Edit tour

Windows Analysis Report
https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button

Overview

General Information

Sample URL:	https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button
Analysis ID:	1522705
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6780 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /log?format=json&hasfast=true HTTP/1.1Host: play.google.comConnection: keep-aliveContent-Length: 886sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: application/x-www-form-urlencoded;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://myaccount.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://myaccount.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=518=rXAcpRBmK1Ru7DbhhetDoI8uuh4Cx4V8BFiTOt57xkWN3hrSJLqkfADjIrVx5411prROv1GXdDVGalNIeuDEe3CDKMETkLJLAnENJEdtCSI-nQ-kKYf-97oru0ebC0c9ckH-ug0fRfj1JZRljxjRjIagNhDC4bacaNjl-wdg0_s03HcgC1E

Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&TL=APps6eZ-0rWYDFT5GgPJN0I_7QnImiiLlWbQyvXP4GQNa7Ey0rr6ZZ-rTo63ukjQ	HTTP Parser: No favicon
Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&TL=APps6eZ-0rWYDFT5GgPJN0I_7QnImiiLlWbQyvXP4GQNa7Ey0rr6ZZ-rTo63ukjQ	HTTP Parser: No favicon
Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&TL=APps6eZ-0rWYDFT5GgPJN0I_7QnImiiLlWbQyvXP4GQNa7Ey0rr6ZZ-rTo63ukjQ	HTTP Parser: No favicon
Source: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry=SignUp&flowName=GlifWebSignIn&hl=en&TL=APps6eZ-0rWYDFT5GgPJN0I_7QnImiiLlWbQyvXP4GQNa7Ey0rr6ZZ-rTo63ukjQ	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en#topic=3382296	HTTP Parser: No favicon
Source: https://support.google.com/accounts?hl=en#topic=3382296	HTTP Parser: No favicon
Source: https://about.google/products/?tab=kh	HTTP Parser: No favicon
Source: https://about.google/products/?tab=kh	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49761 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49769 version: TLS 1.2

Source:	Binary string: _.Pdb=_.A("fDuUCc",[_.zq]); source: chromecache_512.4.dr, chromecache_402.4.dr
Source:	Binary string: _.Qdb=class extends _.u{constructor(a){super(a)}};_.Rdb=_.Is({tb:!1,name:"n5wuBe",qb:_.Pdb,params:{ctor:_.Qdb},yb:[],data:{},wb:()=>({variant:null,ob:[],rb:{sT:_.O3a}}),ub:{sT:{}},children:{sT:{id:_.P3a,name:"g6MCz",Hb:function(a){var b=new _.M3a;if(_.uj(a,5)){var c=_.yi(a,5);_.cj(b,6,c)}_.yj(a,2)&&(a=_.x(a,2),_.jj(b,3,a));return{Na:b,id:_.P3a,name:"g6MCz"}}}}}); source: chromecache_512.4.dr, chromecache_402.4.dr
Source:	Binary string: _.pdb=class extends _.u{constructor(a){super(a)}Qr(){return _.x(this,5)}ik(){return _.D(this,5)}};_.qdb=_.Is({tb:!1,name:"ylOmM",qb:_.odb,params:{ctor:_.pdb},yb:[],data:{},wb:()=>({variant:null,ob:[],rb:{Gja:_.S1a}}),ub:{Gja:{}},children:{Gja:{id:_.T1a,name:"zyNLgc",Hb:function(a){var b=new _.R1a;if(_.Kg(a,_.AA,2)){var c=_.C(a,_.AA,2);_.ni(b,_.AA,2,c)}_.vj(a,4)&&(c=_.zi(a,4),_.ej(b,4,c));_.yj(a,5)&&(c=a.Qr(),_.jj(b,5,c));_.uj(a,3)&&(a=_.yi(a,3),_.cj(b,3,a));return{Na:b,id:_.T1a,name:"zyNLgc"}}}}}); source: chromecache_512.4.dr, chromecache_402.4.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.youtube.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link" equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.facebook.com/Google" equals www.facebook.com (Facebook)
Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.linkedin.com/company/google" equals www.linkedin.com (Linkedin)
Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.youtube.com/user/Google" equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/musicpremium"> equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/yt/about/"> equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.youtube.com/musicpremium" equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.youtube.com/yt/about/" equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: data-g-cta_url="https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC" equals www.youtube.com (Youtube)
Source: chromecache_442.4.dr	String found in binary or memory: href="https://www.youtube.com/playlist?list=PLioTR_jPKuQ5etOIcRO9334FnOF4JsMZC" equals www.youtube.com (Youtube)
Source: chromecache_374.4.dr	String found in binary or memory: "/familylink/privacy/notice/embedded?langCountry="+_.zx(g);break;case "PuZJUb":m+="https://www.youtube.com/t/terms?chromeless=1&hl="+_.zx(n);break;case "fxTQxb":m+="https://youtube.com/t/terms?gl="+_.zx(_.Fx(c))+"&hl="+_.zx(d)+"&override_hl=1"+(f?"&linkless=1":"");break;case "prAmvd":m+="https://www.google.com/intl/"+_.zx(n)+"/chromebook/termsofservice.html?languageCode="+_.zx(d)+"&regionCode="+_.zx(c);break;case "NfnTze":m+="https://policies.google.com/privacy/google-partners"+(f?"/embedded":"")+ equals www.youtube.com (Youtube)
Source: chromecache_527.4.dr	String found in binary or memory: ;function lr(){this.part="snippet,id,contentDetails,localizations,statistics";this.Fk=new Xq({serverUrl:"https://www.googleapis.com/youtube/v3",serviceName:"youtubeDataApi"})} equals www.youtube.com (Youtube)
Source: chromecache_527.4.dr	String found in binary or memory: ;var jga=wa(["//www.youtube.com/player_api"]),kga=Qn(jga),mr=[],lga=!1;function nr(){if(!lga){window.onYouTubeIframeAPIReady=mga;var a=dp("SCRIPT");zn(a,kga);document.head.appendChild(a);lga=!0}} equals www.youtube.com (Youtube)
Source: chromecache_527.4.dr	String found in binary or memory: ;var tra=wa(["//www.youtube.com/player_api"]),oA=4/3,ura=16/9,pA={autoplay:1,cc_load_policy:1,controls:2,hl:"en",rel:0,playsinline:0};function qA(a){var b=a.Eb;var c=a.Ml===void 0?!1:a.Ml;a=a.playerVars===void 0?pA:a.playerVars;A.call(this,"sc.tailwind.shared.video.VideoPlayer");this.o=!1;this.ma=0;this.Eb=b;this.Ml=c;this.id=this.Eb.getId();this.playerVars=a;b=this.Eb.mediumThumbnail.width;c=this.Eb.mediumThumbnail.height;this.aspectRatio=b&&c?b/c===oA?oA:ura:oA;this.watch(this.Eb)} equals www.youtube.com (Youtube)
Source: chromecache_221.4.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=S.length,na=0;na<la;na++)if(!u&&c(S[na],H.Ge)){hJ("https://www.youtube.com/iframe_api");u=!0;break}})}}else F(v.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,u=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_221.4.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_494.4.dr	String found in binary or memory: Mf=w(["https://sandbox.google.com/tools/feedback/"]),Nf=w(["https://www.google.cn/tools/feedback/"]),Of=w(["https://help.youtube.com/tools/feedback/"]),Pf=w(["https://asx-frontend-staging.corp.google.com/inapp/"]),Qf=w(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),Rf=w(["https://localhost.corp.google.com/inapp/"]),Sf=w(["https://localhost.proxy.googlers.com/inapp/"]),Tf=V(vf),Uf=[V(wf),V(xf)],Vf=[V(yf),V(zf),V(Af),V(Bf),V(Cf),V(Df),V(Ef),V(Ff),V(Gf),V(Hf)],Wf=[V(If),V(Jf)],Xf= equals www.youtube.com (Youtube)
Source: chromecache_565.4.dr	String found in binary or memory: U.prototype.init=function(){var a=this,c=new Event("Event");c.initEvent(cd.API_INITIALIZED,!0,!1);this.apiInitialized?document.dispatchEvent(c):this.apiInitPromise=new Promise(function(e){window.onYouTubeIframeAPIReady=function(){a.apiInitialized=!0;document.dispatchEvent(c);e()}});if(!window.YT){var d=document.createElement("script");document.body.appendChild(d);d.src="https://www.youtube.com/iframe_api"}};U.prototype.isApiReady=function(){return"object"===typeof window.YT&&"function"===typeof window.YT.Player}; equals www.youtube.com (Youtube)
Source: chromecache_527.4.dr	String found in binary or memory: Ua=Ua.split("-")[0].toLowerCase();if(Ra===Ua\|\|e.localizations&&e.localizations[a.ua])a.ma=!0;e="https://www.youtube.com/embed/"+encodeURIComponent(a.id);a.embedUrl=e}a.state=2;a.Fa(0);Go("youtube_video_model/load/success");return Qa(c,0)}Sa(c);a.state=3;a.Fa(0);Go("youtube_video_model/load/failure");Oa(c)})} equals www.youtube.com (Youtube)
Source: chromecache_565.4.dr	String found in binary or memory: Xc.TABSET_PANELCONTAINER="glue-tabs__panelgroup";Xc.TABSET_PAGE="glue-tabs__panel";var Yc,Zc=Yc\|\|(Yc={});Zc.PANELS_KEY="data-glue-expansion-panels-key";Zc.TOGGLEFOR="data-glue-expansion-panel-toggle-for";Zc.INITIAL="data-glue-expansion-panel-initial";var $c,ad=$c\|\|($c={});ad.MISSING_PAGE_LIST="No element with glue-tabpanels__page-list class was found. TabPanels requires a Panels Page List";ad.MISSING_PANEL_LIST="No element with glue-tabpanels__panel-list class was found. TabPanels requires a Panel List";var bd;(bd\|\|(bd={})).IFRAME_SCRIPT_URL="https://www.youtube.com/iframe_api";var cd,dd=cd\|\|(cd={});dd.YT_IFRAME_READY_EVENT="onYouTubeIframeAPIReady";dd.API_INITIALIZED="glue.ui.ytVideo.IframeApiInitalized";dd.IS_VISIBLE="glue.isVisible";dd.IS_HIDDEN="glue.isHidden";var ed,fd=ed\|\|(ed={});fd.VIDEO_ID="glueYtVideoId";fd.PLAYER_ID="glueYtPlayerId";fd.HEIGHT="glueYtVideoHeight";fd.WIDTH="glueYtVideoWidth";fd.PLAYER_VARS="glueYtVideoPlayerVars";function U(){this.apiInitialized=this.isApiReady();this.videoObjects=new Map;this.init()}U.getManager=function(){U.instance\|\|(U.instance=new U);return U.instance};U.destroyManager=function(){U.instance=void 0}; equals www.youtube.com (Youtube)
Source: chromecache_527.4.dr	String found in binary or memory: b.open("GET","https://www.googleapis.com/youtube/v3/videos?part=snippet%2C+id&key=AIzaSyD-4tE5aKFZYIS_IrfpCDRsgQZbv5VCJZM&id="+a.ma);b.send()} equals www.youtube.com (Youtube)
Source: chromecache_529.4.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_527.4.dr	String found in binary or memory: function uA(a){if(no())z().rs==2?window.YT&&window.YT.Player?wA(a,a.o):(mr.push(function(f){wA(this,f)}.bind(a,a.o)),nr()):uo("//www.youtube.com/embed/"+a.ma+"/?rel=0&cc_load_policy=1&autoplay=1&hl="+window.sc_pageModel.lang); equals www.youtube.com (Youtube)
Source: chromecache_529.4.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_204.4.dr, chromecache_455.4.dr	String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)
Source: chromecache_550.4.dr, chromecache_483.4.dr, chromecache_386.4.dr, chromecache_463.4.dr	String found in binary or memory: return b}DC.H="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_482.4.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/26636eff\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: myaccount.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: support.google.com
Source: global traffic	DNS traffic detected: DNS query: lh4.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: about.google
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: scone-pa.clients6.google.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2100 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=4228 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6092 --field-trial-handle=2000,i,17432938478063949073,17517104600535330759,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://feedback.googleusercontent.com/resources/annotator.css	0%	URL Reputation	safe
https://apis.google.com/js/client.js	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	0%	URL Reputation	safe
https://pay.google.com/gp/v/widget/save	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	0%	URL Reputation	safe
https://sandbox.google.com/inapp/%	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.com/inapp/	0%	URL Reputation	safe
https://support.google.com/embed/tagging/install	0%	URL Reputation	safe
https://support.google.com/inapp/%	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
scone-pa.clients6.google.com	142.250.184.202	true	false	unknown
csp.withgoogle.com	142.250.65.177	true	false	unknown
plus.l.google.com	216.58.206.78	true	false	unknown
i.ytimg.com	142.250.185.150	true	false	unknown
support.google.com	142.250.184.206	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
about.google	216.239.32.29	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
youtube-ui.l.google.com	172.217.18.14	true	false	unknown
play.google.com	216.58.212.142	true	false	unknown
photos-ugc.l.googleusercontent.com	172.217.16.193	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	142.250.185.147	true	false	unknown
www.google.com	142.250.185.132	true	false	unknown
blog.google	216.239.36.21	true	false	unknown
myaccount.google.com	66.102.1.84	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.184.193	true	false	unknown
www.blog.google	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
lh4.ggpht.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.142	play.google.com	United States	15169	GOOGLEUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
142.250.185.147	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
216.239.36.21	blog.google	United States	15169	GOOGLEUS	false
172.217.16.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	unknown	United States	15169	GOOGLEUS	false
142.250.184.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.18.1	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.150	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
172.217.16.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
172.217.18.14	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
216.239.38.21	unknown	United States	15169	GOOGLEUS	false
142.250.65.177	csp.withgoogle.com	United States	15169	GOOGLEUS	false
142.250.184.206	support.google.com	United States	15169	GOOGLEUS	false
142.250.186.97	unknown	United States	15169	GOOGLEUS	false
66.102.1.84	myaccount.google.com	United States	15169	GOOGLEUS	false
216.239.32.29	about.google	United States	15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
64.233.167.84	unknown	United States	15169	GOOGLEUS	false
142.250.181.225	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522705
Start date and time:	2024-09-30 15:46:48 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@26/692@58/25
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://accounts.google.com/SignUp?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&hl=en Browse: https://www.google.com/account/about?hl=en Browse: https://support.google.com/accounts?hl=en Browse: https://www.google.com/intl/en/about/products?tab=kh

Input	Output
URL: https://myaccount.google.com/intro/privacycheckup/1?pc_email=y.makotsoba@gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://accounts.google.com/lifecycle/steps/signup/name?continue=https://myaccount.google.com/privacycheckup/1?utm_source%3Dppr%26utm_medium%3Demail%26utm_campaign%3Dsignup-fast-privacyreminder-start-button&ddm=0&dsh=S2067259863:1727704103263480&flowEntry Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://www.google.com/account/about/?hl=en Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://support.google.com/accounts?hl=en#topic=3382296 Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://about.google/products/?tab=kh Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}
URL: https://about.google/products/?tab=kh Model: jbxai	{ "Status":"Unavailable"}
	{ "Status":"Unavailable"}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 96 x 96, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	7.667621565226602
Encrypted:	false
SSDEEP:	48:3p6uEdAl1D4ZoyRIIYDwFi2mfaJ4nhjK0V6X+N:3kuDWZoyRMr1f+whjZQQ
MD5:	0B6D9F3D556E046FA43AD9C31F966968
SHA1:	67325397FC4C0434C3EC60CA1A4601271E5BE389
SHA-256:	33FBAB52B8F48572CB07BA5A739EB72BC11D8DE1234C5AE8C43584B3F948A0CA
SHA-512:	B07FDC7FA7FD06BFD2FA0014891C2CF55C07A292328CB7984ED1396B2F3B874B2080EE9F87F879273BD29E1DD10095AA40944F6EC03FC3CD1902AC88D3D4AD6C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...`...`......F.....[PLTE...{..kx.ds.....mz...hu...x....]l....Te................}..CT.?Q.CU.>P.JU.AM.@Q.:N....AO.<J.GQ.>O.@P.;L.:K.>J.cq.bq.bp.ap.`o.`n._n.^m.^l.Wf.Rb.Qa.Pa.P`.O_.N_.M^.M].L].L]....Sc.L\.Te.K\.Sc.JZ....K[....K\......J[....lz.IZ.IY......IZ.Q`....JZ.IY.HW.fq......J[.HY.@O.?L.=L.=L.=K.<J.<J.;I.;J.;J.;J.<K.GW.BQ.?N.?N.>M.=L.=M.=L.=M.GV.AP.@N.AN.@N.@M.?L.?M.>M.HY.GX.BQ.@P.@O.?N.>N.IY.GX.BS.AR.AS.@Q.@P.?O.CS.BS.BR.BQ.AP.AQ.@P.GY.CS.BR.AP.DS.BS.AQ.FX.DT.CR.BQ.FX.BR.FW.ET.DS.GX.DU.CT.BS.AS.DT.CS.BS.FV.CT.BT.FW.EU.DT.CU.EV.DU.EV.CT.DU....DV.DV.DU....CT.BT.AS.AR.@R.@R.BS.?Q.>P.BS.>P.@P.?P.>O.>N.=N.<M./aG....(tRNS.6..h..S.J3K.M.OPOONOWl..-+...../...-P.......IDATx...$E.E...S......z^.........-pw..wmo...U...NOK.9..M)....@..W.P.......q...D\|...$y$.3.Md..6...9...1.>.....l.......a7..-s..w..C.....M..#..FE7..w.......@MQoXh(......."...X.D%.M...M: .W...w,6/.K..X..._%...R......9......R......4 ......I;.h..>8P.......c...............e.P.`.....

Name	Malicious	Antivirus Detection	Reputation
https://apis.google.com/js/googleapis.proxy.js?onload=startup	false		unknown
https://apis.google.com/js/client.js	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/dMQ1Q4xlLrl3-KsZvX_9v56emij4OkRxzapLM7RSuZVd7PgqfjPxKR4KY8hVHYXqP2ZkS-_ZueXb9ywW66H2oCyTglApr1ELCy3woOAviTgFP6uyAd0=h120	false		unknown
https://lh3.googleusercontent.com/RIuSgyC1CZvycdCvOhK6kyGWtKZwR6gN88CimyIAdew4WMYXisZeD2x5A3fOi3GETtFbnKgxw7hb_2_ERw1-ygGSCExAsemrYx79J0hRsa4SZzzxz3A?=w1440	false		unknown
https://lh3.googleusercontent.com/NksFVpnLFiAE4YKEh9n84ebvfznogwh0AyAUDpmpLqpBP7h791LS9RcIzWpE8XfsiR0NJiHomxV8FyVO2ccMF2VzB_L3omeUWuHu9d3LGJ4Ww6JKviev	false		unknown
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi5QWrjpBGqtY9zgr06lOsx3KVezooiNyD8bzJwIHK2UC1bE-RE=h120	false		unknown
https://lh3.googleusercontent.com/kQDv-46ToDkqXJ2DIlr7hKXKalQvL0NJy4oGIhNlUkxX95btXayCKNoZuaY_KT-6U8-Iz35FlDZXRd1U3bNFo99a3k0-vwIIbtEIStTKYwD_UxNkjA	false		unknown
https://about.google/products?tab=kh	false		unknown
https://lh3.googleusercontent.com/RwVe2Cm1EjeDmYhdTzr179G0ovq_PCxgPzQ92PO-YxTBEFTHWh0L6Ev8FFDWRgRGrE81vwn95tyg9Ey189OO4kllhhpLAMIsGFZ-UKA=h120	false		unknown
https://www.youtube.com/s/player/b0557ce3/player_ias.vflset/en_US/embed.js	false		unknown
https://about.google/assets-products/img/glue-icons.svg	false		unknown
https://www.google.com/favicon.ico	false		unknown
https://lh3.googleusercontent.com/XfxlbB7Imi28_w277XeVC0u8Yngn8e1bQxhd6YK2snOdqt_uiwripgSEl5VNxgS2cJP2kf0dHv6LfSq8AG6YeJf9cpu1BE1kP36R=h120	false		unknown
https://lh3.googleusercontent.com/moWtYpo1G3n-1QfF5rNSy7n2IIQs785-H9DStefngR0kWMsmnPkzMu-SKH3eUxHVddekMttIA5olrn_wo3p50z04NyRZYPHYBc2cxvE=h120	false		unknown
https://lh3.googleusercontent.com/xeVlvzZX32eg9zc9V7MLUWaEeOnwoa5OQfrgI10U4ub8QA6iwdq1TgcOpLTBiKQTosiNxtMBtpOvh_z7fq7eoISf53UZqZMd0dZR0gSLAAMFkK9vVfQ?=w1440	false		unknown
https://lh3.googleusercontent.com/Amr8tRBfd1Uk8zYm779hnSCwMzArp3LGD1LUhcgPdCOIk0UJczmdKLa42Apx-wzQdrUnsATBiFsyHT5pVit9Al6PwfVewM09FnlwAA=h120	false		unknown
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mvJvvcvtrNc0MESF98dAx6ivasEsZNxoaUZU-Q=h120	false		unknown
https://lh3.googleusercontent.com/sq57GaRCOEk-TcLHr8ZeehZOkRrOLLv0ZIL34gOO2TNqeQjAcLqZM_YvwoZCLFQbW1DS0K28QakL4JTKArVVV4pp-PtTltns7K25Pu5d7v-6dRSh-g=w1440-l90-sg-rj-c0xffffff	false		unknown
https://lh3.googleusercontent.com/uzkOxzfGFGjzRx0FK6B541qcv469wNDTQf_TUu4oqH_oPUGJoajTkqHLJ9DD188Kmocg_DJg2OBf1FxyRc6MLK_gMFFRmm7n7XTreZU=h120	false		unknown
https://lh3.googleusercontent.com/p2EiNuo4FQe3s8dhYgEiejBxjryT3B46OTWNItLqiwF58V0T62GKHa7VrbOhI7BbnQOBvdkPFu-4YGG0Dg3b0moXWWSc_aB1hw67Kts=h120	false		unknown
https://lh3.googleusercontent.com/R7Wr9OkT5zk4gY2F3-tLiMwhFaMfO_hCU5LpTxztUaTOi8kU7_0QUIvOTlhHLyMol8kvHhVvdWUtjmAZ6cqiwGhwZzdg0fvc-UXtojU=h120	false		unknown
https://www.youtube.com/s/player/b0557ce3/www-embed-player.vflset/www-embed-player.js	false		unknown
https://lh3.googleusercontent.com/kLMr5zuHxfe-IxhnKdLp_1JkP5sl2ova0svHjQkFnV1q8X7yE6uA9p8AToT_L7xL5s5EIayVVVljNtp7BgoL69PtZ-Mf00qUbpTLfrrqXWv99tatmXI=h120	false		unknown
https://lh3.googleusercontent.com/5CsRqfMEP1Rv-PPv9G4962lyEuvb4roSLJHJQWPbmCa51AmvynfoGfoKsKiS87QhX07xQMZAeLp8qoSy7CjVZkXJ1WapQiJkroCeJw=h120	false		unknown
https://about.google/assets-products/img/glue-google-color-logo.svg	false		unknown
https://blog.google/api/v2/latest/?show_hero=true&tags=android,android-tv,calendar,chrome,chromebooks,chromecast,classroom,docs,drive,forms,gmail,google-ads,google-assistant,google-cloud,google-duo,google-earth,google-fi,google-fit,google-one,google-pay,google-play,google-shopping,google-voice,google-wifi,meet,keep,maps,messages,news,photos,pixel,pixelbook,search,sheets,sites,slides,stadia,translate,wear-os-by-google,youtube	false		unknown
https://lh3.googleusercontent.com/aD5GNhlaU2d70gmSy5ioL1dMSUZN9cHDWPLkIBLhCsJ-BgcGUm-PD6o8XExZcx1i2iZV6PH0P8v3ceg0x7Tzd_OZ5FV0nXs5mX15sgA=h120	false		unknown
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI063JTgu9NvrsvRutrqHOfR5AAWduD51R8zuswV8=h120	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://lh3.googleusercontent.com/LteTgkerljFQFADjcuSo5-hiLDlUMnxk-QP08xyTBWi-SxZUSDbqeBS-hjK5Gbetam	chromecache_442.4.dr	false		unknown
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_494.4.dr	false	URL Reputation: safe	unknown
https://support.google.com	chromecache_527.4.dr, chromecache_402.4.dr, chromecache_355.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/Qvc6rWiGG_a6LNQ7Yx5vMmve_5ku8TG7z4vmWG7VBkbcOQfOSE2BS7eBcD1NUOWTsb	chromecache_442.4.dr	false		unknown
https://policies.google.com/privacy?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/9NuRdiRepVI3n1txfg7Ky2wWzB3DvXkWABXeFMSn2tzDYYkv8T_RMA9R17fWi0ziUD	chromecache_442.4.dr	false		unknown
https://grow.google/applied-digital-skills/?utm_source=gDigital&utm_medium=empro-aboutsite&u	chromecache_442.4.dr	false		unknown
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_494.4.dr	false	URL Reputation: safe	unknown
https://blog.google/products/chrome/	chromecache_516.4.dr	false		unknown
https://lh3.googleusercontent.com/WVR82wo80fHsNaPFIXDrmwaUcE6lFSxs_zHXc6Bedrglc3MA9mPkDqKFWBMvdVU3Rb	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/I95wjYii8vhFSSx-aSYdh2hPAMjgZkA9yjarSQoOd98COwOxkAVn_dulBcTcfbsa7L	chromecache_442.4.dr	false		unknown
https://www.google.com/retail/shopping-campaigns/	chromecache_442.4.dr	false		unknown
https://safety.google/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/T4GMYGBcpiDg5gCEZGSvQWbkwLHRELiaWN-BAAPD8Skd-YAEBhCxSR7_a5HjrHhqhg	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/QuPkNiIrKnxQiue2xno3-rcRB6yg-hk6W5XISyjaY1EJ4hNq-_ZHCcYPdVDnI9E3xr	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/33fCN1bFbB2G1iGDGzlBd_BAWes-Nlv-Qt8ByRpEBU43Lu_mF6twx5kmmN4OE6Z_Gz	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/5WLz7CvnjBuQDDrFDsJW0EMrL-r6a-b0YUhF48zk7l4lK3yLzhBzeG3I01KIycLfE-	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/8bC8ZC9RQ_cJj5lSa8LjCfRClGeSyp4SkN72C0tMSUIqGPVjEpHeUDfAScLNKy82Mi	chromecache_442.4.dr	false		unknown
https://pay.google.com/gp/v/widget/save	chromecache_455.4.dr	false	URL Reputation: safe	unknown
https://scholar.google.com/intl/en-US/scholar/about.html	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/u2XGSr0jis3w5sLeuh8UMqGHgtdqPVPi77xYhPJdMO9C41wYUue3EKPJvwp-ovAlTz	chromecache_442.4.dr	false		unknown
https://grow.google/certificates/?utm_source=gDigital&utm_medium=empro-aboutsite&utm_campaig	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/Y1i12gHz-cP0Ir3LztFSUMijuVGSe9qetVu98aQNchjhxw9byxecnFAFfhxGFyd79t	chromecache_442.4.dr	false		unknown
https://content-googleapis-test.sandbox.google.com	chromecache_527.4.dr	false		unknown
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_494.4.dr	false	URL Reputation: safe	unknown
https://blog.google/products/google-tv/	chromecache_516.4.dr	false		unknown
https://lh3.googleusercontent.com/pWVbkjhtPTNZbVieBwoW5yp4_edEFybVMNXXAQdphReN5SvSsx3AS-0ssRnBRGbi9m	chromecache_442.4.dr	false		unknown
https://blog.google/products/youtube/	chromecache_516.4.dr	false		unknown
https://wallet.google/	chromecache_442.4.dr	false		unknown
https://blog.google/products/google-tv/google-tv-home-ai-sports-features/	chromecache_516.4.dr	false		unknown
https://lh3.googleusercontent.com/tC78k3bL_DjdIByD4HSnnblCZF0nlR599IWYDDghEJDn7dwg-tuOIXGVR1TwxePI06	chromecache_442.4.dr	false		unknown
https://pay.google.com/about/	chromecache_442.4.dr	false		unknown
https://www.google.com/sheets/about/?utm_source=gaboutpage&utm_medium=sheetslink&utm_campaig	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/UqZcYFgfFclRU46MshhuCQD79idBZ8hyIe5WkQ1VLzG47w-Mgu6yGriGkL_YiYF2qa	chromecache_442.4.dr	false		unknown
https://supporttagging-autopush.sandbox.google.com/embed/tagging/install	chromecache_527.4.dr	false	URL Reputation: safe	unknown
https://sandbox.google.com/inapp/%	chromecache_494.4.dr	false	URL Reputation: safe	unknown
https://artsandculture.google.com/?utm_medium=referral&utm_source=about.google	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/PtL9QBP58JZC0A0k1u4fSn-rXbpaG52216P0l4ydM3c21L78uPPad73jY6ngd2tS-q	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/TVNK8r0QEiNhXwfjVlziAqFcBQPkuPHKyilz6atnzslwMho1no8n4EJV30tOT0T6y3	chromecache_442.4.dr	false		unknown
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_204.4.dr, chromecache_455.4.dr	false		unknown
https://safety.google/security-privacy/	chromecache_527.4.dr	false		unknown
https://lh3.googleusercontent.com/PVDn9Oj6dMbqqydywzGuLAPkbLwDX3Uuv1t6K8MORXFuQAVBLPNAy_yaQBc7bE-qmL	chromecache_442.4.dr	false		unknown
https://blog.google/products/pixel/pixel-9-pro-outdoor-nature-photography-tips/	chromecache_516.4.dr	false		unknown
https://lh3.googleusercontent.com/bTCEdj_CIN7JchQHPPZaDQfS-zd-ubGjDb-kaEWcKuBbed54w1zLWdO9IQkJxw6HND	chromecache_442.4.dr	false		unknown
https://shopping.google.com/?nord=1?utm_source=about&utm_medium=referral&utm_campaign=footer	chromecache_442.4.dr	false		unknown
https://asx-frontend-autopush.corp.google.com/inapp/	chromecache_494.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/eO6nD1O47tirNw4TM76SfwotF_tP25t_TASE2l8_Gyw4xLr7ckkcg4PuEb8cxngaWw	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/zGSQ3CkZCuntNXuuiLsvHnljLEmpJD6MKKWjzuL20jMovKj8akWzk6gb0zmXZTMH6O	chromecache_442.4.dr	false		unknown
https://tv.google/	chromecache_442.4.dr	false		unknown
https://content-googleapis-staging.sandbox.google.com	chromecache_527.4.dr	false		unknown
https://lh3.googleusercontent.com/vNgpLTvnDUr6-QM8s4OuuESGDXs_brbGoPR-7vfwdxQI7M4MVFV0CC_Hil4qRDSp4P	chromecache_442.4.dr	false		unknown
https://www.youtube.com/yt/about/	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/jUoaTIlBn5ibfQcND2n5OMD6Z7xoqNj-ShHlFR6QuLffLXD5pS8V2eNg1rGlrsRrnD	chromecache_442.4.dr	false		unknown
https://www.google.com/tagmanager/	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/BAwQk6jAMu2s_7Jh-8-_CsvSwEAaeLsVhL8z82VOoEkoaujxll1kYL3Pz4jkYpLbRp	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/6xlGJ-dkwosfUisVYzRKNE1Wcr5QDDfRfZ4bXktF-Nn0J0ucHd_JI1wjXTls7lt5mv	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/wbRbWxRbQyojtDDUj_ITsoMZNbSAnroic0AYABmbab8qE-sgODk26wLCYUcJrqW11-	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/HUcJ2yilLdMblMI04h5DE1tf_0iCxgOmiu-7mpulXRJTol_vVsnrlQcs4esQq1ygtH	chromecache_442.4.dr	false		unknown
https://careers.google.com/?utm_source=about&utm_medium=referral&utm_campaign=footer-link	chromecache_442.4.dr	false		unknown
https://groups.google.com	chromecache_442.4.dr	false		unknown
https://www.google.com/docs/about/?utm_source=gaboutpage&utm_medium=docslink&utm_campaign=ga	chromecache_442.4.dr	false		unknown
https://support.google.com/embed/tagging/install	chromecache_527.4.dr	false	URL Reputation: safe	unknown
https://play.google.com	chromecache_512.4.dr, chromecache_527.4.dr, chromecache_402.4.dr	false		unknown
https://support.google.com/inapp/%	chromecache_494.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/4-toCoht-pqFO58Z4u-TFBsGfwuNOORZURXtLloPAEw_87kPa7TKHqFmm3Z7mMO_hi	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/X7G-hd59XdxQgAu0Pg3jUf5LoAQQqSWjyKZSk0lvDBnRdboJB3f6rLhL9PSJLNy-ON	chromecache_442.4.dr	false		unknown
https://www.google.com/keep/	chromecache_442.4.dr	false		unknown
https://www.google.com/maps/about/	chromecache_442.4.dr	false		unknown
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_204.4.dr, chromecache_455.4.dr	false		unknown
https://developers.google.com/business-communications/business-messages/guides	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/uY0DBQik6UA-8r3u940KST-4No0y-XK9SdLkA8cirg9XMg5hw43uvY04aMt_suipYE	chromecache_442.4.dr	false		unknown
https://lh3.googleusercontent.com/kM_wE3H68SPU_s7ClGAbOFWwY6UN82x0QF1LFEDlKvWVK82KEzX9b-UQfPorWw9iML	chromecache_442.4.dr	false		unknown

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 30, 2024 15:48:10.713205099 CEST	192.168.2.4	1.1.1.1	0xe6c6	Standard query (0)	myaccount.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:10.713640928 CEST	192.168.2.4	1.1.1.1	0xda0a	Standard query (0)	myaccount.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:14.127397060 CEST	192.168.2.4	1.1.1.1	0xe859	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:14.127785921 CEST	192.168.2.4	1.1.1.1	0x5b4f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:16.271576881 CEST	192.168.2.4	1.1.1.1	0xf17a	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:16.272169113 CEST	192.168.2.4	1.1.1.1	0x9862	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:16.702975035 CEST	192.168.2.4	1.1.1.1	0xe246	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:16.703865051 CEST	192.168.2.4	1.1.1.1	0x404e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:18.205383062 CEST	192.168.2.4	1.1.1.1	0x4564	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:18.205602884 CEST	192.168.2.4	1.1.1.1	0x6d5e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:19.445990086 CEST	192.168.2.4	1.1.1.1	0x6b2e	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:19.446166039 CEST	192.168.2.4	1.1.1.1	0x4f3	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:19.459413052 CEST	192.168.2.4	1.1.1.1	0x64b3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:19.459691048 CEST	192.168.2.4	1.1.1.1	0x88ed	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:21.096471071 CEST	192.168.2.4	1.1.1.1	0xa7fe	Standard query (0)	myaccount.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:21.096862078 CEST	192.168.2.4	1.1.1.1	0x7a77	Standard query (0)	myaccount.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:37.667985916 CEST	192.168.2.4	1.1.1.1	0xd749	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:37.668875933 CEST	192.168.2.4	1.1.1.1	0x804	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:39.667016983 CEST	192.168.2.4	1.1.1.1	0xf199	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.667514086 CEST	192.168.2.4	1.1.1.1	0xe3e0	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:41.603709936 CEST	192.168.2.4	1.1.1.1	0xcccd	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:41.604239941 CEST	192.168.2.4	1.1.1.1	0x150a	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:44.281774044 CEST	192.168.2.4	1.1.1.1	0xb30f	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.282288074 CEST	192.168.2.4	1.1.1.1	0x28dc	Standard query (0)	support.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:49.043828011 CEST	192.168.2.4	1.1.1.1	0x1cd2	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.044071913 CEST	192.168.2.4	1.1.1.1	0xbbf6	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:51.293034077 CEST	192.168.2.4	1.1.1.1	0x7907	Standard query (0)	lh4.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:51.293284893 CEST	192.168.2.4	1.1.1.1	0xba04	Standard query (0)	lh4.ggpht.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:56.172257900 CEST	192.168.2.4	1.1.1.1	0x5f89	Standard query (0)	support.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:56.172447920 CEST	192.168.2.4	1.1.1.1	0xebeb	Standard query (0)	support.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:48:57.332412958 CEST	192.168.2.4	1.1.1.1	0xe30b	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.332593918 CEST	192.168.2.4	1.1.1.1	0xb94b	Standard query (0)	about.google	65	IN (0x0001)	false
Sep 30, 2024 15:49:01.573005915 CEST	192.168.2.4	1.1.1.1	0x89d6	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.573530912 CEST	192.168.2.4	1.1.1.1	0x3553	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:02.526434898 CEST	192.168.2.4	1.1.1.1	0x93fd	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.526784897 CEST	192.168.2.4	1.1.1.1	0x3dee	Standard query (0)	www.blog.google	65	IN (0x0001)	false
Sep 30, 2024 15:49:03.343205929 CEST	192.168.2.4	1.1.1.1	0xf59e	Standard query (0)	about.google	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:03.343569040 CEST	192.168.2.4	1.1.1.1	0x5a64	Standard query (0)	about.google	65	IN (0x0001)	false
Sep 30, 2024 15:49:04.102479935 CEST	192.168.2.4	1.1.1.1	0x83f6	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.102936029 CEST	192.168.2.4	1.1.1.1	0x3314	Standard query (0)	blog.google	65	IN (0x0001)	false
Sep 30, 2024 15:49:05.716975927 CEST	192.168.2.4	1.1.1.1	0xa7f9	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.717282057 CEST	192.168.2.4	1.1.1.1	0xcca5	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:05.717714071 CEST	192.168.2.4	1.1.1.1	0xaada	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.717837095 CEST	192.168.2.4	1.1.1.1	0x11ad	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:06.967463970 CEST	192.168.2.4	1.1.1.1	0x3cf1	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.967632055 CEST	192.168.2.4	1.1.1.1	0xa102	Standard query (0)	blog.google	65	IN (0x0001)	false
Sep 30, 2024 15:49:07.452636957 CEST	192.168.2.4	1.1.1.1	0x92d4	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.452816963 CEST	192.168.2.4	1.1.1.1	0x7956	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:12.129179955 CEST	192.168.2.4	1.1.1.1	0xcb3b	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.129496098 CEST	192.168.2.4	1.1.1.1	0x61ac	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:13.367271900 CEST	192.168.2.4	1.1.1.1	0x1f06	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.367440939 CEST	192.168.2.4	1.1.1.1	0xf01d	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:13.537642956 CEST	192.168.2.4	1.1.1.1	0x72d4	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.537873983 CEST	192.168.2.4	1.1.1.1	0x1ea9	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:15.009126902 CEST	192.168.2.4	1.1.1.1	0x431c	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.009283066 CEST	192.168.2.4	1.1.1.1	0x5339	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Sep 30, 2024 15:49:18.294775009 CEST	192.168.2.4	1.1.1.1	0x360c	Standard query (0)	scone-pa.clients6.google.com	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.294948101 CEST	192.168.2.4	1.1.1.1	0xea58	Standard query (0)	scone-pa.clients6.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 30, 2024 15:48:10.719877005 CEST	1.1.1.1	192.168.2.4	0xe6c6	No error (0)	myaccount.google.com		66.102.1.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:14.134345055 CEST	1.1.1.1	192.168.2.4	0xe859	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:14.134635925 CEST	1.1.1.1	192.168.2.4	0x5b4f	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:48:16.278582096 CEST	1.1.1.1	192.168.2.4	0xf17a	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:16.278582096 CEST	1.1.1.1	192.168.2.4	0xf17a	No error (0)	plus.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:16.279463053 CEST	1.1.1.1	192.168.2.4	0x9862	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:16.710386038 CEST	1.1.1.1	192.168.2.4	0xe246	No error (0)	play.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:18.465339899 CEST	1.1.1.1	192.168.2.4	0x6d5e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:18.466818094 CEST	1.1.1.1	192.168.2.4	0x4564	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:18.466818094 CEST	1.1.1.1	192.168.2.4	0x4564	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:19.405755043 CEST	1.1.1.1	192.168.2.4	0x341	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:19.405755043 CEST	1.1.1.1	192.168.2.4	0x341	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:19.453181028 CEST	1.1.1.1	192.168.2.4	0x6b2e	No error (0)	play.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:19.466753006 CEST	1.1.1.1	192.168.2.4	0x88ed	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:48:19.467201948 CEST	1.1.1.1	192.168.2.4	0x64b3	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:20.544576883 CEST	1.1.1.1	192.168.2.4	0xf752	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:20.544576883 CEST	1.1.1.1	192.168.2.4	0xf752	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:21.106918097 CEST	1.1.1.1	192.168.2.4	0xa7fe	No error (0)	myaccount.google.com		64.233.167.84	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:34.105159044 CEST	1.1.1.1	192.168.2.4	0x4779	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:34.105159044 CEST	1.1.1.1	192.168.2.4	0x4779	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:37.675318003 CEST	1.1.1.1	192.168.2.4	0xd749	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:37.675318003 CEST	1.1.1.1	192.168.2.4	0xd749	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:37.675585032 CEST	1.1.1.1	192.168.2.4	0x804	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:39.674323082 CEST	1.1.1.1	192.168.2.4	0xf199	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:39.674323082 CEST	1.1.1.1	192.168.2.4	0xf199	No error (0)	googlehosted.l.googleusercontent.com		142.250.186.97	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:39.674619913 CEST	1.1.1.1	192.168.2.4	0xe3e0	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:42.146348953 CEST	1.1.1.1	192.168.2.4	0x3027	No error (0)	csp.withgoogle.com		142.250.65.177	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:44.290169001 CEST	1.1.1.1	192.168.2.4	0xb30f	No error (0)	support.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.055080891 CEST	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:49.055080891 CEST	1.1.1.1	192.168.2.4	0x1cd2	No error (0)	photos-ugc.l.googleusercontent.com		172.217.16.193	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:49.062879086 CEST	1.1.1.1	192.168.2.4	0xbbf6	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:52.060396910 CEST	1.1.1.1	192.168.2.4	0x7907	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:52.060396910 CEST	1.1.1.1	192.168.2.4	0x7907	No error (0)	photos-ugc.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:52.071532011 CEST	1.1.1.1	192.168.2.4	0xba04	No error (0)	lh4.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:48:56.179354906 CEST	1.1.1.1	192.168.2.4	0x5f89	No error (0)	support.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:48:57.339169979 CEST	1.1.1.1	192.168.2.4	0xe30b	No error (0)	about.google		216.239.32.29	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.708065033 CEST	1.1.1.1	192.168.2.4	0x89d6	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:01.708065033 CEST	1.1.1.1	192.168.2.4	0x89d6	No error (0)	googlehosted.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:01.708076954 CEST	1.1.1.1	192.168.2.4	0x3553	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:02.575792074 CEST	1.1.1.1	192.168.2.4	0x93fd	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:02.575792074 CEST	1.1.1.1	192.168.2.4	0x93fd	No error (0)	ghs-svc-https-sni.ghs-ssl.googlehosted.com		142.250.185.147	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:02.576677084 CEST	1.1.1.1	192.168.2.4	0x3dee	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:03.351461887 CEST	1.1.1.1	192.168.2.4	0xf59e	No error (0)	about.google		216.239.32.29	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.109414101 CEST	1.1.1.1	192.168.2.4	0x83f6	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.109414101 CEST	1.1.1.1	192.168.2.4	0x83f6	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.109414101 CEST	1.1.1.1	192.168.2.4	0x83f6	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:04.109414101 CEST	1.1.1.1	192.168.2.4	0x83f6	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724329948 CEST	1.1.1.1	192.168.2.4	0xcca5	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724329948 CEST	1.1.1.1	192.168.2.4	0xcca5	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724736929 CEST	1.1.1.1	192.168.2.4	0xa7f9	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724811077 CEST	1.1.1.1	192.168.2.4	0xaada	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:05.724811077 CEST	1.1.1.1	192.168.2.4	0xaada	No error (0)	plus.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:05.733582973 CEST	1.1.1.1	192.168.2.4	0x11ad	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:06.974785089 CEST	1.1.1.1	192.168.2.4	0x3cf1	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.974785089 CEST	1.1.1.1	192.168.2.4	0x3cf1	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.974785089 CEST	1.1.1.1	192.168.2.4	0x3cf1	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:06.974785089 CEST	1.1.1.1	192.168.2.4	0x3cf1	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460129023 CEST	1.1.1.1	192.168.2.4	0x7956	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460129023 CEST	1.1.1.1	192.168.2.4	0x7956	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:07.460593939 CEST	1.1.1.1	192.168.2.4	0x92d4	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136357069 CEST	1.1.1.1	192.168.2.4	0x61ac	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136357069 CEST	1.1.1.1	192.168.2.4	0x61ac	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:12.136379004 CEST	1.1.1.1	192.168.2.4	0xcb3b	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.374301910 CEST	1.1.1.1	192.168.2.4	0x1f06	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:13.546844006 CEST	1.1.1.1	192.168.2.4	0x72d4	No error (0)	scone-pa.clients6.google.com		142.250.184.202	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:15.016040087 CEST	1.1.1.1	192.168.2.4	0x5339	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:15.016093969 CEST	1.1.1.1	192.168.2.4	0x431c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 30, 2024 15:49:15.016093969 CEST	1.1.1.1	192.168.2.4	0x431c	No error (0)	plus.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Sep 30, 2024 15:49:18.301409006 CEST	1.1.1.1	192.168.2.4	0x360c	No error (0)	scone-pa.clients6.google.com		172.217.23.106	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:11 UTC	939	OUT	GET /privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button HTTP/1.1 Host: myaccount.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-30 13:48:11 UTC	1004	IN	HTTP/1.1 302 Found Content-Type: application/binary Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:48:11 GMT Location: https://myaccount.google.com/intro/privacycheckup/1?pc_email=y.makotsoba@gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Strict-Transport-Security: max-age=31536000 Server: ESF Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Set-Cookie: NID=518=rXAcpRBmK1Ru7DbhhetDoI8uuh4Cx4V8BFiTOt57xkWN3hrSJLqkfADjIrVx5411prROv1GXdDVGalNIeuDEe3CDKMETkLJLAnENJEdtCSI-nQ-kKYf-97oru0ebC0c9ckH-ug0fRfj1JZRljxjRjIagNhDC4bacaNjl-wdg0_s03HcgC1E; expires=Tue, 01-Apr-2025 13:48:11 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:11 UTC	1140	OUT	GET /intro/privacycheckup/1?pc_email=y.makotsoba@gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button HTTP/1.1 Host: myaccount.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=rXAcpRBmK1Ru7DbhhetDoI8uuh4Cx4V8BFiTOt57xkWN3hrSJLqkfADjIrVx5411prROv1GXdDVGalNIeuDEe3CDKMETkLJLAnENJEdtCSI-nQ-kKYf-97oru0ebC0c9ckH-ug0fRfj1JZRljxjRjIagNhDC4bacaNjl-wdg0_s03HcgC1E
2024-09-30 13:48:11 UTC	11129	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 x-ua-compatible: IE=edge Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:48:11 GMT Strict-Transport-Security: max-age=31536000 Content-Security-Policy: script-src 'report-sample' 'nonce-V2h1FX_2-9zC7Rl0khIisA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /_/AccountSettingsUi/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://ssl.gstatic.com/external_hosted/lottie/lottie_light.js https://maps.googleapis.com/maps/ https://maps.googleapis.com/maps-api-v3/ https://payments.google.com/payments/v4/js/integrator.js https://support.google.com/inapp/ https://www.google.com/tools/feedback/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.googleapis.com/appsmarket/v2/installedApps/;report-uri /_/AccountSettingsUi/cspreport/allowlist Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountSettingsUi/cspreport Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Resource-Policy: same-site Cross-Origin-Opener-Policy: same-origin-allow-popups Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Link: <https://myaccount.google.com/intro/privacycheckup/1>; rel="alternate"; hreflang="x-default", <https://myaccount.google.com/intro/privacycheckup/1?hl=en-US>; rel="alternate"; hreflang="en-US", <https://myaccount.google.com/intro/privacycheckup/1?hl=af>; rel="alternate"; hreflang="af", <https://myaccount.google.com/intro/privacycheckup/1?hl=am>; rel="alternate"; hreflang="am", <https://myaccount.google.com/intro/privacycheckup/1?hl=ar>; rel="alternate"; hreflang="ar", <https://myaccount.google.com/intro/privacycheckup/1?hl=as>; rel="alternate"; hreflang="as", <https://myaccount.google.com/intro/privacycheckup/1?hl=az>; rel="alternate"; hreflang="az", <https://myaccount.google.com/intro/privacycheckup/1?hl=be>; rel="alternate"; hreflang="be", <https://myaccount.google.com/intro/privacycheckup/1?hl=bg>; rel="alternate"; hreflang="bg", <https://myaccount.google.com/intro/privacycheckup/1?hl=bn>; rel="alternate"; hreflang="bn", <https://myaccount.google.com/intro/privacycheckup/1?hl=bs>; rel="alternate"; hre [TRUNCATED] reporting-endpoints: default="/_/AccountSettingsUi/web-reports?context=eJwNyX9MlHUcB_Cvb_g4sB9jrg14bqHIMtQmxwkh0tTyJjJRTPu1VpIcF53lQXBHNavRMtgaziLlrummbW3YJTmy5LgbZtqyTHmO554mz3PUJO_4Pg_U-qEua8z6_PH667UgOn_5AkVcK1JEwVJF1Jcq4sIKReSUKWLKrYg3BhQxeUoR-rAius4pwrqoiOhlRdS5HeLtBodQtztEaJdD-H0OcfRF5neIW_kjKDwwguJDI3i-KQb1hRg6P4xhYySGd3Pj-KQojihTH4ije28c6582MNZs4Cf22wkDTwwaWHvKQD2743sDB9MG9v1qIF5u4gybrTExtcVE4VYTpWyi20RRj4mxr00IaWLP7ya6K1IIfpTCbmUSL7HammvYWZZGQ10a_xxPw0ylMcmiuRnE2ZP3Z3DvsgxurMjgb9Y3kEH2yQw-u5lBcM00yh-dhrdzGi1s7sg0qnMlSu6S2MCu5ku4qyTW1Uno9RJ9WySqGyWm2CWPxOo2CfmWxCyr7ONji49J_PKxxLKIxN7PJb49LXEjKnGLNY9KRNMSPRUW8twWbm-00FFrIcgusX2vWOhhbw5ZiJy2MMhyfrDQUGxje6mNx9j1MhuRKhtX1tgwWHGtDc8eG3--bmPlARsFN20sZbO5MzheMIMfF80gxYT77qyHxvvpYrKf-mf7KW9HiKa8IRruCtHcaIj-Y4-0hGkbW7U7TGZrmJqHwvRXNEzvGGP0AXv8jzF6is1bqFIWu7xWpQQb3KDSgFul2CaVRreppD2rkm-nSpvOq7SZpS6o1HRbpTYWzknQYXb24QS1fpGgdnbPl-OUz745M06rr4xTDStfrNE69u96jc7Xa7ToVY3u69VoFevdr1HiU43eNzVKZzSKXNfoO5Gkwa-SRFeTtN9O0ntscp5O7QU6dbGTLp2GWPaDOv1cpVPfMzodYsZzOulnKwtLsz1Lh [TRUNCATED] Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:48:11 UTC	5581	IN	Data Raw: 31 35 63 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 3e 3c 68 65 61 64 3e 3c 62 61 73 65 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 2d 77 68 65 6e 2d 63 72 6f 73 73 2d 6f 72 69 67 69 6e 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 Data Ascii: 15c5<!doctype html><html lang="en" dir="ltr"><head><base href="https://myaccount.google.com/"><link rel="preconnect" href="//www.gstatic.com"><meta name="referrer" content="origin-when-cross-origin"><meta name="viewport" content="initial-scale=1, maximu
2024-09-30 13:48:11 UTC	1390	IN	Data Raw: 36 63 32 36 0d 0a 39 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 47 38 54 5a 75 65 5c 22 5d 2c 5b 34 35 35 39 38 36 30 30 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 53 63 48 58 42 64 5c 22 5d 2c 5b 34 35 36 31 39 35 38 30 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 78 72 47 65 4f 62 5c 22 5d 2c 5b 34 35 34 35 31 37 31 30 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 48 4a 6d 38 74 66 5c 22 5d 2c 5b 34 35 34 35 33 31 33 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 5c 22 2c 6e 75 6c 6c 2c 5c 22 52 67 38 4f 6e 62 5c 22 5d 2c 5b 34 35 34 35 33 37 34 38 2c 6e 75 6c 6c 2c 66 61 6c 73 65 Data Ascii: 6c269,null,false,null,null,null,\"G8TZue\"],[45598600,null,true,null,null,null,\"ScHXBd\"],[45619580,null,true,null,null,null,\"xrGeOb\"],[45451710,null,false,null,null,null,\"HJm8tf\"],[45453130,null,null,null,\"\",null,\"Rg8Onb\"],[45453748,null,false
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 78 6d 64 4e 57 63 5c 22 5d 2c 5b 34 35 36 33 30 37 34 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 78 44 31 4d 64 64 5c 22 5d 2c 5b 34 35 34 35 31 39 33 34 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 66 59 54 4a 75 65 5c 22 5d 2c 5b 34 35 34 35 31 37 36 32 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 69 59 37 6e 42 66 5c 22 5d 2c 5b 34 35 34 35 31 39 34 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 50 4b 32 61 36 63 5c 22 5d 2c 5b 34 35 36 31 37 37 35 38 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c Data Ascii: ,null,null,null,\"xmdNWc\"],[45630746,null,false,null,null,null,\"xD1Mdd\"],[45451934,null,false,null,null,null,\"fYTJue\"],[45451762,null,true,null,null,null,\"iY7nBf\"],[45451946,null,false,null,null,null,\"PK2a6c\"],[45617758,null,true,null,null,null,\
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 6d 6f 69 53 70 64 5c 22 5d 2c 5b 34 35 36 32 30 38 33 38 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 77 4a 72 31 54 5c 22 5d 2c 5b 34 35 34 35 31 37 33 31 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 43 51 46 48 4d 62 5c 22 5d 2c 5b 34 35 34 35 31 37 36 33 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 6d 65 62 64 65 65 5c 22 5d 2c 5b 34 35 36 31 33 33 39 35 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 43 30 4f 65 63 5c 22 5d 2c 5b 34 35 36 31 34 38 39 31 2c 37 30 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 51 52 4a 70 68 64 5c 22 5d 2c 5b 34 35 36 33 30 37 34 35 2c 6e 75 6c Data Ascii: moiSpd\"],[45620838,null,true,null,null,null,\"wJr1T\"],[45451731,null,true,null,null,null,\"CQFHMb\"],[45451763,null,true,null,null,null,\"mebdee\"],[45613395,null,true,null,null,null,\"C0Oec\"],[45614891,700,null,null,null,null,\"QRJphd\"],[45630745,nul
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 5a 48 57 70 52 63 5c 22 5d 2c 5b 34 35 34 35 33 31 32 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 5c 22 2c 6e 75 6c 6c 2c 5c 22 58 42 64 68 44 62 5c 22 5d 2c 5b 34 35 36 34 32 37 34 38 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 69 65 51 61 46 5c 22 5d 2c 5b 34 35 34 35 31 37 32 38 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 7a 57 6e 63 71 66 5c 22 5d 2c 5b 34 35 34 35 31 36 36 36 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4d 5a 50 57 55 64 5c 22 5d 2c 5b 34 35 34 35 31 37 36 36 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 4d Data Ascii: ,null,null,null,\"ZHWpRc\"],[45453124,null,null,null,\"\",null,\"XBdhDb\"],[45642748,null,false,null,null,null,\"ieQaF\"],[45451728,null,true,null,null,null,\"zWncqf\"],[45451666,null,false,null,null,null,\"MZPWUd\"],[45451766,null,true,null,null,null,\"M
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 63 5c 22 5d 2c 5b 34 35 34 35 33 31 33 33 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 74 55 6c 5a 36 5c 22 5d 2c 5b 34 35 36 33 34 37 39 31 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 42 4a 65 30 73 64 5c 22 5d 2c 5b 34 35 36 32 33 32 31 31 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 73 45 71 56 53 62 5c 22 5d 2c 5b 34 35 34 36 33 30 30 35 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 6b 69 59 6f 51 62 5c 22 5d 2c 5b 34 35 35 33 32 39 31 34 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 57 43 6d 58 44 65 5c 22 5d 2c 5b 34 35 36 33 38 33 39 34 2c 6e 75 Data Ascii: c\"],[45453133,null,false,null,null,null,\"tUlZ6\"],[45634791,null,false,null,null,null,\"BJe0sd\"],[45623211,null,true,null,null,null,\"sEqVSb\"],[45463005,null,false,null,null,null,\"kiYoQb\"],[45532914,null,false,null,null,null,\"WCmXDe\"],[45638394,nu
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 56 6b 4d 47 47 62 5c 22 5d 2c 5b 34 35 36 33 34 35 30 38 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 53 41 4d 7a 6d 63 5c 22 5d 2c 5b 34 35 36 32 35 38 31 39 2c 6e 75 6c 6c 2c 66 61 6c 73 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 55 33 45 46 30 5c 22 5d 2c 5b 34 35 34 35 31 38 30 31 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 49 4a 34 45 73 64 5c 22 5d 2c 5b 34 35 34 35 31 37 35 36 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 41 59 74 76 58 64 5c 22 5d 2c 5b 34 35 36 32 33 32 34 37 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: null,true,null,null,null,\"VkMGGb\"],[45634508,null,true,null,null,null,\"SAMzmc\"],[45625819,null,false,null,null,null,\"U3EF0\"],[45451801,null,true,null,null,null,\"IJ4Esd\"],[45451756,null,true,null,null,null,\"AYtvXd\"],[45623247,null,true,null,null,
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 47 31 71 49 46 37 67 41 59 68 31 50 4b 4b 36 45 6b 6f 41 62 52 4a 36 6b 6b 42 4c 4d 37 33 53 50 76 45 74 52 4a 79 5a 67 47 6a 78 6a 30 59 51 57 6c 65 51 57 6a 35 41 59 47 68 53 49 47 77 42 2f 64 36 72 34 53 42 65 50 68 42 4a 76 47 33 67 59 47 7a 6c 34 46 30 51 79 74 4e 66 4c 4e 42 67 57 49 44 6f 46 71 43 71 41 54 42 66 2f 66 41 51 57 6e 51 77 57 41 37 41 62 6d 65 51 71 54 37 67 62 6a 2b 67 58 51 52 34 41 55 42 66 53 66 42 74 34 45 74 45 34 46 78 41 38 5c 5c 75 30 30 33 64 5c 22 5d 5d 5d 22 2c 22 55 58 32 6c 6d 22 3a 22 7b 7d 22 2c 22 56 76 61 66 6b 64 22 3a 66 61 6c 73 65 2c 22 58 39 6a 38 6a 22 3a 22 25 2e 40 2e 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5c 22 68 74 74 70 73 3a 2f 2f 64 6c 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 76 69 73 69 6f 6e 2f 6f 6e Data Ascii: G1qIF7gAYh1PKK6EkoAbRJ6kkBLM73SPvEtRJyZgGjxj0YQWleQWj5AYGhSIGwB/d6r4SBePhBJvG3gYGzl4F0QytNfLNBgWIDoFqCqATBf/fAQWnQwWA7AbmeQqT7gbj+gXQR4AUBfSfBt4EtE4FxA8\\u003d\"]]]","UX2lm":"{}","Vvafkd":false,"X9j8j":"%.@.null,null,null,\"https://dl.google.com/vision/on
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 22 2c 22 42 46 71 5a 66 22 3a 22 74 72 75 65 22 2c 22 44 70 47 44 53 65 22 3a 22 74 72 75 65 22 2c 22 53 63 48 58 42 64 22 3a 22 74 72 75 65 22 2c 22 74 4b 41 46 4f 22 3a 22 74 72 75 65 22 2c 22 67 56 5a 56 48 65 22 3a 22 66 61 6c 73 65 22 2c 22 77 47 69 71 75 64 22 3a 22 74 72 75 65 22 2c 22 49 51 76 30 6d 62 22 3a 22 74 72 75 65 22 2c 22 64 35 4c 4d 43 22 3a 22 74 72 75 65 22 2c 22 45 39 50 45 51 64 22 3a 22 66 61 6c 73 65 22 2c 22 6b 69 59 6f 51 62 22 3a 22 66 61 6c 73 65 22 2c 22 6a 78 78 41 72 65 22 3a 22 74 72 75 65 22 2c 22 68 4b 49 38 42 22 3a 22 66 61 6c 73 65 22 2c 22 63 7a 4f 4e 68 22 3a 22 66 61 6c 73 65 22 2c 22 4e 35 4d 32 46 22 3a 22 66 61 6c 73 65 22 2c 22 6b 54 63 6d 71 64 22 3a 22 74 72 75 65 22 2c 22 45 72 53 6d 51 63 22 3a 22 74 72 75 Data Ascii: ","BFqZf":"true","DpGDSe":"true","ScHXBd":"true","tKAFO":"true","gVZVHe":"false","wGiqud":"true","IQv0mb":"true","d5LMC":"true","E9PEQd":"false","kiYoQb":"false","jxxAre":"true","hKI8B":"false","czONh":"false","N5M2F":"false","kTcmqd":"true","ErSmQc":"tru
2024-09-30 13:48:12 UTC	1390	IN	Data Raw: 49 57 6b 48 62 22 3a 22 74 72 75 65 22 2c 22 4c 46 6f 6a 51 65 22 3a 22 74 72 75 65 22 2c 22 44 34 46 37 45 66 22 3a 22 66 61 6c 73 65 22 2c 22 70 4f 4b 30 37 62 22 3a 22 74 72 75 65 22 2c 22 59 72 4e 65 6b 66 22 3a 22 66 61 6c 73 65 22 2c 22 76 66 49 6d 45 63 22 3a 22 74 72 75 65 22 2c 22 69 59 37 6e 42 66 22 3a 22 74 72 75 65 22 2c 22 4a 6b 7a 41 65 63 22 3a 22 74 72 75 65 22 2c 22 6d 65 62 64 65 65 22 3a 22 74 72 75 65 22 2c 22 6e 56 52 4a 32 22 3a 22 74 72 75 65 22 2c 22 65 32 32 79 61 62 22 3a 22 74 72 75 65 22 2c 22 72 44 62 39 58 64 22 3a 22 74 72 75 65 22 2c 22 43 70 77 4d 39 62 22 3a 22 74 72 75 65 22 2c 22 58 55 6d 43 76 22 3a 22 66 61 6c 73 65 22 2c 22 67 64 74 59 37 62 22 3a 22 66 61 6c 73 65 22 2c 22 6f 37 57 59 53 63 22 3a 22 74 72 75 65 22 Data Ascii: IWkHb":"true","LFojQe":"true","D4F7Ef":"false","pOK07b":"true","YrNekf":"false","vfImEc":"true","iY7nBf":"true","JkzAec":"true","mebdee":"true","nVRJ2":"true","e22yab":"true","rDb9Xd":"true","CpwM9b":"true","XUmCv":"false","gdtY7b":"false","o7WYSc":"true"

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 13:48:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=10622 Date: Mon, 30 Sep 2024 13:48:16 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:17 UTC	1310	OUT	GET /_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0 HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://myaccount.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=rXAcpRBmK1Ru7DbhhetDoI8uuh4Cx4V8BFiTOt57xkWN3hrSJLqkfADjIrVx5411prROv1GXdDVGalNIeuDEe3CDKMETkLJLAnENJEdtCSI-nQ-kKYf-97oru0ebC0c9ckH-ug0fRfj1JZRljxjRjIagNhDC4bacaNjl-wdg0_s03HcgC1E
2024-09-30 13:48:17 UTC	916	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access" Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]} Content-Length: 126135 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 26 Sep 2024 10:43:14 GMT Expires: Fri, 26 Sep 2025 10:43:14 GMT Cache-Control: public, max-age=31536000 Last-Modified: Fri, 06 Sep 2024 22:07:50 GMT Content-Type: text/javascript; charset=UTF-8 Vary: Accept-Encoding Age: 356703 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:17 UTC	474	IN	Data Raw: 67 61 70 69 2e 6c 6f 61 64 65 64 5f 30 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 28 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 79 70 65 6f 66 20 73 65 6c 66 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 73 65 6c 66 3a 74 68 69 73 29 2e 5f 46 5f 74 6f 67 67 6c 65 73 3d 61 7c 7c 5b 5d 7d 3b 28 30 2c 5f 2e 5f 46 5f 74 6f 67 67 6c 65 73 5f 69 6e 69 74 69 61 6c 69 7a 65 29 28 5b 30 78 38 30 30 30 30 30 2c 20 5d 29 3b 0a 76 61 72 20 62 61 2c 66 61 2c 68 61 2c 6e 61 2c 6f 61 2c 73 61 2c 75 61 2c 77 61 3b 62 61 3d 66 75 6e Data Ascii: gapi.loaded_0(function(_){var window=this;_._F_toggles_initialize=function(a){(typeof globalThis!=="undefined"?globalThis:typeof self!=="undefined"?self:this)._F_toggles=a\|\|[]};(0,_._F_toggles_initialize)([0x800000, ]);var ba,fa,ha,na,oa,sa,ua,wa;ba=fun
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 68 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 73 65 6c 66 26 26 73 65 6c 66 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 2b 2b 62 29 7b 76 61 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 Data Ascii: rn a;a[b]=c.value;return a};ha=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 62 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 62 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 3b 73 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 3b 75 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 Data Ascii: defined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:ba(a)};throw Error("b`"+String(a));};sa=function(a,b){return Object.prototype.hasOwnProperty.call(a,b)};ua=typeof Object.assign=="function"?Object
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 30 3b 74 68 69 73 2e 51 72 3d 5b 5d 3b 74 68 69 73 2e 6a 56 3d 21 31 3b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6a 46 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 68 28 6d 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6c 7c 7c 28 6c 3d 21 30 2c 6d 2e 63 61 6c 6c 28 6b 2c 6e 29 29 7d 7d 76 61 72 20 6b 3d 74 68 69 73 2c 6c 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 68 28 74 68 69 73 2e 58 64 61 29 2c 72 65 6a 65 63 74 3a 68 28 74 68 69 73 2e 56 4a 29 7d 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 58 64 61 3d 66 75 6e 63 74 Data Ascii: 0;this.Qr=[];this.jV=!1;var k=this.jF();try{h(k.resolve,k.reject)}catch(l){k.reject(l)}};e.prototype.jF=function(){function h(m){return function(n){l\|\|(l=!0,m.call(k,n))}}var k=this,l=!1;return{resolve:h(this.Xda),reject:h(this.VJ)}};e.prototype.Xda=funct
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 47 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 51 72 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 74 68 69 73 2e 51 72 2e 6c 65 6e 67 74 68 3b 2b 2b 68 29 66 2e 5a 4f 28 74 68 69 73 2e 51 72 5b 68 5d 29 3b 0a 74 68 69 73 2e 51 72 3d 6e 75 6c 6c 7d 7d 3b 76 61 72 20 66 3d 6e 65 77 20 62 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 44 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6a 46 28 29 3b 68 2e 6c 79 28 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 45 66 61 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 76 61 72 20 6c 3d 74 68 69 73 2e 6a 46 28 29 3b 74 72 79 7b 68 2e 63 61 6c 6c 28 6b 2c 6c 2e 72 65 73 6f 6c 76 Data Ascii: ototype.G7=function(){if(this.Qr!=null){for(var h=0;h<this.Qr.length;++h)f.ZO(this.Qr[h]);this.Qr=null}};var f=new b;e.prototype.Dfa=function(h){var k=this.jF();h.ly(k.resolve,k.reject)};e.prototype.Efa=function(h,k){var l=this.jF();try{h.call(k,l.resolv
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 0a 6e 61 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 2c 65 3d 64 2e 6c 65 6e 67 74 68 2c 66 3d 62 2e 6c 65 6e 67 74 68 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 63 7c 30 2c 64 2e 6c 65 6e 67 74 68 29 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 66 26 26 63 3c 65 3b 29 69 66 28 64 5b 63 2b 2b 5d 21 3d 62 5b 68 2b 2b 5d 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 20 68 3e 3d 66 7d Data Ascii: regular expression");return a+""};na("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"startsWith"),e=d.length,f=b.length;c=Math.max(0,Math.min(c\|0,d.length));for(var h=0;h<f&&c<e;)if(d[c++]!=b[h++])return!1;return h>=f}
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 74 68 69 73 2e 73 65 74 28 6d 5b 30 5d 2c 6d 5b 31 5d 29 7d 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 69 66 28 21 63 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 65 22 29 3b 64 28 6c 29 3b 69 66 28 21 73 61 28 6c 2c 66 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 60 22 2b 6c 29 3b 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3d 6d 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 26 73 61 28 6c 2c 66 29 3f 6c 5b 66 5d 5b 74 68 69 73 2e 47 61 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 63 28 6c 29 26 Data Ascii: this.set(m[0],m[1])}};k.prototype.set=function(l,m){if(!c(l))throw Error("e");d(l);if(!sa(l,f))throw Error("f`"+l);l[f][this.Ga]=m;return this};k.prototype.get=function(l){return c(l)&&sa(l,f)?l[f][this.Ga]:void 0};k.prototype.has=function(l){return c(l)&
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 78 74 2c 6b 2e 65 66 2e 6e 65 78 74 2e 55 6b 3d 0a 6b 2e 65 66 2e 55 6b 2c 6b 2e 65 66 2e 68 65 61 64 3d 6e 75 6c 6c 2c 74 68 69 73 2e 73 69 7a 65 2d 2d 2c 21 30 29 3a 21 31 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 55 6b 3d 66 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 6b 29 2e 65 66 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 28 6b 3d 64 28 74 68 69 73 2c 6b 29 2e 65 66 29 26 26 6b 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 Data Ascii: xt,k.ef.next.Uk=k.ef.Uk,k.ef.head=null,this.size--,!0):!1};c.prototype.clear=function(){this[0]={};this[1]=this[1].Uk=f();this.size=0};c.prototype.has=function(k){return!!d(this,k).ef};c.prototype.get=function(k){return(k=d(this,k).ef)&&k.value};c.protot
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 73 69 7a 65 21 3d 31 7c 7c 64 2e 61 64 64 28 7b 78 3a 34 7d 29 21 3d 64 7c 7c 64 2e 73 69 7a 65 21 3d 32 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 65 3d 64 2e 65 6e 74 72 69 65 73 28 29 2c 66 3d 65 2e 6e 65 78 74 28 29 3b 69 66 28 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 21 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 63 29 72 65 74 75 72 6e 21 31 3b 66 3d 65 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 66 2e 64 6f 6e 65 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 66 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 66 2e 76 61 6c 75 65 5b 31 5d 21 3d 66 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 65 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 68 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 76 61 72 Data Ascii: size!=1\|\|d.add({x:4})!=d\|\|d.size!=2)return!1;var e=d.entries(),f=e.next();if(f.done\|\|f.value[0]!=c\|\|f.value[1]!=c)return!1;f=e.next();return f.done\|\|f.value[0]==c\|\|f.value[0].x!=4\|\|f.value[1]!=f.value[0]?!1:e.next().done}catch(h){return!1}}())return a;var
2024-09-30 13:48:17 UTC	1390	IN	Data Raw: 31 34 31 31 31 7c 7c 65 21 3d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 29 29 74 68 72 6f 77 20 6e 65 77 20 52 61 6e 67 65 45 72 72 6f 72 28 22 69 6e 76 61 6c 69 64 5f 63 6f 64 65 5f 70 6f 69 6e 74 20 22 2b 65 29 3b 65 3c 3d 36 35 35 33 35 3f 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 29 3a 28 65 2d 3d 36 35 35 33 36 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 3e 3e 3e 31 30 26 31 30 32 33 7c 35 35 32 39 36 29 2c 63 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 65 26 31 30 32 33 7c 35 36 33 32 30 29 29 7d 72 65 74 75 72 6e 20 63 7d 7d 29 3b 6e 61 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e Data Ascii: 14111\|\|e!==Math.floor(e))throw new RangeError("invalid_code_point "+e);e<=65535?c+=String.fromCharCode(e):(e-=65536,c+=String.fromCharCode(e>>>10&1023\|55296),c+=String.fromCharCode(e&1023\|56320))}return c}});na("Array.prototype.entries",function(a){return

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:18 UTC	1292	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 886 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://myaccount.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myaccount.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=rXAcpRBmK1Ru7DbhhetDoI8uuh4Cx4V8BFiTOt57xkWN3hrSJLqkfADjIrVx5411prROv1GXdDVGalNIeuDEe3CDKMETkLJLAnENJEdtCSI-nQ-kKYf-97oru0ebC0c9ckH-ug0fRfj1JZRljxjRjIagNhDC4bacaNjl-wdg0_s03HcgC1E
2024-09-30 13:48:18 UTC	886	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 37 37 30 34 30 39 35 30 35 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1727704095050",null,null,null,
2024-09-30 13:48:18 UTC	942	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://myaccount.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ; expires=Tue, 01-Apr-2025 13:48:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Mon, 30 Sep 2024 13:48:18 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 30 Sep 2024 13:48:18 GMT Connection: close Transfer-Encoding: chunked
2024-09-30 13:48:18 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-09-30 13:48:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-30 13:48:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=25935 Date: Mon, 30 Sep 2024 13:48:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-30 13:48:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Chrome Cache Entry: 212

Chrome Cache Entry: 213

Chrome Cache Entry: 214

Chrome Cache Entry: 216

Chrome Cache Entry: 217

Chrome Cache Entry: 218

Chrome Cache Entry: 219

Chrome Cache Entry: 220

Chrome Cache Entry: 221

Chrome Cache Entry: 223

Chrome Cache Entry: 224

Chrome Cache Entry: 225

Chrome Cache Entry: 226

Chrome Cache Entry: 227

Chrome Cache Entry: 228

Windows Analysis Report
https://myaccount.google.com/privacycheckup/1?pc_email=y.makotsoba%40gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:19 UTC	1223	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://myaccount.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:19 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 12:28:18 GMT Expires: Tue, 08 Oct 2024 12:28:18 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 4801 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:19 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-09-30 13:48:19 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-09-30 13:48:19 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-09-30 13:48:19 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-09-30 13:48:19 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:20 UTC	651	OUT	GET /favicon.ico HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:20 UTC	705	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5430 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 12:28:18 GMT Expires: Tue, 08 Oct 2024 12:28:18 GMT Cache-Control: public, max-age=691200 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 4802 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:20 UTC	685	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 30 fd fd fd 96 fd fd fd d8 fd fd fd f9 fd fd fd f9 fd fd fd d7 fd fd fd 94 fe fe fe 2e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd 99 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 95 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 09 fd fd fd c1 ff ff ff ff fa fd f9 ff b4 d9 a7 ff 76 ba 5d ff 58 ab 3a ff 58 aa 3a ff 72 b8 59 ff ac d5 9d ff f8 fb f6 ff ff Data Ascii: h& ( 0.v]X:X:rY
2024-09-30 13:48:20 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d8 fd fd fd 99 ff ff ff ff 92 cf fb ff 37 52 ec ff 38 46 ea ff d0 d4 fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 96 fe fe fe 32 ff ff ff ff f9 f9 fe ff 56 62 ed ff 35 43 ea ff 3b 49 eb ff 95 9c f4 ff cf d2 fa ff d1 d4 fa ff 96 9d f4 ff 52 5e ed ff e1 e3 fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 30 00 00 00 00 fd fd fd 9d ff ff ff ff e8 ea fd ff 58 63 ee ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 35 43 ea ff 6c 76 f0 ff ff ff ff ff ff ff ff ff fd fd fd 98 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd c3 ff ff ff ff f9 f9 fe ff a5 ac f6 ff 5d 69 ee ff 3c 4a Data Ascii: 7R8F2Vb5C;IR^0Xc5C5C5C5C5C5Clv]i<J
2024-09-30 13:48:20 UTC	1390	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff fd fd fd d0 ff ff ff 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8b ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b1 d8 a3 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 60 a5 35 ff ca 8e 3e ff f9 c1 9f ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 87 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 25 fd fd fd fb ff ff ff ff ff ff ff ff ff ff ff ff c2 e0 b7 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 53 a8 34 ff 6e b6 54 ff 9f ce 8d ff b7 da aa ff b8 db ab ff a5 d2 95 ff 7b bc 64 ff 54 a8 35 ff 53 a8 34 ff 77 a0 37 ff e3 89 41 ff f4 85 42 ff f4 85 42 ff Data Ascii: S4S4S4S4S4S4S4S4S4S4S4S4S4S4`5>%S4S4S4S4S4S4nT{dT5S4w7ABB
2024-09-30 13:48:20 UTC	1390	IN	Data Raw: ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff f4 85 42 ff fb d5 bf ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd cb ff ff ff ff ff ff ff ff ff ff ff ff 46 cd fc ff 05 bc fb ff 05 bc fb ff 05 bc fb ff 21 ae f9 ff fb fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd c8 fd fd fd 9c ff ff ff ff ff ff ff ff ff ff ff ff 86 df fd ff 05 bc fb ff 05 bc fb ff 15 93 f5 ff 34 49 eb ff b3 b8 f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: BBBBBBF!4I
2024-09-30 13:48:20 UTC	575	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd d2 fe fe fe 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 8d fd fd fd fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd fb fd fd fd 8b fe fe fe 09 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 27 fd fd fd 9f fd fd fd f7 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: $'

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:20 UTC	1300	OUT	POST /log?format=json&hasfast=true HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 891 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://myaccount.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myaccount.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:20 UTC	891	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 33 37 33 2c 5b 5b 22 31 37 32 37 37 30 34 30 39 37 39 36 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],373,[["1727704097964",null,null,null,
2024-09-30 13:48:20 UTC	524	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://myaccount.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 30 Sep 2024 13:48:20 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:48:20 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-09-30 13:48:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:20 UTC	1649	OUT	POST /_/AccountSettingsUi/browserinfo?f.sid=5242052308292449915&bl=boq_identityaccountsettingsuiserver_20240925.00_p0&hl=en&soc-app=1&soc-platform=1&soc-device=1&_reqid=35300&rt=j HTTP/1.1 Host: myaccount.google.com Connection: keep-alive Content-Length: 118 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Same-Domain: 1 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://myaccount.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://myaccount.google.com/intro/privacycheckup/1?pc_email=y.makotsoba@gms.net&hl=en&utm_source=ppr&utm_medium=email&utm_campaign=signup-fast-privacyreminder-start-button Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ; OTZ=7756668_72_76_104100_72_446760
2024-09-30 13:48:20 UTC	118	OUT	Data Raw: 66 2e 72 65 71 3d 25 35 42 39 25 32 43 31 25 32 43 31 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 31 30 32 34 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 6e 75 6c 6c 25 32 43 39 30 37 25 32 43 31 32 38 30 25 35 44 25 32 43 25 35 42 31 25 32 43 31 25 32 43 6e 75 6c 6c 25 32 43 31 25 35 44 25 32 43 25 35 42 30 25 32 43 30 25 32 43 30 25 35 44 25 35 44 26 Data Ascii: f.req=%5B9%2C1%2C1%2C%5Bnull%2C1024%2C1280%5D%2C%5Bnull%2C907%2C1280%5D%2C%5B1%2C1%2Cnull%2C1%5D%2C%5B0%2C0%2C0%5D%5D&
2024-09-30 13:48:21 UTC	1201	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:48:20 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountSettingsUi/cspreport Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Resource-Policy: same-site Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:48:21 UTC	98	IN	Data Raw: 35 63 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 66 2e 6d 74 22 5d 2c 5b 22 64 69 22 2c 33 30 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 32 39 2c 22 2d 38 33 30 38 36 35 36 37 36 33 36 32 39 31 32 35 39 32 31 22 2c 38 32 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 32 5d 5d 5d 0d 0a Data Ascii: 5c)]}'[[["f.mt"],["di",30],["af.httprm",29,"-8308656763629125921",82],["e",4,null,null,92]]]
2024-09-30 13:48:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:21 UTC	855	OUT	GET /_/AccountSettingsUi/browserinfo?f.sid=5242052308292449915&bl=boq_identityaccountsettingsuiserver_20240925.00_p0&hl=en&soc-app=1&soc-platform=1&soc-device=1&_reqid=35300&rt=j HTTP/1.1 Host: myaccount.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ; OTZ=7756668_72_76_104100_72_446760
2024-09-30 13:48:22 UTC	1100	IN	HTTP/1.1 405 Method Not Allowed Content-Type: application/json; charset=utf-8 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 30 Sep 2024 13:48:22 GMT X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountSettingsUi/cspreport Allow: POST Server: ESF X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:48:22 UTC	137	IN	Data Raw: 38 33 0d 0a 29 5d 7d 27 0a 0a 5b 5b 5b 22 65 72 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 34 30 35 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 39 5d 2c 5b 22 64 69 22 2c 31 30 5d 2c 5b 22 61 66 2e 68 74 74 70 72 6d 22 2c 39 2c 22 2d 32 36 34 37 32 34 30 31 33 32 30 39 32 33 36 37 36 32 35 22 2c 38 37 5d 2c 5b 22 65 22 2c 34 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 31 33 31 5d 5d 5d 0d 0a Data Ascii: 83)]}'[[["er",null,null,null,null,405,null,null,null,9],["di",10],["af.httprm",9,"-2647240132092367625",87],["e",4,null,null,131]]]
2024-09-30 13:48:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:23 UTC	1291	OUT	POST /log?hasfast=true&authuser=0&format=json HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 931 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://myaccount.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://myaccount.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:23 UTC	931	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 33 2c 31 2c 30 2c 30 2c 30 5d 5d 5d 2c 35 35 38 2c 5b 5b 22 31 37 32 37 37 30 34 30 39 36 30 30 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,null,null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[3,1,0,0,0]]],558,[["1727704096000",null,null,null,
2024-09-30 13:48:23 UTC	524	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://myaccount.google.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Content-Type: text/plain; charset=UTF-8 Date: Mon, 30 Sep 2024 13:48:23 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-09-30 13:48:23 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-09-30 13:48:23 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:35 UTC	998	OUT	GET /account/about?hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:36 UTC	419	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/account/about/?hl=en X-Content-Type-Options: nosniff Server: sffe Content-Length: 240 X-XSS-Protection: 0 Date: Mon, 30 Sep 2024 13:26:53 GMT Expires: Mon, 30 Sep 2024 13:56:53 GMT Cache-Control: public, max-age=1800 Content-Type: text/html; charset=UTF-8 Age: 1303 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:36 UTC	240	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 61 63 63 6f 75 6e 74 2f 61 62 6f 75 74 2f 3f 68 6c 3d 65 6e 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/account/about/?hl=en">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:36 UTC	999	OUT	GET /account/about/?hl=en HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:36 UTC	1154	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/html Content-Security-Policy-Report-Only: script-src 'nonce-nUr3e__MP8RICIOm2WyUzA' 'report-sample' 'strict-dynamic' 'unsafe-eval' 'unsafe-hashes' 'unsafe-inline' http: https:; object-src 'none'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google; base-uri 'none' Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/www_google" Report-To: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]} Content-Length: 78023 Date: Mon, 30 Sep 2024 13:48:36 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Last-Modified: Tue, 17 Sep 2024 06:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:36 UTC	236	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 6e 55 72 33 65 5f 5f 4d 50 38 52 49 43 49 4f 6d 32 57 79 55 7a 41 22 3e 77 69 6e 64 6f 77 2e 67 61 3d 77 69 6e 64 6f 77 2e 67 61 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 28 67 61 2e 71 3d 67 61 2e 71 7c 7c 5b 5d 29 2e 70 75 73 68 28 61 72 67 75 6d 65 6e 74 73 29 7d 3b 67 61 2e 6c 3d 2b 6e 65 77 20 44 61 74 65 3b 67 61 28 27 63 72 65 61 74 65 27 2c 27 55 41 2d 31 34 39 31 32 36 39 35 39 2d 31 27 2c 7b 63 6f 6f 6b 69 65 50 61 74 68 3a 27 2f 61 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="utf-8"> <script nonce="nUr3e__MP8RICIOm2WyUzA">window.ga=window.ga\|\|function(){(ga.q=ga.q\|\|[]).push(arguments)};ga.l=+new Date;ga('create','UA-149126959-1',{cookiePath:'/a
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 63 63 6f 75 6e 74 2f 61 62 6f 75 74 2f 27 7d 29 3b 67 61 28 27 73 65 6e 64 27 2c 27 70 61 67 65 76 69 65 77 27 29 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 2f 61 6e 61 6c 79 74 69 63 73 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6e 55 72 33 65 5f 5f 4d 50 38 52 49 43 49 4f 6d 32 57 79 55 7a 41 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c Data Ascii: ccount/about/'});ga('send','pageview');</script> <script async src="https://www.google-analytics.com/analytics.js" nonce="nUr3e__MP8RICIOm2WyUzA"></script> <meta content="initial-scale=1, minimum-scale=1, width=device-width" name="viewport"> <
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 67 6c 75 65 2f 63 6f 6f 6b 69 65 6e 6f 74 69 66 69 63 61 74 69 6f 6e 62 61 72 2f 63 6f 6f 6b 69 65 6e 6f 74 69 66 69 63 61 74 69 6f 6e 62 61 72 2e 6d 69 6e 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6e 6f 6e 63 65 3d 22 6e 55 72 33 65 5f 5f 4d 50 38 52 49 43 49 4f 6d 32 57 79 55 7a 41 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 6a 61 78 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 77 65 62 66 6f 6e 74 2f 31 2e 36 2e 32 36 2f 77 65 62 66 6f 6e 74 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 6e 55 72 33 65 5f 5f 4d 50 38 52 49 43 49 4f 6d 32 57 79 55 7a 41 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b Data Ascii: www.gstatic.com/glue/cookienotificationbar/cookienotificationbar.min.css" rel="stylesheet" nonce="nUr3e__MP8RICIOm2WyUzA"> <script src="https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js" nonce="nUr3e__MP8RICIOm2WyUzA"></script> <link
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 2d 68 65 61 64 65 72 5f 5f 68 61 6d 62 75 72 67 65 72 2d 69 6d 67 2d 2d 72 65 76 65 72 73 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 73 65 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 68 2d 62 75 72 67 65 72 22 3e 3c 2f 75 73 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 6c 6f 63 6b 75 70 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 63 6f 6d 70 61 6e 79 2d 6c 6f 67 6f 22 3e 0a 20 20 20 20 Data Ascii: -header__hamburger-img--reversed"> <use xlink:href="#h-burger"></use> </svg> </button> </div> </div> <div class="h-c-header__lockup"> <div class="h-c-header__company-logo">
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 62 69 6c 65 2d 68 65 61 64 65 72 20 68 2d 63 2d 68 65 61 64 65 72 5f 5f 63 74 61 2d 6c 69 20 68 2d 63 2d 68 65 61 64 65 72 5f 5f 63 74 61 2d 6c 69 2d 2d 70 72 69 6d 61 72 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 61 63 63 6f 75 6e 74 73 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 53 65 72 76 69 63 65 4c 6f 67 69 6e 3f 73 65 72 76 69 63 65 3d 61 63 63 6f 75 6e 74 73 65 74 74 69 6e 67 73 26 61 6d 70 3b 63 6f 6e 74 69 6e 75 65 3d 68 74 74 70 73 3a 2f 2f 6d 79 61 63 63 6f 75 6e 74 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 25 33 46 75 74 6d 5f 73 6f 75 72 63 65 25 33 44 61 63 63 6f 75 6e 74 2d 6d 61 72 6b 65 74 69 6e 67 2d 70 61 67 65 25 32 36 75 74 6d 5f 6d 65 64 69 75 6d 25 33 44 67 6f 2d 74 6f 2d 61 63 63 6f 75 Data Ascii: bile-header h-c-header__cta-li h-c-header__cta-li--primary"> <a href="https://accounts.google.com/ServiceLogin?service=accountsettings&continue=https://myaccount.google.com%3Futm_source%3Daccount-marketing-page%26utm_medium%3Dgo-to-accou
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 6e 61 76 2d 6c 69 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 61 62 6f 75 74 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 6f 76 65 72 76 69 65 77 22 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 6e 61 76 2d 6c 69 2d 6c 69 6e 6b 20 68 2d 69 73 2d 61 63 74 69 76 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 76 65 72 76 69 65 77 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 Data Ascii: <li class="h-c-header__nav-li" aria-level="1"> <a href="/account/about/" aria-label="Google Account overview" class="h-c-header__nav-li-link h-is-active"> Overview </a> </li> <li class
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 61 72 69 61 2d 6c 61 62 65 6c 3d 22 47 6f 20 74 6f 20 79 6f 75 72 20 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 22 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 63 74 61 2d 6c 69 2d 6c 69 6e 6b 20 68 2d 63 2d 68 65 61 64 65 72 5f 5f 63 74 61 2d 6c 69 2d 6c 69 6e 6b 2d 2d 70 72 69 6d 61 72 79 20 62 75 74 74 6f 6e 2d 73 74 61 6e 64 61 72 64 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 47 6f 20 74 6f 20 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 2d Data Ascii: aria-label="Go to your Google Account" class="h-c-header__cta-li-link h-c-header__cta-li-link--primary button-standard-mobile"> Go to Google Account </a> </li> </ul> </div> <div class="h-
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 64 72 61 77 65 72 2d 6e 61 76 2d 6c 69 22 20 61 72 69 61 2d 6c 65 76 65 6c 3d 22 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 2f 61 63 63 6f 75 6e 74 2f 61 62 6f 75 74 2f 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 20 6f 76 65 72 76 69 65 77 22 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 64 72 61 77 65 72 2d 6e 61 76 2d 6c 69 2d 6c 69 6e 6b 20 68 2d 69 73 2d 61 63 74 69 76 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 76 65 72 76 69 65 77 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: ass="h-c-header__drawer-nav-li" aria-level="1"> <a href="/account/about/" aria-label="Google Account overview" class="h-c-header__drawer-nav-li-link h-is-active"> Overview </a> </li>
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 65 20 41 63 63 6f 75 6e 74 22 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 64 72 61 77 65 72 2d 63 74 61 2d 6c 69 2d 6c 69 6e 6b 20 68 2d 63 2d 68 65 61 64 65 72 5f 5f 64 72 61 77 65 72 2d 63 74 61 2d 6c 69 2d 6c 69 6e 6b 2d 2d 73 65 63 6f 6e 64 61 72 79 20 62 75 74 74 6f 6e 2d 73 74 61 6e 64 61 72 64 2d 6d 6f 62 69 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 43 72 65 61 74 65 20 61 6e 20 61 63 63 6f 75 6e 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 68 2d 63 2d 68 65 61 64 65 72 5f 5f 64 72 61 77 65 72 2d 63 74 61 2d 6c 69 20 68 2d 63 2d 68 65 61 64 65 72 5f 5f 64 72 61 77 65 72 2d Data Ascii: e Account" class="h-c-header__drawer-cta-li-link h-c-header__drawer-cta-li-link--secondary button-standard-mobile"> Create an account </a> </li> <li class="h-c-header__drawer-cta-li h-c-header__drawer-
2024-09-30 13:48:36 UTC	1390	IN	Data Raw: 62 2d 73 6d 61 6c 6c 22 3e 41 6c 6c 20 6f 66 20 47 6f 6f 67 6c 65 2c 20 77 6f 72 6b 69 6e 67 20 66 6f 72 20 79 6f 75 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 67 61 63 63 74 2d 63 2d 62 6f 64 79 2d 72 65 67 75 6c 61 72 22 3e 53 69 67 6e 20 69 6e 20 74 6f 20 79 6f 75 72 20 47 6f 6f 67 6c 65 20 41 63 63 6f 75 6e 74 2c 20 61 6e 64 20 67 65 74 20 74 68 65 20 6d 6f 73 74 20 6f 75 74 20 6f 66 20 61 6c 6c 20 74 68 65 20 47 6f 6f 67 6c 65 20 73 65 72 76 69 63 65 73 20 79 6f 75 20 75 73 65 2e 20 59 6f 75 72 20 61 63 63 6f 75 6e 74 20 68 65 6c 70 73 20 79 6f 75 20 64 6f 20 6d 6f 72 65 20 62 79 20 70 65 72 73 6f 6e 61 6c 69 7a 69 6e 67 20 79 6f 75 72 20 47 6f 6f 67 6c 65 20 65 78 70 65 72 69 65 6e 63 65 20 61 6e 64 20 6f 66 Data Ascii: b-small">All of Google, working for you</h1> <p class="gacct-c-body-regular">Sign in to your Google Account, and get the most out of all the Google services you use. Your account helps you do more by personalizing your Google experience and of

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:37 UTC	887	OUT	GET /account/about/static/css/index.min.css?cache=8d9960b HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:37 UTC	854	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/css Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/www_google" Report-To: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]} Content-Length: 230455 Date: Mon, 30 Sep 2024 13:48:37 GMT Expires: Mon, 30 Sep 2024 13:48:37 GMT Cache-Control: private, max-age=3000 Last-Modified: Wed, 06 Dec 2023 13:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:37 UTC	536	IN	Data Raw: 2e 67 6c 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6e 6f 74 2d 72 65 61 64 79 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 67 6c 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 72 65 61 64 79 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 67 6f 6f 67 6c 65 20 2e 67 6c 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6e 6f 74 2d 72 65 61 64 79 2c 2e 6e 6f 2d 6a 73 20 2e 67 6c 75 65 2d 63 6f 6d 70 6f 6e 65 6e 74 2d 6e 6f 74 2d 72 65 61 64 79 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 68 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 35 30 7b 63 6f 6c 6f 72 3a 23 66 62 65 39 65 37 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 35 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 62 65 39 65 37 7d 2e 68 2d 67 6f 6f 67 6c Data Ascii: .glue-component-not-ready{visibility:hidden}.glue-component-ready{visibility:visible}.google .glue-component-not-ready,.no-js .glue-component-not-ready{visibility:visible}.h-google-red-50{color:#fbe9e7}.h-bg-google-red-50{background-color:#fbe9e7}.h-googl
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 30 36 30 35 35 7d 2e 68 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 35 30 30 7b 63 6f 6c 6f 72 3a 23 64 62 34 34 33 37 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 35 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 62 34 34 33 37 7d 2e 68 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 36 30 30 7b 63 6f 6c 6f 72 3a 23 64 32 33 66 33 31 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 36 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 32 33 66 33 31 7d 2e 68 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 37 30 30 7b 63 6f 6c 6f 72 3a 23 63 35 33 39 32 39 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 72 65 64 2d 37 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 63 35 33 39 32 Data Ascii: ckground-color:#e06055}.h-google-red-500{color:#db4437}.h-bg-google-red-500{background-color:#db4437}.h-google-red-600{color:#d23f31}.h-bg-google-red-600{background-color:#d23f31}.h-google-red-700{color:#c53929}.h-bg-google-red-700{background-color:#c5392
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 34 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 61 62 34 37 62 63 7d 2e 68 2d 70 75 72 70 6c 65 2d 35 30 30 7b 63 6f 6c 6f 72 3a 23 39 63 32 37 62 30 7d 2e 68 2d 62 67 2d 70 75 72 70 6c 65 2d 35 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 63 32 37 62 30 7d 2e 68 2d 70 75 72 70 6c 65 2d 36 30 30 7b 63 6f 6c 6f 72 3a 23 38 65 32 34 61 61 7d 2e 68 2d 62 67 2d 70 75 72 70 6c 65 2d 36 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 65 32 34 61 61 7d 2e 68 2d 70 75 72 70 6c 65 2d 37 30 30 7b 63 6f 6c 6f 72 3a 23 37 62 31 66 61 32 7d 2e 68 2d 62 67 2d 70 75 72 70 6c 65 2d 37 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 62 31 66 61 32 7d 2e 68 2d 70 75 72 70 6c 65 2d 38 30 30 7b 63 6f Data Ascii: 400{background-color:#ab47bc}.h-purple-500{color:#9c27b0}.h-bg-purple-500{background-color:#9c27b0}.h-purple-600{color:#8e24aa}.h-bg-purple-600{background-color:#8e24aa}.h-purple-700{color:#7b1fa2}.h-bg-purple-700{background-color:#7b1fa2}.h-purple-800{co
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 64 69 67 6f 2d 33 30 30 7b 63 6f 6c 6f 72 3a 23 37 39 38 36 63 62 7d 2e 68 2d 62 67 2d 69 6e 64 69 67 6f 2d 33 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 37 39 38 36 63 62 7d 2e 68 2d 69 6e 64 69 67 6f 2d 34 30 30 7b 63 6f 6c 6f 72 3a 23 35 63 36 62 63 30 7d 2e 68 2d 62 67 2d 69 6e 64 69 67 6f 2d 34 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 63 36 62 63 30 7d 2e 68 2d 69 6e 64 69 67 6f 2d 35 30 30 7b 63 6f 6c 6f 72 3a 23 33 66 35 31 62 35 7d 2e 68 2d 62 67 2d 69 6e 64 69 67 6f 2d 35 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 66 35 31 62 35 7d 2e 68 2d 69 6e 64 69 67 6f 2d 36 30 30 7b 63 6f 6c 6f 72 3a 23 33 39 34 39 61 62 7d 2e 68 2d 62 67 2d 69 6e 64 69 67 6f 2d 36 30 30 7b 62 61 63 6b 67 Data Ascii: digo-300{color:#7986cb}.h-bg-indigo-300{background-color:#7986cb}.h-indigo-400{color:#5c6bc0}.h-bg-indigo-400{background-color:#5c6bc0}.h-indigo-500{color:#3f51b5}.h-bg-indigo-500{background-color:#3f51b5}.h-indigo-600{color:#3949ab}.h-bg-indigo-600{backg
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 31 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 33 65 35 66 63 7d 2e 68 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 32 30 30 7b 63 6f 6c 6f 72 3a 23 38 31 64 34 66 61 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 32 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 31 64 34 66 61 7d 2e 68 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 33 30 30 7b 63 6f 6c 6f 72 3a 23 34 66 63 33 66 37 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 33 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 66 63 33 66 37 7d 2e 68 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 34 30 30 7b 63 6f 6c 6f 72 3a 23 32 39 62 36 66 36 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 62 6c 75 65 2d 34 30 30 Data Ascii: }.h-bg-light-blue-100{background-color:#b3e5fc}.h-light-blue-200{color:#81d4fa}.h-bg-light-blue-200{background-color:#81d4fa}.h-light-blue-300{color:#4fc3f7}.h-bg-light-blue-300{background-color:#4fc3f7}.h-light-blue-400{color:#29b6f6}.h-bg-light-blue-400
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 66 31 7d 2e 68 2d 74 65 61 6c 2d 31 30 30 7b 63 6f 6c 6f 72 3a 23 62 32 64 66 64 62 7d 2e 68 2d 62 67 2d 74 65 61 6c 2d 31 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 32 64 66 64 62 7d 2e 68 2d 74 65 61 6c 2d 32 30 30 7b 63 6f 6c 6f 72 3a 23 38 30 63 62 63 34 7d 2e 68 2d 62 67 2d 74 65 61 6c 2d 32 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 30 63 62 63 34 7d 2e 68 2d 74 65 61 6c 2d 33 30 30 7b 63 6f 6c 6f 72 3a 23 34 64 62 36 61 63 7d 2e 68 2d 62 67 2d 74 65 61 6c 2d 33 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 34 64 62 36 61 63 7d 2e 68 2d 74 65 61 6c 2d 34 30 30 7b 63 6f 6c 6f 72 3a 23 32 36 61 36 39 61 7d 2e 68 2d 62 67 2d 74 65 61 6c 2d 34 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: f1}.h-teal-100{color:#b2dfdb}.h-bg-teal-100{background-color:#b2dfdb}.h-teal-200{color:#80cbc4}.h-bg-teal-200{background-color:#80cbc4}.h-teal-300{color:#4db6ac}.h-bg-teal-300{background-color:#4db6ac}.h-teal-400{color:#26a69a}.h-bg-teal-400{background-co
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 35 35 35 32 34 7d 2e 68 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 35 30 7b 63 6f 6c 6f 72 3a 23 66 31 66 38 65 39 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 35 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 31 66 38 65 39 7d 2e 68 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 31 30 30 7b 63 6f 6c 6f 72 3a 23 64 63 65 64 63 38 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 31 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 63 65 64 63 38 7d 2e 68 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 32 30 30 7b 63 6f 6c 6f 72 3a 23 63 35 65 31 61 35 7d 2e 68 2d 62 67 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 32 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: background-color:#055524}.h-light-green-50{color:#f1f8e9}.h-bg-light-green-50{background-color:#f1f8e9}.h-light-green-100{color:#dcedc8}.h-bg-light-green-100{background-color:#dcedc8}.h-light-green-200{color:#c5e1a5}.h-bg-light-green-200{background-color:
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 39 65 39 64 32 34 7d 2e 68 2d 6c 69 6d 65 2d 39 30 30 7b 63 6f 6c 6f 72 3a 23 38 32 37 37 31 37 7d 2e 68 2d 62 67 2d 6c 69 6d 65 2d 39 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 32 37 37 31 37 7d 2e 68 2d 79 65 6c 6c 6f 77 2d 35 30 7b 63 6f 6c 6f 72 3a 23 66 66 66 64 65 37 7d 2e 68 2d 62 67 2d 79 65 6c 6c 6f 77 2d 35 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 64 65 37 7d 2e 68 2d 79 65 6c 6c 6f 77 2d 31 30 30 7b 63 6f 6c 6f 72 3a 23 66 66 66 39 63 34 7d 2e 68 2d 62 67 2d 79 65 6c 6c 6f 77 2d 31 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 39 63 34 7d 2e 68 2d 79 65 6c 6c 6f 77 2d 32 30 30 7b 63 6f 6c 6f 72 3a 23 66 66 66 35 39 Data Ascii: background-color:#9e9d24}.h-lime-900{color:#827717}.h-bg-lime-900{background-color:#827717}.h-yellow-50{color:#fffde7}.h-bg-yellow-50{background-color:#fffde7}.h-yellow-100{color:#fff9c4}.h-bg-yellow-100{background-color:#fff9c4}.h-yellow-200{color:#fff59
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 77 2d 37 30 30 7b 63 6f 6c 6f 72 3a 23 66 30 39 33 30 30 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 79 65 6c 6c 6f 77 2d 37 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 39 33 30 30 7d 2e 68 2d 67 6f 6f 67 6c 65 2d 79 65 6c 6c 6f 77 2d 38 30 30 7b 63 6f 6c 6f 72 3a 23 65 65 38 31 30 30 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 79 65 6c 6c 6f 77 2d 38 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 38 31 30 30 7d 2e 68 2d 67 6f 6f 67 6c 65 2d 79 65 6c 6c 6f 77 2d 39 30 30 7b 63 6f 6c 6f 72 3a 23 65 61 36 31 30 30 7d 2e 68 2d 62 67 2d 67 6f 6f 67 6c 65 2d 79 65 6c 6c 6f 77 2d 39 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 61 36 31 30 30 7d 2e 68 2d 6f 72 61 6e 67 65 2d 35 30 7b 63 6f 6c 6f 72 Data Ascii: w-700{color:#f09300}.h-bg-google-yellow-700{background-color:#f09300}.h-google-yellow-800{color:#ee8100}.h-bg-google-yellow-800{background-color:#ee8100}.h-google-yellow-900{color:#ea6100}.h-bg-google-yellow-900{background-color:#ea6100}.h-orange-50{color
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 35 37 32 32 7d 2e 68 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 36 30 30 7b 63 6f 6c 6f 72 3a 23 66 34 35 31 31 65 7d 2e 68 2d 62 67 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 36 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 34 35 31 31 65 7d 2e 68 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 37 30 30 7b 63 6f 6c 6f 72 3a 23 65 36 34 61 31 39 7d 2e 68 2d 62 67 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 37 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 36 34 61 31 39 7d 2e 68 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 38 30 30 7b 63 6f 6c 6f 72 3a 23 64 38 34 33 31 35 7d 2e 68 2d 62 67 2d 64 65 65 70 2d 6f 72 61 6e 67 65 2d 38 30 30 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a Data Ascii: ckground-color:#ff5722}.h-deep-orange-600{color:#f4511e}.h-bg-deep-orange-600{background-color:#f4511e}.h-deep-orange-700{color:#e64a19}.h-bg-deep-orange-700{background-color:#e64a19}.h-deep-orange-800{color:#d84315}.h-bg-deep-orange-800{background-color:

Timestamp	Bytes transferred	Direction	Data
2024-09-30 13:48:37 UTC	872	OUT	GET /account/about/static/js/detect.min.js?cache=f60795d HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=518=reXx_gkIaQF1eidALLflA0R8CfoERQhO9FFBg2wPHSqbCpANGs3P0eChxdVKqSFb5dba1JqHp0zGTt2t5T3tLDpE2DmFcoyrAzavd8nSHvq9ixS8okGZ2GDJNEoe2wbXdr9D8c1A-zeQoEKtBA5Is1qgEUDP951En-2ab3Wey5XngYZlwe3OX1QcwdQ
2024-09-30 13:48:37 UTC	859	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/uxe-owners-acl/www_google Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="uxe-owners-acl/www_google" Report-To: {"group":"uxe-owners-acl/www_google","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/uxe-owners-acl/www_google"}]} Content-Length: 1991 Date: Mon, 30 Sep 2024 13:48:37 GMT Expires: Mon, 30 Sep 2024 13:48:37 GMT Cache-Control: private, max-age=3000 Last-Modified: Mon, 25 May 2020 08:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-30 13:48:37 UTC	531	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 7b 63 3a 22 69 65 22 2c 62 3a 22 61 6e 64 72 6f 69 64 22 2c 66 3a 22 69 6f 73 22 7d 2c 68 3d 2f 4d 53 49 45 5c 73 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 3b 5c 73 57 69 6e 64 6f 77 73 5c 73 4e 54 2f 2c 6b 3d 2f 57 69 6e 64 6f 77 73 5c 73 4e 54 2e 2b 54 72 69 64 65 6e 74 2e 2b 72 76 3a 28 5c 64 2b 29 28 3f 3a 2e 28 5c 64 2b 29 29 3f 2f 2c 6c 3d 7b 63 3a 68 2c 67 3a 6b 2c 66 3a 2f 28 3f 3a 69 50 68 6f 6e 65 7c 69 50 61 64 29 3f 3b 2e 2b 4f 53 5c 73 28 5c 64 2b 29 5f 5c 64 2b 2f 2c 62 3a 2f 41 6e 64 72 6f 69 64 5c 73 28 5c 64 2b 29 5c 2e 28 5c 64 2b 29 2f 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 76 61 72 20 62 3d 70 2c 63 3d 71 3b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 77 69 6e 64 6f 77 3a 63 3b 61 3d Data Ascii: (function(){var g={c:"ie",b:"android",f:"ios"},h=/MSIE\s(\d+)\.(\d+);\sWindows\sNT/,k=/Windows\sNT.+Trident.+rv:(\d+)(?:.(\d+))?/,l={c:h,g:k,f:/(?:iPhone\|iPad)?;.+OS\s(\d+)_\d+/,b:/Android\s(\d+)\.(\d+)/};function m(a){var b=p,c=q;c=void 0===c?window:c;a=
2024-09-30 13:48:37 UTC	1390	IN	Data Raw: 21 66 7c 7c 21 65 29 74 68 72 6f 77 20 45 72 72 6f 72 28 76 2e 63 61 6e 6e 6f 74 44 65 63 6f 72 61 74 65 29 3b 66 28 29 26 26 28 62 2e 63 6c 61 73 73 4e 61 6d 65 2b 3d 22 20 67 6c 75 65 2d 22 2b 65 29 7d 7d 76 61 72 20 76 3d 7b 63 61 6e 6e 6f 74 44 65 63 6f 72 61 74 65 3a 22 43 61 6e 6e 6f 74 20 64 65 63 6f 72 61 74 65 20 66 6f 72 20 74 68 65 20 73 70 65 63 69 66 69 65 64 20 66 65 61 74 75 72 65 2e 22 7d 3b 76 61 72 20 77 3d 22 66 6c 65 78 57 72 61 70 20 57 65 62 6b 69 74 46 6c 65 78 57 72 61 70 20 4d 6f 7a 46 6c 65 78 57 72 61 70 20 4f 46 6c 65 78 57 72 61 70 20 6d 73 46 6c 65 78 57 72 61 70 20 62 6f 78 44 69 72 65 63 74 69 6f 6e 20 57 65 62 6b 69 74 42 6f 78 44 69 72 65 63 74 69 6f 6e 20 4d 6f 7a 42 6f 78 44 69 72 65 63 74 69 6f 6e 20 4f 42 6f 78 44 69 Data Ascii: !f\|\|!e)throw Error(v.cannotDecorate);f()&&(b.className+=" glue-"+e)}}var v={cannotDecorate:"Cannot decorate for the specified feature."};var w="flexWrap WebkitFlexWrap MozFlexWrap OFlexWrap msFlexWrap boxDirection WebkitBoxDirection MozBoxDirection OBoxDi
2024-09-30 13:48:37 UTC	70	IN	Data Raw: 63 6c 61 73 73 4e 61 6d 65 2b 3d 28 4d 2e 63 6c 61 73 73 4e 61 6d 65 3f 22 20 22 3a 22 22 29 2b 22 67 6c 75 65 2d 61 70 70 2d 73 75 70 70 6f 72 74 65 64 22 7d 3b 7d 29 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 29 0a Data Ascii: className+=(M.className?" ":"")+"glue-app-supported"};}).call(window)