Edit tour

Windows Analysis Report
https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439

Overview

General Information

Sample URL:	https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439
Analysis ID:	1522639
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded SVGs detected

Javascript checks online IP of machine

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5228 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6152 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6908 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6220 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6384 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: Number of links: 0
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: Number of links: 0

Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: <input type="password" .../> found but no <form action="...
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLg

HTTP Parser: Total embedded SVG size: 150007

Source: https://ivanti-onboarder.ebf.de/js/jsdelivr/cookieconsent.min.js

HTTP Parser: !function(e){if(!e.hasinitialised){var t={escaperegexp:function(e){return e.replace(/[\-\[\]\/\{\}\*\+\?\.\\\^\$\|]/g,"\\$&")},hasclass:function(e,t){var i=" ";return 1===e.nodetype&&(i+e.classname+i).replace(/[\n\t]/g,i).indexof(i+t+i)>=0},addclass:function(e,t){e.classname+=" "+t},removeclass:function(e,t){var i=new regexp("\\b"+this.escaperegexp(t)+"\\b");e.classname=e.classname.replace(i,"")},interpolatestring:function(e,t){return e.replace(/{{([a-z][a-z0-9\-_]*)}}/gi,function(e){return t(arguments[1])||""})},getcookie:function(e){var t=("; "+document.cookie).split("; "+e+"=");return t.length<2?void 0:t.pop().split(";").shift()},setcookie:function(e,t,i,n,o,s){var r=new date;r.sethours(r.gethours()+24*(i||365));var a=[e+"="+t,"expires="+r.toutcstring(),"path="+(o||"/")];n&&a.push("domain="+n),s&&a.push("secure"),document.cookie=a.join(";")},deepextend:function(e,t){for(var i in t)t.hasownproperty(i)&&(i in e&&this.isplainobject(e[i])&&this.isplainobject(t[i])?this.deepextend(e[i],t[i]):e[i]=t[i]);retu...

Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: <input type="password" .../> found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: <input type="password" .../> found

Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No favicon
Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No favicon
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No favicon
Source: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLg	HTTP Parser: No favicon

Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No <meta name="author".. found
Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No <meta name="author".. found
Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No <meta name="author".. found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No <meta name="author".. found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No <meta name="author".. found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No <meta name="author".. found

Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No <meta name="copyright".. found
Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No <meta name="copyright".. found
Source: https://ivanti-onboarder.ebf.de/register.html	HTTP Parser: No <meta name="copyright".. found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No <meta name="copyright".. found
Source: https://ivanti-onboarder.ebf.de/login.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49760 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/fonts.googleapis.com.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/animate.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/register.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/general.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/notyf.min.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/notyf-custom.min.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/mobileiron/custom.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/vendor/jquery-3.6.0.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/jquery.urlparameter.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/vendor/modernizr-2.8.3-respond-1.4.2.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/migrator.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/tether.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/vendor/bootstrap.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/notyf.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/jquery.urlparameter.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/vendor/modernizr-2.8.3-respond-1.4.2.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/vendor/jquery-3.6.0.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /img/UEM_357306915.jpeg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/general.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/crying.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/general.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-v9-latin-regular.woff2 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ivanti-onboarder.ebf.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ivanti-onboarder.ebf.de/css/fonts.googleapis.com.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/tether.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/migrator.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/vendor/bootstrap.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/notyf.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-v9-latin-700.woff2 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ivanti-onboarder.ebf.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ivanti-onboarder.ebf.de/css/fonts.googleapis.com.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/crying.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/mobileiron/favicon.png?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/UEM_357306915.jpeg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/mobileiron/favicon.png?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /register.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/select2.min.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/tether.min.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/register.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/passwordscheck.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /css/jsdelivr/cookieconsent.min.css HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/select2.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/passwordscheck.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/info.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/user.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/register.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/select2.min.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/mail.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/register.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /matomo.js HTTP/1.1Host: matomo.ebf.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/lock.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/register.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /security/jcaptcha.jpg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/jsdelivr/cookieconsent.min.js HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/mobileiron/play-blue.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/mobileiron/custom.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij&co=aHR0cHM6Ly9pdmFudGktb25ib2FyZGVyLmViZi5kZTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=6w5cran7seff HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/passwordscheck.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/info.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/user.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/mail.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /security/jcaptcha.jpg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /img/lock.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /matomo.js HTTP/1.1Host: matomo.ebf.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/mobileiron/play-blue.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /js/jsdelivr/cookieconsent.min.js HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij&co=aHR0cHM6Ly9pdmFudGktb25ib2FyZGVyLmViZi5kZTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=6w5cran7seffAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/RI3Pk2QfVraTqUQvmENYAwISRapPH8Lx3ZoW8uCkQH4.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij&co=aHR0cHM6Ly9pdmFudGktb25ib2FyZGVyLmViZi5kZTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=6w5cran7seffAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/bg/RI3Pk2QfVraTqUQvmENYAwISRapPH8Lx3ZoW8uCkQH4.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /function/listCountriesCurrenciesStates.json HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /footer.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plain, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ivanti-onboarder.ebf.de/register.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /login.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
Source: global traffic	HTTP traffic detected: GET /footer.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2; _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.
Source: global traffic	HTTP traffic detected: GET /function/listCountriesCurrenciesStates.json HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2; _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.
Source: global traffic	HTTP traffic detected: GET /css/register.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=D8A528A460C13C002E3EF59A20595A9A
Source: global traffic	HTTP traffic detected: GET /security/jcaptcha.jpg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=D8A528A460C13C002E3EF59A20595A9A
Source: global traffic	HTTP traffic detected: GET /js/birds.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=D8A528A460C13C002E3EF59A20595A9A
Source: global traffic	HTTP traffic detected: GET /img/warning.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij&co=aHR0cHM6Ly9pdmFudGktb25ib2FyZGVyLmViZi5kZTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=eeo9v0q97i6p HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /security/jcaptcha.jpg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62
Source: global traffic	HTTP traffic detected: GET /js/birds.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62
Source: global traffic	HTTP traffic detected: GET /img/warning.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62
Source: global traffic	HTTP traffic detected: GET /footer.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plain, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ivanti-onboarder.ebf.de/login.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /footer.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.ta_QBdCQ2HY.L.B1.O/am=AAAQKA/d=0/rs=AGKMywGtm1kPYna6bJem9Zl6GWDll8talA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/S5udaJxHcLE/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDjyAYIXsyd-lTAMM--U5df8Enasw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Ly7HaccJj4U/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAyzo74QyanT8KTMm5oR1m8N1nReg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/TlWfPI6hiac/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGDAgWihyMA8=&rs=AOn4CLBMMqZYeSW-4LxTteFc8vClOieuNQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/t73NNPaZUG0/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGBggVyh_MA8=&rs=AOn4CLB47rPGPHpQXykZq7IqyjyfuqePCQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/ZvopQXH93JM/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGC8gXChyMA8=&rs=AOn4CLDSY0tysLiFCTUKeBI7D3jX8-Rg-w HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youtube.comConnection: keep-alivePragma: no-cacheCache-Control: no-cachesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/t63y3408s2Y/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGB0gLSh_MA8=&rs=AOn4CLBOj8ke9fNLQZJk0fmts387OfAcgA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/x5LweQRNA6Q/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGGEgYShhMA8=&rs=AOn4CLCj88lG3CcRo9pjqyfueM92a-6BtA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/S5udaJxHcLE/hqdefault.jpg?sqp=-oaymwEXCNACELwBSFryq4qpAwkIARUAAIhCGAE=&rs=AOn4CLAws3mK4fN0DxvK6EhuMirqFJ7hDQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtwRBWxDTtN3uKivi8iAIoFyCfZoKOvn6Wo1CNGy2NAPuC2wdk-70zDcm6T00966XPWcJ5vxNkUewR4cKAChkksbmM51oA&req_ts=1727698059&pg=MainAppBootstrap%3APlaylists&az=1&sigh=AB9vU43LOL5UJ7RQ0rFdSm7N_Voky_M7NA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/guide?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/S5udaJxHcLE/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDjyAYIXsyd-lTAMM--U5df8Enasw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/TlWfPI6hiac/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGDAgWihyMA8=&rs=AOn4CLBMMqZYeSW-4LxTteFc8vClOieuNQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Ly7HaccJj4U/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAyzo74QyanT8KTMm5oR1m8N1nReg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/t73NNPaZUG0/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGBggVyh_MA8=&rs=AOn4CLB47rPGPHpQXykZq7IqyjyfuqePCQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/ZvopQXH93JM/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGC8gXChyMA8=&rs=AOn4CLDSY0tysLiFCTUKeBI7D3jX8-Rg-w HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/t63y3408s2Y/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGB0gLSh_MA8=&rs=AOn4CLBOj8ke9fNLQZJk0fmts387OfAcgA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/browse?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtwRBWxDTtN3uKivi8iAIoFyCfZoKOvn6Wo1CNGy2NAPuC2wdk-70zDcm6T00966XPWcJ5vxNkUewR4cKAChkksbmM51oA&req_ts=1727698059&pg=MainAppBootstrap%3APlaylists&az=1&sigh=AB9vU43LOL5UJ7RQ0rFdSm7N_Voky_M7NA HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=HIOv0FCnavDQuw2WskRzxPRNh7AzoPZqQxmTpJn22CRBGC1zG0futMOwPCs6kNBO1oMRBnQDANMS8qr4NzmkUAULSGAim9aIJn2F4xaQzCeK0hL6O813F_Y5Y8jMQIxd32EBTfi__HXB4BpP1opQR8d1MXhbXFIwy3EquHpNNmWW1nOhfQ
Source: global traffic	HTTP traffic detected: GET /vi/S5udaJxHcLE/hqdefault.jpg?sqp=-oaymwEXCNACELwBSFryq4qpAwkIARUAAIhCGAE=&rs=AOn4CLAws3mK4fN0DxvK6EhuMirqFJ7hDQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/x5LweQRNA6Q/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGGEgYShhMA8=&rs=AOn4CLCj88lG3CcRo9pjqyfueM92a-6BtA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=B2k6bu9dtdKgr_FENERrAGX574Xkm1Xxizrg8EQQOuRSkpxOf7iEcdSNnbJ3dZwy3wapxOH_YOi22JsbFRzfM5px0UlyWEMuuEOfelwbaqPhrMZuhy3pYnJ-jUrOPNPLmxjVE5RzQ64evu07dl65eeDpfEX5K2g_eqCfBmMnFwtcUE7pweyLZo7nVQ
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Vr62-yFQYjPI234YMJXSNIIL-73J3p2VCw3gdNVFydPMAP7ZTAPCfN4my4L6cDxrF6CDRKuQmGlyvexnfwLqSBD25niBDi36XOyAFq9ltEiTF7caSjh_1V07R5O9J8JhchjdwcI5DrPnFWwMSk_22oHwbj_h-4sCWaObIhhz_CB-lG7QNUygLs5uBA
Source: global traffic	HTTP traffic detected: GET /js/th/aDz_T_gaBrysQcZbaYaX8h92PYnkBHHJotKz2yKPZZ4.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Vr62-yFQYjPI234YMJXSNIIL-73J3p2VCw3gdNVFydPMAP7ZTAPCfN4my4L6cDxrF6CDRKuQmGlyvexnfwLqSBD25niBDi36XOyAFq9ltEiTF7caSjh_1V07R5O9J8JhchjdwcI5DrPnFWwMSk_22oHwbj_h-4sCWaObIhhz_CB-lG7QNUygLs5uBA
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/b0557ce3/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /js/th/aDz_T_gaBrysQcZbaYaX8h92PYnkBHHJotKz2yKPZZ4.js HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Vr62-yFQYjPI234YMJXSNIIL-73J3p2VCw3gdNVFydPMAP7ZTAPCfN4my4L6cDxrF6CDRKuQmGlyvexnfwLqSBD25niBDi36XOyAFq9ltEiTF7caSjh_1V07R5O9J8JhchjdwcI5DrPnFWwMSk_22oHwbj_h-4sCWaObIhhz_CB-lG7QNUygLs5uBA
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Vr62-yFQYjPI234YMJXSNIIL-73J3p2VCw3gdNVFydPMAP7ZTAPCfN4my4L6cDxrF6CDRKuQmGlyvexnfwLqSBD25niBDi36XOyAFq9ltEiTF7caSjh_1V07R5O9J8JhchjdwcI5DrPnFWwMSk_22oHwbj_h-4sCWaObIhhz_CB-lG7QNUygLs5uBA
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Vr62-yFQYjPI234YMJXSNIIL-73J3p2VCw3gdNVFydPMAP7ZTAPCfN4my4L6cDxrF6CDRKuQmGlyvexnfwLqSBD25niBDi36XOyAFq9ltEiTF7caSjh_1V07R5O9J8JhchjdwcI5DrPnFWwMSk_22oHwbj_h-4sCWaObIhhz_CB-lG7QNUygLs5uBA
Source: global traffic	HTTP traffic detected: GET /privacy.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /generate_204?-lb-Ow HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /generate_204?Fs4Z3Q HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /css/dashboard.css?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ivanti-onboarder.ebf.de/privacy.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /js/newmigration.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://ivanti-onboarder.ebf.de/privacy.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /img/admin-bg-top.png HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/css/dashboard.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /img/mobileiron/onboarder-mi.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/privacy.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /img/ebf-heart.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ivanti-onboarder.ebf.de/privacy.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLgAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=lLOqce9FvXA; VISITOR_INFO1_LIVE=btOwF3VKRGA; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDA%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /footer.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plain, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ivanti-onboarder.ebf.de/privacy.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /privacy-content.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: text/plain, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://ivanti-onboarder.ebf.de/privacy.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /s/desktop/f72ecfe9/img/favicon_32x32.png HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /img/mobileiron/onboarder-mi.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /js/newmigration.js?2.13.2-20240924113820 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /img/admin-bg-top.png HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /img/ebf-heart.svg HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /fonts/source-sans-pro-v9-latin-600.woff2 HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ivanti-onboarder.ebf.desec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://ivanti-onboarder.ebf.de/css/fonts.googleapis.com.css?2.13.2-20240924113820Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /footer.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /privacy-content.html HTTP/1.1Host: ivanti-onboarder.ebf.deConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.8.9a46=b34f059f9ffe5e81.1727698040.; JSESSIONID=253F5364389829D118F47B3142B11D62; qry=; cookieconsent_status=allow; _pk_ses.8.9a46=1
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=Vr62-yFQYjPI234YMJXSNIIL-73J3p2VCw3gdNVFydPMAP7ZTAPCfN4my4L6cDxrF6CDRKuQmGlyvexnfwLqSBD25niBDi36XOyAFq9ltEiTF7caSjh_1V07R5O9J8JhchjdwcI5DrPnFWwMSk_22oHwbj_h-4sCWaObIhhz_CB-lG7QNUygLs5uBA

Source: chromecache_450.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ea},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+ai+"&avm="+ea+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "&uga="+xb+"&vm="+uf},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+zb+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd+"&el="+ug+"&len="+uc+"&of="+ec+"&uga="+xb+"&vm="+uf},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+zb+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Xc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(LI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Uf,LI),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "="},trackingParams:Xa+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:ya},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Vq}]},trackingParams:Xa+"="}},adVideoId:Od,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Od},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:Oe}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Cj}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Gc, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Uf,Ufa),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+"="}},hoverText:{runs:[{text:Qm}]},trackingParams:Xa+"="}},adVideoId:Od,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:ug},associatedCompositePlayerBytesLayoutId:Oe}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Uf,m0),trackingParams:Xa+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:Xa+"="}},hoverText:{runs:[{text:Kn}]},trackingParams:Xa+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Vi+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:Xa+"="},headline:{text:ai,isTemplated:!1,trackingParams:Xa+"="},description:{text:Oe, equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=iwa(d),jE(c)&&(d=c));c=new g.XL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: 0?"http":"https";this.Ca=iE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|iE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=is(d,h,GJa):h&&(d="embedded");this.Ja=d;Qqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_507.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ea+"&ns="+ea+"&event="+ea+"&device="+ea+"&content_v="+y+"&el="+ug+"&ei="+U+"&devicever="+c+"&bti="+Gb+"&format="+Td+"&break_type="+ea+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ea+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Kb+"&slot_pos="+ea+"&slot_len="+ea+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+vc+"&ad_len="+Wc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Gb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: Io.prototype.Ia=function(){return this.C};var kna=(new Date).getTime();var xla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),yla=/\bocr\b/;var Ala=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Qab=0,Rab=0,Sab=0;var Ro;g.Ko=null;g.Mo=!1;g.So=1;Ro=Symbol("SIGNAL");g.To={version:0,r_:0,Om:!1,eg:void 0,Sy:void 0,An:void 0,LL:0,hj:void 0,Ou:void 0,ZE:!1,oP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: Ir(hsb);Ir(isb);function ksb(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var N=b();var O=d==null?void 0:d(),U;O=(O==null?void 0:O.useDarkTheme)\|\|((U=Wl().resolve(Vl(pB)))==null?void 0:U());U=z("enable_cairo_refresh_signature_moments_web");switch(N){case"LIKE":N="animated_like_icon_";N=U?N+(O?"dark_v4":"light_v4"):N+(O?"v2_dark":"v2_light");N={lottiePlayerProps:{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: JE.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new VF("0","fakesb",{video:new RF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new oN(new g.XL("http://www.youtube.com/videoplayback"),c,"fake"):new FN(new g.XL("http://www.youtube.com/videoplayback"),c,new $M(0,0),new $M(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: N+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:U?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":N={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}N=void 0}return N}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},T4b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: Od+"&aqi="+U+"&ad_rmp="+ea+"&sli="+ea}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: WEb.prototype.openToast=function(){var a;(a=this.currentToast)!=null&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var ZEb=new Ul("TOAST_MANAGER_TOKEN");var $Eb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],aFb=Vj("wil_icon_max_concurrent_fetches",Infinity),OI=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Ia.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: Yd+"&el="+ug+"&len="+uc+"&of="+ec+"&uga="+xb+"&vm="+uf},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+U+"&m="+gb+"&oid="+ec+"&plid="+N+"&pltype="+mu+"&ptchn="+ec+"&ptk="+H+"&video_id="+y},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+zb+"&docid="+y+"&ei="+U+"&event="+Qm+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+y+"&ei="+U+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var glb=ja(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),hlb=Wg(glb),IA;function ilb(){return IA?IA:window.lottie?IA=Promise.resolve(window.lottie):IA=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(rY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.pY(a.errorMessage)):this.Cd(rY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.firstChild);return Aic=a},{mode:1});var Cic;var Dic=function(){var a=J.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.firstChild);return Hpc=a},{mode:Az("kevlar_poly_si_batch_j044")?1:2});var Jpc;var Kpc=Mw(Av("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var Lpc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.firstChild);return bCc=a},{mode:1});var dCc;var Z_=function(){var a=J.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.firstChild);return xic=a},{mode:1});var Aic;var Bic=function(){var a=J.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.insertBefore(X().content.cloneNode(!0),a.content.firstChild);return Eic=a},{mode:1});var Fic;var KV=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15310_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$15310_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$15310_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.insertBefore(X().content.cloneNode(!0),a.content.firstChild);return Fic=a},{mode:Az("kevlar_poly_si_batch_j056")?1:2});var Gic;var Hic=function(){var a=J.apply(this,arguments)\|\|this;a.JSC$15313_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$15313_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$15313_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.content.insertBefore(X().content.cloneNode(!0),a.content.firstChild);return O4b=a},{mode:2});var S4b;var T4b={autoplay:!1,loop:!1},U4b={simpleText:""},V4b=function(){var a=J.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=z("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},T4b,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,DF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.It)(),iT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: a.ismb);this.cq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=sP(this.Ca)\|\|"www.youtube.com")):r="video.google.com";this.Qn=r;tP(this,a,!0);this.La=new OO;g.P(this,this.La);q=b?b.innertubeApiKey:ks("",a.innertube_api_key);p=b?b.innertubeApiVersion:ks("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:ks("",a.innertube_context_client_version);q=g.$q("INNERTUBE_API_KEY")\|\|q;p=g.$q("INNERTUBE_API_VERSION")\|\|p;l=g.$q("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=HO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: aN.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var JZb=ja(["https://www.youtube.com/iframe_api"]),bN=function(){this.playerResolver_=Fi();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=Pg;this.playbackDurationSeconds_=0},KZb=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"65",offsetEndMilliseconds:"30"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"51",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_START",adTimeOffset:{offsetStartMilliseconds:"330100",offsetEndMilliseconds:"594666"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"0",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"by"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"73",offsetEndMilliseconds:"64"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"67",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"cn"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"59",offsetEndMilliseconds:"8"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"26",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"fp"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"66",offsetEndMilliseconds:"35"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"98",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"go"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"14",offsetEndMilliseconds:"87"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"79",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nh"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:"25",offsetEndMilliseconds:"13"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"32",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nl"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"50",offsetEndMilliseconds:"67"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"96",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ov"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"13",offsetEndMilliseconds:"2"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"52",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ti"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"47",offsetEndMilliseconds:"84"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"uc"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"10",offsetEndMilliseconds:"zo"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"22",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wg"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"56",offsetEndMilliseconds:"86"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"25",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"34",offsetEndMilliseconds:"12"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"27",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wz"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"84",offsetEndMilliseconds:"90"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"92",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+ai+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_"+(jsb()?"dark":"light")+(z("enable_cairo_refresh_signature_moments_web")?"_v5":"")+".json"}}})}),d),Go(a,function(){return F(isb,{lottiePlayerProps:{animationRef:c, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-foreground",autoplay:!1,loop:!1,path:z("enable_cairo_refresh_signature_moments_web")?"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_"+(jsb()?"dark":"light")+"_v4.json":"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_"+(jsb()?"dark":"light")+".json"}}})}))} equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ay&&ay.JSC$7552_snapshotAndFlush()}},b),(c.flush_logs={callback:function(){gm()}},c))}},bHb);var dHb={},eHb=(dHb.rendered={priority:0,callback:function(){var a=new $ya;a.increment("STARTED");if(Hj("LOGGED_IN")&&Hj("SERVER_VERSION")!=="test"&&Hj("SERVER_VERSION")!=="dev"&&!Iia()&&!Hia()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";sba(b,2,Nb("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+Hj("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},dHb);var fHb={},gHb=(fHb.rendered={callback:function(){ZBb().resume()}},fHb);var hHb={acknowledgeChannelTouStrikeCommand:Jz(LG),addToPlaylistServiceEndpoint:Jz(HH),addToPlaylistEndpoint:Jz(HH),addUpcomingEventReminderEndpoint:Jz($G),browseEndpoint:Jz(CBb),channelCreationFormEndpoint:Jz(EG),channelCreationServiceEndpoint:Jz(FG),claimLegacyYoutubeChannelEndpoint:Jz(rG),clearSearchHistoryEndpoint:Jz(SG),clearWatchHistoryEndpoint:Jz(TG),commerceActionCommand:Kz(dI),createBackstagePostEndpoint:Jz(lG),createCommentEndpoint:Jz(AG),createCommentReplyEndpoint:Jz(zG),createLiveChatPollEndpoint:Jz(aH), equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: b.includes("switchScreenSizeHack")\|\|b.includes("yt_main_big_banner.js")\|\|b.includes("YouTubeCenter.js")\|\|b.includes("/mytube.js")\|\|b.includes("JSON.parseWrapper")\|\|b.includes("/inj_js/common.js")\|\|b.includes("firebug-lite")\|\|b.includes(".repl.co/")\|\|b.includes("linkfix")\|\|a.message.includes("Access is denied for this document")&&b.includes("<anonymous>")\|\|a.message.includes("cannot be created in a document with origin 'https://www.youtube.com' and URL 'about:blank'")&&b.includes("<anonymous>"))return!0; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: b:{d=/api\/stats\/ads/;var p,q,t,w;e=(m=dx().objectRepresentation.adPlacements)==null?void 0:(p=m[0])==null?void 0:(q=p.adPlacementRenderer)==null?void 0:(t=q.renderer)==null?void 0:(w=t.linearAdSequenceRenderer)==null?void 0:w.linearAds;if(e!=null&&e.length&&(m=A(e[0],dVa))&&(m=m.pings,m!=null&&m.impressionPings))for(p=[].concat(oa(m.impressionPings)),m.progressPings&&(p=[].concat(oa(p),oa(m.progressPings))),m=h(p),p=m.next();!p.done;p=m.next())if(p=p.value,p.baseUrl&&d.test(p.baseUrl)){m=p.baseUrl.replace("https://www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.xP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.DR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.AE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: by.prototype.remove=function(a){this.JSC$9674_expiringStorage.remove(a)};var tab=ja(["https://www.youtube.com/",""]),uab=ja(["https://studio.youtube.com/",""]);function vab(){if(wab())im(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=yj(Hj("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?Wg(tab,"persist_identity"):Wg(uab,"persist_identity");sba(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: c+"&m_pos_ms="+Td}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Cj}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Td,offsetEndMilliseconds:xb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+U+"&m_pos="+cc+"&token=ALHj"+Z+"&index="+ea+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: c+"&m_pos_ms="+Td}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Kn}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Td,offsetEndMilliseconds:Td},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+U+"&m_pos="+cc+"&token=ALHj"+Z+"&index="+ea+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: c+"&m_pos_ms="+Td}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Uf}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:xb,offsetEndMilliseconds:xb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+U+"&m_pos="+xb+"&token=ALHj"+Z+"&index="+ea+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: c+"&m_pos_ms="+Td}},adSlotLoggingData:{serializedSlotAdServingDataEntry:na}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Td,offsetEndMilliseconds:Td},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+U+"&m_pos="+cc+"&token=ALHj"+Z+"&index="+ea+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ca+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewTracking:{trafficType:"ACTIVE_VIEW_TRAFFIC_TYPE_VIDEO"}},clickthroughEndpoint:{clickTrackingParams:Xc, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: eY.prototype.navigateToAboutTheseResultsPage=function(){var a=Mb("https://www.youtube.com/howyoutubeworks/product-features/search/");a?lc(window,a,"_blank"):Kj(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ea+"&cid="+ca+"&ad_cpn=%5BAD_CPN%5D&sig="+W+"&adurl="+nf+"&label=video_click_to_advertiser_site&ctype="+cc+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:Xa+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:Xa+"="},abandonCommands:{commands:[{clickTrackingParams:Xc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],thirdQuartilePings:[{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Td+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Td+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+Td+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Xc,commandExecutorCommand:{commands:[{clickTrackingParams:Xc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_card_endcap_impression"}],pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:bb,isTemplated:!1,trackingParams:Xa+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interactio equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: f.created=function(){this.embedHost_=J6c[Hj("INNERTUBE_CLIENT_NAME")]\|\|"www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: f.maybeInitializeQuizLotties=function(a){var b=this;this.isDarkTheme&&(this.baseCorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json",this.baseIncorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json");this.correctnessAnimationProps=a.map(function(c){return{animationConfig:c.isCorrect?b.baseCorrectLottiePlayerAnimationConfig:b.baseIncorrectLottiePlayerAnimationConfig, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: function OZb(a){if(a.urlEndpoint){if(a=Nj(a.urlEndpoint.url),a.adurl)return Uc(a.adurl)}else if(a.watchEndpoint)return"//www.youtube.com/watch?v="+a.watchEndpoint.videoId;return null} equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: function S7a(){var a,b,c,d,e,g,k,m,p,q,t;return r(function(w){switch(w.nextAddress){case 1:ua(w,2),a=h(g8a()),b=a.next();case 4:if(b.done)return w.return(1);d=c=b.value;e=d.jsonRepresentation;g=d.objectRepresentation;k=btoa(e);m="data:application/json;base64,"+k;p=new Request(m);Object.defineProperty(p,"url",{get:function(){return"https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"}}); equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: g.KP=function(a){var b=g.xP(a);RJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.xP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.oP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),au&&(a=ana())&&(b.ebc=a));return g.Ui(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: g.xP=function(a){a=sP(a.Ca);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: hoverText:{runs:[{text:na}]},trackingParams:Xa+"="}},adVideoId:Od,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:mu},associatedCompositePlayerBytesLayoutId:Oe}},adSlotLoggingData:{serializedSlotAdServingDataEntry:ai}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_SELF_START"}},renderer:{actionCompanionAdRenderer:{headline:{text:Rv, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: if(b){var c=blb.get(b);c\|\|(c=[],blb.set(b,c));var d=Hj("ELEMENT_POOL_CONFIG")\|\|{};c.length>=(d[b]!==void 0?d[b]:Hj("ELEMENT_POOL_DEFAULT_CAP",0))\|\|c.push(a)}else im(new ok("Element pool should only handle custom elements:",a.nodeName))},blb=new Map,dlb=0,clb=0;var flb=z("enable_cairo_refresh_signature_moments_web"),HA=new Map([["FACE_HAPPY",{name:"animated_face_happy_light",nameDarkTheme:"animated_face_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_HAPPY",totalFrames:121,lazyLoad:!1}],["FACE_MEH",{name:"animated_face_meh_light", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(a.length<=3&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=h(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&&b++;return b/a.length>.95}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: isTemplated:!0,trackingParams:Xa+"="}},trackingParams:Xa+"="}},adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,serviceEndpoint:{clickTrackingParams:Xc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(KI.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Uf,KI),trackingParams:Xa+"="}},popupType:"DIALOG"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: l(vO,J);vO.prototype.maybeLoadAnimationBackground=function(){this.useAnimationBackground?this.lottieAnimation\|\|(this.lottieAnimation=lottie.loadAnimation({container:this.animationBackground,loop:!0,renderer:"svg",path:"https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json",autoplay:!0})):this.lottieAnimation&&this.lottieAnimation.destroy()}; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: lottiePlayerProps:function(){var N="loading_animation_"+w();return{animationConfig:{name:N,path:"https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/"+N+".json",loop:!0,autoplay:!0}}}})),F("div",{class:"mini-app-splash-screen-view-model-wiz__timeout-message-container"},F(kr,{cond:D},function(){return F("h3",{class:"mini-app-splash-screen-view-model-wiz__timeout-heading"},D)}),F("p",{class:VA("mini-app-splash-screen-view-model-wiz__timeout-message",(H["mini-app-splash-screen-view-model-wiz__timeout-message-fade-out"]= equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_UNHAPPY",totalFrames:121,lazyLoad:!1}],["FACE_VERY_HAPPY",{name:"animated_face_very_happy_light",nameDarkTheme:"animated_face_very_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_VERY_HAPPY", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: lottiePlayerProps:{animationRef:k,animationConfig:{name:e.uniqueId+"-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_"+(brb()?"dark":"light")+".json",rendererSettings:{viewBoxOnly:!0}}}}))}),F("div",{class:"smartimation__content"},a))} equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: loudnessDb:-3.7800007}]},playerAds:[{playerLegacyDesktopWatchAdsRenderer:{playerAdParams:{showContentThumbnail:!0,enabledEngageTypes:"3,6,4,5,17,1"},gutParams:{tag:"\\4061\\ytpwmpu"},showCompanion:!0,showInstream:!0,useGut:!0}}],playbackTracking:{videostatsPlaybackUrl:{baseUrl:"https://s.youtube.com/api/stats/playback?cl="+zb+"&docid="+y+"&ei="+U+"&feature="+m+"&fexp="+mf+"&ns="+Ga+"&plid="+N+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Yd+"&el="+ug+"&len="+uc+"&of="+ec+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: m+"&len="+uc+"&ns="+Ga+"&plid="+N+"&ver="+ea,elapsedMediaTimeSeconds:5},videostatsScheduledFlushWalltimeSeconds:[10,20,30],videostatsDefaultFlushIntervalSeconds:40},captions:{playerCaptionsTracklistRenderer:{captionTracks:[{baseUrl:"https://www.youtube.com/api/timedtext?v="+y+"&caps="+Fa+"&opi="+zb+"&xoaf="+ea+"&hl="+Ga+"&ip="+Kb+"&ipbits="+ea+"&expire="+pc+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+Kb+"&key="+Fa+"&lang="+Da,name:{simpleText:Oe},vssId:".en-US",languageCode:"en-US",isTranslatable:!0, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: n/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+ea},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+ai+"&avm="+ea+"&dc_pubid="+ea+"&dc_exteid="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: nameDarkTheme:"animated_face_meh_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_MEH",totalFrames:121,lazyLoad:!1}],["FACE_SAD",{name:"animated_face_sad_light",nameDarkTheme:"animated_face_sad_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: null?void 0:H.baseUrl);var N;q.push(p==null?void 0:(N=p.qoeUrl)==null?void 0:N.baseUrl);var O;q.push(p==null?void 0:(O=p.atrUrl)==null?void 0:O.baseUrl);y=h(q);for(C=y.next();!C.done;C=y.next())if((C=C.value)&&m.test(C)){y=C.replace("https://www.youtube.com","").replace("https://s.youtube.com","");break b}}y=void 0}y&&c.push({testUrl:""+Ia.location.origin+y,baseUrl:Ia.location.origin+"/feed/download",method:"GET"})}c=c.length!==0?c[Math.floor(Math.random()*c.length)]:void 0;return(a=c)?b.return(k8a(a.testUrl, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_SAD",totalFrames:121,lazyLoad:!1}],["FACE_UNHAPPY",{name:"animated_face_unhappy_light",nameDarkTheme:"animated_face_unhappy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:ai,isTemplated:!1,trackingParams:Xa+"="},trackingParams:Xa+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Kn},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid="+zb+";dc_trk_cid="+zb+";dc_dbm_token="+w+";ord="+pc+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ea+";dc_rui="+ea+";dc_exteid="+bc+";dc_av="+cc+";dc_sk="+ea+";dc_ctype="+xb+";dc_ref=http://www.youtube.com/video/"+Od+";dc_pubid="+ea+";dc_btype=23?gclid="+Na+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"},{baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=video_skip_shown&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]",offsetMilliseconds:5E3},{baseUrl:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+ea+"&cid="+ca+"&ad_cpn=%5BAD_CPN%5D&sig="+W+"&adurl="+nf+"&ctype="+cc+"&ms=[CLICK_MS]&label=video_10s_engaged_view&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=",offsetMilliseconds:1E4, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+U+"&m_pos="+xb+"&token=ALHj"+Z+"&index="+ea+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+c+"&m_pos_ms="+Wc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:na}}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: return F("yt-smartimation",{class:mrb(p,t,e)},Go(e.experimentEnabled,function(){return F("div",{class:"smartimation__border"},F(XA,{className:"smartimation__border-gradient",lottiePlayerProps:{animationRef:g,animationConfig:{name:e.uniqueId+"-border",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_"+(brb()?"dark":"light")+(z("enable_cairo_refresh_signature_moments_web")?"_v2":"")+".json"}}}))}),Go(e.experimentEnabled&&t,function(){return F("div", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: return F("yt-you-chat-user-turn",{class:"YtYouChatUserTurnHost"},F(kr,{cond:b},function(){return F("div",{class:"YtYouChatUserTurnChoiceSelected"},F(MB,{text:b}))}),F("div",{class:"YtYouChatUserTurnUserMessage"},function(){return a.data().text}))});var jmc={animationConfig:{autoplay:!0,loop:!0,renderer:"svg",rendererSettings:{viewBoxOnly:!0,className:"YouChatRendererWizLoadingSvg"},name:"YOUCHAT_LOADER",path:"https://www.gstatic.com/youtube/img/lottie/youchat_animations/progress_indicator_comp_v1.json"}},nmc=uz(function(a){var b=a.turns,c=a.pending,d=function(q){var t;(t=a.actions)==null\|\|t.call(a).onResponseReceived(q)},e=function(q,t){var w; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: return F(kr,{cond:d},function(){return F("div",{class:"YtwYouChatChipsDataChipWrapper",role:"button","on:click":k,tabindex:0,el:b},F("div",{class:"YtwYouChatChipsDataChip","data-disabled":a.disabled},g))})});var bmc={animationConfig:{autoplay:!1,loop:!1,renderer:"svg",rendererSettings:{viewBoxSize:"12 0 48 48"},name:"YOUCHAT_ICON",path:"https://www.gstatic.com/youtube/img/lottie/youchat_animations/progress_indicator_solo_v1.json"}},emc=uz(function(a){var b=function(){var w;return(w=a.data().text)==null?void 0:w.content},c=function(){return a.data().webData},d=function(){var w,y; equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: rootVe:83769}},urlEndpoint:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+D+"AxAA&ase=2&num="+ea+"&cid="+ca+"&ad_cpn=%5BAD_CPN%5D&sig="+W+"&adurl="+nf+"&label=video_click_to_advertiser_site&ctype="+cc+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:Xa+"="}},durationMilliseconds:7E3,countdownRenderer:{timedPieCountdownRenderer:{trackingParams:Xa+"="}},navigationEndpoint:{clickTrackingParams:Xc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(JO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.lO(this.B)?kO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: this.bgChallenge=Jwb(a.bgChallenge);this.ttlSeconds=Kwb(lE(a.challenge\|\|""));this.fetcher=function(b,c,d){return new qFb(b,c,d)}(this.requestKey,z("par_at_ep")?["www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: totalFrames:121,lazyLoad:!1}],["LIKE",{name:"animated_like_light",nameDarkTheme:"animated_like_dark",path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(flb?"animated_like_icon_light_v4":"animated_like_icon_v2_light")+".json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(flb?"animated_like_icon_dark_v4":"animated_like_icon_v2_dark")+".json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"LIKE",totalFrames:flb?60:119,lazyLoad:!0}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: trackName:""},{baseUrl:"https://www.youtube.com/api/timedtext?v="+y+"&caps="+Fa+"&opi="+zb+"&xoaf="+ea+"&hl="+Ga+"&ip="+Kb+"&ipbits="+ea+"&expire="+pc+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+Kb+"&key="+Fa+"&kind="+Fa+"&lang="+Ga,name:{simpleText:na},vssId:"a.it",languageCode:"it",kind:"asr",isTranslatable:!0,trackName:""}],audioTracks:[{captionTrackIndices:[0,1],defaultCaptionTrackIndex:0,visibility:"UNKNOWN",hasDefaultTrack:!0,captionsInitialState:"CAPTIONS_INITIAL_STATE_OFF_RECOMMENDED"}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: trackingParams:Xa+"=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Xc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(n0.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ga+"&origin=www.youtube.com&ata_theme="+Uf,n0),trackingParams:Xa+"="}},popupType:"DIALOG"}},trackingParams:Xa+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: trackingParams:Xa+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:Xa+"="},abandonCommands:{commands:[{clickTrackingParams:Xc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: var $Ab={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_544.2.dr	String found in binary or memory: var D2={};var Mdb={Fs:[{IB:/Unable to load player module/,weight:20},{IB:/Failed to fetch/,weight:500},{IB:/XHR API fetch failed/,weight:10},{IB:/JSON parsing failed after XHR fetch/,weight:10},{IB:/Retrying OnePlatform request/,weight:10},{IB:/CSN Missing or undefined during playback association/,weight:100}],Mr:[{callback:K7a,weight:500}]};var X7a=/[&\?]action_proxy=1/,W7a=/[&\?]token=([\w-])/,Y7a=/[&\?]video_id=([\w-])/,Z7a=/[&\?]index=([\d-])/,$7a=/[&\?]m_pos_ms=([\d-])/,b8a=/[&\?]vvt=([\w-]*)/,O7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),a8a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),R7a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: vc+"&ad_len="+Wc+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+Od+"&aqi="+U+"&ad_rmp="+ea+"&sli="+ea}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: weight:0},{messageRegExp:/.wtd-div./,weight:0},{messageRegExp:/.Blocked a frame with origin "https:\/\/www.youtube.com" from accessing a cross-origin frame./,weight:0},{messageRegExp:/.disguiseToken./,weight:0},{messageRegExp:/Identifier 'YTNonstop' has already been declared/,weight:1E3},{messageRegExp:/Cannot read properties of undefined (reading 'setTimeout')/,weight:0},{messageRegExp:/undefined is not an object $evaluating 'this.\w+.setTimeout'$/,weight:0},{messageRegExp:/BWB:Timeout/, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if(a.message==="Script error.")return b[0].includes("www.youtube.com")\|\|b.length>=2&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if(a.message==="Unexpected token")return!0;a=h(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: y+"/maxresdefault.jpg",width:1280,height:720}]},embed:{iframeUrl:"https://www.youtube.com/embed/"+Od,width:1280,height:720},title:{simpleText:Qm},description:{simpleText:na},lengthSeconds:"1156",ownerProfileUrl:"http://www.youtube.com/@"+Rv,externalChannelId:qc,isFamilySafe:!0,availableCountries:"AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW".split(" "), equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: y,target:"TARGET_NEW_WINDOW"}},trackingParams:Xa+"="}},trackingParams:Xa+"="}}}},endscreen:{endscreenRenderer:{elements:[{endscreenElementRenderer:{style:"CHANNEL",image:{thumbnails:[{url:"https://yt3.ggpht.com/"+Ra+"=s250-c-k-c0x00ffffff-no-rj",width:250,height:250},{url:"https://yt3.ggpht.com/"+Ra+"=s400-c-k-c0x00ffffff-no-rj",width:400,height:400}]},icon:{thumbnails:[{url:"https://www.gstatic.com/youtube/img/annotations/youtube.png"}]},left:.030214407,width:.15438597,top:.37587035,aspectRatio:1, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: zb+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ea+";ord="+zb+";dc_rui="+ea+";dc_exteid="+bc+";dc_av="+ea+";dc_sk="+ea+";dc_ctype="+xb+";dc_pubid="+ea+";dc_btype=3?gclid="+Na+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+C+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: zb+";dc_trk_cid="+zb+";dc_dbm_token="+w+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ea+";ord="+zb+";dc_rui="+ea+";dc_exteid="+ce+";dc_av="+ea+";dc_sk="+ea+";dc_ctype="+xb+";dc_pubid="+ea+";dc_btype=3?gclid="+Na+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+y+"&cid="+ca+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_634.2.dr	String found in binary or memory: {"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000","gcm_sender_id":"402845223712","gcm_user_visible_only":true,"related_applications":[],"capture_links":"none","shortcuts":[{"name":"Subscriptions","url":"/feed/subscriptions?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]},{"name":"Explore","url":"/feed/explore?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]} equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:Td,offsetEndMilliseconds:Td},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+U+"&m_pos="+cc+"&token=ALHj"+Z+"&index="+ea+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"zf",adTimeOffset:{offsetStartMilliseconds:"63",offsetEndMilliseconds:"83"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"59",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avgm="+ea},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+ai+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+Oc+"&ad_cpn=[AD_CPN]&id="+ai+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+ai+"&dc_pubid="+ea+"&dc_exteid="+bc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ea+";dc_exteid="+bc+";met="+ea+";ecn"+ea+"="+ea+";etm1="+ea+";eid1="+xb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Xc,commandExecutorCommand:{commands:[{clickTrackingParams:Xc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&label=video_card_endcap_impression"}], equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+C+"____________"+D+"AxAA&sigh="+Od+"&cid="+ca+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+ea+"&ns="+ea+"&event="+ea+"&device="+ea+"&content_v="+y+"&el="+ug+"&ei="+U+"&devicever="+c+"&bti="+Gb+"&format="+Td+"&break_type="+ea+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+ea+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+Kb+"&slot_pos="+ea+"&slot_len="+ea+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+ equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {instreamVideoAdRenderer:{skipOffsetMilliseconds:5E3,pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid="+zb+";dc_trk_cid="+zb+";ord="+pc+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+ea+";dc_rui="+ea+";dc_exteid="+bc+";dc_av="+cc+";dc_sk="+ea+";dc_ctype="+xb+";dc_ref=http://www.youtube.com/video/"+Od+";dc_pubid="+ea+";dc_btype=23?gclid="+Na+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}, equals www.youtube.com (Youtube)
Source: chromecache_450.2.dr	String found in binary or memory: {query:a.browseEndpoint.query})),e&&a.browseEndpoint.params&&(e=xr(e,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(e="https://accounts.google.com/ServiceLogin",d={},ch.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?e="//www.youtube.com/upload":a.liveChatEndpoint?(e=a.liveChatEndpoint,d=ch.clone(e),Za(e.continuation)&&(g=Object.keys(e.continuation)[0],d.continuation=e.continuation[g].continuation), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: ivanti-onboarder.ebf.de
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: matomo.ebf.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net

Source: unknown

HTTP traffic detected: POST /matomo.php?action_name=EBF%20Onboarder%20for%20MobileIron&idsite=8&rec=1&r=342321&h=8&m=7&s=26&url=https%3A%2F%2Fivanti-onboarder.ebf.de%2Flogin.html&_id=b34f059f9ffe5e81&_idn=0&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pf_net=737&pf_srv=535&pf_tfr=5&pf_dm1=1422&pf_dm2=4410&pf_onl=8&pv_id=rv7WUK&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D HTTP/1.1Host: matomo.ebf.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://ivanti-onboarder.ebf.deSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://ivanti-onboarder.ebf.de/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6152 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6220 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2380 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6152 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6220 --field-trial-handle=2224,i,13947012766746016865,13117244808098961289,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#localhost_support	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
http://www.gimp.org/xmp/	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe
https://cloud.google.com/contact	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
http://daneden.me/animate	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	0%	URL Reputation	safe
https://s.youtube.com/api/stats/delayplay?cl=	0%	Virustotal		Browse
http://j.mp/respondjs	0%	Virustotal		Browse
https://www.youtube.com/sw.js	0%	Virustotal		Browse
http://prismstandard.org/namespaces/prismusagerights/2.1/	0%	Virustotal		Browse
https://www.youtube.com/embed/	0%	Virustotal		Browse
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	0%	Virustotal		Browse
https://github.com/twbs/bootstrap/graphs/contributors)	0%	Virustotal		Browse
https://www.youtube.com	0%	Virustotal		Browse
https://i.ytimg.com/an/	0%	Virustotal		Browse
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	0%	Virustotal		Browse
https://s.youtube.com	0%	Virustotal		Browse
https://www.youtube.com/api/stats/ads?ver=	0%	Virustotal		Browse
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	0%	Virustotal		Browse
https://www.youtube.com/pagead/interaction/?ai=C	0%	Virustotal		Browse
https://youtube.com/	0%	Virustotal		Browse
https://www.youtube.com/generate_204?cpn=	0%	Virustotal		Browse
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	0%	Virustotal		Browse
https://www.google.com/tools/feedback	0%	Virustotal		Browse
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	0%	Virustotal		Browse

Name	IP	Active	Malicious	Reputation
youtube-ui.l.google.com	216.58.206.78	true	false	unknown
googleads.g.doubleclick.net	142.250.186.34	true	false	unknown
play.google.com	142.250.74.206	true	false	unknown
i.ytimg.com	142.250.181.246	true	false	unknown
matomo.ebf.com	91.250.64.244	true	false	unknown
www.google.com	142.250.186.132	true	false	unknown
static.doubleclick.net	142.250.184.198	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
mobileiron-onboarder.ebf.com	176.28.27.26	true	false	unknown
youtube.com	142.250.185.78	true	false	unknown
ivanti-onboarder.ebf.de	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://matomo.ebf.com/matomo.php?action_name=EBF%20Onboarder%20for%20MobileIron&idsite=8&rec=1&r=342321&h=8&m=7&s=26&url=https%3A%2F%2Fivanti-onboarder.ebf.de%2Flogin.html&_id=b34f059f9ffe5e81&_idn=0&send_image=0&_refts=0&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024&pf_net=737&pf_srv=535&pf_tfr=5&pf_dm1=1422&pf_dm2=4410&pf_onl=8&pv_id=rv7WUK&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D	false		unknown
https://www.youtube.com/sw.js	false	0%, Virustotal, Browse	unknown
https://ivanti-onboarder.ebf.de/fonts/source-sans-pro-v9-latin-regular.woff2	false		unknown
https://ivanti-onboarder.ebf.de/css/animate.css?2.13.2-20240924113820	false		unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	0%, Virustotal, Browse	unknown
https://ivanti-onboarder.ebf.de/js/migrator.js?2.13.2-20240924113820	false		unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	0%, Virustotal, Browse	unknown
https://youtube.com/	false	0%, Virustotal, Browse	unknown
https://ivanti-onboarder.ebf.de/img/lock.svg	false		unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/remote.js	false		unknown
https://www.youtube.com/s/desktop/f72ecfe9/jsbin/network.vflset/network.js	false		unknown
https://www.youtube.com/s/desktop/f72ecfe9/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js	false		unknown
https://www.youtube.com/s/desktop/f72ecfe9/cssbin/www-onepick.css	false		unknown
https://i.ytimg.com/vi/Ly7HaccJj4U/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAyzo74QyanT8KTMm5oR1m8N1nReg	false		unknown
https://matomo.ebf.com/matomo.js	false		unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/offline.js	false		unknown
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	false		unknown
https://ivanti-onboarder.ebf.de/js/tether.js?2.13.2-20240924113820	false		unknown
https://www.youtube.com/app_shell	false		unknown
https://www.youtube.com/s/search/audio/success.mp3	false		unknown
https://www.youtube.com/generate_204?-lb-Ow	false		unknown
https://ivanti-onboarder.ebf.de/img/user.svg	false		unknown
https://ivanti-onboarder.ebf.de/css/passwordscheck.css?2.13.2-20240924113820	false		unknown
https://ivanti-onboarder.ebf.de/privacy.html	false		unknown
https://ivanti-onboarder.ebf.de/js/newmigration.js?2.13.2-20240924113820	false		unknown
https://ivanti-onboarder.ebf.de/js/select2.min.js?2.13.2-20240924113820	false		unknown
https://www.youtube.com/s/desktop/f72ecfe9/jsbin/intersection-observer.min.vflset/intersection-observer.min.js	false		unknown
https://ivanti-onboarder.ebf.de/img/admin-bg-top.png	false		unknown
https://i.ytimg.com/vi/TlWfPI6hiac/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGDAgWihyMA8=&rs=AOn4CLBMMqZYeSW-4LxTteFc8vClOieuNQ	false		unknown
https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439	false		unknown
https://www.youtube.com/s/desktop/f72ecfe9/jsbin/desktop_polymer.vflset/desktop_polymer.js	false		unknown
https://ivanti-onboarder.ebf.de/js/jsdelivr/cookieconsent.min.js	false		unknown
https://i.ytimg.com/vi/t73NNPaZUG0/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-CYAC0AWKAgwIABABGBggVyh_MA8=&rs=AOn4CLB47rPGPHpQXykZq7IqyjyfuqePCQ	false		unknown
https://www.google.com/recaptcha/api.js	false		unknown
https://ivanti-onboarder.ebf.de/security/jcaptcha.jpg	false		unknown
https://www.youtube.com/youtubei/v1/guide?prettyPrint=false	false		unknown
https://ivanti-onboarder.ebf.de/js/birds.js?2.13.2-20240924113820	false		unknown
https://www.google.com/recaptcha/api2/anchor?ar=1&k=6Le0j0QUAAAAALLcazcT5m1BrBsPSCVltiB47Kij&co=aHR0cHM6Ly9pdmFudGktb25ib2FyZGVyLmViZi5kZTo0NDM.&hl=en&v=xds0rzGrktR88uEZ2JUvdgOY&size=normal&cb=6w5cran7seff	false		unknown
https://www.youtube.com/s/desktop/f72ecfe9/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false		unknown
https://ivanti-onboarder.ebf.de/fonts/source-sans-pro-v9-latin-700.woff2	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_544.2.dr, chromecache_450.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_426.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_450.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
http://j.mp/respondjs	chromecache_300.2.dr, chromecache_316.2.dr	false	0%, Virustotal, Browse	unknown
http://prismstandard.org/namespaces/prismusagerights/2.1/	chromecache_390.2.dr, chromecache_456.2.dr	false	0%, Virustotal, Browse	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/get/videoqualityreport/?v=	chromecache_450.2.dr	false		unknown
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_583.2.dr, chromecache_466.2.dr	false	0%, Virustotal, Browse	unknown
https://admin.youtube.com	chromecache_544.2.dr	false	URL Reputation: safe	unknown
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	chromecache_600.2.dr, chromecache_612.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha/#6175971	chromecache_426.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_544.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://i.ytimg.com/an/	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube.com/api/stats/ads?ver=	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://support.google.com/recaptcha	chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://yurt.corp.google.com	chromecache_544.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_450.2.dr	false	0%, Virustotal, Browse	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_544.2.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_450.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_450.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_450.2.dr	false		unknown
https://docs.google.com/picker	chromecache_450.2.dr	false		unknown
https://www.youtube.com/pagead/interactio	chromecache_450.2.dr	false		unknown
https://schema.org	chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/	chromecache_450.2.dr	false		unknown
http://mathiasbynens.be/	chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que	chromecache_426.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/watch?v=	chromecache_450.2.dr	false		unknown
https://www.youtube.com/ptracking?ei=	chromecache_450.2.dr	false		unknown
http://tools.ietf.org/html/rfc1950	chromecache_544.2.dr, chromecache_624.2.dr, chromecache_314.2.dr, chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_450.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_583.2.dr, chromecache_466.2.dr, chromecache_598.2.dr	false		unknown
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	chromecache_450.2.dr	false		unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_450.2.dr	false		unknown
https://play.google.com	chromecache_450.2.dr	false		unknown
http://www.gimp.org/xmp/	chromecache_513.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_544.2.dr	false	URL Reputation: safe	unknown
https://angular.dev/license	chromecache_544.2.dr, chromecache_450.2.dr	false		unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_544.2.dr	false		unknown
https://cloud.google.com/contact	chromecache_426.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://youtu.be/	chromecache_544.2.dr	false	URL Reputation: safe	unknown
http://daneden.me/animate	chromecache_580.2.dr	false	URL Reputation: safe	unknown
http://mths.be/fromcodepoint	chromecache_450.2.dr	false		unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_450.2.dr	false		unknown
https://apis.google.com	chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api2/	chromecache_469.2.dr, chromecache_426.2.dr, chromecache_582.2.dr, chromecache_338.2.dr	false		unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_450.2.dr	false	URL Reputation: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_450.2.dr	false		unknown
https://www.gstatic.c..?/recaptcha/releases/xds0rzGrktR88uEZ2JUvdgOY/recaptcha__.	chromecache_426.2.dr, chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://mathiasbynens.be/	chromecache_450.2.dr	false		unknown
https://www.youtube.com/get_midroll_info?ei=	chromecache_450.2.dr	false		unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_544.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.46	unknown	United States	15169	GOOGLEUS	false
216.58.206.70	unknown	United States	15169	GOOGLEUS	false
142.250.185.78	youtube.com	United States	15169	GOOGLEUS	false
142.250.74.206	play.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
142.250.74.194	unknown	United States	15169	GOOGLEUS	false
176.28.27.26	mobileiron-onboarder.ebf.com	Germany	61157	PLUSSERVER-ASN1DE	false
142.250.184.246	unknown	United States	15169	GOOGLEUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.184.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
91.250.64.244	matomo.ebf.com	Germany	20773	GODADDYDE	false
142.250.181.246	i.ytimg.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.18.100	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522639
Start date and time:	2024-09-30 14:05:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 26s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@26/555@42/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://ivanti-onboarder.ebf.de/register.html Browse: https://ivanti-onboarder.ebf.de/login.html Browse: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLg Browse: https://ivanti-onboarder.ebf.de/privacy.html

Input	Output
URL: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Model: jbxai	{ "brand":[], "contains_trigger_text":true, "trigger_text":"Expired registration link!", "prominent_button_name":"Login here!", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://ivanti-onboarder.ebf.de/register.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Next", "text_input_field_labels":["First and the last name", "Business email address", "Choose your password", "Repeat your password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ivanti-onboarder.ebf.de/register.html Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://ivanti-onboarder.ebf.de/login.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Login", "text_input_field_labels":["Email", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ivanti-onboarder.ebf.de/login.html Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://ivanti-onboarder.ebf.de/login.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Login", "text_input_field_labels":["Email", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ivanti-onboarder.ebf.de/login.html Model: jbxai	{ "error":"local variable 'brand_input' referenced before assignment"}

URL: https://ivanti-onboarder.ebf.de/login.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Login", "text_input_field_labels":"Email, Password", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ivanti-onboarder.ebf.de/privacy.html Model: jbxai	{ "brand":["EBF ONBOARDER"], "contains_trigger_text":true, "trigger_text":"General information on data processing", "prominent_button_name":"Cancel", "text_input_field_labels":["Name and address of the data protection officer"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.youtube.com/playlist?list=PLsgmwGCiHmcuNcTcFztHfnzLy_2Ko6BLg Model: jbxai	{ "brand":["EBF GmbH"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Play all", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

IP
192.168.2.4
192.168.2.5

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64217), with no line terminators
Category:	dropped
Size (bytes):	67751
Entropy (8bit):	5.387024239118155
Encrypted:	false
SSDEEP:	768:u2oLNdg5pTT9aPCExIXiOd9QHhdvWGBokOl/NzTTeUBo47R0eq/OKnZprIf4500Y:IrWVEqXiOd9gKkOZnlqGOHrAiVg
MD5:	090DFBC88A4A0693B8DE1DAB9F9AACB2
SHA1:	C01A5B17BA1F8FFB55D4F6C2776862C861812924
SHA-256:	1CD91B9DD3E258CE4421181A85CDE15A2B860FA0ADC0580C7C4534A37CDE69BA
SHA-512:	FD5E8BA341A1BAD1DCAFF1A15DFCF53F79D27672205F0EACBF5DC53961AF920B1CF426D962AF3DE5F7FE0F6CAE6F0650A1A75288485884474405816B12F185C3
Malicious:	false
Reputation:	low
Preview:	/! Select2 4.0.6-rc.0 \| https://github.com/select2/select2/blob/master/LICENSE.md /!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof module&&module.exports?module.exports=function(b,c){return void 0===c&&(c="undefined"!=typeof window?require("jquery"):require("jquery")(b)),a(c),c}:a(jQuery)}(function(a){var b=function(){if(a&&a.fn&&a.fn.select2&&a.fn.select2.amd)var b=a.fn.select2.amd;var b;return function(){if(!b\|\|!b.requirejs){b?c=b:b={};var a,c,d;!function(b){function e(a,b){return v.call(a,b)}function f(a,b){var c,d,e,f,g,h,i,j,k,l,m,n,o=b&&b.split("/"),p=t.map,q=p&&p["*"]\|\|{};if(a){for(a=a.split("/"),g=a.length-1,t.nodeIdCompat&&x.test(a[g])&&(a[g]=a[g].replace(x,"")),"."===a[0].charAt(0)&&o&&(n=o.slice(0,o.length-1),a=n.concat(a)),k=0;k<a.length;k++)if("."===(m=a[k]))a.splice(k,1),k-=1;else if(".."===m){if(0===k\|\|1===k&&".."===a[2]\|\|".."===a[k-1])continue;k>0&&(a.splice(k-1,2),k-=2)}a=a.join("/")}if((o\|\|q)&&p){for(c=a.split("/"),k=c.length

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	dropped
Size (bytes):	161516
Entropy (8bit):	5.633992215122866
Encrypted:	false
SSDEEP:	1536:73WSEhuYFBKC+SkKo8oaEAJecfBA9mZ46aFBc0Az5il1hx93aJeZqjt4j:73WDFMC+SkR8rJfi/FBc0Az5ip3aJLA
MD5:	E6E3691A5E1182A698585BB84D983B5B
SHA1:	186371E7D8855BF69E19F09E32F3D1B7F0856516
SHA-256:	0DE0403D82C73016AD537E59160A6952430C5465560105B23F6928DF3BF0D8DF
SHA-512:	C4BE8751A0B096CCFF05055D49FFE106FC29FA8EF4AD0B6C9352DF7971AA5F9DBE4E875C5B9022D5C524763691A5B78C4AE808BAE1AEA2AE704EF1B2DDF69C9E
Malicious:	false
Reputation:	low
Preview:	(function(g){var window=this;'use strict';var Dlb=function(a){var b=new g.CL("und",new g.GN("Default","und",!0));b.captionTracks=a.captionTracks;return b},Elb=function(a){return new g.si(function(b,c){var d=a.length,e=[];.if(d)for(var f=function(n,p){d--;e[n]=p;d==0&&b(e)},h=function(n){c(n)},l=0,m;l<a.length;l++)m=a[l],g.wfa(m,g.Xa(f,l),h);.else b(e)})},N5=function(a){this.j=a},O5=function(){N5.apply(this,arguments)},Flb=function(){O5.apply(this,arguments)},Glb=function(){O5.apply(this,arguments)},Hlb=function(){O5.apply(this,arguments)},Ilb=function(){O5.apply(this,arguments)},Jlb=function(){N5.apply(this,arguments)},Klb=function(){O5.apply(this,arguments)},Llb=function(){O5.apply(this,arguments)},Mlb=function(){O5.apply(this,arguments)},Nlb=function(){O5.apply(this,arguments)},Olb=function(){O5.apply(this,arguments)},Plb=function(){O5.apply(this,.arguments)},Qlb=function(){O5.apply(this,arguments)},Rlb=function(){O5.apply(this,arguments)},Slb=function(){O5.apply(this,arguments)},Tlb

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 14:06:58.462402105 CEST	192.168.2.4	1.1.1.1	0x848a	Standard query (0)	ivanti-onboarder.ebf.de	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:06:58.462572098 CEST	192.168.2.4	1.1.1.1	0x6167	Standard query (0)	ivanti-onboarder.ebf.de	65	IN (0x0001)	false
Sep 30, 2024 14:06:59.526428938 CEST	192.168.2.4	1.1.1.1	0xd986	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:06:59.526849985 CEST	192.168.2.4	1.1.1.1	0xe5a6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:00.460283995 CEST	192.168.2.4	1.1.1.1	0xf04b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:00.460856915 CEST	192.168.2.4	1.1.1.1	0x6523	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:00.467376947 CEST	192.168.2.4	1.1.1.1	0xbb64	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:00.468100071 CEST	192.168.2.4	1.1.1.1	0xa174	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:01.582659960 CEST	192.168.2.4	1.1.1.1	0x6e9d	Standard query (0)	ivanti-onboarder.ebf.de	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:01.583075047 CEST	192.168.2.4	1.1.1.1	0x7765	Standard query (0)	ivanti-onboarder.ebf.de	65	IN (0x0001)	false
Sep 30, 2024 14:07:13.741029978 CEST	192.168.2.4	1.1.1.1	0x6626	Standard query (0)	matomo.ebf.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:13.741158962 CEST	192.168.2.4	1.1.1.1	0xe200	Standard query (0)	matomo.ebf.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:16.061510086 CEST	192.168.2.4	1.1.1.1	0xadf0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:16.061817884 CEST	192.168.2.4	1.1.1.1	0xede4	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:16.332802057 CEST	192.168.2.4	1.1.1.1	0xbd48	Standard query (0)	matomo.ebf.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:16.333523989 CEST	192.168.2.4	1.1.1.1	0x8b79	Standard query (0)	matomo.ebf.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:37.819348097 CEST	192.168.2.4	1.1.1.1	0x5533	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.819349051 CEST	192.168.2.4	1.1.1.1	0x915e	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:39.271018982 CEST	192.168.2.4	1.1.1.1	0xc480	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.271187067 CEST	192.168.2.4	1.1.1.1	0x22	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:40.359741926 CEST	192.168.2.4	1.1.1.1	0xa86f	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.360089064 CEST	192.168.2.4	1.1.1.1	0x8cf9	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:46.299567938 CEST	192.168.2.4	1.1.1.1	0xc95f	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:46.299772024 CEST	192.168.2.4	1.1.1.1	0x78f1	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 14:07:49.111216068 CEST	192.168.2.4	1.1.1.1	0x3fa8	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:49.111644030 CEST	192.168.2.4	1.1.1.1	0xaddf	Standard query (0)	youtube.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:49.731472015 CEST	192.168.2.4	1.1.1.1	0x6903	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:49.731695890 CEST	192.168.2.4	1.1.1.1	0x4982	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 14:07:50.445557117 CEST	192.168.2.4	1.1.1.1	0xfbc8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:50.446711063 CEST	192.168.2.4	1.1.1.1	0x8aef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:51.432539940 CEST	192.168.2.4	1.1.1.1	0xb7d6	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.432697058 CEST	192.168.2.4	1.1.1.1	0x2be5	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:56.711455107 CEST	192.168.2.4	1.1.1.1	0x78a9	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:56.711605072 CEST	192.168.2.4	1.1.1.1	0x5f68	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:07:58.529597044 CEST	192.168.2.4	1.1.1.1	0xb820	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:58.529731035 CEST	192.168.2.4	1.1.1.1	0xda5e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 14:08:02.703825951 CEST	192.168.2.4	1.1.1.1	0xb7f8	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:02.704160929 CEST	192.168.2.4	1.1.1.1	0x3f30	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 14:08:03.662019014 CEST	192.168.2.4	1.1.1.1	0x808e	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:03.662154913 CEST	192.168.2.4	1.1.1.1	0x3515	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 30, 2024 14:08:06.720431089 CEST	192.168.2.4	1.1.1.1	0x1bac	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:06.720699072 CEST	192.168.2.4	1.1.1.1	0x44a4	Standard query (0)	www.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 14:06:58.499253035 CEST	1.1.1.1	192.168.2.4	0x6167	No error (0)	ivanti-onboarder.ebf.de	mobileiron-onboarder.ebf.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:06:58.501017094 CEST	1.1.1.1	192.168.2.4	0x848a	No error (0)	ivanti-onboarder.ebf.de	mobileiron-onboarder.ebf.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:06:58.501017094 CEST	1.1.1.1	192.168.2.4	0x848a	No error (0)	mobileiron-onboarder.ebf.com		176.28.27.26	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:06:59.533540010 CEST	1.1.1.1	192.168.2.4	0xd986	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:06:59.533554077 CEST	1.1.1.1	192.168.2.4	0xe5a6	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:00.467396975 CEST	1.1.1.1	192.168.2.4	0xf04b	No error (0)	www.google.com		172.217.18.100	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:00.467629910 CEST	1.1.1.1	192.168.2.4	0x6523	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:00.474653959 CEST	1.1.1.1	192.168.2.4	0xbb64	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:00.475348949 CEST	1.1.1.1	192.168.2.4	0xa174	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:01.593036890 CEST	1.1.1.1	192.168.2.4	0x6e9d	No error (0)	ivanti-onboarder.ebf.de	mobileiron-onboarder.ebf.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:01.593036890 CEST	1.1.1.1	192.168.2.4	0x6e9d	No error (0)	mobileiron-onboarder.ebf.com		176.28.27.26	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:01.601049900 CEST	1.1.1.1	192.168.2.4	0x7765	No error (0)	ivanti-onboarder.ebf.de	mobileiron-onboarder.ebf.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:13.752768040 CEST	1.1.1.1	192.168.2.4	0x6626	No error (0)	matomo.ebf.com		91.250.64.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:16.068583012 CEST	1.1.1.1	192.168.2.4	0xede4	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:16.068595886 CEST	1.1.1.1	192.168.2.4	0xadf0	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:16.103533030 CEST	1.1.1.1	192.168.2.4	0xc8a9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:16.103533030 CEST	1.1.1.1	192.168.2.4	0xc8a9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:16.341984987 CEST	1.1.1.1	192.168.2.4	0xbd48	No error (0)	matomo.ebf.com		91.250.64.244	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:28.596268892 CEST	1.1.1.1	192.168.2.4	0xd107	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:28.596268892 CEST	1.1.1.1	192.168.2.4	0xd107	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826071978 CEST	1.1.1.1	192.168.2.4	0x5533	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826349974 CEST	1.1.1.1	192.168.2.4	0x915e	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:37.826349974 CEST	1.1.1.1	192.168.2.4	0x915e	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:39.278914928 CEST	1.1.1.1	192.168.2.4	0xc480	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367228031 CEST	1.1.1.1	192.168.2.4	0x8cf9	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367228031 CEST	1.1.1.1	192.168.2.4	0x8cf9	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:40.367243052 CEST	1.1.1.1	192.168.2.4	0xa86f	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:46.307163000 CEST	1.1.1.1	192.168.2.4	0xc95f	No error (0)	googleads.g.doubleclick.net		142.250.186.34	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:46.307369947 CEST	1.1.1.1	192.168.2.4	0x78f1	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 14:07:49.118029118 CEST	1.1.1.1	192.168.2.4	0x3fa8	No error (0)	youtube.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:49.119103909 CEST	1.1.1.1	192.168.2.4	0xaddf	No error (0)	youtube.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:49.738352060 CEST	1.1.1.1	192.168.2.4	0x6903	No error (0)	googleads.g.doubleclick.net		142.250.74.194	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:49.738792896 CEST	1.1.1.1	192.168.2.4	0x4982	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Sep 30, 2024 14:07:50.018197060 CEST	1.1.1.1	192.168.2.4	0x581	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:07:50.018197060 CEST	1.1.1.1	192.168.2.4	0x581	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:50.452570915 CEST	1.1.1.1	192.168.2.4	0xfbc8	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:50.454299927 CEST	1.1.1.1	192.168.2.4	0x8aef	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:51.439718962 CEST	1.1.1.1	192.168.2.4	0xb7d6	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:56.718307972 CEST	1.1.1.1	192.168.2.4	0x78a9	No error (0)	play.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:07:58.537158966 CEST	1.1.1.1	192.168.2.4	0xb820	No error (0)	play.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:02.710684061 CEST	1.1.1.1	192.168.2.4	0xb7f8	No error (0)	static.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:03.671694994 CEST	1.1.1.1	192.168.2.4	0x808e	No error (0)	static.doubleclick.net		216.58.206.70	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:06.727282047 CEST	1.1.1.1	192.168.2.4	0x1bac	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Sep 30, 2024 14:08:06.728082895 CEST	1.1.1.1	192.168.2.4	0x44a4	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 14:08:09.336230993 CEST	1.1.1.1	192.168.2.4	0x2ce1	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 14:08:09.336230993 CEST	1.1.1.1	192.168.2.4	0x2ce1	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:06:59 UTC	710	OUT	GET /confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 12:06:59 UTC	503	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store Pragma: no-cache Expires: Mon, 8 Oct 1973 05:00:00 GMT X-Binford: More Power! Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Date: Mon, 30 Sep 2024 12:06:59 GMT Connection: close Set-Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2; Path=/; Version=1; Httponly; Secure
2024-09-30 12:06:59 UTC	3094	IN	Data Raw: 63 30 66 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 20 6c 74 2d 69 65 37 22 20 6c 61 6e 67 3d 22 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 74 2d 69 65 39 20 6c 74 2d 69 65 38 22 20 6c 61 6e 67 3d 22 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 20 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 6c 74 2d 69 65 39 22 20 6c 61 6e 67 3d 22 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d Data Ascii: c0f<!doctype html>...[if lt IE 7]> <html class="no-js lt-ie9 lt-ie8 lt-ie7" lang=""> <![endif]-->...[if IE 7]> <html class="no-js lt-ie9 lt-ie8" lang=""> <![endif]-->...[if IE 8]> <html class="no-js lt-ie9" lang=""> <![endif]-
2024-09-30 12:06:59 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:06:59 UTC	692	OUT	GET /css/fonts.googleapis.com.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:06:59 UTC	344	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"3952-1689693980000" Last-Modified: Tue, 18 Jul 2023 15:26:20 GMT Content-Type: text/css Content-Length: 3952 Date: Mon, 30 Sep 2024 12:06:59 GMT Connection: close
2024-09-30 12:06:59 UTC	3952	IN	Data Raw: 2f 2a 20 73 6f 75 72 63 65 2d 73 61 6e 73 2d 70 72 6f 2d 32 30 30 20 2d 20 6c 61 74 69 6e 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 32 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 73 6f 75 72 63 65 2d 73 61 6e 73 2d 70 72 6f 2d 76 39 2d 6c 61 74 69 6e 2d 32 30 30 2e 65 6f 74 27 29 3b 20 2f 2a 20 49 45 39 20 43 6f 6d 70 61 74 20 4d 6f 64 65 73 20 2a 2f 0a 20 20 73 72 63 3a 20 6c 6f 63 61 6c 28 27 53 6f 75 72 63 65 20 53 61 6e 73 20 50 72 6f 20 45 78 74 72 61 4c 69 67 68 74 27 29 2c 20 6c 6f 63 61 6c 28 27 53 Data Ascii: /* source-sans-pro-200 - latin /@font-face { font-family: 'Source Sans Pro'; font-style: normal; font-weight: 200; src: url('../fonts/source-sans-pro-v9-latin-200.eot'); / IE9 Compat Modes */ src: local('Source Sans Pro ExtraLight'), local('S

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	634	OUT	GET /recaptcha/api.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiWocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 12:07:00 UTC	749	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Mon, 30 Sep 2024 12:07:00 GMT Date: Mon, 30 Sep 2024 12:07:00 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="coop_38fac9d5b82543fc4729580d18ff2d3d" Report-To: {"group":"coop_38fac9d5b82543fc4729580d18ff2d3d","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d"}]} Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 12:07:00 UTC	641	IN	Data Raw: 35 39 61 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 59a/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-09-30 12:07:00 UTC	800	IN	Data Raw: 41 41 43 51 65 79 4a 76 63 6d 6c 6e 61 57 34 69 4f 69 4a 6f 64 48 52 77 63 7a 6f 76 4c 32 64 76 62 32 64 73 5a 53 35 6a 62 32 30 36 4e 44 51 7a 49 69 77 69 5a 6d 56 68 64 48 56 79 5a 53 49 36 49 6b 52 70 63 32 46 69 62 47 56 55 61 47 6c 79 5a 46 42 68 63 6e 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 7a 49 69 4c 43 4a 6c 65 48 42 70 63 6e 6b 69 4f 6a 45 33 4e 44 49 7a 4e 44 49 7a 4f 54 6b 73 49 6d 6c 7a 55 33 56 69 5a 47 39 74 59 57 6c 75 49 6a 70 30 63 6e 56 6c 4c 43 4a 70 63 31 52 6f 61 58 4a 6b 55 47 46 79 64 48 6b 69 4f 6e 52 79 64 57 56 39 27 3b 69 66 28 76 26 26 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 29 7b 76 2e 63 6f 6f 6b 69 65 44 65 70 72 65 63 61 74 69 6f 6e 4c 61 62 65 6c 2e Data Ascii: AACQeyJvcmlnaW4iOiJodHRwczovL2dvb2dsZS5jb206NDQzIiwiZmVhdHVyZSI6IkRpc2FibGVUaGlyZFBhcnR5U3RvcmFnZVBhcnRpdGlvbmluZzIiLCJleHBpcnkiOjE3NDIzNDIzOTksImlzU3ViZG9tYWluIjp0cnVlLCJpc1RoaXJkUGFydHkiOnRydWV9';if(v&&v.cookieDeprecationLabel){v.cookieDeprecationLabel.
2024-09-30 12:07:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	679	OUT	GET /css/animate.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:00 UTC	346	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"72259-1550227818000" Last-Modified: Fri, 15 Feb 2019 10:50:18 GMT Content-Type: text/css Content-Length: 72259 Date: Mon, 30 Sep 2024 12:07:00 GMT Connection: close
2024-09-30 12:07:00 UTC	7846	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 0a 0a 2f 2a 21 0a 20 2a 20 61 6e 69 6d 61 74 65 2e 63 73 73 20 2d 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 20 2a 20 56 65 72 73 69 6f 6e 20 2d 20 33 2e 35 2e 31 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 20 2a 2f 0a 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d Data Ascii: @charset "UTF-8";/! animate.css -http://daneden.me/animate * Version - 3.5.1 * Licensed under the MIT license - http://opensource.org/licenses/MIT * * Copyright (c) 2016 Daniel Eden */.animated { -webkit-animation-duration: 1s; animation-
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 2c 20 30 2c 20 31 2c 20 2d 35 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 30 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 77 69 6e 67 20 7b 0a 20 20 32 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 31 35 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 31 35 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 34 30 25 20 7b 0a 20 20 Data Ascii: , 0, 1, -5deg); } to { -webkit-transform: rotate3d(0, 0, 1, 0deg); transform: rotate3d(0, 0, 1, 0deg); }}@keyframes swing { 20% { -webkit-transform: rotate3d(0, 0, 1, 15deg); transform: rotate3d(0, 0, 1, 15deg); } 40% {
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 65 79 66 72 61 6d 65 73 20 74 61 64 61 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 0a 20 20 31 30 25 2c 20 32 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 2e 39 2c 20 2e 39 2c 20 2e 39 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 2d 33 64 65 67 29 3b 0a 20 20 7d 0a 0a 20 20 33 Data Ascii: eyframes tada { from { -webkit-transform: scale3d(1, 1, 1); transform: scale3d(1, 1, 1); } 10%, 20% { -webkit-transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); transform: scale3d(.9, .9, .9) rotate3d(0, 0, 1, -3deg); } 3
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 64 28 30 2c 20 2d 33 30 30 30 70 78 2c 20 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 33 30 30 30 70 78 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 36 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 32 35 70 78 2c 20 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 32 35 70 78 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 37 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 31 30 70 78 2c 20 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 Data Ascii: d(0, -3000px, 0); transform: translate3d(0, -3000px, 0); } 60% { opacity: 1; -webkit-transform: translate3d(0, 25px, 0); transform: translate3d(0, 25px, 0); } 75% { -webkit-transform: translate3d(0, -10px, 0); transform:
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 72 61 6e 73 6c 61 74 65 33 64 28 2d 33 30 30 30 70 78 2c 20 30 2c 20 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 33 30 30 30 70 78 2c 20 30 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 36 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 35 70 78 2c 20 30 2c 20 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 32 35 70 78 2c 20 30 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 37 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 2d 31 30 70 78 2c 20 30 2c 20 30 29 3b 0a 20 20 20 20 74 72 Data Ascii: ranslate3d(-3000px, 0, 0); transform: translate3d(-3000px, 0, 0); } 60% { opacity: 1; -webkit-transform: translate3d(25px, 0, 0); transform: translate3d(25px, 0, 0); } 75% { -webkit-transform: translate3d(-10px, 0, 0); tr
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 72 6f 6d 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 7d 0a 0a 2e 66 61 64 65 49 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 44 6f 77 6e 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 Data Ascii: rom { opacity: 0; } to { opacity: 1; }}@keyframes fadeIn { from { opacity: 0; } to { opacity: 1; }}.fadeIn { -webkit-animation-name: fadeIn; animation-name: fadeIn;}@-webkit-keyframes fadeInDown { from {
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 32 30 30 30 70 78 2c 20 30 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 2d 32 30 30 30 70 78 2c 20 30 29 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 49 6e 44 6f 77 6e 42 69 67 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d Data Ascii: 0; -webkit-transform: translate3d(0, -2000px, 0); transform: translate3d(0, -2000px, 0); } to { opacity: 1; -webkit-transform: none; transform: none; }}@keyframes fadeInDownBig { from { opacity: 0; -webkit-transform
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 7d 0a 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 31 37 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 31 37 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 Data Ascii: iming-function: ease-out; } 50% { -webkit-transform: perspective(400px) translate3d(0, 0, 150px) rotate3d(0, 1, 0, -170deg); transform: perspective(400px) translate3d(0, 0, 150px) rotate3d(0, 1, 0, -170deg); -webkit-animation-timing-funct
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 36 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 33 36 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 7d 0a 0a 20 20 34 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 Data Ascii: 60deg); transform: perspective(400px) rotate3d(0, 1, 0, -360deg); -webkit-animation-timing-function: ease-out; animation-timing-function: ease-out; } 40% { -webkit-transform: perspective(400px) translate3d(0, 0, 150px) rotate3d(0, 1,
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 6c 69 67 68 74 53 70 65 65 64 49 6e 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 6c 69 67 68 74 53 70 65 65 64 49 6e 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 69 67 68 74 53 70 65 65 64 4f 75 74 20 7b 0a 20 20 66 72 6f 6d 20 7b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 Data Ascii: ebkit-animation-name: lightSpeedIn; animation-name: lightSpeedIn; -webkit-animation-timing-function: ease-out; animation-timing-function: ease-out;}@-webkit-keyframes lightSpeedOut { from { opacity: 1; } to { -webkit-transform: tra

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	685	OUT	GET /css/bootstrap.min.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:00 UTC	348	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"105342-1572378734000" Last-Modified: Tue, 29 Oct 2019 19:52:14 GMT Content-Type: text/css Content-Length: 105342 Date: Mon, 30 Sep 2024 12:07:00 GMT Connection: close
2024-09-30 12:07:00 UTC	7844	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 2d 61 6c 70 68 61 2e 35 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 34 2e 32 2e 30 20 7c 20 4d 49 54 20 4c 69 Data Ascii: /! Bootstrap v4.0.0-alpha.5 (https://getbootstrap.com) * Copyright 2011-2016 The Bootstrap Authors * Copyright 2011-2016 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! normalize.css v4.2.0 \| MIT Li
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 39 30 25 3b 63 6f 6c 6f 72 3a 23 33 37 33 61 33 63 7d 70 72 65 20 63 6f 64 65 7b 70 61 64 64 69 6e 67 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 7d 2e 70 72 65 2d 73 63 72 6f 6c 6c 61 62 6c 65 7b 6d 61 78 2d 68 65 69 67 68 74 3a 33 34 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 7d 2e 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 Data Ascii: n-bottom:1rem;font-size:90%;color:#373a3c}pre code{padding:0;font-size:inherit;color:inherit;background-color:transparent;border-radius:0}.pre-scrollable{max-height:340px;overflow-y:scroll}.container{margin-left:auto;margin-right:auto;padding-left:15px;pa
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 35 37 36 70 78 29 7b 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 72 6f 77 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 31 35 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 30 30 70 78 29 7b 2e 72 6f 77 7b 6d 61 72 67 69 Data Ascii: ble;clear:both}@media (min-width:576px){.row{margin-right:-15px;margin-left:-15px}}@media (min-width:768px){.row{margin-right:-15px;margin-left:-15px}}@media (min-width:992px){.row{margin-right:-15px;margin-left:-15px}}@media (min-width:1200px){.row{margi
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 6d 64 2d 31 31 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 39 39 32 70 78 29 7b 2e 63 6f 6c 2d 6c 67 2d 31 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 38 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 6c 67 2d 32 7b 66 Data Ascii: t:50%}.offset-md-7{margin-left:58.333333%}.offset-md-8{margin-left:66.666667%}.offset-md-9{margin-left:75%}.offset-md-10{margin-left:83.333333%}.offset-md-11{margin-left:91.666667%}}@media (min-width:992px){.col-lg-1{float:left;width:8.333333%}.col-lg-2{f
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 3a 35 30 25 7d 2e 70 75 6c 6c 2d 6c 67 2d 37 7b 72 69 67 68 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 70 75 6c 6c 2d 6c 67 2d 38 7b 72 69 67 68 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 70 75 6c 6c 2d 6c 67 2d 39 7b 72 69 67 68 74 3a 37 35 25 7d 2e 70 75 6c 6c 2d 6c 67 2d 31 30 7b 72 69 67 68 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 70 75 6c 6c 2d 6c 67 2d 31 31 7b 72 69 67 68 74 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 70 75 6c 6c 2d 6c 67 2d 31 32 7b 72 69 67 68 74 3a 31 30 30 25 7d 2e 70 75 73 68 2d 6c 67 2d 30 7b 6c 65 66 74 3a 61 75 74 6f 7d 2e 70 75 73 68 2d 6c 67 2d 31 7b 6c 65 66 74 3a 38 2e 33 33 33 33 33 33 25 7d 2e 70 75 73 68 2d 6c 67 2d 32 7b 6c 65 66 74 3a 31 36 2e 36 36 36 36 36 37 25 7d 2e 70 75 73 68 2d 6c 67 2d 33 7b 6c 65 66 74 3a 32 35 Data Ascii: :50%}.pull-lg-7{right:58.333333%}.pull-lg-8{right:66.666667%}.pull-lg-9{right:75%}.pull-lg-10{right:83.333333%}.pull-lg-11{right:91.666667%}.pull-lg-12{right:100%}.push-lg-0{left:auto}.push-lg-1{left:8.333333%}.push-lg-2{left:16.666667%}.push-lg-3{left:25
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 3a 2d 2e 32 35 72 65 6d 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2e 64 69 73 61 62 6c 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 38 31 38 61 39 31 3b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 32 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 31 2e 32 35 72 65 6d 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 6f 6e 6c 79 2d 63 68 69 6c 64 7b Data Ascii: :-.25rem}.form-check.disabled .form-check-label{color:#818a91;cursor:not-allowed}.form-check-label{padding-left:1.25rem;margin-bottom:0;cursor:pointer}.form-check-input{position:absolute;margin-top:.25rem;margin-left:-1.25rem}.form-check-input:only-child{
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 6f 6d 2d 63 6f 6e 74 72 6f 6c 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 6c 69 6e 65 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 6c 61 62 65 6c 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 2c 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 35 63 62 38 35 63 7d 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 35 63 62 38 35 63 7d 2e 68 61 73 2d 73 75 63 63 65 73 73 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f Data Ascii: om-control,.has-success .form-check-inline,.has-success .form-check-label,.has-success .form-control-feedback,.has-success .form-control-label{color:#5cb85c}.has-success .form-control{border-color:#5cb85c}.has-success .form-control:focus{-webkit-box-shado
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 6e 2d 77 61 72 6e 69 6e 67 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 63 39 37 31 66 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 62 39 33 31 36 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6e 6f 6e 65 7d 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 2e 61 63 74 69 76 65 3a 68 6f 76 65 72 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 61 63 74 69 76 65 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 2d 77 61 72 6e 69 6e 67 3a 61 63 74 69 76 65 3a Data Ascii: n-warning.dropdown-toggle{color:#fff;background-color:#ec971f;border-color:#eb9316;background-image:none}.btn-warning.active.focus,.btn-warning.active:focus,.btn-warning.active:hover,.btn-warning:active.focus,.btn-warning:active:focus,.btn-warning:active:
2024-09-30 12:07:00 UTC	8192	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 63 39 33 30 32 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 31 32 65 32 61 7d 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 66 6f 63 75 73 2c 2e 62 74 6e 2d 64 61 6e 67 65 72 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 39 33 30 32 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 31 32 65 32 61 7d 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 61 63 74 69 76 65 2c 2e 62 74 6e 2d 64 61 6e 67 65 72 3a 61 63 74 69 76 65 2c 2e 6f 70 65 6e 3e 2e 62 74 6e 2d 64 61 6e 67 65 72 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 39 33 30 32 63 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 31 32 Data Ascii: d-color:#c9302c;border-color:#c12e2a}.btn-danger.focus,.btn-danger:focus{color:#fff;background-color:#c9302c;border-color:#c12e2a}.btn-danger.active,.btn-danger:active,.open>.btn-danger.dropdown-toggle{color:#fff;background-color:#c9302c;border-color:#c12
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 63 6b 2b 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 72 65 6d 7d 69 6e 70 75 74 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 2e 62 74 6e 2d 62 6c 6f 63 6b 2c 69 6e 70 75 74 5b 74 79 70 65 3d 72 65 73 65 74 5d 2e 62 74 6e 2d 62 6c 6f 63 6b 2c 69 6e 70 75 74 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2e 62 74 6e 2d 62 6c 6f 63 6b 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 66 61 64 65 7b 6f 70 61 63 69 74 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 35 73 20 6c 69 6e 65 61 72 7d 2e 66 61 64 65 2e 69 Data Ascii: ck+.btn-block{margin-top:.5rem}input[type=button].btn-block,input[type=reset].btn-block,input[type=submit].btn-block{width:100%}.fade{opacity:0;-webkit-transition:opacity .15s linear;-o-transition:opacity .15s linear;transition:opacity .15s linear}.fade.i

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	680	OUT	GET /css/register.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:00 UTC	408	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: deny X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Cache-Control: no-cache, no-store Pragma: no-cache Expires: Mon, 8 Oct 1973 05:00:00 GMT X-Binford: More Power! Content-Type: text/css;charset=UTF-8 Transfer-Encoding: chunked Date: Mon, 30 Sep 2024 12:07:00 GMT Connection: close
2024-09-30 12:07:00 UTC	7784	IN	Data Raw: 32 30 30 30 0d 0a 2f 2a 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 0a 20 20 20 45 42 46 20 4f 6e 62 6f 61 72 64 65 72 20 66 6f 72 20 4d 6f 62 69 6c 65 49 72 6f 6e 20 63 75 73 74 6f 6d 20 73 74 79 6c 65 73 20 61 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 0a 20 20 20 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 3d 20 2a 2f 0a 0a 0a 2f 2a 20 52 65 73 65 74 20 2a 2f 0a 0a 68 74 6d 6c 2c 20 62 6f 64 Data Ascii: 2000/* ========================================================================== EBF Onboarder for MobileIron custom styles all rights reserved ========================================================================== // Reset */html, bod
2024-09-30 12:07:00 UTC	808	IN	Data Raw: 2c 31 29 20 39 36 25 2c 20 72 67 62 61 28 32 34 31 2c 32 34 33 2c 32 34 37 2c 31 29 20 31 30 30 25 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 20 30 25 2c 20 72 67 62 61 28 32 34 31 2c 32 34 33 2c 32 34 37 2c 31 29 20 39 36 25 2c 20 72 67 62 61 28 32 34 31 2c 32 34 33 2c 32 34 37 2c 31 29 20 31 30 30 25 29 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 31 29 20 30 25 2c 20 72 67 62 61 28 32 34 31 2c 32 34 33 2c 32 34 37 2c 31 29 20 39 36 25 2c 20 72 67 62 61 28 32 34 31 2c 32 Data Ascii: ,1) 96%, rgba(241,243,247,1) 100%); background: -ms-linear-gradient(top, rgba(255,255,255,1) 0%, rgba(241,243,247,1) 96%, rgba(241,243,247,1) 100%); background: linear-gradient(to bottom, rgba(255,255,255,1) 0%, rgba(241,243,247,1) 96%, rgba(241,2
2024-09-30 12:07:00 UTC	7013	IN	Data Raw: 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 31 70 78 3b 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 36 30 30 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 3b 0a 7d 0a 0a 2f 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 0a 0a 43 75 73 74 6f 6d 20 41 6e 69 6d 61 74 69 6f 6e 73 0a 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 0a 2e 62 75 74 74 6f 6e 2c 0a 5b 63 6c 61 73 73 2a 3d 22 62 75 74 74 6f 6e 2d 22 5d 20 7b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a Data Ascii: ize: 14px; line-height: 21px; font-weight: 600; padding: 10px 0;}/* -------------------------------- Custom Animations-------------------------------- /.button,[class="button-"] { position: relative; display: inline-block;
2024-09-30 12:07:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	679	OUT	GET /css/general.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:00 UTC	344	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"8380-1727109900000" Last-Modified: Mon, 23 Sep 2024 16:45:00 GMT Content-Type: text/css Content-Length: 8380 Date: Mon, 30 Sep 2024 12:07:00 GMT Connection: close
2024-09-30 12:07:00 UTC	7848	IN	Data Raw: 2e 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 20 7b 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 33 35 38 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 6d 6f 64 61 6c 7b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 72 65 67 2d 6c 6f 61 64 65 72 2d 77 72 61 70 20 7b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 30 30 30 30 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 36 3b 0a 7d 0a 0a 64 69 76 2e 67 2d 72 65 63 61 70 74 63 68 61 20 7b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 2d 77 65 62 6b 69 74 2d 72 69 67 68 74 3b 0a 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 2d 35 70 78 Data Ascii: .validation-error { border: 1px solid #d35847 !important;}.modal{ z-index: 100000000!important;}.reg-loader-wrap { z-index: 100000000!important; opacity: 0.6;}div.g-recaptcha { text-align: -webkit-right; margin-bottom: -5px
2024-09-30 12:07:00 UTC	532	IN	Data Raw: 65 30 65 30 65 30 2c 20 30 20 30 20 32 35 70 78 20 23 36 36 36 36 36 36 2c 20 30 20 30 20 35 70 78 20 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 69 6e 76 61 6c 69 64 52 65 67 20 68 31 3a 3a 62 65 66 6f 72 65 7b 0a 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 27 27 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 63 72 79 69 6e 67 2e 73 76 67 29 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 20 20 62 61 63 6b 67 Data Ascii: e0e0e0, 0 0 25px #666666, 0 0 5px #ffffff;}.invalidReg h1::before{ content: ''; background-image: url(../img/crying.svg); width: 100%; height: 100px; position: relative; background-repeat: no-repeat; display: block; backg

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	681	OUT	GET /css/notyf.min.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:00 UTC	344	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"5159-1689874358000" Last-Modified: Thu, 20 Jul 2023 17:32:38 GMT Content-Type: text/css Content-Length: 5159 Date: Mon, 30 Sep 2024 12:07:00 GMT Connection: close
2024-09-30 12:07:00 UTC	5159	IN	Data Raw: 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6e 6f 74 79 66 2d 66 61 64 65 69 6e 75 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 35 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6e 6f 74 79 66 2d 66 61 64 65 69 6e 75 70 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 32 35 25 29 7d 74 6f 7b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6e 6f 74 79 66 2d 66 61 64 65 69 6e 6c 65 66 74 7b 30 25 7b 6f 70 Data Ascii: @-webkit-keyframes notyf-fadeinup{0%{opacity:0;transform:translateY(25%)}to{opacity:1;transform:translateY(0)}}@keyframes notyf-fadeinup{0%{opacity:0;transform:translateY(25%)}to{opacity:1;transform:translateY(0)}}@-webkit-keyframes notyf-fadeinleft{0%{op

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Windows Analysis Report
https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:00 UTC	688	OUT	GET /css/notyf-custom.min.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:01 UTC	342	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"553-1722231674000" Last-Modified: Mon, 29 Jul 2024 05:41:14 GMT Content-Type: text/css Content-Length: 553 Date: Mon, 30 Sep 2024 12:07:00 GMT Connection: close
2024-09-30 12:07:01 UTC	553	IN	Data Raw: 2e 6e 6f 74 79 66 5f 5f 69 63 6f 6e 2d 2d 69 6e 66 6f 3a 61 66 74 65 72 2c 2e 6e 6f 74 79 66 5f 5f 69 63 6f 6e 2d 2d 69 6e 66 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 39 70 78 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 2e 6e 6f 74 79 66 5f 5f 69 63 6f 6e 2d 2d 69 6e 66 6f 7b 68 65 69 67 68 74 3a 32 31 70 78 3b 77 69 64 74 68 3a 32 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 Data Ascii: .notyf__icon--info:after,.notyf__icon--info:before{content:"";background:currentColor;display:block;position:absolute;width:3px;border-radius:3px;left:9px;transform:rotate(0)}.notyf__icon--info{height:21px;width:21px;background:#fff;border-radius:50%;disp

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	689	OUT	GET /css/mobileiron/custom.css?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:01 UTC	346	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"11084-1722231674000" Last-Modified: Mon, 29 Jul 2024 05:41:14 GMT Content-Type: text/css Content-Length: 11084 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close
2024-09-30 12:07:01 UTC	7846	IN	Data Raw: 62 6f 64 79 2e 69 6e 74 72 6f 2d 70 61 67 65 2c 20 2e 63 68 6f 73 65 6e 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 63 68 6f 73 65 6e 2d 72 65 73 75 6c 74 73 20 6c 69 2e 68 69 67 68 6c 69 67 68 74 65 64 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 32 37 32 36 3b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 23 77 61 69 74 69 6e 67 2e 77 61 69 74 53 74 61 72 74 20 7b 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 65 65 32 37 32 36 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 2e 69 6e 74 72 6f 2d 69 6d 61 67 65 20 69 6d 67 20 7b 0a 20 20 20 20 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 36 30 70 78 3b 0a 7d 0a 62 6f 64 79 3a 6e 6f 74 28 2e 77 68 69 74 65 29 3a 6e 6f 74 28 2e 69 6e 74 72 Data Ascii: body.intro-page, .chosen-container .chosen-results li.highlighted{ background-color: #ee2726; color: #ffffff;}#waiting.waitStart { color: #ee2726!important;}.intro-image img { width: auto; height: 60px;}body:not(.white):not(.intr
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 69 6d 67 5b 73 72 63 2a 3d 22 65 6d 61 69 6c 2d 62 6c 75 65 2e 73 76 67 22 5d 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 69 6d 67 2f 6d 6f 62 69 6c 65 69 72 6f 6e 2f 65 6d 61 69 6c 2d 62 6c 75 65 2e 73 76 67 29 20 63 65 6e 74 65 72 20 6c 65 66 74 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 Data Ascii: t; background-size: 15px; width: 0px; height: 15px; padding-left: 15px;}img[src*="email-blue.svg"]{ background:url(../../img/mobileiron/email-blue.svg) center left no-repeat; background-size: 15px; width: 0px; height: 15p
2024-09-30 12:07:01 UTC	2430	IN	Data Raw: 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 69 6d 67 5b 73 72 63 2a 3d 22 73 75 70 70 6f 72 74 2e 73 76 67 22 5d 7b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 2e 2e 2f 69 6d 67 2f 6d 6f 62 69 6c 65 69 72 6f 6e 2f 73 75 70 70 6f 72 74 2e 73 76 67 29 20 63 65 6e 74 65 72 20 6c 65 66 74 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 20 20 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 35 70 78 3b 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 35 70 78 3b 0a 7d 0a 69 Data Ascii: 15px; width: 0px; height: 15px; padding-left: 15px;}img[src*="support.svg"]{ background:url(../../img/mobileiron/support.svg) center left no-repeat; background-size: 15px; width: 0px; height: 15px; padding-left: 15px;}i

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	679	OUT	GET /js/vendor/jquery-3.6.0.min.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:01 UTC	360	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"89500-1654674644000" Last-Modified: Wed, 08 Jun 2022 07:50:44 GMT Content-Type: application/javascript Content-Length: 89500 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close
2024-09-30 12:07:01 UTC	7832	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 61 73 65 28 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 68 65 28 6e 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 Data Ascii: ase()&&e.type===t}}function he(n){return function(e){var t=e.nodeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parent
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 7c 7c 65 3a 70 3b 72 65 74 75 72 6e 20 72 21 3d 43 26 26 39 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 26 26 72 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 61 3d 28 43 3d 72 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 45 3d 21 69 28 43 29 2c 70 21 3d 43 26 26 28 6e 3d 43 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 6e 2e 74 6f 70 21 3d 3d 6e 26 26 28 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 6e 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 6f 65 2c 21 31 29 3a 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 6e 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 75 6e 6c 6f 61 64 22 2c 6f 65 29 29 2c 64 2e 73 63 6f 70 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 2e Data Ascii: \|\|e:p;return r!=C&&9===r.nodeType&&r.documentElement&&(a=(C=r).documentElement,E=!i(C),p!=C&&(n=C.defaultView)&&n.top!==n&&(n.addEventListener?n.addEventListener("unload",oe,!1):n.attachEvent&&n.attachEvent("onunload",oe)),d.scope=ce(function(e){return a.
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 72 6e 20 61 5b 53 5d 3f 61 28 6f 29 3a 31 3c 61 2e 6c 65 6e 67 74 68 3f 28 74 3d 5b 65 2c 65 2c 22 22 2c 6f 5d 2c 62 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 65 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 50 28 65 2c 72 5b 69 5d 29 5d 3d 21 28 74 5b 6e 5d 3d 72 5b 69 5d 29 7d 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 61 28 65 2c 30 2c 74 29 7d 29 3a 61 7d 7d 2c 70 73 65 75 64 6f 73 3a 7b 6e 6f 74 3a 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 5b 5d 2c 73 3d 66 28 65 2e 72 65 70 6c 61 63 65 Data Ascii: rn a[S]?a(o):1<a.length?(t=[e,e,"",o],b.setFilters.hasOwnProperty(e.toLowerCase())?le(function(e,t){var n,r=a(e,o),i=r.length;while(i--)e[n=P(e,r[i])]=!(t[n]=r[i])}):function(e){return a(e,0,t)}):a}},pseudos:{not:le(function(e){var r=[],i=[],s=f(e.replace
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 6e 28 74 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3d 3d 3d 6e 7c 7c 30 3d 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 6e 2b 22 2d 22 29 7d 77 68 69 6c 65 28 28 65 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 3b 72 65 74 75 72 6e 21 31 7d 7d 29 2c 74 61 72 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 6c 6f 63 61 74 69 6f 6e 26 26 6e 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 73 6c 69 63 65 28 31 29 3d 3d 3d 65 2e 69 64 7d 2c 72 6f 6f 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 61 7d 2c 66 6f 63 75 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 43 2e 61 63 74 69 76 65 45 6c 65 6d 65 6e Data Ascii: n(t=t.toLowerCase())===n\|\|0===t.indexOf(n+"-")}while((e=e.parentNode)&&1===e.nodeType);return!1}}),target:function(e){var t=n.location&&n.location.hash;return t&&t.slice(1)===e.id},root:function(e){return e===a},focus:function(e){return e===C.activeElemen
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 5d 29 3a 74 68 69 73 2e 61 74 74 72 28 72 2c 74 5b 72 5d 29 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 72 65 74 75 72 6e 28 69 3d 45 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 72 5b 32 5d 29 29 26 26 28 74 68 69 73 5b 30 5d 3d 69 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 29 2c 74 68 69 73 7d 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 54 79 70 65 3f 28 74 68 69 73 5b 30 5d 3d 65 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 31 2c 74 68 69 73 29 3a 6d 28 65 29 3f 76 6f 69 64 20 30 21 3d 3d 6e 2e 72 65 61 64 79 3f 6e 2e 72 65 61 64 79 28 65 29 3a 65 28 53 29 3a 53 2e 6d 61 6b 65 41 72 72 61 79 28 65 2c 74 68 69 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 53 2e 66 6e 2c 44 3d 53 28 45 29 3b 76 61 72 20 4c 3d 2f 5e 28 3f 3a 70 61 72 65 6e 74 73 7c 70 72 65 76 28 3f 3a Data Ascii: ]):this.attr(r,t[r]);return this}return(i=E.getElementById(r[2]))&&(this[0]=i,this.length=1),this}return e.nodeType?(this[0]=e,this.length=1,this):m(e)?void 0!==n.ready?n.ready(e):e(S):S.makeArray(e,this)}).prototype=S.fn,D=S(E);var L=/^(?:parents\|prev(?:
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 65 78 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3f 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 69 2e 63 61 6c 6c 28 53 28 65 29 2c 74 68 69 73 5b 30 5d 29 3a 69 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2e 6a 71 75 65 72 79 3f 65 5b 30 5d 3a 65 29 3a 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 74 68 69 73 2e 66 69 72 73 74 28 29 2e 70 72 65 76 41 6c 6c 28 29 2e 6c 65 6e 67 74 68 3a 2d 31 7d 2c 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 75 6e 69 71 75 65 53 6f 72 74 28 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 67 65 74 28 29 2c 53 28 65 2c 74 29 29 29 29 7d 2c 61 64 64 42 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ex:function(e){return e?"string"==typeof e?i.call(S(e),this[0]):i.call(this,e.jquery?e[0]:e):this[0]&&this[0].parentNode?this.first().prevAll().length:-1},add:function(e,t){return this.pushStack(S.uniqueSort(S.merge(this.get(),S(e,t))))},addBack:function(
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 51 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 53 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 59 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 59 2e 61 63 63 65 73 73 28 65 2c 74 2c 53 2e 6d 61 6b 65 41 72 72 61 79 28 6e 29 29 3a 72 2e 70 75 Data Ascii: )},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){Q.remove(this,e)})}}),S.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=Y.get(e,t),n&&(!r\|\|Array.isArray(n)?r=Y.access(e,t,S.makeArray(n)):r.pu
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 3f 74 68 69 73 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 53 2e 71 75 65 75 65 28 74 68 69 73 2c 74 2c 6e 29 3b 53 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 74 68 69 73 2c 74 29 2c 22 66 78 22 3d 3d 3d 74 26 26 22 69 6e 70 72 6f 67 72 65 73 73 22 21 3d 3d 65 5b 30 5d 26 26 53 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 74 29 7d 29 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 65 29 7d 29 7d 2c 63 6c 65 61 72 51 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 71 75 65 75 65 28 65 7c 7c 22 66 78 22 2c 5b 5d 29 7d 2c 70 72 6f 6d 69 73 65 Data Ascii: ?this:this.each(function(){var e=S.queue(this,t,n);S._queueHooks(this,t),"fx"===t&&"inprogress"!==e[0]&&S.dequeue(this,t)})},dequeue:function(e){return this.each(function(){S.dequeue(this,e)})},clearQueue:function(e){return this.queue(e\|\|"fx",[])},promise
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6d 28 65 29 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 29 72 65 74 75 72 6e 20 65 28 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 29 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 5b 74 5d 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 Data Ascii: merable:!0,configurable:!0,get:m(e)?function(){if(this.originalEvent)return e(this.originalEvent)}:function(){if(this.originalEvent)return this.originalEvent[t]},set:function(e){Object.defineProperty(this,t,{enumerable:!0,configurable:!0,writable:!0,value

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	675	OUT	GET /js/jquery.urlparameter.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:01 UTC	356	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"469-1722231676000" Last-Modified: Mon, 29 Jul 2024 05:41:16 GMT Content-Type: application/javascript Content-Length: 469 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close
2024-09-30 12:07:01 UTC	469	IN	Data Raw: 24 2e 65 78 74 65 6e 64 28 7b 0a 20 20 67 65 74 55 72 6c 56 61 72 73 3a 20 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 76 61 72 20 76 61 72 73 20 3d 20 5b 5d 2c 20 68 61 73 68 3b 0a 20 20 20 20 76 61 72 20 68 61 73 68 65 73 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 73 6c 69 63 65 28 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 3f 27 29 20 2b 20 31 29 2e 73 70 6c 69 74 28 27 26 27 29 3b 0a 20 20 20 20 66 6f 72 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 68 61 73 68 65 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 0a 20 20 20 20 7b 0a 20 20 20 20 20 20 68 61 73 68 20 3d 20 68 61 73 68 65 73 5b 69 5d 2e 73 70 6c 69 74 28 27 3d 27 29 3b 0a 20 20 20 20 20 20 76 61 72 73 2e 70 75 73 Data Ascii: $.extend({ getUrlVars: function(){ var vars = [], hash; var hashes = window.location.href.slice(window.location.href.indexOf('?') + 1).split('&'); for(var i = 0; i < hashes.length; i++) { hash = hashes[i].split('='); vars.pus

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	696	OUT	GET /js/vendor/modernizr-2.8.3-respond-1.4.2.min.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:01 UTC	360	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"20106-1550227818000" Last-Modified: Fri, 15 Feb 2019 10:50:18 GMT Content-Type: application/javascript Content-Length: 20106 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close
2024-09-30 12:07:01 UTC	7832	IN	Data Raw: 2f 2a 20 4d 6f 64 65 72 6e 69 7a 72 20 32 2e 38 2e 33 20 28 43 75 73 74 6f 6d 20 42 75 69 6c 64 29 20 7c 20 4d 49 54 20 26 20 42 53 44 0a 20 2a 20 42 75 69 6c 64 3a 20 68 74 74 70 3a 2f 2f 6d 6f 64 65 72 6e 69 7a 72 2e 63 6f 6d 2f 64 6f 77 6e 6c 6f 61 64 2f 23 2d 66 6f 6e 74 66 61 63 65 2d 62 61 63 6b 67 72 6f 75 6e 64 73 69 7a 65 2d 62 6f 72 64 65 72 69 6d 61 67 65 2d 62 6f 72 64 65 72 72 61 64 69 75 73 2d 62 6f 78 73 68 61 64 6f 77 2d 66 6c 65 78 62 6f 78 2d 68 73 6c 61 2d 6d 75 6c 74 69 70 6c 65 62 67 73 2d 6f 70 61 63 69 74 79 2d 72 67 62 61 2d 74 65 78 74 73 68 61 64 6f 77 2d 63 73 73 61 6e 69 6d 61 74 69 6f 6e 73 2d 63 73 73 63 6f 6c 75 6d 6e 73 2d 67 65 6e 65 72 61 74 65 64 63 6f 6e 74 65 6e 74 2d 63 73 73 67 72 61 64 69 65 6e 74 73 2d 63 73 73 72 Data Ascii: /* Modernizr 2.8.3 (Custom Build) \| MIT & BSD * Build: http://modernizr.com/download/#-fontface-backgroundsize-borderimage-borderradius-boxshadow-flexbox-hsla-multiplebgs-opacity-rgba-textshadow-cssanimations-csscolumns-generatedcontent-cssgradients-cssr
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 7d 63 61 74 63 68 28 64 29 7b 7d 72 65 74 75 72 6e 20 63 7d 2c 73 2e 6c 6f 63 61 6c 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 68 2c 68 29 2c 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 68 29 2c 21 30 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 73 2e 73 65 73 73 69 6f 6e 73 74 6f 72 61 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 68 2c 68 29 2c 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 72 65 6d 6f 76 65 49 74 65 6d 28 68 29 2c 21 30 7d 63 61 74 63 68 28 61 29 7b 72 65 74 75 72 6e 21 31 7d 7d 2c 73 2e Data Ascii: }catch(d){}return c},s.localstorage=function(){try{return localStorage.setItem(h,h),localStorage.removeItem(h),!0}catch(a){return!1}},s.sessionstorage=function(){try{return sessionStorage.setItem(h,h),sessionStorage.removeItem(h),!0}catch(a){return!1}},s.
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 20 4c 20 69 6e 20 73 29 43 28 73 2c 4c 29 26 26 28 78 3d 4c 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 65 5b 78 5d 3d 73 5b 4c 5d 28 29 2c 76 2e 70 75 73 68 28 28 65 5b 78 5d 3f 22 22 3a 22 6e 6f 2d 22 29 2b 78 29 29 3b 72 65 74 75 72 6e 20 65 2e 69 6e 70 75 74 7c 7c 4b 28 29 2c 65 2e 61 64 64 54 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 74 79 70 65 6f 66 20 61 3d 3d 22 6f 62 6a 65 63 74 22 29 66 6f 72 28 76 61 72 20 64 20 69 6e 20 61 29 43 28 61 2c 64 29 26 26 65 2e 61 64 64 54 65 73 74 28 64 2c 61 5b 64 5d 29 3b 65 6c 73 65 7b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 69 66 28 65 5b 61 5d 21 3d 3d 63 29 72 65 74 75 72 6e 20 65 3b 62 3d 74 79 70 65 6f 66 20 62 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 28 29 3a 62 2c 74 Data Ascii: L in s)C(s,L)&&(x=L.toLowerCase(),e[x]=s[L](),v.push((e[x]?"":"no-")+x));return e.input\|\|K(),e.addTest=function(a,b){if(typeof a=="object")for(var d in a)C(a,d)&&e.addTest(d,a[d]);else{a=a.toLowerCase();if(e[a]!==c)return e;b=typeof b=="function"?b():b,t
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 5c 2a 2b 28 5b 5e 2f 5d 5b 5e 2a 5d 2a 5c 2a 2b 29 2a 5c 2f 2f 67 69 2c 75 72 6c 73 3a 2f 28 75 72 6c 5c 28 29 5b 27 22 5d 3f 28 5b 5e 5c 2f 5c 29 27 22 5d 5b 5e 3a 5c 29 27 22 5d 2b 29 5b 27 22 5d 3f 28 5c 29 29 2f 67 2c 66 69 6e 64 53 74 79 6c 65 73 3a 2f 40 6d 65 64 69 61 20 2a 28 5b 5e 5c 7b 5d 2b 29 5c 7b 28 5b 5c 53 5c 73 5d 2b 3f 29 24 2f 2c 6f 6e 6c 79 3a 2f 28 6f 6e 6c 79 5c 73 2b 29 3f 28 5b 61 2d 7a 41 2d 5a 5d 2b 29 5c 73 3f 2f 2c 6d 69 6e 77 3a 2f 5c 28 5c 73 2a 6d 69 6e 5c 2d 77 69 64 74 68 5c 73 2a 3a 5c 73 2a 28 5c 73 2a 5b 30 2d 39 5c 2e 5d 2b 29 28 70 78 7c 65 6d 29 5c 73 2a 5c 29 2f 2c 6d 61 78 77 3a 2f 5c 28 5c 73 2a 6d 61 78 5c 2d 77 69 64 74 68 5c 73 2a 3a 5c 73 2a 28 5c 73 2a 5b 30 2d 39 5c 2e 5d 2b 29 28 70 78 7c 65 6d 29 5c 73 2a Data Ascii: \+([^/][^]\+)\//gi,urls:/(url\()['"]?([^\/\)'"][^:\)'"]+)['"]?(\))/g,findStyles:/@media ([^\{]+)\{([\S\s]+?)$/,only:/(only\s+)?([a-zA-Z]+)\s?/,minw:/\(\smin\-width\s:\s(\s[0-9\.]+)(px\|em)\s\)/,maxw:/\(\smax\-width\s:\s(\s[0-9\.]+)(px\|em)\s
2024-09-30 12:07:01 UTC	2466	IN	Data Raw: 69 7a 65 3a 31 65 6d 3b 77 69 64 74 68 3a 31 65 6d 22 2c 63 7c 7c 28 63 3d 66 3d 6b 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 62 6f 64 79 22 29 2c 63 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 6f 6e 65 22 29 2c 6c 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 3d 22 31 30 30 25 22 2c 63 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 3d 22 31 30 30 25 22 2c 63 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2c 66 26 26 6c 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 63 2c 6c 2e 66 69 72 73 74 43 68 69 6c 64 29 2c 61 3d 62 2e 6f 66 66 73 65 74 57 69 64 74 68 2c 66 3f 6c 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 63 29 3a 63 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 6c 2e 73 74 79 6c 65 2e 66 6f 6e 74 53 69 7a 65 3d 64 2c 65 26 26 28 63 2e 73 Data Ascii: ize:1em;width:1em",c\|\|(c=f=k.createElement("body"),c.style.background="none"),l.style.fontSize="100%",c.style.fontSize="100%",c.appendChild(b),f&&l.insertBefore(c,l.firstChild),a=b.offsetWidth,f?l.removeChild(c):c.removeChild(b),l.style.fontSize=d,e&&(c.s

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	664	OUT	GET /js/migrator.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:01 UTC	362	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"593458-1727166344000" Last-Modified: Tue, 24 Sep 2024 08:25:44 GMT Content-Type: application/javascript Content-Length: 593458 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close
2024-09-30 12:07:01 UTC	7830	IN	Data Raw: 2f 2a 20 67 6c 6f 62 61 6c 20 69 46 61 69 6c 43 6e 74 2c 20 63 73 72 66 4e 6f 6e 63 65 2c 20 63 73 72 66 4b 65 79 2c 20 73 45 72 72 6f 72 2c 20 73 44 65 76 69 63 65 73 2c 20 73 58 45 4e 64 65 76 69 63 65 73 46 6f 75 6e 64 2c 20 70 61 67 65 4d 61 78 43 6f 75 6e 74 2c 20 73 53 61 76 65 55 73 65 72 2c 20 73 41 74 4c 65 61 73 74 4f 6e 65 44 65 76 69 63 65 2c 20 73 53 61 76 65 50 72 6f 6a 65 63 74 2c 20 73 4e 6f 4d 6f 62 69 6c 65 43 6f 6e 66 69 67 2c 20 67 72 65 63 61 70 74 63 68 61 2c 20 73 52 65 6d 69 6e 64 65 72 50 72 65 66 69 78 2c 20 73 47 6f 4e 6f 74 68 69 6e 67 46 6f 75 6e 64 2c 20 73 4e 6f 44 65 76 69 63 65 46 6f 75 6e 64 2c 20 63 61 63 68 65 55 73 65 72 49 64 73 2c 20 63 61 63 68 65 55 73 65 72 4d 61 69 6c 73 2c 20 73 55 70 6c 6f 61 64 4d 64 6d 4e 6f Data Ascii: /* global iFailCnt, csrfNonce, csrfKey, sError, sDevices, sXENdevicesFound, pageMaxCount, sSaveUser, sAtLeastOneDevice, sSaveProject, sNoMobileConfig, grecaptcha, sReminderPrefix, sGoNothingFound, sNoDeviceFound, cacheUserIds, cacheUserMails, sUploadMdmNo
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 6e 74 28 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 62 6c 6f 63 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 67 72 65 63 61 70 74 63 68 61 2e 72 65 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 6a 63 61 70 74 63 68 61 27 29 2e 70 61 72 65 6e 74 28 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 62 6c 6f 63 6b 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6a 63 61 70 74 63 68 61 52 65 66 72 65 73 68 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: nt().css('display', 'block'); grecaptcha.reset(); } else { $('.jcaptcha').parent().css('display', 'block'); jcaptchaRefresh(); }
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 6f 6e 20 3d 20 27 64 61 73 68 62 6f 61 72 64 2e 68 74 6d 6c 27 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 43 61 70 74 63 68 61 4b 65 79 20 21 3d 3d 20 27 26 72 65 63 61 70 74 63 68 61 27 20 2b 20 27 5f 6b 65 79 26 27 20 26 26 20 72 65 43 61 70 74 63 68 61 4b 65 79 20 21 3d 3d 20 27 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 2e 67 2d 72 65 63 61 70 74 63 68 61 27 29 2e 70 61 72 65 6e 74 28 29 2e 63 73 73 28 27 64 69 73 70 6c 61 79 27 2c 20 27 62 6c 6f 63 6b 27 29 3b 0a 20 20 20 Data Ascii: on = 'dashboard.html'; } } else { if (reCaptchaKey !== '&recaptcha' + '_key&' && reCaptchaKey !== '') { $('.g-recaptcha').parent().css('display', 'block');
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 28 27 69 6e 70 75 74 2e 6d 61 69 6c 27 29 2e 61 64 64 43 6c 61 73 73 28 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 2e 6d 61 69 6c 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 76 61 72 20 70 61 73 73 49 6e 76 61 6c 69 64 20 3d 20 24 28 27 69 6e 70 75 74 2e 70 61 73 73 77 6f 72 64 3a 66 69 72 73 74 27 29 2e 76 61 6c 28 29 2e 6c 65 6e 67 74 68 20 3c 20 36 3b 0a 20 20 20 20 20 20 20 20 69 66 20 28 24 28 27 69 6e 70 75 74 2e 70 61 73 73 77 6f 72 64 3a 66 69 72 73 74 27 29 2e 68 61 73 43 6c 61 73 73 28 27 70 61 73 Data Ascii: ('input.mail').addClass('validation-error'); } else { $('input.mail').removeClass('validation-error'); } var passInvalid = $('input.password:first').val().length < 6; if ($('input.password:first').hasClass('pas
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 73 73 77 6f 72 64 3a 66 69 72 73 74 27 29 2e 61 64 64 43 6c 61 73 73 28 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 69 6e 70 75 74 2e 70 61 73 73 77 6f 72 64 3a 66 69 72 73 74 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 69 66 20 28 28 69 73 53 75 62 6d 69 74 20 7c 7c 20 24 28 27 69 6e 70 75 74 2e 70 61 73 73 77 6f 72 64 3a 6c 61 73 74 27 29 2e 68 61 73 43 6c 61 73 73 28 27 76 61 6c 69 64 61 74 69 6f 6e 2d 65 72 72 6f 72 27 29 20 7c 7c 20 24 28 27 69 6e 70 75 74 2e 70 61 73 73 77 6f 72 64 3a 6c 61 73 74 27 29 2e 76 61 6c 28 29 Data Ascii: ssword:first').addClass('validation-error'); } else { $('input.password:first').removeClass('validation-error'); } if ((isSubmit \|\| $('input.password:last').hasClass('validation-error') \|\| $('input.password:last').val()
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 20 20 20 69 6e 70 75 74 20 3d 20 22 22 3b 0a 20 20 20 20 7d 29 3b 0a 7d 0a 0a 66 75 6e 63 74 69 6f 6e 20 70 72 6f 6a 65 63 74 73 4c 6f 61 64 28 63 61 74 65 67 6f 72 79 29 20 7b 0a 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 27 4c 6f 61 64 20 70 72 6f 6a 65 63 74 73 20 28 63 61 74 65 67 6f 72 79 3a 20 27 20 2b 20 63 61 74 65 67 6f 72 79 20 2b 20 27 29 27 29 3b 0a 20 20 20 20 24 28 27 2e 75 73 65 72 2d 69 63 6f 6e 27 29 2e 61 74 74 72 28 27 74 69 74 6c 65 27 2c 20 63 6f 6d 70 61 6e 79 4e 61 6d 65 29 3b 0a 20 20 20 20 6e 6f 74 79 66 20 3d 20 6e 65 77 20 4e 6f 74 79 66 28 7b 64 75 72 61 74 69 6f 6e 3a 20 36 30 30 30 7d 29 3b 0a 20 20 20 20 6c 69 73 74 65 6e 4b 65 79 73 28 29 3b 0a 20 20 20 20 69 6e 69 74 53 68 6f 70 28 29 3b 0a 20 20 20 20 69 66 20 28 24 Data Ascii: input = ""; });}function projectsLoad(category) { console.log('Load projects (category: ' + category + ')'); $('.user-icon').attr('title', companyName); notyf = new Notyf({duration: 6000}); listenKeys(); initShop(); if ($
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 65 6c 65 63 74 54 65 6e 61 6e 74 2e 68 74 6d 6c 3f 6b 65 79 3d 27 20 2b 20 63 73 72 66 4e 6f 6e 63 65 29 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 24 28 27 23 73 65 61 72 63 68 46 69 6c 74 65 72 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 27 29 3b 0a 20 20 20 20 24 28 27 2e 73 65 61 72 63 68 42 61 72 20 2e 73 6f 72 74 69 6e 67 20 2e 77 69 64 74 68 2d 34 30 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 27 29 3b 0a 0a 20 20 20 20 76 61 72 20 73 55 72 6c 20 3d 20 22 70 72 6f 6a 65 63 74 2e 68 74 6d 6c 22 3b 0a 20 20 20 20 24 2e 61 6a 61 78 28 7b 0a 20 20 20 20 20 20 20 20 74 79 70 65 3a 20 22 47 45 54 22 2c 0a 20 20 20 20 20 20 20 20 75 72 6c 3a 20 73 55 72 6c 2c 0a 20 20 20 20 20 20 Data Ascii: electTenant.html?key=' + csrfNonce); } $('#searchFilter').removeClass('display-none'); $('.searchBar .sorting .width-40').removeClass('display-none'); var sUrl = "project.html"; $.ajax({ type: "GET", url: sUrl,
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 74 2d 6f 70 74 69 6f 6e 73 27 29 2e 76 61 6c 28 29 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 61 63 68 65 50 72 6f 6a 65 63 74 53 6f 72 74 28 24 28 27 23 73 6f 72 74 2d 6f 70 74 69 6f 6e 73 27 29 2e 76 61 6c 28 29 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 22 73 63 72 69 70 74 45 78 65 63 75 74 65 28 29 3b 22 2c 20 32 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 6b 53 63 68 65 64 75 6c 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: t-options').val())); cacheProjectSort($('#sort-options').val()); }); } window.setTimeout("scriptExecute();", 2000); markSchedule();
2024-09-30 12:07:01 UTC	8192	IN	Data Raw: 79 20 2b 20 27 22 29 3b 24 28 22 23 73 65 61 72 63 68 46 69 6c 74 65 72 22 29 2e 66 6f 63 75 73 28 29 3b 73 74 61 72 74 50 72 6f 6a 65 63 74 53 65 61 72 63 68 28 22 27 20 2b 20 71 75 65 72 79 20 2b 20 27 22 29 3b 27 2c 20 34 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 65 72 72 6f 72 3a 20 66 75 6e 63 74 69 6f 6e 20 28 78 68 72 2c 20 61 6a 61 78 4f 70 74 69 6f 6e 73 2c 20 74 68 72 6f 77 6e 45 72 72 6f 72 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 78 68 72 2e 73 74 61 74 75 73 20 3d 3d 3d 20 34 30 31 20 7c 7c 20 78 68 72 2e 73 74 61 74 75 73 20 3d 3d 3d 20 34 30 33 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e Data Ascii: y + '");$("#searchFilter").focus();startProjectSearch("' + query + '");', 4000); } }, error: function (xhr, ajaxOptions, thrownError) { if (xhr.status === 401 \|\| xhr.status === 403) { window.location
2024-09-30 12:07:01 UTC	808	IN	Data Raw: 3d 20 27 4d 49 4e 27 20 7c 7c 20 6a 73 6f 6e 44 6f 63 2e 74 61 72 67 65 74 54 79 70 65 20 3d 3d 3d 20 27 4f 4e 45 27 20 7c 7c 20 6a 73 6f 6e 44 6f 63 2e 74 61 72 67 65 74 54 79 70 65 20 3d 3d 3d 20 27 42 42 55 45 4d 31 32 27 20 7c 7c 20 6a 73 6f 6e 44 6f 63 2e 74 61 72 67 65 74 54 79 70 65 20 3d 3d 3d 20 27 42 42 55 45 4d 5f 43 4c 4f 55 44 27 20 7c 7c 20 6a 73 6f 6e 44 6f 63 2e 74 61 72 67 65 74 54 79 70 65 20 3d 3d 3d 20 27 4d 41 53 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 24 28 27 23 77 69 6e 45 6e 72 6f 6c 6c 6d 65 6e 74 42 74 6e 27 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 27 64 69 73 70 6c 61 79 2d 6e 6f 6e 65 27 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 Data Ascii: = 'MIN' \|\| jsonDoc.targetType === 'ONE' \|\| jsonDoc.targetType === 'BBUEM12' \|\| jsonDoc.targetType === 'BBUEM_CLOUD' \|\| jsonDoc.targetType === 'MAS') { $('#winEnrollmentBtn').removeClass('display-none'); }

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	662	OUT	GET /js/tether.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:02 UTC	360	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"23217-1550227818000" Last-Modified: Fri, 15 Feb 2019 10:50:18 GMT Content-Type: application/javascript Content-Length: 23217 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close
2024-09-30 12:07:02 UTC	7832	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 72 65 71 75 69 72 65 2c 65 78 70 6f 72 74 73 2c 6d 6f 64 75 6c 65 29 3a 74 2e 54 65 74 68 65 72 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 69 66 28 21 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 Data Ascii: !function(t,e){"function"==typeof define&&define.amd?define(e):"object"==typeof exports?module.exports=e(require,exports,module):t.Tether=e()}(this,function(t,e,o){"use strict";function i(t,e){if(!(t instanceof e))throw new TypeError("Cannot call a class
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 3d 74 2e 6c 65 66 74 2c 6f 3d 74 2e 74 6f 70 3b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4c 5b 74 2e 6c 65 66 74 5d 26 26 28 65 3d 4c 5b 74 2e 6c 65 66 74 5d 29 2c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 4c 5b 74 2e 74 6f 70 5d 26 26 28 6f 3d 4c 5b 74 2e 74 6f 70 5d 29 2c 7b 6c 65 66 74 3a 65 2c 74 6f 70 3a 6f 7d 7d 2c 58 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 73 70 6c 69 74 28 22 20 22 29 2c 6f 3d 4d 28 65 2c 32 29 2c 69 3d 6f 5b 30 5d 2c 6e 3d 6f 5b 31 5d 3b 72 65 74 75 72 6e 7b 74 6f 70 3a 69 2c 6c 65 66 74 3a 6e 7d 7d 2c 6a 3d 58 2c 4e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 6f 3d 74 68 69 73 3b 69 28 74 68 69 73 2c 74 29 Data Ascii: =t.left,o=t.top;return"undefined"!=typeof L[t.left]&&(e=L[t.left]),"undefined"!=typeof L[t.top]&&(o=L[t.top]),{left:e,top:o}},X=function(t){var e=t.split(" "),o=M(e,2),i=o[0],n=o[1];return{top:i,left:n}},j=X,N=function(){function t(e){var o=this;i(this,t)
2024-09-30 12:07:02 UTC	8192	IN	Data Raw: 69 3d 7b 6f 66 66 73 65 74 3a 22 30 20 30 22 2c 74 61 72 67 65 74 4f 66 66 73 65 74 3a 22 30 20 30 22 2c 74 61 72 67 65 74 41 74 74 61 63 68 6d 65 6e 74 3a 22 61 75 74 6f 20 61 75 74 6f 22 2c 63 6c 61 73 73 50 72 65 66 69 78 3a 22 74 65 74 68 65 72 22 7d 3b 74 68 69 73 2e 6f 70 74 69 6f 6e 73 3d 66 28 69 2c 74 29 3b 76 61 72 20 72 3d 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2c 73 3d 72 2e 65 6c 65 6d 65 6e 74 2c 61 3d 72 2e 74 61 72 67 65 74 2c 68 3d 72 2e 74 61 72 67 65 74 4d 6f 64 69 66 69 65 72 3b 69 66 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 73 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 61 2c 74 68 69 73 2e 74 61 72 67 65 74 4d 6f 64 69 66 69 65 72 3d 68 2c 22 76 69 65 77 70 6f 72 74 22 3d 3d 3d 74 68 69 73 2e 74 61 72 67 65 74 3f 28 74 68 69 73 2e 74 61 72 Data Ascii: i={offset:"0 0",targetOffset:"0 0",targetAttachment:"auto auto",classPrefix:"tether"};this.options=f(i,t);var r=this.options,s=r.element,a=r.target,h=r.targetModifier;if(this.element=s,this.target=a,this.targetModifier=h,"viewport"===this.target?(this.tar
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6f 2e 6f 66 66 73 65 74 26 26 6f 2e 6f 66 66 73 65 74 2e 74 6f 70 26 26 6f 2e 6f 66 66 73 65 74 2e 6c 65 66 74 3f 21 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 3b 76 61 72 20 69 3d 65 2e 63 61 63 68 65 28 22 74 61 72 67 65 74 2d 6f 66 66 73 65 74 70 61 72 65 6e 74 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 28 65 2e 74 61 72 67 65 74 29 7d 29 3b 73 28 65 2e 65 6c 65 6d 65 6e 74 29 21 3d 3d 69 26 26 54 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 65 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 65 2e 65 6c 65 6d 65 6e 74 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 2e 65 6c 65 6d 65 6e 74 Data Ascii: defined"!=typeof o.offset&&o.offset.top&&o.offset.left?!function(){l.position="absolute";var i=e.cache("target-offsetparent",function(){return s(e.target)});s(e.element)!==i&&T(function(){e.element.parentNode.removeChild(e.element),i.appendChild(e.element
2024-09-30 12:07:02 UTC	5577	IN	Data Raw: 75 6c 65 73 3d 5b 5d 2c 43 2e 70 6f 73 69 74 69 6f 6e 3d 5f 3b 76 61 72 20 52 3d 66 28 4e 2c 43 29 2c 4d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 76 61 72 20 6f 3d 5b 5d 2c 69 3d 21 30 2c 6e 3d 21 31 2c 72 3d 76 6f 69 64 20 30 3b 74 72 79 7b 66 6f 72 28 76 61 72 20 73 2c 61 3d 74 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 28 29 3b 21 28 69 3d 28 73 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 73 2e 76 61 6c 75 65 29 2c 21 65 7c 7c 6f 2e 6c 65 6e 67 74 68 21 3d 3d 65 29 3b 69 3d 21 30 29 3b 7d 63 61 74 63 68 28 66 29 7b 6e 3d 21 30 2c 72 3d 66 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 69 26 26 61 5b 22 72 65 74 75 72 6e 22 5d 26 26 61 5b 22 72 65 74 75 72 6e 22 5d 28 29 7d Data Ascii: ules=[],C.position=_;var R=f(N,C),M=function(){function t(t,e){var o=[],i=!0,n=!1,r=void 0;try{for(var s,a=t[Symbol.iterator]();!(i=(s=a.next()).done)&&(o.push(s.value),!e\|\|o.length!==e);i=!0);}catch(f){n=!0,r=f}finally{try{!i&&a["return"]&&a["return"]()}

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 12:07:01 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=16731 Date: Mon, 30 Sep 2024 12:07:01 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:02 UTC	676	OUT	GET /js/vendor/bootstrap.min.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:02 UTC	360	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"44735-1616449986000" Last-Modified: Mon, 22 Mar 2021 21:53:06 GMT Content-Type: application/javascript Content-Length: 44735 Date: Mon, 30 Sep 2024 12:07:02 GMT Connection: close
2024-09-30 12:07:02 UTC	7832	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 2d 61 6c 70 68 61 2e 35 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 36 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 69 66 28 22 75 6e 64 65 66 69 6e 65 64 Data Ascii: /! Bootstrap v4.0.0-alpha.5 (https://getbootstrap.com) * Copyright 2011-2016 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */if("undefined
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 5f 65 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 63 79 63 6c 65 28 21 30 29 29 2c 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 7d 2c 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 63 79 63 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 7c 7c 28 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 26 26 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 Data Ascii: _element),this.cycle(!0)),clearInterval(this._interval),this._interval=null},j.prototype.cycle=function(b){b\|\|(this._isPaused=!1),this._interval&&(clearInterval(this._interval),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=s
2024-09-30 12:07:02 UTC	8192	IN	Data Raw: 65 6c 65 6d 65 6e 74 2c 68 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 7d 2c 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 67 65 74 43 6f 6e 66 69 67 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 6f 2c 63 29 2c 66 2e 74 79 70 65 43 68 65 63 6b 43 6f Data Ascii: element,h),this._items=null,this._config=null,this._element=null,this._interval=null,this._isPaused=null,this._isSliding=null,this._activeElement=null,this._indicatorsElement=null},j.prototype._getConfig=function(c){return c=a.extend({},o,c),f.typeCheckCo
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 65 7d 2c 73 7d 28 6a 51 75 65 72 79 29 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 22 64 72 6f 70 64 6f 77 6e 22 2c 64 3d 22 34 2e 30 2e 30 2d 61 6c 70 68 61 2e 35 22 2c 67 3d 22 62 73 2e 64 72 6f 70 64 6f 77 6e 22 2c 68 3d 22 2e 22 2b 67 2c 69 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 6a 3d 61 2e 66 6e 5b 62 5d 2c 6b 3d 32 37 2c 6c 3d 33 38 2c 6d 3d 34 30 2c 6e 3d 33 2c 6f 3d 7b 48 49 44 45 3a 22 68 69 64 65 22 2b 68 2c 48 49 44 44 45 4e 3a 22 68 69 64 64 65 6e 22 2b 68 2c 53 48 4f 57 3a 22 73 68 6f 77 22 2b 68 2c 53 48 4f 57 4e 3a 22 73 68 6f 77 6e 22 2b 68 2c 43 4c 49 43 4b 3a 22 63 6c 69 63 6b 22 2b 68 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 68 2b 69 2c 4b 45 59 44 4f 57 4e 5f 44 41 54 41 5f 41 50 49 3a 22 6b Data Ascii: e},s}(jQuery),function(a){var b="dropdown",d="4.0.0-alpha.5",g="bs.dropdown",h="."+g,i=".data-api",j=a.fn[b],k=27,l=38,m=40,n=3,o={HIDE:"hide"+h,HIDDEN:"hidden"+h,SHOW:"show"+h,SHOWN:"shown"+h,CLICK:"click"+h,CLICK_DATA_API:"click"+h+i,KEYDOWN_DATA_API:"k
2024-09-30 12:07:02 UTC	8192	IN	Data Raw: 68 69 73 29 2c 64 3d 61 28 63 29 2e 68 61 73 43 6c 61 73 73 28 70 2e 4f 50 45 4e 29 3b 69 66 28 62 2e 5f 63 6c 65 61 72 4d 65 6e 75 73 28 29 2c 64 29 72 65 74 75 72 6e 21 31 3b 69 66 28 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 26 26 21 61 28 63 29 2e 63 6c 6f 73 65 73 74 28 71 2e 4e 41 56 42 41 52 5f 4e 41 56 29 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 70 2e 42 41 43 4b 44 52 4f 50 2c 61 28 65 29 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 74 68 69 73 29 2c 61 28 65 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 62 2e 5f 63 6c 65 61 72 4d 65 6e 75 73 29 7d Data Ascii: his),d=a(c).hasClass(p.OPEN);if(b._clearMenus(),d)return!1;if("ontouchstart"in document.documentElement&&!a(c).closest(q.NAVBAR_NAV).length){var e=document.createElement("div");e.className=p.BACKDROP,a(e).insertBefore(this),a(e).on("click",b._clearMenus)}
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 73 63 72 6f 6c 6c 62 61 72 57 69 64 74 68 2b 22 70 78 22 29 7d 2c 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 72 65 73 65 74 41 64 6a 75 73 74 6d 65 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 4c 65 66 74 3d 22 22 2c 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 52 69 67 68 74 3d 22 22 7d 2c 6a 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 63 68 65 63 6b 53 63 72 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 42 6f 64 79 4f 76 65 72 66 6c 6f 77 69 6e 67 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 63 6c 69 65 6e 74 57 69 64 74 68 3c 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 2c 74 68 69 73 2e 5f 73 63 72 6f 6c 6c 62 Data Ascii: scrollbarWidth+"px")},j.prototype._resetAdjustments=function(){this._element.style.paddingLeft="",this._element.style.paddingRight=""},j.prototype._checkScrollbar=function(){this._isBodyOverflowing=document.body.clientWidth<window.innerWidth,this._scrollb
2024-09-30 12:07:02 UTC	8192	IN	Data Raw: 57 69 64 74 68 3b 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 61 29 2c 62 7d 2c 6a 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 28 74 68 69 73 29 2e 64 61 74 61 28 68 29 2c 66 3d 61 2e 65 78 74 65 6e 64 28 7b 7d 2c 6a 2e 44 65 66 61 75 6c 74 2c 61 28 74 68 69 73 29 2e 64 61 74 61 28 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 62 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 64 28 62 29 29 26 26 62 29 3b 69 66 28 65 7c 7c 28 65 3d 6e 65 77 20 6a 28 74 68 69 73 2c 66 29 2c 61 28 74 68 69 73 29 2e 64 Data Ascii: Width;return document.body.removeChild(a),b},j._jQueryInterface=function(b,c){return this.each(function(){var e=a(this).data(h),f=a.extend({},j.Default,a(this).data(),"object"===("undefined"==typeof b?"undefined":d(b))&&b);if(e\|\|(e=new j(this,f),a(this).d
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 6c 65 3d 22 74 6f 6f 6c 74 69 70 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6f 6f 6c 74 69 70 2d 69 6e 6e 65 72 22 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 27 2c 74 72 69 67 67 65 72 3a 22 68 6f 76 65 72 20 66 6f 63 75 73 22 2c 74 69 74 6c 65 3a 22 22 2c 64 65 6c 61 79 3a 30 2c 68 74 6d 6c 3a 21 31 2c 73 65 6c 65 63 74 6f 72 3a 21 31 2c 70 6c 61 63 65 6d 65 6e 74 3a 22 74 6f 70 22 2c 6f 66 66 73 65 74 3a 22 30 20 30 22 2c 63 6f 6e 73 74 72 61 69 6e 74 73 3a 5b 5d 7d 2c 6e 3d 7b 61 6e 69 6d 61 74 69 6f 6e 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 65 6d 70 6c 61 74 65 3a 22 73 74 72 69 6e 67 22 2c 74 69 74 6c 65 3a 22 28 73 74 72 69 6e 67 7c 65 6c 65 6d 65 6e 74 7c 66 75 6e 63 74 69 6f 6e 29 22 2c 74 72 69 67 67 65 72 3a 22 73 74 72 69 6e 67 22 2c 64 65 6c 61 79 Data Ascii: le="tooltip"><div class="tooltip-inner"></div></div>',trigger:"hover focus",title:"",delay:0,html:!1,selector:!1,placement:"top",offset:"0 0",constraints:[]},n={animation:"boolean",template:"string",title:"(string\|element\|function)",trigger:"string",delay
2024-09-30 12:07:02 UTC	8192	IN	Data Raw: 2c 46 4f 43 55 53 3a 22 66 6f 63 75 73 22 2c 43 4c 49 43 4b 3a 22 63 6c 69 63 6b 22 2c 4d 41 4e 55 41 4c 3a 22 6d 61 6e 75 61 6c 22 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6a 28 61 2c 62 29 7b 63 28 74 68 69 73 2c 6a 29 2c 74 68 69 73 2e 5f 69 73 45 6e 61 62 6c 65 64 3d 21 30 2c 74 68 69 73 2e 5f 74 69 6d 65 6f 75 74 3d 30 2c 74 68 69 73 2e 5f 68 6f 76 65 72 53 74 61 74 65 3d 22 22 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 54 72 69 67 67 65 72 3d 7b 7d 2c 74 68 69 73 2e 5f 74 65 74 68 65 72 3d 6e 75 6c 6c 2c 74 68 69 73 2e 65 6c 65 6d 65 6e 74 3d 61 2c 74 68 69 73 2e 63 6f 6e 66 69 67 3d 74 68 69 73 2e 5f 67 65 74 43 6f 6e 66 69 67 28 62 29 2c 74 68 69 73 2e 74 69 70 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 73 65 74 4c 69 73 74 65 Data Ascii: ,FOCUS:"focus",CLICK:"click",MANUAL:"manual"},v=function(){function j(a,b){c(this,j),this._isEnabled=!0,this._timeout=0,this._hoverState="",this._activeTrigger={},this._tether=null,this.element=a,this.config=this._getConfig(b),this.tip=null,this._setListe
2024-09-30 12:07:02 UTC	808	IN	Data Raw: 72 65 74 75 72 6e 20 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 63 6f 6e 74 65 6e 74 22 29 7c 7c 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 65 6e 74 3f 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 65 6e 74 2e 63 61 6c 6c 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 63 6f 6e 74 65 6e 74 29 7d 2c 6c 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 62 3d 66 28 74 68 69 73 29 2e 64 61 74 61 28 6a 29 2c 63 3d 22 6f 62 6a 65 63 74 22 3d 3d 3d 28 22 75 6e 64 65 66 69 6e 65 Data Ascii: return this.element.getAttribute("data-content")\|\|("function"==typeof this.config.content?this.config.content.call(this.element):this.config.content)},l._jQueryInterface=function(a){return this.each(function(){var b=f(this).data(j),c="object"===("undefine

Timestamp	Bytes transferred	Direction	Data
2024-09-30 12:07:02 UTC	665	OUT	GET /js/notyf.min.js?2.13.2-20240924113820 HTTP/1.1 Host: ivanti-onboarder.ebf.de Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://ivanti-onboarder.ebf.de/confirm-F21E2E40-5B14-418D-BAAB-D3A8FC055439 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: JSESSIONID=6D0C5E05AB9D97AD6FF29D95261D09B2
2024-09-30 12:07:02 UTC	358	IN	HTTP/1.1 200 Strict-Transport-Security: max-age=0 X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Accept-Ranges: bytes ETag: W/"7645-1689874358000" Last-Modified: Thu, 20 Jul 2023 17:32:38 GMT Content-Type: application/javascript Content-Length: 7645 Date: Mon, 30 Sep 2024 12:07:02 GMT Connection: close
2024-09-30 12:07:02 UTC	7645	IN	Data Raw: 76 61 72 20 4e 6f 74 79 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 6f 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 69 2c 65 3d 31 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 3c 6e 3b 65 2b 2b 29 66 6f 72 28 76 61 72 20 6f 20 69 6e 20 69 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 69 2c 6f 29 26 26 28 74 5b 6f 5d 3d 69 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 74 7d 29 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6e 3d 28 74 2e 70 72 6f Data Ascii: var Notyf=function(){"use strict";var e,o=function(){return(o=Object.assign\|\|function(t){for(var i,e=1,n=arguments.length;e<n;e++)for(var o in i=arguments[e])Object.prototype.hasOwnProperty.call(i,o)&&(t[o]=i[o]);return t}).apply(this,arguments)},n=(t.pro