79 67 66 64 68 66 72 67 69 65 79 72 74 65 79 75 35 34 35 20 2d 20 54 6f 75 73 20 64 72 6f 69 74 73 20 72 c3 a9 73 65 72 76 c3 a9 73 2e 3c 2f 73 70 61 6e 3e 3c 2f 70 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 64 61 74 61 2d 75 78 3d 22 47 72 69 64 43 65 6c 6c 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 64 69 76 20 63 31 2d 31 20 63 31 Data Ascii: 1 c1-2 c1-1s c1-1a c1-7p c1-12 c1-14 c1-b c1-85 c1-c c1-3p c1-d c1-86 c1-e c1-f c1-g x-rt"><p style="margin:0"><span>Copyright 2023 ygfdhfrgieyrteyu545 - Tous droits rservs.</span></p></div></div><div data-ux="GridCell" class="x-el x-el-div c1-1 c1

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:27 UTC	786	OUT	GET /privacy HTTP/1.1 Host: policies.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 03:25:27 UTC	2502	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Sat, 28 Sep 2024 03:25:27 GMT P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityPoliciesUi/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-AITVS3eMaWk-kB-UJM8fGQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityPoliciesUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/IdentityPoliciesUi/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: unsafe-none reporting-endpoints: default="/_/IdentityPoliciesUi/web-reports?context=eJwVw08oQ3EAB_D58ZWWfym1lpZW5l_pGW2Zg9rFvwPH3Z7NXrz82V-achDtIokc9svBAUW02o1McXPz_LZXmmIpbe9ROxGHJT-f-hh_KrqMZsNYh9mQsl6Sc1eaOKfeSCpWIO1nRbJ9VSQiNGJr0sjgsEaWgjr5jOvkMKkT05dObPxEWScHLe_E8ZRALp_AkYXixUvhnqGY5HdnKWwxiu9rinjuHnt8YVMB3VGwz8sfCub4BT5fVuD7VRDk75wPeKxi0OoYQvUMGw0MoxaGbhfDsYfh1suwmmbwvDL0tmYwxLdtZdDHJ0eyGPdngXwW1mYVYZOKtf9uFUxUUTpV0VRbc1J6vqhuTN3Q9Uprpy8QEmW_tBiVoyvBwLw8LUuRiBRelsKiXbD3CwN2R48giEHhD8PVgZU" Server: ESF X-XSS-Protection: 0 X-Content-Type-Options: nosniff Set-Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g; expires=Sun, 30-Mar-2025 03:25:27 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 70 6f 6c 69 63 69 65 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 35 2c 20 77 69 64 74 68 Data Ascii: 8000<!doctype html><html lang="en-US" dir="ltr"><head><base href="https://policies.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin"><meta name="viewport" content="initial-scale=1, maximum-scale=5, width
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 6e 28 29 7b 6e 28 22 61 66 74 22 29 7d 3b 61 2e 5f 69 73 4c 61 7a 79 49 6d 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 73 72 63 22 29 7c 7c 65 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 69 6c 73 22 29 7c 7c 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6c 6f 61 64 69 6e 67 22 29 3d 3d 3d 22 6c 61 7a 79 22 7d 3b 0a 61 2e 6c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 62 29 7b 76 61 72 20 63 3d 7b 7d 3b 63 5b 62 5d 3d 6b 28 29 3b 61 2e 63 63 5f 6c 61 74 65 6e 63 79 2e 70 75 73 68 28 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 28 62 29 7b 76 61 72 20 63 3d 6e 28 22 69 6d 6c 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 Data Ascii: n(){n("aft")};a._isLazyImage=function(e){return e.hasAttribute("data-src")\|\|e.hasAttribute("data-ils")\|\|e.getAttribute("loading")==="lazy"};a.l=function(e){function g(b){var c={};c[b]=k();a.cc_latency.push(c)}function m(b){var c=n("iml");b.setAttribute("
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 68 74 3a 30 3b 74 6f 70 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 4d 43 63 4f 41 63 3e 2e 70 47 78 70 48 63 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 2e 49 71 42 66 4d 3e 2e 48 4c 6c 41 48 62 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 36 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 31 36 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 39 39 39 39 7d 2e 56 55 6f 4b 5a 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 Data Ascii: ht:0;top:0;overflow:hidden;z-index:1}.MCcOAc>.pGxpHc{flex-shrink:0;flex-grow:0}.IqBfM>.HLlAHb{align-items:center;display:flex;height:60px;position:absolute;right:16px;top:0;z-index:9999}.VUoKZ{display:none;position:absolute;top:0;left:0;right:0;height:3px
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 70 78 20 31 35 70 78 20 31 30 70 78 7d 2e 71 76 6f 52 77 63 20 2e 6b 4a 50 68 49 66 7b 6d 61 72 67 69 6e 3a 31 34 70 78 20 30 20 30 20 31 30 70 78 7d 7d 2e 4d 35 41 43 42 63 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 66 61 33 6b 6b 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 37 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 6d 61 72 67 69 6e 3a 30 20 37 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 66 61 33 6b 6b 20 2e 59 4c 4f 4f 6c 7b 63 6f 6c 6f 72 3a 23 35 66 36 33 36 38 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 70 72 6f 64 75 63 74 20 73 61 6e 73 22 Data Ascii: px 15px 10px}.qvoRwc .kJPhIf{margin:14px 0 0 10px}}.M5ACBc{height:auto;width:auto}.fa3kk{display:inline-block;font-size:1.375rem;font-weight:400;line-height:1;margin:0 7px;padding:0;vertical-align:top}.fa3kk .YLOOl{color:#5f6368;font-family:"product sans"
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 72 65 6e 74 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 77 69 64 74 68 3a 32 30 30 70 78 7d 2e 61 43 73 4a 6f 64 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 61 58 42 74 49 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 74 6f 70 3a 31 34 70 78 7d 2e 58 62 39 68 50 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 6f 78 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 Data Ascii: rent;display:inline-block;outline:none;padding-bottom:8px;width:200px}.aCsJod{height:40px;position:relative;vertical-align:top}.aXBtI{display:flex;position:relative;top:14px}.Xb9hP{display:flex;box-flex:1;flex-grow:1;flex-shrink:1;min-width:0%;position:re
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 2e 77 68 73 4f 6e 64 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 66 6f 63 75 73 7e 2e 41 78 4f 79 46 63 7b 63 6f 6c 6f 72 3a 23 33 33 36 37 64 36 7d 2e 72 46 72 4e 4d 65 2e 64 6d 37 59 54 63 20 2e 77 68 73 4f 6e 64 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 66 6f 63 75 73 7e 2e 41 78 4f 79 46 63 7b 63 6f 6c 6f 72 3a 23 61 31 63 32 66 61 7d 2e 72 46 72 4e 4d 65 2e 6b 30 74 57 6a 20 2e 77 68 73 4f 6e 64 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 66 6f 63 75 73 7e 2e 41 78 4f 79 46 63 7b 63 6f 6c 6f 72 3a 23 64 35 30 30 30 30 7d 2e 6e 64 4a 69 35 64 7b 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 33 38 29 3b 66 6f 6e 74 3a 34 30 30 20 31 36 70 78 20 52 6f 62 6f 74 6f 2c 52 6f 62 6f 74 6f 44 72 61 66 74 2c 48 65 6c 76 65 74 69 Data Ascii: .whsOnd:not([disabled]):focus~.AxOyFc{color:#3367d6}.rFrNMe.dm7YTc .whsOnd:not([disabled]):focus~.AxOyFc{color:#a1c2fa}.rFrNMe.k0tWj .whsOnd:not([disabled]):focus~.AxOyFc{color:#d50000}.ndJi5d{color:rgba(0,0,0,.38);font:400 16px Roboto,RobotoDraft,Helveti
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 7d 2e 59 6c 63 66 35 62 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 30 7d 2e 4d 33 47 41 6f 62 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 36 34 38 70 78 29 7b 2e 4d 33 47 41 6f 62 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 31 35 31 2c 31 35 31 2c 31 35 31 2c 30 2e 32 29 7d 7d 2e 61 68 62 4a 35 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 35 36 70 Data Ascii: }.Ylcf5b{border:none;position:absolute;width:100%;height:100%;left:0;top:0}.M3GAob{margin-bottom:24px}@media (min-width:648px){.M3GAob{border:1px solid rgba(151,151,151,0.2)}}.ahbJ5{display:block;position:relative;visibility:hidden}@media (min-width:1256p
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 65 33 44 75 75 62 2e 75 33 62 57 34 65 20 2e 5a 46 72 36 30 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 32 32 29 7d 2e 48 51 38 79 66 2e 75 33 62 57 34 65 20 2e 5a 46 72 36 30 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 36 36 2c 31 33 33 2c 32 34 34 2c 2e 31 35 29 7d 2e 56 77 65 34 56 62 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 2d 35 30 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 32 73 20 65 61 73 65 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 65 61 73 65 20 2e 32 73 2c 74 72 61 6e 73 66 6f 72 6d 20 30 73 20 65 61 73 65 20 2e 32 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f Data Ascii: e3Duub.u3bW4e .ZFr60d{background-color:rgba(0,0,0,0.122)}.HQ8yf.u3bW4e .ZFr60d{background-color:rgba(66,133,244,.15)}.Vwe4Vb{transform:translate(-50%,-50%) scale(0);transition:opacity .2s ease,visibility 0s ease .2s,transform 0s ease .2s;-webkit-transitio
2024-09-28 03:25:27 UTC	2502	IN	Data Raw: 72 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 34 38 70 78 3b 7a 2d 69 6e 64 65 78 3a 30 7d 2e 6d 55 62 43 63 65 3e 2e 54 70 51 6d 39 64 7b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 34 38 70 78 7d 2e 6d 55 62 43 63 65 2e 75 33 62 57 34 65 2c 2e 6d 55 62 43 63 65 2e 71 73 34 31 71 65 2c 2e 6d 55 62 43 63 65 2e 6a 37 6e 49 5a 62 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 3b 2d 77 65 62 6b 69 74 2d 6d 61 73 6b 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 72 61 64 69 61 6c 2d 67 72 61 64 69 65 6e 74 28 63 69 72 63 6c 65 2c 77 68 69 74 65 20 31 30 30 25 2c 62 6c 61 63 6b 20 31 30 30 25 29 7d 2e 59 59 Data Ascii: r;-webkit-tap-highlight-color:transparent;width:48px;z-index:0}.mUbCce>.TpQm9d{height:48px;width:48px}.mUbCce.u3bW4e,.mUbCce.qs41qe,.mUbCce.j7nIZb{-webkit-transform:translateZ(0);-webkit-mask-image:-webkit-radial-gradient(circle,white 100%,black 100%)}.YY
2024-09-28 03:25:28 UTC	2502	IN	Data Raw: 76 65 3b 74 6f 70 3a 35 30 25 7d 2e 78 6a 4b 69 4c 62 3e 73 70 61 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6c 6c 68 45 4d 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 2e 31 35 73 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 35 30 32 29 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 35 30 30 30 7d 2e 6c 6c 68 45 4d 64 2e 69 57 4f 35 74 64 7b 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: ve;top:50%}.xjKiLb>span{display:inline-block;position:relative}.llhEMd{transition:opacity .15s cubic-bezier(0.4,0,0.2,1) .15s;background-color:rgba(0,0,0,0.502);bottom:0;left:0;opacity:0;position:fixed;right:0;top:0;z-index:5000}.llhEMd.iWO5td{transition:

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:28 UTC	670	OUT	GET /contactez-nous HTTP/1.1 Host: ygfdhfrgieyrteyu545.godaddysites.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://ygfdhfrgieyrteyu545.godaddysites.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dps_site_id=us-east-1; _tccl_visitor=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _tccl_visit=55ff25a0-1230-4b5b-b45e-fbb4bad1f0e9; _scc_session=pc=1&C_TOUCH=2024-09-28T03:25:17.291Z
2024-09-28 03:25:28 UTC	1019	IN	HTTP/1.1 200 OK Link: <//img1.wsimg.com/ceph-p3-01/website-builder-data-prod/static/widgets/UX.4.33.1.js>; rel=preload; as=script; crossorigin,<https://img1.wsimg.com/gfonts/s/righteous/v17/1cXxaUPXBpj2rGoU7C9WiHGF.woff2>; rel=preload; as=font; crossorigin,<https://img1.wsimg.com/gfonts/s/josefinsans/v32/Qw3aZQNVED7rKGKxtqIqX5EUDXx4.woff2>; rel=preload; as=font; crossorigin,<https://fonts.googleapis.com>; rel=preconnect; crossorigin,<https://fonts.gstatic.com>; rel=preconnect; crossorigin,<https://img1.wsimg.com>; rel=preconnect; crossorigin,<https://isteam.wsimg.com>; rel=preconnect; crossorigin Cache-Control: max-age=30 Content-Security-Policy: frame-ancestors 'self' godaddy.com *.godaddy.com Content-Type: text/html;charset=utf-8 Vary: Accept-Encoding Server: DPS/2.0.0+sha-227ca78 X-Version: 227ca78 X-SiteId: us-east-1 Set-Cookie: dps_site_id=us-east-1; path=/; secure ETag: 854dfbf2cbc6ec35cec04427e34d4120 Date: Sat, 28 Sep 2024 03:25:28 GMT Connection: close Transfer-Encoding: chunked
2024-09-28 03:25:28 UTC	15365	IN	Data Raw: 64 61 35 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 66 72 2d 46 52 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 2f 3e 3c 74 69 74 6c 65 3e 79 67 66 64 68 66 72 67 69 65 79 72 74 65 79 75 35 34 35 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 75 74 68 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: da51<!DOCTYPE html><html lang="fr-FR"><head><meta charSet="utf-8"/><meta http-equiv="X-UA-Compatible" content="IE=edge"/><meta name="viewport" content="width=device-width, initial-scale=1"/><title>ygfdhfrgieyrteyu545</title><meta name="author" content="
2024-09-28 03:25:28 UTC	16384	IN	Data Raw: 6e 74 7d 2e 78 20 2e 63 31 2d 34 35 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 78 20 2e 63 31 2d 34 36 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 78 20 2e 63 31 2d 34 37 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 2e 78 20 2e 63 31 2d 34 38 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 34 39 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2d 32 34 70 78 7d 2e 78 20 2e 63 31 2d 34 61 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 78 20 2e 63 31 2d 34 67 7b 66 6c 65 78 2d 67 72 6f 77 3a 31 7d 2e 78 20 2e 63 31 2d 34 68 7b 66 6c 65 78 2d 73 68 72 69 6e 6b 3a 31 7d 2e 78 20 2e 63 31 2d 34 69 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 7d 2e 78 20 2e 63 31 2d Data Ascii: nt}.x .c1-45{box-sizing:border-box}.x .c1-46{flex-direction:row}.x .c1-47{flex-wrap:wrap}.x .c1-48{margin-right:-12px}.x .c1-49{margin-bottom:-24px}.x .c1-4a{margin-left:-12px}.x .c1-4g{flex-grow:1}.x .c1-4h{flex-shrink:1}.x .c1-4i{flex-basis:100%}.x .c1-
2024-09-28 03:25:28 UTC	16384	IN	Data Raw: 2c 68 3a 34 36 2c 63 67 3a 74 72 75 65 2c 6d 2f 63 72 3d 77 3a 34 36 2c 68 3a 34 36 2f 71 74 3d 71 3a 31 30 30 2f 6c 6c 2c 20 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 33 35 37 38 31 62 38 2d 63 36 63 31 2d 34 30 31 32 2d 62 62 33 65 2d 34 66 38 65 63 36 30 34 38 36 32 33 2f 74 25 43 33 25 41 39 6c 25 43 33 25 41 39 63 68 61 72 67 65 6d 65 6e 74 25 32 30 6f 72 2e 70 6e 67 2f 3a 2f 72 73 3d 77 3a 39 32 2c 68 3a 39 32 2c 63 67 3a 74 72 75 65 2c 6d 2f 63 72 3d 77 3a 39 32 2c 68 3a 39 32 2f 71 74 3d 71 3a 31 30 30 2f 6c 6c 20 32 78 2c 20 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 69 70 2f 30 33 35 37 38 31 62 38 2d 63 36 63 31 2d 34 30 31 32 2d 62 62 33 65 2d 34 66 38 65 63 36 30 34 38 36 Data Ascii: ,h:46,cg:true,m/cr=w:46,h:46/qt=q:100/ll, //img1.wsimg.com/isteam/ip/035781b8-c6c1-4012-bb3e-4f8ec6048623/t%C3%A9l%C3%A9chargement%20or.png/:/rs=w:92,h:92,cg:true,m/cr=w:92,h:92/qt=q:100/ll 2x, //img1.wsimg.com/isteam/ip/035781b8-c6c1-4012-bb3e-4f8ec60486
2024-09-28 03:25:28 UTC	7769	IN	Data Raw: 57 6b 32 31 2f 3a 2f 72 73 3d 77 3a 33 38 34 30 20 33 78 22 2f 3e 3c 69 6d 67 20 64 61 74 61 2d 75 78 3d 22 49 6d 61 67 65 22 20 73 72 63 3d 22 2f 2f 69 6d 67 31 2e 77 73 69 6d 67 2e 63 6f 6d 2f 69 73 74 65 61 6d 2f 73 74 6f 63 6b 2f 75 47 64 78 72 50 61 4f 57 64 53 79 64 57 6b 32 31 2f 3a 2f 22 20 64 61 74 61 2d 61 69 64 3d 22 49 4d 41 47 45 5f 52 45 4e 44 45 52 45 44 22 20 63 6c 61 73 73 3d 22 78 2d 65 6c 20 78 2d 65 6c 2d 69 6d 67 20 63 31 2d 31 20 63 31 2d 32 20 63 31 2d 34 20 63 31 2d 31 7a 20 63 31 2d 32 61 20 63 31 2d 32 62 20 63 31 2d 31 32 20 63 31 2d 31 34 20 63 31 2d 32 63 20 63 31 2d 38 63 20 63 31 2d 38 64 20 63 31 2d 6e 20 63 31 2d 38 65 20 63 31 2d 38 66 20 63 31 2d 62 20 63 31 2d 63 20 63 31 2d 64 20 63 31 2d 65 20 63 31 2d 66 20 63 31 2d Data Ascii: Wk21/:/rs=w:3840 3x"/><img data-ux="Image" src="//img1.wsimg.com/isteam/stock/uGdxrPaOWdSydWk21/:/" data-aid="IMAGE_RENDERED" class="x-el x-el-img c1-1 c1-2 c1-4 c1-1z c1-2a c1-2b c1-12 c1-14 c1-2c c1-8c c1-8d c1-n c1-8e c1-8f c1-b c1-c c1-d c1-e c1-f c1-

Timestamp	Bytes transferred	Direction	Data
2024-09-28 03:25:29 UTC	1260	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_74x24dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://policies.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=517=01bnEXWM9QkrBGRnjc02-No6EqYw5nWvvcSTeodOlHxku70NE_zDSbMxfE9_6L1ppzb_Y5AxZk9WqX9t-P4q45RKxGb-A7fOOTTouuP35JA_2KT-SrDKPr80scUnGI72NGfUGHjSONgdfLtVzCdtNEBYFx82gJJutu4LGcdaxFHtsJeN4g
2024-09-28 03:25:29 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 1622 Date: Sat, 28 Sep 2024 03:25:29 GMT Expires: Sat, 28 Sep 2024 03:25:29 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-28 03:25:29 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 4a 00 00 00 18 08 06 00 00 00 5d 96 6b 8d 00 00 06 1d 49 44 41 54 78 01 ed d9 05 74 e2 68 10 07 f0 59 d7 73 77 77 3f 92 ae 2f 24 70 ee ee ee ee 2e 15 c2 ba bb bb bb bb bb bb bb 2f b4 27 2d 84 ea bb e6 fe 43 13 f8 8e 4b ed ad db 7b 3f 2c 6d f9 98 cc 37 33 64 c9 ee 9f aa e9 f7 ba 7c 7a 5b d5 ab af 55 bd c1 4c 97 2f f8 0f 1e a7 aa 5a 70 b2 a2 85 df af d9 3c bf 0a d0 89 44 1a f0 cc bc 88 c1 cf bc 0d 54 5a e2 13 aa eb 0b 5e a0 fa f4 61 60 14 45 f1 05 f7 a8 be d0 7d 40 27 0a 69 d0 33 06 73 0c 7c 26 09 a8 b4 a2 0f dc 0d 32 6e 74 79 83 bb ad 60 20 8b 72 90 41 e3 15 5f 48 c3 f3 9f 91 65 1d 70 bf 2d 16 b0 60 9e 27 25 e3 06 a0 13 c1 61 09 94 33 31 78 3e 3e f8 ae 68 10 bc fa e0 7a 9a 7e 09 90 88 0c a3 8c e2 0d Data Ascii: PNGIHDRJ]kIDATxthYsww?/$p./'-CK{?,m73d\|z[UL/Zp<DTZ^a`E}@'i3s\|&2nty` rA_Hep-`'%a31x>>hz~
2024-09-28 03:25:29 UTC	903	IN	Data Raw: 50 3c b4 d7 df 70 c6 fa c5 b3 ce 1e ea 5c 27 20 64 ce 40 fe e3 58 40 98 17 02 24 da e7 96 cf c3 b1 ec 82 ac 92 7a 03 e5 4e 29 3f 90 83 80 ac 0a 1b 53 e9 2c 20 51 fe 54 3a 0f c7 b2 cd 40 f6 06 42 4d 5a c1 ef 8b ac 5a 0d 14 0f 59 de b4 98 40 e1 a4 4a 2f 58 27 ed a0 eb de 1a 80 3a 99 50 13 cf fb 20 bb b2 a2 27 d4 ed 58 cf 9f 85 cc 81 d2 60 a5 99 b6 eb 36 4c 3f c7 ea 96 d6 d6 33 d3 17 29 2b cd 01 b2 63 16 4b 03 c5 7e 29 70 46 ad 8a 64 cb 94 0a 73 80 ec e0 f8 42 30 60 29 90 b0 bd da 03 c5 73 69 fa 23 c5 07 4a fe 2d 16 0c e9 63 6c af e5 d6 73 3c ce c5 da 06 a7 7a 24 27 10 23 a7 2f 78 b3 f5 81 11 80 f9 25 2d e8 aa 16 fe 30 da 2d 1b 64 d6 82 92 05 0a 9d a5 d4 81 e2 0e 78 f8 03 f5 2b 18 22 bf 22 ef e1 d7 03 4e f9 62 20 11 df f0 10 d9 37 fa 87 91 b6 40 45 51 bc 99 Data Ascii: P<p\' d@X@$zN)?S, QT:@BMZZY@J/X':P 'X`6L?3)+cK~)pFdsB0`)si#J-cls<z$'#/x%-0-dx+""Nb 7@EQ