Edit tour

Windows Analysis Report
https://ninetyfitful.com/

Overview

General Information

Sample URL:	https://ninetyfitful.com/
Analysis ID:	1524789
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5440 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2452,i,5358577874820383090,9691951192532759075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 5740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ninetyfitful.com/" MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=0kP-ZtawLumF9u8P542x-AU&rt=wsrt.2908,cbt.106,hst.74&opi=89978449&ts=300 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.149"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.12:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.12:49728 version: TLS 1.2

Source:	Binary string: this.ka.Ak("DIV",b),a.appendChild(this.nL),this.oa&&(a=this.oa,a.Oc=this.nL,a.render()),_.Vl.Rb(this.nL,!!this.oa);_.Idb(this,this.g3a)};_.m.Sq=function(){_.mr.Dd.Sq.call(this);_.xm(this).listen(this.Ja(),"keydown",this.vSb).listen(this.Ja(),"keypress",this.vSb);_.xm(this).listen(this.nL,"click",this.RPc);_.Pdb(this,this.uSb);_.xm(this).listen(this.BP,"click",this.Ezd);var a=this.Ja();_.Wl(a,"dialog");this.wV.id!==""&&_.Xl(a,"labelledby",this.wV.id);this.NAb\|\|_.udb(this,!1)}; source: chromecache_312.2.dr
Source:	Binary string: Ndb.prototype.fetch=function(){return _.Ddb(_.Rdb(this.Da,this.Da,this))};_.Xq={};var Sdb,Vdb,Wdb,Udb,Xdb,Ydb,aeb,$db,deb,beb,ceb,Zdb,Ldb;_.Yq=function(a){_.Vn.call(this,a.Na);this.Ca=a.service.SIc;this.Gk=null;this.Aa=0};_.F(_.Yq,_.Vn);_.Yq.Ha=function(){return{service:{SIc:_.pdb}}};_.Yq.prototype.fia=function(a){return Mdb(a,this)};_.Yq.prototype.oa=function(a,b){return new Ndb(a,this,b)};_.Yq.prototype.fetch=function(a,b,c,d,e){this.Aa=0;return _.Ddb(_.Rdb(this,b,_.Pdb(this.oa(a,c).Aa(d),e)))};_.Rdb=function(a,b,c){return Sdb(a,b,[c])[0]}; source: chromecache_560.2.dr, chromecache_555.2.dr
Source:	Binary string: _.m.vz=function(){this.isVisible()&&this.setVisible(!1);_.Pdb(this,!1);_.mr.Dd.vz.call(this)};_.m.setVisible=function(a){a!=this.isVisible()&&(this.Ts()\|\|this.render(),_.mr.Dd.setVisible.call(this,a))};_.m.onShow=function(){_.mr.Dd.onShow.call(this);this.dispatchEvent("aftershow")};_.m.uC=function(){_.mr.Dd.uC.call(this);this.dispatchEvent("afterhide");this.tSb&&this.dispose()}; source: chromecache_312.2.dr
Source:	Binary string: _.Pdb=function(a,b){var c=(0,_.Ae)(a.ta+"-title-draggable").split(" ");a.Ja()&&(b?_.fl.addAll(a.vV,c):_.fl.removeAll(a.vV,c));b&&!a.oaa?(b=new _.Odb(a.Ja(),a.vV),a.oaa=b,_.fl.addAll(a.vV,c),_.ge(a.oaa,"start",a.rId,!1,a),_.ge(a.oaa,"drag",a.C8a,!1,a)):!b&&a.oaa&&(a.oaa.dispose(),a.oaa=null)};_.mr=function(a,b,c){Mdb.call(this,b,c);this.ta=a\|\|"modal-dialog";this.oa=_.zm(_.zm(new _.ym,_.tCa,!0),_.uCa,!1,!0)};_.ch(_.mr,Mdb);_.m=_.mr.prototype;_.m.dkb=!0;_.m.WQa=!0;_.m.NAb=!0;_.m.uSb=!0;_.m.g3a=.5; source: chromecache_312.2.dr
Source:	Binary string: d.value,d in a\|\|(a[d]=b[d]);return a},kdb=function(a){this.Ga=_.r(a)};_.F(kdb,_.t);var ldb=[2,3,4,5,6];var ndb=function(a){this.Ga=_.r(a)};_.F(ndb,_.t);var jdb=function(a){this.Ga=_.r(a)};_.F(jdb,_.t);jdb.prototype.getIdentifier=function(){return _.v(this,ndb,1)};var odb=function(a){this.Ga=_.r(a)};_.F(odb,_.t);var idb=_.Wb(odb);_.pdb=function(a){_.Vn.call(this,a.Na)};_.F(_.pdb,_.Vn);_.pdb.Ha=_.Vn.Ha;_.pdb.prototype.get=function(a){var b=mdb()[a];return b!==void 0?new _.Ic("nQyAE."+a,b):null};_.pdb.prototype.getAll=function(){return(new _.Ic("nQyAE",mdb())).object()};_.Xn(_.lta,_.pdb); source: chromecache_560.2.dr, chromecache_555.2.dr
Source:	Binary string: $db=function(a,b,c,d,e,f){var g=new Map,h={},l=[],m=c.wm.getChildren(),p=1,q;for(q in m)if(!f\|\|q===f){var u=m[q],z=u.name;g.set(z,q);var A=u.qy(Odb(c),d,e);if(aeb(a,A)){u=a;var E=p,M=b,O=c.oa;c.wm.getName();A=A.iJ?beb(u,M,A,E):A.recursive?ceb(u,M,A,E):deb(u,M,A,E,O);u=A.Uwa;A=A.y8a;u&&(h[z]=u,p+=1,l.push.apply(l,_.md(A)))}}return{ozd:h,QDc:l,nzd:g}};deb=function(a,b,c,d,e){e=_.Qdb(_.Pdb(a.oa(c.id,c.Ed),e),c.XH,c.Xr);a=Udb(a,b,e,d+";0",c);return{Uwa:_.ne([a.Uwa]),y8a:a.y8a}}; source: chromecache_560.2.dr, chromecache_555.2.dr
Source:	Binary string: var Mdb=function(a,b){var c=_.ZKa(a);if(c)return _.ne(c);if(c=a.XyHi9)return c;c=_.ue(a,function(d){return!!d.attributes&&!!d.attributes.getNamedItem("c-wiz")});if(!c\|\|a.getAttribute("data-node-index")==="0;0")return Ldb(b,a);b=Mdb(c,b);if(!a.hasAttribute("c-wiz"))return b;b=b.then(function(d){return Jdb(d).then(function(e){var f=a.getAttribute("data-node-index");e=e[f];if(!e)throw Error("re`"+d.id+"`"+a.getAttribute("jsrenderer")+"`"+f);_.Kdb(e,a);return e})});return a.XyHi9=b};var Ndb=function(a,b,c){this.wm=a;this.Ca=c\|\|void 0;this.Da=b},Odb=function(a){return a.Ca\|\|new (a.wm.getParams().Cb)};Ndb.prototype.fia=function(){return this.Oa};Ndb.prototype.Aa=function(a){this.Ba=a;return this};_.Pdb=function(a,b){a.oa=Object.assign(a.oa\|\|{},b);return a};Ndb.prototype.b$a=function(){var a=this.oa&&this.oa.Ku\|\|[];a.push({key:_.Yp,value:!0});return _.Pdb(this,{Ku:a})};_.Qdb=function(a,b,c){a.Fa=b;a.Ia=c;return a}; source: chromecache_560.2.dr, chromecache_555.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.60
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_423.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),la=P.length,na=0;na<la;na++)if(!v&&c(P[na],H.Ie)){nJ("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_583.2.dr, chromecache_436.2.dr, chromecache_598.2.dr, chromecache_406.2.dr, chromecache_423.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},dk:function(){e=zb()},od:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)
Source: chromecache_281.2.dr	String found in binary or memory: __wpcc.e.global.Object.defineProperties(rb,{defaults:{configurable:!0,enumerable:!0,get:function(){return{panelsBreakpoints:["sm"],isPanelsAnimated:!0,isResponsive:!0,panelsCount:2}}}});var kd;(kd\|\|(kd={})).IFRAME_SCRIPT_URL="https://www.youtube.com/iframe_api";var Sd,Td=Sd\|\|(Sd={});Td.VIDEO_ID="glueYtVideoVid";Td.PLAYER_ID="glueYtPlayerId";Td.HEIGHT="glueYtVideoHeight";Td.WIDTH="glueYtVideoWidth";Td.PLAYER_VARS="glueYtVideoPlayerVars";var tb,Ud=tb\|\|(tb={});Ud.ASSET="glue-video__preview-container";Ud.DURATION="glue-video__timestamp-duration";Ud.HIDE_ELEMENT="glue-video--hidden";Ud.IMAGE_CONTAINER="glue-video__preview-image";Ud.TIMESTAMP="glue-video__timestamp"; equals www.youtube.com (Youtube)
Source: chromecache_406.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={ih:e,gh:f,hh:g,Sh:k,Th:m,Ie:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(VC(w,"iframe_api")\|\|VC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!MC&&TC(x[A],p.Ie))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_288.2.dr, chromecache_578.2.dr, chromecache_349.2.dr, chromecache_321.2.dr, chromecache_418.2.dr	String found in binary or memory: return b}IC.F="internal.enableAutoEventOnTimer";var gc=ja(["data-gtm-yt-inspected-"]),KC=["www.youtube.com","www.youtube-nocookie.com"],LC,MC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: ninetyfitful.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: sustainability.google
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: googletagmanager.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: mail.google.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2452,i,5358577874820383090,9691951192532759075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ninetyfitful.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2552 --field-trial-handle=2452,i,5358577874820383090,9691951192532759075,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://sustainability.google/static/index.min.js?cache=47ade0f	0%	URL Reputation	safe
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://one.google.com/about/ai-premium/	0%	URL Reputation	safe
https://lh3.googleusercontent.com/1n27m9ovZ73GRgjXGsPEwcfY9rDO-8DFeimUp0o1QGdlZZiApOoxjbei1TD8OWBZfl	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://sustainability.google/static/index.min.css?cache=732a3af	0%	URL Reputation	safe
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy	0%	URL Reputation	safe
https://lens.google.com	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	0%	URL Reputation	safe
https://lh3.googleusercontent.com/vRVBEMgF_f6E8nMWsk-t0rIxQpFtNPQ1qNCIhoo9Wr2L0-vVHcbMBcB1aGeJ19S421	0%	URL Reputation	safe
https://lens.google.com/gen204	0%	URL Reputation	safe
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7u	0%	Virustotal		Browse
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	0%	Virustotal		Browse
https://www.google.com/gmail/about/policy/	0%	Virustotal		Browse
https://ogs.google.com/	0%	Virustotal		Browse
https://ogs.google.com/widget/callout	0%	Virustotal		Browse
https://www.google.com/intl/hi/search/howsearchworks/	1%	Virustotal		Browse
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3XA-l6tJyz2qk7Xxk8ThS1-W78mBoEfPVKF4hm4=rw-e365-w2880	0%	Virustotal		Browse
https://lh3.googleusercontent.com/FU-s_R5k9ZDky6RTNWsdrN8xa9Jp7C2mwd_Kj9NHQe6Cw_EipUIFLjv0L7fGBh7Klo	0%	Virustotal		Browse
https://www.google.com/intl/zh-TW/search/howsearchworks/	1%	Virustotal		Browse
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3	0%	Virustotal		Browse
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKi	0%	Virustotal		Browse
https://i.ytimg.com/vi_webp/	0%	Virustotal		Browse
https://lh3.googleusercontent.com/hgUtJ1raSgkAHurP6yDzukLnNF1V7vS4MTeqzThHkHTz1sc8nYizzkb6TPElQ0_LzI	0%	Virustotal		Browse
https://www.google.com/intl/hr/search/howsearchworks/	1%	Virustotal		Browse
https://www.google.com/intl/es/search/howsearchworks/	0%	Virustotal		Browse
https://www.google.com/intl/no/search/howsearchworks/	1%	Virustotal		Browse

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/	chromecache_545.2.dr	false	0%, Virustotal, Browse	unknown
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7u	chromecache_496.2.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/g/collect	chromecache_288.2.dr, chromecache_578.2.dr, chromecache_321.2.dr, chromecache_406.2.dr, chromecache_418.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/gmail/about/policy/	chromecache_496.2.dr	false	0%, Virustotal, Browse	unknown
https://lh3.googleusercontent.com/6Q907Y7fYBiaW6VAnv1r8BHZnFXjJm138u89gr8j8NSikSES5OrnMMP0bDiTWR7YyY	chromecache_402.2.dr	false		unknown
https://www.google.com/intl/hi/search/howsearchworks/	chromecache_402.2.dr	false	1%, Virustotal, Browse	unknown
https://www.google.com/intl/en/search/howsearchworks/	chromecache_402.2.dr	false		unknown
https://ogs.google.com/widget/callout	chromecache_545.2.dr	false	0%, Virustotal, Browse	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_384.2.dr, chromecache_539.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/FU-s_R5k9ZDky6RTNWsdrN8xa9Jp7C2mwd_Kj9NHQe6Cw_EipUIFLjv0L7fGBh7Klo	chromecache_496.2.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/intl/zh-TW/search/howsearchworks/	chromecache_402.2.dr	false	1%, Virustotal, Browse	unknown
https://blog.google/outreach-initiatives/sustainability/helping-monarch-butterflies-2024/	chromecache_303.2.dr, chromecache_444.2.dr	false		unknown
https://lh3.googleusercontent.com/0fVDL02i6kLapIFkzsaMkokcsyNFdTDEaCm2Dy_BVkH_zQKnEmF7x0A0aLzXII5cvU	chromecache_402.2.dr	false		unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3	chromecache_496.2.dr	false	0%, Virustotal, Browse	unknown
https://i.ytimg.com/vi_webp/	chromecache_281.2.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/intl/en-IN/search/howsearchworks/	chromecache_402.2.dr	false		unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKi	chromecache_496.2.dr	false	0%, Virustotal, Browse	unknown
https://lh3.googleusercontent.com/VzZoNfTFy0Q5bMd9mVfo4M7dp1-OXWmUWsSAttnwnbw6agWisqAeJeJUCzxiZq1UhJ	chromecache_402.2.dr	false		unknown
https://lh3.googleusercontent.com/HX2vTdXOdmn1-AwipdtTylH6l-1DaI2BOwHwV7cKGy9WXDe7_BTaXdSQ7Yyrr3khwv	chromecache_402.2.dr	false		unknown
https://ogs.google.com/widget/callout?eom=1	chromecache_360.2.dr, chromecache_563.2.dr	false		unknown
https://lh3.googleusercontent.com/hgUtJ1raSgkAHurP6yDzukLnNF1V7vS4MTeqzThHkHTz1sc8nYizzkb6TPElQ0_LzI	chromecache_496.2.dr	false	0%, Virustotal, Browse	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_539.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/iRxTGREAOizQhtbCjDGShDHvBc39qEI004M8SClsSzIBgvBsbUMFNVMDfAfzoEzgvr	chromecache_402.2.dr	false		unknown
https://one.google.com/about/ai-premium/	chromecache_496.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/no/search/howsearchworks/	chromecache_402.2.dr	false	1%, Virustotal, Browse	unknown
https://lh3.googleusercontent.com/MfSkcsOaJkmnP-qxR6nZ3jiaIbyEqxGs7zCkorzmvi-Y9oVUkr0UThdrhaqhC2CT1h	chromecache_402.2.dr	false		unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvP	chromecache_402.2.dr	false		unknown
https://www.google.com/intl/hr/search/howsearchworks/	chromecache_402.2.dr	false	1%, Virustotal, Browse	unknown
https://workspace.google.com/products/gmail/index.html?utm_source=gmailforwork&utm_medium=et&amp	chromecache_496.2.dr	false		unknown
https://www.google.com/tools/feedback	chromecache_311.2.dr, chromecache_353.2.dr, chromecache_300.2.dr, chromecache_295.2.dr	false		unknown
https://lh3.googleusercontent.com/1n27m9ovZ73GRgjXGsPEwcfY9rDO-8DFeimUp0o1QGdlZZiApOoxjbei1TD8OWBZfl	chromecache_496.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/VT4SCA4b12NEXu4W5qmH5nMdrHvYyXiasJ8kqJWUd7rtLUdO78YTV5v0ulPoXyXn8X	chromecache_402.2.dr	false		unknown
https://www.google.com/intl/es/search/howsearchworks/	chromecache_402.2.dr	false	0%, Virustotal, Browse	unknown
https://www.google.com/intl/el/search/howsearchworks/	chromecache_402.2.dr	false		unknown
https://about.google/	chromecache_402.2.dr, chromecache_496.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_338.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/es-419/search/howsearchworks/	chromecache_402.2.dr	false		unknown
https://blog.google/products/search/generative-ai-google-search-may-2024/	chromecache_402.2.dr	false		unknown
https://workspace.google.com/?utm_source=gmailforwork&utm_medium=et&utm_campaign=body&ut	chromecache_496.2.dr	false		unknown
https://lh3.googleusercontent.com/uEalHdGqJHrnhoH1O5rYmk5kO2c-xB5HxCobW5KSipKv22HsrmhZNjVvQmBdWcV06W	chromecache_402.2.dr	false		unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.229	mail.google.com	United States	15169	GOOGLEUS	false
216.58.212.164	unknown	United States	15169	GOOGLEUS	false
172.217.18.14	unknown	United States	15169	GOOGLEUS	false
142.250.186.174	unknown	United States	15169	GOOGLEUS	false
192.243.61.227	ninetyfitful.com	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
216.239.36.21	sustainability.google	United States	15169	GOOGLEUS	false
216.239.38.21	unknown	United States	15169	GOOGLEUS	false
142.250.186.72	googletagmanager.com	United States	15169	GOOGLEUS	false
142.250.186.113	csp.withgoogle.com	United States	15169	GOOGLEUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.83	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
216.239.32.21	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	plus.l.google.com	United States	15169	GOOGLEUS	false

IP
192.168.2.16
192.168.2.12

Name	IP	Active	Malicious	Reputation
google.com	142.250.185.174	true	false	unknown
csp.withgoogle.com	142.250.186.113	true	false	unknown
plus.l.google.com	142.250.184.238	true	false	unknown
mail.google.com	142.250.185.229	true	false	unknown
googletagmanager.com	142.250.186.72	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www3.l.google.com	142.250.181.238	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
sustainability.google	216.239.36.21	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	216.58.206.83	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
blog.google	216.239.36.21	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.193	true	false	unknown
ninetyfitful.com	192.243.61.227	true	false	unknown
www.blog.google	unknown	unknown	false	unknown
ogs.google.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1524789
Start date and time:	2024-10-03 09:11:17 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ninetyfitful.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@21/569@42/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content= Browse: https://google.com/search/howsearchworks/?fg=1 Browse: https://mail.google.com/mail/&ogbl Browse: https://www.google.com/imghp?hl=en&ogbl

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 3 06:12:15 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.981770744682035
Encrypted:	false
SSDEEP:	48:81jodST22HridAKZdA1kehwiZUklqehDy+3:81jdyDoy
MD5:	0DF086E580007D69703D14D7C620568F
SHA1:	DDBA76CA916D873A39A9B5FB66FC87610C7E5A47
SHA-256:	ECF8365ACD5DC6D2A96AF8BDF876CB1A91362A7480AD86B7ED92A14E178E0CEC
SHA-512:	138852D446C9C11F849522D15DF956409FD7CE03C0CBA67C749038C671970B93922F5B06450D22A82920F9667F9D00D5069EB74A0E6DFDC13FD56AB18997A1B9
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....$...c.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW.a..PROGRA~1..t......O.ICY.9....B...............J........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VCY.9....L.....................p+j.G.o.o.g.l.e.....T.1.....EW.[..Chrome..>......CW.VCY.9....M......................xN.C.h.r.o.m.e.....`.1.....EW.[..APPLIC~1..H......CW.VCY.9............................P.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VCY.9.....d......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........N.!e.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 3, 2024 09:12:16.049241066 CEST	192.168.2.12	1.1.1.1	0x1cff	Standard query (0)	ninetyfitful.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.049554110 CEST	192.168.2.12	1.1.1.1	0x72aa	Standard query (0)	ninetyfitful.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:16.801496029 CEST	192.168.2.12	1.1.1.1	0x9ffb	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.801660061 CEST	192.168.2.12	1.1.1.1	0x619b	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:17.843245029 CEST	192.168.2.12	1.1.1.1	0x8ceb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:17.843559980 CEST	192.168.2.12	1.1.1.1	0xf021	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:20.785856009 CEST	192.168.2.12	1.1.1.1	0xa568	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:20.786602974 CEST	192.168.2.12	1.1.1.1	0x53ef	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:22.455430031 CEST	192.168.2.12	1.1.1.1	0xdf4a	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:22.456613064 CEST	192.168.2.12	1.1.1.1	0x2b03	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:22.457220078 CEST	192.168.2.12	1.1.1.1	0x77d6	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:22.457731009 CEST	192.168.2.12	1.1.1.1	0x337e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:23.342087030 CEST	192.168.2.12	1.1.1.1	0xdc8e	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:23.342087030 CEST	192.168.2.12	1.1.1.1	0xe1bd	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:23.713335037 CEST	192.168.2.12	1.1.1.1	0x4e38	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:23.713335037 CEST	192.168.2.12	1.1.1.1	0x85c2	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:25.395669937 CEST	192.168.2.12	1.1.1.1	0x1641	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:25.395828962 CEST	192.168.2.12	1.1.1.1	0x649e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:36.446397066 CEST	192.168.2.12	1.1.1.1	0xada4	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:36.446945906 CEST	192.168.2.12	1.1.1.1	0x973a	Standard query (0)	sustainability.google	65	IN (0x0001)	false
Oct 3, 2024 09:12:40.179855108 CEST	192.168.2.12	1.1.1.1	0x39dd	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:40.180308104 CEST	192.168.2.12	1.1.1.1	0xec67	Standard query (0)	sustainability.google	65	IN (0x0001)	false
Oct 3, 2024 09:12:42.879796028 CEST	192.168.2.12	1.1.1.1	0x7ea5	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:42.880059958 CEST	192.168.2.12	1.1.1.1	0x4867	Standard query (0)	www.blog.google	65	IN (0x0001)	false
Oct 3, 2024 09:12:45.561216116 CEST	192.168.2.12	1.1.1.1	0x89fe	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:45.561880112 CEST	192.168.2.12	1.1.1.1	0x83d5	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 3, 2024 09:12:46.756974936 CEST	192.168.2.12	1.1.1.1	0x7a9e	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:46.756974936 CEST	192.168.2.12	1.1.1.1	0xa39c	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 3, 2024 09:12:54.500427961 CEST	192.168.2.12	1.1.1.1	0xcdb8	Standard query (0)	googletagmanager.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:54.500427961 CEST	192.168.2.12	1.1.1.1	0x34f4	Standard query (0)	googletagmanager.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:54.656970978 CEST	192.168.2.12	1.1.1.1	0x4073	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:54.657470942 CEST	192.168.2.12	1.1.1.1	0xdc10	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 3, 2024 09:12:56.381376028 CEST	192.168.2.12	1.1.1.1	0x4e97	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:56.381376028 CEST	192.168.2.12	1.1.1.1	0x2268	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 3, 2024 09:13:04.763679981 CEST	192.168.2.12	1.1.1.1	0xefcf	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:04.763766050 CEST	192.168.2.12	1.1.1.1	0xef28	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Oct 3, 2024 09:13:09.742666960 CEST	192.168.2.12	1.1.1.1	0x3f8f	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:09.742971897 CEST	192.168.2.12	1.1.1.1	0xf349	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:13:26.183551073 CEST	192.168.2.12	1.1.1.1	0x4b73	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:26.183551073 CEST	192.168.2.12	1.1.1.1	0xd019	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 3, 2024 09:13:27.636657000 CEST	192.168.2.12	1.1.1.1	0x4b3	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:27.637181997 CEST	192.168.2.12	1.1.1.1	0xc6ef	Standard query (0)	play.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.118820906 CEST	1.1.1.1	192.168.2.12	0x1cff	No error (0)	ninetyfitful.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.808312893 CEST	1.1.1.1	192.168.2.12	0x9ffb	No error (0)	google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:16.808603048 CEST	1.1.1.1	192.168.2.12	0x619b	No error (0)	google.com			65	IN (0x0001)	false
Oct 3, 2024 09:12:17.849993944 CEST	1.1.1.1	192.168.2.12	0x8ceb	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:18.054112911 CEST	1.1.1.1	192.168.2.12	0xf021	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 09:12:20.793755054 CEST	1.1.1.1	192.168.2.12	0xa568	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:20.794115067 CEST	1.1.1.1	192.168.2.12	0x53ef	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 3, 2024 09:12:22.468480110 CEST	1.1.1.1	192.168.2.12	0xdf4a	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:22.468480110 CEST	1.1.1.1	192.168.2.12	0xdf4a	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:22.469160080 CEST	1.1.1.1	192.168.2.12	0x77d6	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:22.469160080 CEST	1.1.1.1	192.168.2.12	0x77d6	No error (0)	plus.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:22.469310999 CEST	1.1.1.1	192.168.2.12	0x337e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:22.470942974 CEST	1.1.1.1	192.168.2.12	0x2b03	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:23.349664927 CEST	1.1.1.1	192.168.2.12	0xdc8e	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:23.724783897 CEST	1.1.1.1	192.168.2.12	0x4e38	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:23.724783897 CEST	1.1.1.1	192.168.2.12	0x4e38	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:23.725253105 CEST	1.1.1.1	192.168.2.12	0x85c2	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:25.404275894 CEST	1.1.1.1	192.168.2.12	0x1641	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:26.608360052 CEST	1.1.1.1	192.168.2.12	0xf50b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:26.608360052 CEST	1.1.1.1	192.168.2.12	0xf50b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:27.572436094 CEST	1.1.1.1	192.168.2.12	0xdd2c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:27.572436094 CEST	1.1.1.1	192.168.2.12	0xdd2c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:36.500174999 CEST	1.1.1.1	192.168.2.12	0xada4	No error (0)	sustainability.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:36.500174999 CEST	1.1.1.1	192.168.2.12	0xada4	No error (0)	sustainability.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:36.500174999 CEST	1.1.1.1	192.168.2.12	0xada4	No error (0)	sustainability.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:36.500174999 CEST	1.1.1.1	192.168.2.12	0xada4	No error (0)	sustainability.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:40.212531090 CEST	1.1.1.1	192.168.2.12	0x39dd	No error (0)	sustainability.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:40.212531090 CEST	1.1.1.1	192.168.2.12	0x39dd	No error (0)	sustainability.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:40.212531090 CEST	1.1.1.1	192.168.2.12	0x39dd	No error (0)	sustainability.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:40.212531090 CEST	1.1.1.1	192.168.2.12	0x39dd	No error (0)	sustainability.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:41.085516930 CEST	1.1.1.1	192.168.2.12	0xe249	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:41.085516930 CEST	1.1.1.1	192.168.2.12	0xe249	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:42.887038946 CEST	1.1.1.1	192.168.2.12	0x7ea5	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:42.887038946 CEST	1.1.1.1	192.168.2.12	0x7ea5	No error (0)	ghs-svc-https-sni.ghs-ssl.googlehosted.com		216.58.206.83	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:42.919811964 CEST	1.1.1.1	192.168.2.12	0x4867	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:45.568494081 CEST	1.1.1.1	192.168.2.12	0x89fe	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:45.568494081 CEST	1.1.1.1	192.168.2.12	0x89fe	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:45.568494081 CEST	1.1.1.1	192.168.2.12	0x89fe	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:45.568494081 CEST	1.1.1.1	192.168.2.12	0x89fe	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:46.763735056 CEST	1.1.1.1	192.168.2.12	0x7a9e	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:46.763735056 CEST	1.1.1.1	192.168.2.12	0x7a9e	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:46.763735056 CEST	1.1.1.1	192.168.2.12	0x7a9e	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:46.763735056 CEST	1.1.1.1	192.168.2.12	0x7a9e	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:54.509924889 CEST	1.1.1.1	192.168.2.12	0xcdb8	No error (0)	googletagmanager.com		142.250.186.72	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:54.663933039 CEST	1.1.1.1	192.168.2.12	0x4073	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:54.663933039 CEST	1.1.1.1	192.168.2.12	0x4073	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:54.664318085 CEST	1.1.1.1	192.168.2.12	0xdc10	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:56.742033958 CEST	1.1.1.1	192.168.2.12	0x4e97	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:12:56.742033958 CEST	1.1.1.1	192.168.2.12	0x4e97	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:12:56.743149042 CEST	1.1.1.1	192.168.2.12	0x2268	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:13:04.770637989 CEST	1.1.1.1	192.168.2.12	0xefcf	No error (0)	csp.withgoogle.com		142.250.186.113	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:07.342822075 CEST	1.1.1.1	192.168.2.12	0x42d3	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:13:07.342822075 CEST	1.1.1.1	192.168.2.12	0x42d3	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:09.749470949 CEST	1.1.1.1	192.168.2.12	0x3f8f	No error (0)	mail.google.com		142.250.185.229	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:26.194941044 CEST	1.1.1.1	192.168.2.12	0x4b73	No error (0)	play.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:26.745100021 CEST	1.1.1.1	192.168.2.12	0x96e8	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 3, 2024 09:13:26.745100021 CEST	1.1.1.1	192.168.2.12	0x96e8	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 3, 2024 09:13:27.644150972 CEST	1.1.1.1	192.168.2.12	0x4b3	No error (0)	play.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:16 UTC	659	OUT	GET / HTTP/1.1 Host: ninetyfitful.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 07:12:16 UTC	421	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.21.6 Date: Thu, 03 Oct 2024 07:12:16 GMT Content-Type: text/html Content-Length: 169 Connection: close Location: https://google.com Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: a9429447f13d90299ee2ea47c5b02660 Cache-Control: max-age=0, private, no-cache Pragma: no-cache Strict-Transport-Security: max-age=0; includeSubdomains
2024-10-03 07:12:16 UTC	169	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 31 2e 36 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.21.6</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:18 UTC	657	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-03 07:12:18 UTC	1762	IN	HTTP/1.1 200 OK Date: Thu, 03 Oct 2024 07:12:18 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-t96A9snbMHR9gonnRz8C9g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; expires=Tue, 01-Apr-2025 07:12:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU; expires=Fri, 04-Apr-2025 07:12:18 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 07:12:18 UTC	1762	IN	Data Raw: 32 30 61 63 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 20ac<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-10-03 07:12:18 UTC	1762	IN	Data Raw: 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 76 61 72 20 64 3b 28 64 3d 67 6f 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 Data Ascii: ,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];var d;(d=google).x\|\|(d.x
2024-10-03 07:12:18 UTC	1762	IN	Data Raw: 6e 67 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 74 3d 72 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e Data Ascii: ng&&"navigationStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,t=r?aa\|\|window.performance.timing.navigationStart:void 0;function u(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.
2024-10-03 07:12:18 UTC	1762	IN	Data Raw: 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 44 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 Data Ascii: a.removeEventListener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var pa=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<D.length;++d)if(a.get
2024-10-03 07:12:18 UTC	1324	IN	Data Raw: 22 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 49 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b Data Ascii: "img"),c=0,d=b.length;c<d;++c)a(I(b[c]))};function ra(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{
2024-10-03 07:12:18 UTC	372	IN	Data Raw: 31 36 64 0d 0a 29 7d 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 78 65 22 2c 22 6c 6f 61 64 22 29 3b 21 77 69 6e 64 6f 77 2e 5f 68 73 74 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6d 61 72 6b 28 22 53 65 61 72 63 68 48 65 61 64 53 74 61 72 74 22 29 3b 76 61 72 20 4f 3b 69 66 28 28 4f 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 29 3d 3d 6e 75 6c 6c 3f 30 3a 4f 2e 73 74 61 72 74 29 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 2e 6c 6f 61 64 2e 74 2e 73 74 61 72 74 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 73 74 61 72 74 3b 66 75 6e 63 74 69 6f 6e 20 50 28 61 29 7b 69 66 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3d 3d 3d 22 68 69 64 64 65 6e 22 29 7b 67 Data Ascii: 16d)}google.c.b("xe","load");!window._hst&&performance&&performance.mark&&performance.mark("SearchHeadStart");var O;if((O=google.stvsc)==null?0:O.start)google.timers.load.t.start=google.stvsc.start;function P(a){if(document.visibilityState==="hidden"){g
2024-10-03 07:12:18 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 29 26 26 43 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 7d 67 6f 6f 67 6c 65 2e 63 2e 66 68 3d 49 6e 66 69 6e 69 74 79 3b 42 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 3b 50 28 30 29 3b 78 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 72 61 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4b 2c 21 30 29 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4b 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 Data Ascii: 8000)&&C(document,"visibilitychange",Q,!0)}google.c.fh=Infinity;B(document,"visibilitychange",Q,!0);P(0);x&&(google.c.oil=ra,B(document.documentElement,"load",K,!0),B(document.documentElement,"error",K,!0));google.cv=function(a,b,c,d){if(!a\|\|!b&&da(a))r
2024-10-03 07:12:18 UTC	1390	IN	Data Raw: 3d 22 22 3b 66 6f 72 28 76 61 72 20 66 20 69 6e 20 63 29 61 2b 3d 22 22 2b 64 2b 66 2b 22 2e 22 2b 63 5b 66 5d 2c 64 3d 22 2c 22 3b 66 6f 72 28 76 61 72 20 67 20 69 6e 20 62 29 61 2b 3d 22 26 22 2b 67 2b 22 3d 22 2b 62 5b 67 5d 3b 66 3d 61 3b 67 3d 22 22 3b 61 3d 5b 5d 3b 70 2e 5f 63 73 68 69 64 26 26 0a 61 2e 70 75 73 68 28 5b 22 63 73 68 69 64 22 2c 70 2e 5f 63 73 68 69 64 5d 29 3b 62 3d 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 76 6f 69 64 20 30 26 26 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 21 3d 3d 30 3f 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 2e 6b 4f 50 49 3a 6e 75 6c 6c 3b 62 21 3d 6e 75 6c 6c 26 26 61 2e 70 75 73 68 28 5b 22 6f 70 69 22 2c 62 Data Ascii: ="";for(var f in c)a+=""+d+f+"."+c[f],d=",";for(var g in b)a+="&"+g+"="+b[g];f=a;g="";a=[];p._cshid&&a.push(["cshid",p._cshid]);b=window.google!==void 0&&window.google.kOPI!==void 0&&window.google.kOPI!==0?window.google.kOPI:null;b!=null&&a.push(["opi",b
2024-10-03 07:12:18 UTC	1390	IN	Data Raw: 67 65 72 3a 53 65 61 72 63 68 41 46 54 45 6e 64 22 2c 7b 73 74 61 72 74 54 69 6d 65 3a 61 7d 29 29 29 7d 7d 3b 76 61 72 20 7a 61 3d 21 31 2c 58 3d 30 2c 59 3d 30 2c 5a 3b 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 29 7b 6e 61 26 26 21 67 6f 6f 67 6c 65 2e 63 2e 77 68 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 77 68 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 48 65 69 67 68 74 7c 7c 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 29 2c 67 6f 6f 67 6c 65 2e 63 2e 77 68 26 26 41 28 22 77 68 75 22 2c 22 31 22 29 29 3b 76 61 72 20 63 3d 67 6f 6f 67 6c 65 2e 63 2e 77 68 2c 64 3d 21 62 3b 62 3d 62 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 62 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c Data Ascii: ger:SearchAFTEnd",{startTime:a})))}};var za=!1,X=0,Y=0,Z;function Aa(a,b){na&&!google.c.wh&&(google.c.wh=Math.floor(window.innerHeight\|\|document.documentElement.clientHeight),google.c.wh&&A("whu","1"));var c=google.c.wh,d=!b;b=b?Math.floor(b.getBoundingCl
2024-10-03 07:12:19 UTC	1390	IN	Data Raw: 46 28 64 29 3b 64 2e 67 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 74 66 22 2c 53 74 72 69 6e 67 28 65 29 29 3b 72 65 74 75 72 6e 20 79 26 26 21 64 2e 42 26 26 28 21 64 2e 6c 7c 7c 64 2e 46 7c 7c 21 21 28 46 28 64 29 26 31 29 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 79 26 26 7a 28 22 69 6d 6c 22 2c 64 7c 7c 61 29 3b 67 6f 6f 67 6c 65 2e 63 2e 75 28 22 69 6d 6c 22 29 7d 42 61 7c 7c 28 67 6f 6f 67 6c 65 2e 63 2e 62 28 22 69 6d 6c 22 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 78 61 28 62 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 63 29 7d 28 30 29 2c 42 61 3d 21 30 29 7d 3b 67 6f 6f 67 6c 65 2e 63 2e 75 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 69 66 28 21 78 7c 7c 77 29 67 6f 6f 67 6c 65 2e 63 2e 73 65 74 75 70 3d 43 61 3b 7d 29 2e Data Ascii: F(d);d.g.setAttribute("data-atf",String(e));return y&&!d.B&&(!d.l\|\|d.F\|\|!!(F(d)&1))}function c(d){y&&z("iml",d\|\|a);google.c.u("iml")}Ba\|\|(google.c.b("iml"),function(){xa(b,function(){},c)}(0),Ba=!0)};google.c.ub=function(){};if(!x\|\|w)google.c.setup=Ca;}).

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:19 UTC	1736	OUT	GET /xjs/_/ss/k=xjs.hd.a1hzicGOses.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAoADYSSAAgBEAwAYABAAAAACAAABgAAAAAAAAkAAAAAACABUAAAAAACAAABEAAACKAAAAAAgIAQIAEEABhAAFSEBQBPEoBAAAAAMAAIQAMMAwAEEFAKMAAQAAAAAAQACEAAAAwBGAAAEAegQCwAAQEwAAIdADQAAAAAAIAEAACACAmQAMkAEIAAAAAAAAIAMAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAgAKAAAAAAAAAAAAAAAAAAAAQA/d=1/ed=1/br=1/rs=ACT90oFEUcyXZsswlnz12_N9CX5EsBO1Pw/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:19 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 4232 Date: Thu, 03 Oct 2024 07:12:19 GMT Expires: Fri, 03 Oct 2025 07:12:19 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Wed, 02 Oct 2024 23:47:33 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 07:12:19 UTC	581	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 76 5a 65 30 6a 62 3a 23 61 38 63 37 66 61 3b 2d 2d 6e 77 58 6f 62 62 3a 23 36 33 38 65 64 34 3b 2d 2d 56 75 5a 58 42 64 3a 23 30 30 31 64 33 35 3b 2d 2d 75 4c 7a 33 37 63 3a 23 35 34 35 64 37 65 3b 2d 2d 6a 49 4e 75 36 63 3a 23 30 30 31 64 33 35 3b 2d 2d 54 79 56 59 6c 64 3a 23 30 62 35 37 64 30 3b 2d 2d 5a 45 70 50 6d 64 3a 23 63 33 64 39 66 62 3b 2d 2d 51 57 61 61 61 66 3a 23 36 33 38 65 64 34 3b 2d 2d 44 45 65 53 74 66 3a 23 66 35 66 38 66 66 3b 2d 2d 54 53 57 5a 49 62 3a 23 65 35 65 64 66 66 3b 2d 2d 42 52 4c 77 45 3a 23 64 33 65 33 66 64 3b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 Data Ascii: :root{--COEmY:#1f1f1f;--xhUGwc:#fff}:root{--vZe0jb:#a8c7fa;--nwXobb:#638ed4;--VuZXBd:#001d35;--uLz37c:#545d7e;--jINu6c:#001d35;--TyVYld:#0b57d0;--ZEpPmd:#c3d9fb;--QWaaaf:#638ed4;--DEeStf:#f5f8ff;--TSWZIb:#e5edff;--BRLwE:#d3e3fd;--gS5jXb:#dadce0;--Aqn7xd:#
2024-10-03 07:12:19 UTC	1390	IN	Data Raw: 6c 54 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 79 55 54 4d 6a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 56 44 67 56 69 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 54 55 4f 73 55 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 7b 66 72 6f 6d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 Data Ascii: lTd{font-family:Roboto,Arial,sans-serif;font-size:14px;line-height:22px}.yUTMj{font-family:Roboto,Arial,sans-serif;font-weight:400}.VDgVie{text-align:center}.TUOsUe{text-align:left}@keyframes g-snackbar-show{from{pointer-events:none;transform:translateY(0
2024-10-03 07:12:19 UTC	1390	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 35 36 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 62 37 37 48 4b 66 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 70 78 7d 7d 2e 56 39 4f 31 59 64 20 2e 72 49 78 73 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 56 39 4f 31 59 64 20 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 56 39 4f 31 59 64 20 2e 73 48 46 4e 59 64 20 67 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6a 68 5a 76 6f 64 7b 6c 65 66 74 3a 31 36 70 78 3b 72 69 67 68 Data Ascii: :inline-block;max-width:568px;min-width:288px;text-align:left}.b77HKf{border-radius:8px}.sHFNYd{margin-left:40px}}.V9O1Yd .rIxsve{display:block;padding:8px 0}.V9O1Yd .sHFNYd{margin-left:0}.V9O1Yd .sHFNYd g-flat-button{padding-left:0}.jhZvod{left:16px;righ
2024-10-03 07:12:19 UTC	735	IN	Data Raw: 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 33 2e 34 33 35 70 78 3b 77 69 64 74 68 3a 31 33 2e 34 33 35 70 78 7d 2e 49 42 50 5a 75 20 2e 6f 51 63 50 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a Data Ascii: eft:1px solid rgba(0,0,0,.2);border-right:none;border-top:1px solid rgba(0,0,0,.2);box-sizing:border-box;height:13.435px;width:13.435px}.IBPZu .oQcPt{border-bottom:1px solid rgba(0,0,0,.2);border-left:none;border-right:1px solid rgba(0,0,0,.2);border-top:
2024-10-03 07:12:19 UTC	136	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 32 35 30 6d 73 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 69 6e 73 65 74 3a 30 7d 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 75 67 67 65 73 74 69 6f 6e 5f 67 72 6f 75 70 2e 63 73 73 2e 6d 61 70 20 2a 2f 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: ound-color 100ms,visibility 0s 250ms;position:fixed;visibility:hidden;inset:0}/# sourceMappingURL=suggestion_group.css.map /sentinel{}

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:20 UTC	1383	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:20 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Thu, 03 Oct 2024 07:12:20 GMT Expires: Thu, 03 Oct 2024 07:12:20 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 07:12:20 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-10-03 07:12:20 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:20 UTC	3938	OUT	GET /xjs/_/js/k=xjs.hd.en.nIojKu32IY0.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAggAFAAAAAFAAAAAAAAAAAAAAAAAAAECAIAAAkQAAAAEAgAUAAIEAAAgAEBAAAAiQADzKBAAAAcAEAAAAAAABAEBQBAAAQAAAAAMAAIAAAAAAAAAFAAAAAAAAAAAAAAAAAAAQQCAAAAAAAAAAAAAAAQAAANADAAAAAAAAABAAAEAQAAAMkAEIAAAAAAAA6AOA4AEwpLAAAAAAAAAAAAAAAIAAJAjmQgIKAhAAAAAAAAAAAAAAAAAAUtLEhQ0/d=1/ed=1/dg=3/br=1/rs=ACT90oFSAq8ZymakGRo57JmPa_p44Nk-XA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0 [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:20 UTC	819	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1046934 Date: Thu, 03 Oct 2024 07:12:20 GMT Expires: Fri, 03 Oct 2025 07:12:20 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Wed, 02 Oct 2024 23:47:33 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 07:12:20 UTC	571	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Id
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 61 2c 44 63 61 2c 78 63 61 2c 45 63 61 2c 76 63 61 2c 46 63 61 2c 75 63 61 2c 47 63 61 2c 49 63 61 2c 50 63 61 2c 52 63 61 2c 53 63 61 2c 57 63 61 2c 58 63 61 2c 62 64 61 2c 65 64 61 2c 5a 63 61 2c 64 64 61 2c 63 64 61 2c 61 64 61 2c 24 63 61 2c 66 64 61 2c 67 64 61 2c 6b 64 61 2c 6d 64 61 2c 6c 64 61 2c 70 64 61 2c 71 64 61 2c 72 64 61 2c 74 64 61 2c 76 64 61 2c 75 64 61 2c 78 64 61 2c 79 64 61 2c 7a 64 61 2c 42 64 61 2c 43 64 61 2c 44 64 61 2c 45 64 61 2c 46 64 61 2c 49 64 61 2c 4a 64 61 2c 4b 64 61 2c 4f 64 61 2c 4e 64 61 2c 52 64 61 2c 53 64 61 2c 58 64 61 2c 59 64 61 2c 5a 64 61 2c 61 65 61 2c 24 64 61 2c 63 65 61 2c 62 65 61 2c 66 65 61 2c 65 65 61 2c 68 65 61 2c 6a 65 61 2c 6d 65 61 2c 6e 65 61 2c 71 65 61 2c 72 65 61 2c 76 65 61 2c 77 65 61 2c 42 Data Ascii: a,Dca,xca,Eca,vca,Fca,uca,Gca,Ica,Pca,Rca,Sca,Wca,Xca,bda,eda,Zca,dda,cda,ada,$ca,fda,gda,kda,mda,lda,pda,qda,rda,tda,vda,uda,xda,yda,zda,Bda,Cda,Dda,Eda,Fda,Ida,Jda,Kda,Oda,Nda,Rda,Sda,Xda,Yda,Zda,aea,$da,cea,bea,fea,eea,hea,jea,mea,nea,qea,rea,vea,wea,B
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f 2e 61 61 2e Data Ascii: StackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_.aa.
2024-10-03 07:12:20 UTC	1050	IN	Data Raw: 61 3d 76 6f 69 64 20 30 29 3b 74 68 72 6f 77 20 66 3b 7d 7d 3b 0a 5f 2e 6c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 62 3b 69 66 28 69 61 61 29 7b 69 66 28 62 26 26 28 6a 61 61 3f 21 61 2e 69 73 57 65 6c 6c 46 6f 72 6d 65 64 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 20 63 3d 30 Data Ascii: a=void 0);throw f;}};_.laa=function(a,b){b=b===void 0?!1:b;if(iaa){if(b&&(jaa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("O");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var c=0
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 29 7d 3b 5f 2e 70 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 52 65 67 45 78 70 28 22 28 5b 41 2d 5a 5d 5b 5c 5c 77 20 5d 2b 29 2f 28 5b 5e 5c 5c 73 5d 2b 29 5c 5c 73 2a 28 3f 3a 5c 5c 28 28 2e 2a 3f 29 5c 5c 29 29 3f 22 2c 22 67 22 29 2c 63 3d 5b 5d 2c 64 3b 64 3d 62 2e 65 78 65 63 28 61 29 3b 29 63 2e 70 75 73 68 28 5b 64 5b 31 5d 2c 64 5b 32 5d 2c 64 5b 33 5d 7c 7c 76 6f 69 64 20 30 5d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 71 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 6d 61 61 3f 21 21 5f 2e 66 61 26 26 5f 2e 66 61 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 3b 5f 2e 72 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 21 31 3a 5f 2e 69 61 Data Ascii: )};_.paa=function(a){for(var b=RegExp("([A-Z][\\w ]+)/([^\\s]+)\\s(?:\\((.?)\\))?","g"),c=[],d;d=b.exec(a);)c.push([d[1],d[2],d[3]\|\|void 0]);return c};_.qaa=function(){return _.maa?!!_.fa&&_.fa.brands.length>0:!1};_.raa=function(){return _.qaa()?!1:_.ia
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 6e 74 65 72 6e 65 74 20 45 78 70 6c 6f 72 65 72 22 29 72 65 74 75 72 6e 20 5f 2e 73 61 61 28 29 3f 5f 2e 7a 61 61 28 62 29 3a 22 22 3b 62 3d 5f 2e 70 61 61 28 62 29 3b 76 61 72 20 63 3d 5f 2e 79 61 61 28 62 29 3b 73 77 69 74 63 68 28 61 29 7b 63 61 73 65 20 22 4f 70 65 72 61 22 3a 69 66 28 5f 2e 72 61 61 28 29 29 72 65 74 75 72 6e 20 63 28 5b 22 56 65 72 73 69 6f 6e 22 2c 22 4f 70 65 72 61 22 5d 29 3b 69 66 28 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4f 70 65 72 61 22 29 3a 5f 2e 69 61 28 22 4f 50 52 22 29 29 72 65 74 75 72 6e 20 63 28 5b 22 4f 50 52 22 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 3a 69 66 28 5f 2e 74 61 61 28 29 29 72 65 74 75 72 6e 20 63 28 5b 22 45 64 67 65 22 5d 29 3b 69 66 28 5f 2e 75 61 61 Data Ascii: nternet Explorer")return _.saa()?_.zaa(b):"";b=_.paa(b);var c=_.yaa(b);switch(a){case "Opera":if(_.raa())return c(["Version","Opera"]);if(_.qaa()?naa("Opera"):_.ia("OPR"))return c(["OPR"]);break;case "Microsoft Edge":if(_.taa())return c(["Edge"]);if(_.uaa
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 68 6f 6e 65 7c 69 50 6f 64 7c 69 50 61 64 7c 43 50 55 29 5c 73 2b 4f 53 5c 73 2b 28 5c 53 2b 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 29 3a 5f 2e 46 61 61 28 29 3f 28 62 3d 2f 4d 61 63 20 4f 53 20 58 20 28 5b 30 2d 39 5f 2e 5d 2b 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 3f 61 5b 31 5d 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2e 22 29 3a 22 31 30 22 29 3a 5f 2e 6f 61 61 28 29 3f 28 62 3d 2f 28 3f 3a 4b 61 69 4f 53 29 5c 2f 28 5c 53 2b 29 2f 69 2c 62 3d 28 61 3d 62 2e 65 78 65 63 28 61 29 29 26 26 61 5b 31 5d 29 3a 5f 2e 44 61 61 28 29 3f 28 62 3d 2f 41 6e 64 72 6f 69 64 5c 73 2b 28 5b 5e 5c 29 3b 5d 2b 29 28 5c 29 7c 3b 29 2f 2c 62 3d 28 61 3d 62 2e 65 78 Data Ascii: hone\|iPod\|iPad\|CPU)\s+OS\s+(\S+)/,b=(a=b.exec(a))&&a[1].replace(/_/g,".")):_.Faa()?(b=/Mac OS X ([0-9_.]+)/,b=(a=b.exec(a))?a[1].replace(/_/g,"."):"10"):_.oaa()?(b=/(?:KaiOS)\/(\S+)/i,b=(a=b.exec(a))&&a[1]):_.Daa()?(b=/Android\s+([^\);]+)(\)\|;)/,b=(a=b.ex
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 2c 64 2c 65 2c 61 29 26 26 5f 2e 78 61 28 61 2c 65 29 26 26 63 2b 2b 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 52 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 5f 2e 53 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 5f 2e 7a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3b 69 66 28 62 3e 30 29 7b 66 6f 72 28 76 61 72 20 63 3d 41 72 72 61 79 28 62 29 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 5b 64 5d 3b Data Ascii: ,d,e,a)&&_.xa(a,e)&&c++});return c};_.Raa=function(a){return Array.prototype.concat.apply([],arguments)};_.Saa=function(a){return Array.prototype.concat.apply([],arguments)};_.za=function(a){var b=a.length;if(b>0){for(var c=Array(b),d=0;d<b;d++)c[d]=a[d];
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 2c 65 2c 61 29 5d 3d 64 7d 29 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 48 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3d 30 2c 66 3d 61 3b 63 3d 63 7c 7c 31 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 65 3d 61 2c 66 3d 62 29 3b 69 66 28 63 2a 28 66 2d 65 29 3c 30 29 72 65 74 75 72 6e 5b 5d 3b 69 66 28 63 3e 30 29 66 6f 72 28 61 3d 65 3b 61 3c 66 3b 61 2b 3d 63 29 64 2e 70 75 73 68 28 61 29 3b 65 6c 73 65 20 66 6f 72 28 61 3d 65 3b 61 3e 66 3b 61 2b 3d 63 29 64 2e 70 75 73 68 28 61 29 3b 72 65 74 75 72 6e 20 64 7d 3b 0a 5f 2e 62 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 5b 5d 2c 64 3d 30 3b 64 3c 62 3b 64 2b 2b 29 63 5b 64 5d 3d 61 3b 72 65 74 75 72 6e 20 63 7d 3b 5f 2e 63 62 61 3d Data Ascii: ,e,a)]=d});return c};_.Ha=function(a,b,c){var d=[],e=0,f=a;c=c\|\|1;b!==void 0&&(e=a,f=b);if(c*(f-e)<0)return[];if(c>0)for(a=e;a<f;a+=c)d.push(a);else for(a=e;a>f;a+=c)d.push(a);return d};_.bba=function(a,b){for(var c=[],d=0;d<b;d++)c[d]=a;return c};_.cba=
2024-10-03 07:12:20 UTC	1390	IN	Data Raw: 69 73 41 72 72 61 79 28 61 29 29 72 65 74 75 72 6e 7b 62 75 66 66 65 72 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 2c 4e 5f 3a 21 31 7d 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 55 69 6e 74 38 41 72 72 61 79 29 72 65 74 75 72 6e 7b 62 75 66 66 65 72 3a 61 2c 4e 5f 3a 21 31 7d 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 41 72 72 61 79 42 75 66 66 65 72 29 72 65 74 75 72 6e 7b 62 75 66 66 65 72 3a 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 61 29 2c 4e 5f 3a 21 31 7d 3b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 5f 2e 4d 61 29 72 65 74 75 72 6e 7b 62 75 66 66 65 72 3a 5f 2e 71 62 61 28 61 29 7c 7c 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 30 29 2c 4e 5f 3a 21 30 7d 3b 69 66 28 61 20 69 6e 73 74 Data Ascii: isArray(a))return{buffer:new Uint8Array(a),N_:!1};if(a.constructor===Uint8Array)return{buffer:a,N_:!1};if(a.constructor===ArrayBuffer)return{buffer:new Uint8Array(a),N_:!1};if(a.constructor===_.Ma)return{buffer:_.qba(a)\|\|new Uint8Array(0),N_:!0};if(a inst

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://ninetyfitful.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Chrome Cache Entry: 259

Chrome Cache Entry: 260

Chrome Cache Entry: 261

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Windows Analysis Report
https://ninetyfitful.com/

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:20 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 07:12:20 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=34410 Date: Thu, 03 Oct 2024 07:12:20 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:20 UTC	1460	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=0kP-ZtawLumF9u8P542x-AU&rt=wsrt.2908,cbt.106,hst.74&opi=89978449&ts=300 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:20 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-uaK3aaAu0BQ3z4L_XFHswQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 03 Oct 2024 07:12:20 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:21 UTC	1377	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:21 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Thu, 03 Oct 2024 07:12:21 GMT Expires: Thu, 03 Oct 2024 07:12:21 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 07:12:21 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:21 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-03 07:12:21 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=34353 Date: Thu, 03 Oct 2024 07:12:21 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-03 07:12:21 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:21 UTC	1549	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=0kP-ZtawLumF9u8P542x-AU&rt=wsrt.2908,aft.1610,afti.1610,cbt.106,hst.74,prt.1139&imn=11&ima=1&imad=0&imac=1&wh=907&aftie=NF&aft=1&aftp=907&opi=89978449&ts=201595 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:21 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce--gwGn3QjMTOEzf3QFSuo5w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 03 Oct 2024 07:12:21 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:22 UTC	1388	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=0kP-ZtawLumF9u8P542x-AU.1727939540245&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:22 UTC	1305	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Thu, 03 Oct 2024 07:12:22 GMT Expires: Thu, 03 Oct 2024 07:12:22 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-H5CRmWbWgXoRLOv_XEmWtQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-03 07:12:22 UTC	85	IN	Data Raw: 66 34 64 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 6d 69 6e 6e 65 73 6f 74 61 20 76 69 6b 69 6e 67 73 20 6e 65 77 73 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 Data Ascii: f4d)]}'[[["minnesota vikings news",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 74 68 72 6f 6e 65 20 61 6e 64 20 6c 69 62 65 72 74 79 20 67 61 6d 65 70 6c 61 79 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 77 65 6e 64 79 20 73 70 6f 6e 67 65 62 6f 62 20 6b 72 61 62 62 79 20 70 61 74 74 79 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 67 72 65 65 6e 20 62 61 79 20 70 61 63 6b 65 72 73 20 69 6e 6a 75 72 79 20 72 65 70 6f 72 74 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 Data Ascii: _ss":"1"}}],["throne and liberty gameplay",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["wendy spongebob krabby patty",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["green bay packers injury report",0,[3,357,362,396,143],{"zf"
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 52 59 58 48 42 6b 61 45 6a 51 6b 50 2f 32 67 41 4d 41 77 45 41 41 68 45 44 45 51 41 2f 41 4c 53 37 49 51 30 32 56 71 47 33 51 44 72 68 63 6f 65 65 71 56 57 4b 72 4c 70 37 4b 74 44 73 64 4f 6f 41 75 4a 56 78 45 67 32 4b 68 70 4a 46 67 66 50 39 51 50 63 79 54 5a 42 5a 56 48 70 36 51 35 4d 74 63 4a 43 72 45 4a 36 6b 43 78 75 62 66 7a 74 69 57 4c 79 38 71 6b 53 6f 4d 35 71 4f 68 61 78 49 62 73 71 4a 5a 68 30 61 56 57 58 72 51 64 4b 69 6e 38 62 37 45 57 2b 44 6a 4b 4d 74 6e 6d 50 32 39 72 6c 34 44 71 54 75 43 43 4f 59 74 6a 33 57 41 4c 6d 77 48 66 41 75 4c 78 45 77 2f 57 75 79 30 72 73 64 4a 76 62 78 69 64 31 6d 6e 52 38 36 7a 35 79 5a 4e 5a 6b 52 49 56 50 55 55 52 32 47 43 45 6f 52 6f 39 4b 6c 45 48 5a 52 31 41 32 4e 68 59 57 74 6a 6a 6e 72 6d 63 4d 56 33 55 Data Ascii: RYXHBkaEjQkP/2gAMAwEAAhEDEQA/ALS7IQ02VqG3QDrhcoeeqVWKrLp7KtDsdOoAuJVxEg2KhpJFgfP9QPcyTZBZVHp6Q5MtcJCrEJ6kCxubfztiWLy8qkSoM5qOhaxIbsqJZh0aVWXrQdKin8b7EW+DjKMtnmP29rl4DqTuCCOYtj3WALmwHfAuLxEw/Wuy0rsdJvbxid1mnR86z5yZNZkRIVPUUR2GCEoRo9KlEHZR1A2NhYWtjjnrmcMV3U
2024-10-03 07:12:22 UTC	1059	IN	Data Raw: 4e 53 45 74 61 6f 63 5a 61 58 45 70 62 54 36 6d 6a 62 54 79 47 78 46 6c 48 63 38 76 62 63 59 30 71 71 78 58 35 4c 59 51 6e 2b 49 6b 46 54 59 53 43 62 43 39 74 53 72 32 37 48 6c 66 2b 70 68 6e 79 46 66 75 4c 69 55 56 34 74 35 46 61 4e 58 46 5a 59 72 4a 6c 51 77 74 78 35 4b 46 4e 4f 70 76 70 53 62 38 77 4f 5a 73 43 41 62 2b 4d 63 62 72 77 71 63 74 32 55 34 6c 31 78 36 51 37 75 6c 61 37 33 55 72 79 4c 47 33 6a 62 33 77 64 68 66 54 36 70 7a 4a 45 74 44 6b 32 6e 4e 4f 78 31 71 34 71 4f 49 70 78 65 79 72 45 68 4b 45 6b 6e 63 6a 7a 76 6a 65 6f 35 4e 6e 35 56 68 49 72 62 36 6d 70 63 56 44 79 43 41 67 4b 62 37 67 4b 46 78 66 5a 57 33 4c 71 44 33 78 39 55 4e 6a 31 58 35 7a 35 78 56 39 50 74 41 4b 47 76 75 56 53 6d 31 52 79 35 4e 57 35 62 53 32 43 53 54 73 43 6b 44 Data Ascii: NSEtaocZaXEpbT6mjbTyGxFlHc8vbcY0qqxX5LYQn+IkFTYSCbC9tSr27Hlf+phnyFfuLiUV4t5FaNXFZYrJlQwtx5KFNOpvpSb8wOZsCAb+Mcbrwqct2U4l1x6Q7ula73UryLG3jb3wdhfT6pzJEtDk2nNOx1q4qOIpxeyrEhKEkncjzvjeo5Nn5VhIrb6mpcVDyCAgKb7gKFxfZW3LqD3x9UNj1X5z5xV9PtAKGvuVSm1Ry5NW5bS2CSTsCkD
2024-10-03 07:12:22 UTC	90	IN	Data Raw: 35 34 0d 0a 4d 4f 55 75 51 34 4b 64 53 6a 44 30 41 68 6c 4c 56 6d 74 4b 51 56 61 72 57 74 70 4e 37 36 75 2b 31 72 34 6b 4d 4f 44 4b 72 46 54 53 2b 71 51 53 34 34 74 53 6e 51 34 75 2b 6f 4a 39 53 6a 66 74 79 2f 33 38 59 6f 4b 6c 51 32 57 54 42 68 4d 56 48 6a 4f 71 0d 0a Data Ascii: 54MOUuQ4KdSjD0AhlLVmtKQVarWtpN76u+1r4kMODKrFTS+qQS44tSnQ4u+oJ9Sjfty/38YoKlQ2WTBhMVHjOq
2024-10-03 07:12:22 UTC	1254	IN	Data Raw: 34 64 66 0d 0a 4b 6b 30 35 74 78 4c 6a 58 45 48 4e 51 53 46 62 43 2b 2b 34 41 76 76 6a 52 6d 47 77 71 42 67 2f 73 54 4a 62 4c 4c 63 69 59 2f 4a 53 45 49 59 6b 53 48 55 68 4b 42 59 49 46 77 64 76 48 72 48 37 59 2f 53 45 4c 62 70 55 64 31 67 75 61 57 6e 56 68 32 35 35 4c 4f 6d 35 32 50 57 77 48 78 69 6c 35 51 2b 6c 78 58 45 2f 55 38 79 4c 54 4b 55 68 50 38 47 49 33 49 39 41 53 50 38 53 30 38 7a 75 64 6b 6e 35 4e 37 41 6a 56 63 74 73 54 4b 6d 57 56 78 32 32 34 52 61 51 32 32 77 79 32 45 74 32 31 45 6e 54 62 2b 31 36 69 53 66 47 2b 50 58 36 6c 46 4e 44 65 54 69 77 4d 39 6b 37 52 45 47 62 35 6a 72 63 4f 50 52 65 4f 4a 69 66 52 75 43 52 5a 51 73 52 75 53 43 4c 2b 45 6a 62 72 59 59 59 50 70 6b 2b 4b 33 39 52 48 70 74 76 55 32 79 37 49 43 75 39 6b 68 74 4a 50 66 Data Ascii: 4dfKk05txLjXEHNQSFbC++4AvvjRmGwqBg/sTJbLLciY/JSEIYkSHUhKBYIFwdvHrH7Y/SELbpUd1guaWnVh255LOm52PWwHxil5Q+lxXE/U8yLTKUhP8GI3I9ASP8S08zudkn5N7AjVctsTKmWVx224RaQ22wy2Et21EnTb+16iSfG+PX6lFNDeTiwM9k7REGb5jrcOPReOJifRuCRZQsRuSCL+EjbrYYYPpk+K39RHptvU2y7ICu9khtJPf
2024-10-03 07:12:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:22 UTC	1648	OUT	GET /xjs/_/js/md=2/k=xjs.hd.en.nIojKu32IY0.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAggAFAAAAAFAAAAAAAAAAAAAAAAAAAECAIAAAkQAAAAEAgAUAAIEAAAgAEBAAAAiQADzKBAAAAcAEAAAAAAABAEBQBAAAQAAAAAMAAIAAAAAAAAAFAAAAAAAAAAAAAAAAAAAQQCAAAAAAAAAAAAAAAQAAANADAAAAAAAAABAAAEAQAAAMkAEIAAAAAAAA6AOA4AEwpLAAAAAAAAAAAAAAAIAAJAjmQgIKAhAAAAAAAAAAAAAAAAAAUtLEhQ0/rs=ACT90oFSAq8ZymakGRo57JmPa_p44Nk-XA HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:22 UTC	817	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 12159 Date: Thu, 03 Oct 2024 07:12:22 GMT Expires: Fri, 03 Oct 2025 07:12:22 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Wed, 02 Oct 2024 23:47:33 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 07:12:22 UTC	573	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111001111000100001011010000001111111111111111111111111111111011011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 32 32 32 32 32 31 32 32 31 32 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 32 31 32 32 31 32 32 31 32 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 Data Ascii: 212121212121212121212121212121212121212221212121212121212221222222122122121221212121212121212121212121212121222121212121212121212121212121212121212121212222122122122212212212212212212212212212212212212212212212212212212212212212212212212212212212212212212
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 32 31 33 31 33 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111112111111111111111111111113111213111111111111111111111111111111111111111113111113131111111111111111111111111111111111211111111111111111111111111110111111111111111111111111111111111111113111111111111111111111111121111111121313112131111111111111111
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 31 31 32 32 32 32 32 32 32 31 31 31 32 32 31 33 32 32 32 32 32 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 33 31 31 31 31 31 31 31 31 31 33 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 31 32 32 31 32 32 32 32 32 33 31 31 33 31 31 31 31 31 31 31 32 32 31 32 31 31 31 31 32 33 32 32 32 32 32 31 31 31 33 31 31 32 32 32 32 33 31 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 112222222111221322222111111131111111111110111111111111111111111111111111111111111111111111111111111122113111111111313131111111111111111111112122222222212222222221221222223113111111122121111232222211131122223113131111111111111111111111111111111111111111111
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 32 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 31 32 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 32 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 32 32 32 32 32 32 32 32 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 31 32 32 31 31 32 32 31 31 32 32 32 31 31 31 32 31 31 31 31 32 32 32 31 32 32 32 31 31 32 32 32 32 32 32 32 32 32 31 31 32 32 31 32 32 32 32 32 32 31 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: 222222222122222222222212111111111121111211111111122222222222222222222111111222222221222211111111111111111111111112111111111111111111111121212112121212121212111111111112122222222222222121221122112221112111122212221122222222211221222222122222221222222222222
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 32 31 31 32 31 31 31 31 32 31 33 32 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 33 31 32 32 31 33 32 33 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 32 32 32 32 32 31 32 32 32 32 32 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 32 32 31 32 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111121121111213211112111111111111111111111111111111111111111111111111111111111111111111113131221323111111111222222222222222222222222222222222222222222222222222222222222222222222222222222222322222122222111111111311111111111111111111111211222121111111111
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 32 33 33 33 33 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 32 32 33 31 31 31 32 32 31 33 32 31 31 31 31 31 32 32 33 31 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 32 32 31 31 33 31 31 32 31 32 32 32 32 32 32 32 33 32 32 33 32 33 32 32 32 31 31 32 31 31 31 32 32 33 31 33 31 33 31 Data Ascii: 233331111111131111111311111111111111111111111112322311122132111112231000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000111111111111111111111111111111111111111111111122221131121222222232232322211211122313131
2024-10-03 07:12:22 UTC	466	IN	Data Raw: 32 32 32 33 30 30 30 30 30 30 30 31 31 31 31 31 32 32 32 32 32 32 32 31 31 30 30 30 30 31 31 31 31 32 32 32 32 33 30 30 30 32 33 32 32 33 32 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 32 32 32 32 32 32 32 32 32 32 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 33 31 30 30 30 30 30 32 33 30 31 32 32 31 31 32 33 33 31 30 30 30 31 31 31 32 33 32 32 32 32 33 30 30 30 30 30 30 30 32 32 33 30 30 32 32 33 32 31 31 32 31 32 32 32 32 32 32 33 31 31 31 31 31 31 31 30 30 30 30 32 32 33 30 30 30 30 32 33 30 32 32 32 33 33 30 30 30 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 Data Ascii: 222300000001111122222221100001111222230002322320000000002000000000000020002222222222200000000000000000000000000000011113111111111111111111111111111122310000023012211233100011123222230000000223002232112122222231111111000022300002302223300011222222222222222

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:22 UTC	3518	OUT	GET /xjs/_/js/k=xjs.hd.en.nIojKu32IY0.es5.O/ck=xjs.hd.a1hzicGOses.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAogDdSSAAgFEAwAYABAAAAACAAABgAECAIAAAkQAAAAECgBUAAIEAACgAEBEAAAiaADzKBAgIAcIEEEABhAAFSEBQBPEoRAAAAAMAAIQAMMAwAEEFAKMAAQAAAAAAQACEAAAQwDGAAAEAegQCwAAQEwAAIdADQAAAAAAIAFAACECQmQAMkAEIAAAAAAAA6AOA4AEwpLAAAAAAAAAAAAAAAIAAJAjmQgIKAhAAAAAAAAAAAAAAAAAAUtLEhQ0/d=0/dg=0/br=1/ujg=1/rs=ACT90oF6bcba1r0E0kUSCnFZdz9bknrywA/m=sb_wiz,aa,abd,sysm,sysl,sysg,syfy,sysk,sys6,sy10l,syzt,sysb,syzs,sytb,sysh,sysj,sysf,sysz,sys3,syt0,syt1,syss,sysw,sysc,sysq,syst,sysu,syrw,syso,sys7,sys8,sys1,syrk,syri,syrh,sysa,syzr,syta,syru,syt9,async,syw7,ifl,pHXghd,sf,sytq,sytt,sy497,sonic,TxCJfd,sy49b,qzxzOb,IsdWVc,sy49d,sy1f9,sy1bm,sy1bi,syrg,syre,syrf,syrd,syrc,sy47w,sy47z,sy2c8,sy17g,sy147,sy148,syrq,syr8,syfc,sybw,sybz,sybu,syby,sybx,sycq,spch,syup,syuo,rtH1bd,sy1cr,sy18j,sy178,syga,sy1cq,sy14d,sy1cp,sy179,sygc,sy1cs,SMquOb,sy8h,sygj,sygg,sygh,sygk,sygf,sygs,sygq,sygo,syge,sycn,syci,sycl,syal,syad,syb7,syak,syaj,sya [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:22 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 508087 Date: Thu, 03 Oct 2024 07:12:22 GMT Expires: Fri, 03 Oct 2025 07:12:22 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Wed, 02 Oct 2024 23:47:33 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-03 07:12:22 UTC	572	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 61 69 6e 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 55 62 69 38 5a 7b 63 6f 6e 74 61 69 6e 3a 6c 61 79 6f 75 74 20 73 74 79 6c 65 7d 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c Data Ascii: _F_installCss("c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}.jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:rel
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 68 2c 71 6c 69 2d 62 6c 75 65 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 6e 4e 4d 75 4f 64 20 2e 49 45 71 69 41 66 7b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 72 65 64 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 6e 4e 4d 75 4f 64 20 2e 73 6d 6f 63 73 65 7b 61 6e 69 6d 61 74 Data Ascii: h,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .IEqiAf{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .smocse{animat
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 61 63 69 74 79 3a 30 2e 39 39 7d 39 30 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 62 65 44 51 50 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 25 7d 2e 53 50 4b 46 6d 63 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 Data Ascii: acity:0.99}90%{opacity:0.99}100%{opacity:0}}.beDQP{display:inline-block;height:100%;overflow:hidden;position:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute;top:0;width:10%}.SPKFmc{border-radius:50%;b
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 20 2e 74 53 33 50 35 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 45 70 46 4e 57 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 Data Ascii: .tS3P5{border-color:var(--EpFNW);border-bottom-color:transparent}@keyframes qli-left-spin{0%{transform:rotate(130deg)}50%{transform:rotate(-5deg)}100%{transform:rotate(130deg)}}@keyframes qli-right-spin{0%{transform:rotate(-130deg)}50%{transform:rotate(5
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 30 25 7d 2e 5a 65 56 42 74 63 7b 63 6f 6c 6f 72 3a 72 67 62 28 39 35 2c 39 39 2c 31 30 34 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 61 6c 54 42 51 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 6a 75 73 74 69 66 79 Data Ascii: 0%}.ZeVBtc{color:rgb(95,99,104);font-family:\"Google Sans\",Roboto,Arial,sans-serif;font-size:16px;line-height:25px;max-width:300px}.alTBQe{align-items:center;background-color:rgb(252,232,230);border-top-left-radius:8px;border-top-right-radius:8px;justify
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 50 58 54 36 63 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 7d 2e 63 42 39 4d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 31 38 2c 32 32 30 2c 32 32 34 29 3b 63 6f 6c 6f 72 3a 72 67 62 28 36 30 2c 36 34 2c 36 37 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 Data Ascii: ,sans-serif;font-size:14px;margin-left:20px;margin-right:20px}.PXT6cd{display:flex;margin-top:14px}.cB9M7{background-color:#fff;border:1px solid rgb(218,220,224);color:rgb(60,64,67);border-radius:36px;display:inline-flex;flex-grow:1;font-size:14px;font-fa
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 79 7b 0a 5f 2e 77 28 22 61 61 22 29 3b 0a 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 77 28 22 61 62 64 22 29 3b 0a 76 61 72 20 63 68 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 32 31 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 64 25 34 21 3d 33 26 26 28 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 5b 64 5d 5e 63 29 2c 63 2b 2b 29 3b 72 65 74 75 72 6e 20 62 7d 2c 64 68 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 2c 63 3b 66 6f 72 28 63 20 69 6e 20 61 29 69 66 28 61 5b 63 5d 2e 65 29 69 66 28 61 5b 63 5d 2e 62 29 62 2b 2b 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 Data Ascii: y{_.w("aa");_.y();}catch(e){_._DumpException(e)}try{_.w("abd");var chi=function(a){for(var b="",c=21,d=0;d<a.length;d++)d%4!=3&&(b+=String.fromCharCode(a[d]^c),c++);return b},dhi=function(a){var b=0,c;for(c in a)if(a[c].e)if(a[c].b)b++;else return!
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 29 3b 62 2e 4b 62 28 29 26 26 61 2e 73 65 74 28 22 58 2d 43 6c 69 65 6e 74 2d 50 63 74 78 22 2c 5f 2e 58 6b 28 62 29 29 3b 62 3d 5f 2e 4b 63 28 22 71 66 49 30 5a 63 22 29 3b 62 2e 4b 62 28 29 26 26 61 2e 73 65 74 28 22 58 2d 53 65 61 72 63 68 2d 43 69 2d 46 69 22 2c 5f 2e 58 6b 28 62 29 29 3b 62 3d 5f 2e 4b 63 28 22 41 55 66 37 71 63 22 29 3b 62 2e 4b 62 28 29 26 26 61 2e 73 65 74 28 22 58 2d 53 69 6c 6b 2d 43 61 70 61 62 69 6c 69 74 69 65 73 22 2c 5f 2e 58 6b 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 6b 44 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 7d 3b 5f 2e 6c 44 62 3d 21 31 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f Data Ascii: );b.Kb()&&a.set("X-Client-Pctx",_.Xk(b));b=_.Kc("qfI0Zc");b.Kb()&&a.set("X-Search-Ci-Fi",_.Xk(b));b=_.Kc("AUf7qc");b.Kb()&&a.set("X-Silk-Capabilities",_.Xk(b));return a};}catch(e){_._DumpException(e)}try{_.kDb=function(){return""};_.lDb=!1;}catch(e){_
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 4d 61 70 3a 65 2e 63 6f 6e 74 65 78 74 3b 76 61 72 20 6b 3d 65 2e 44 66 3d 3d 3d 76 6f 69 64 20 30 3f 6e 65 77 20 4d 61 70 3a 65 2e 44 66 3b 76 61 72 20 6c 3d 65 2e 73 45 3b 76 61 72 20 70 3d 65 2e 6a 70 62 3b 76 61 72 20 72 3d 65 2e 49 37 3b 76 61 72 20 74 3d 65 2e 76 4a 3b 76 61 72 20 78 3d 65 2e 44 66 63 3b 65 3d 65 2e 73 61 62 3b 67 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 67 3b 68 3d 6e 65 77 20 4d 61 70 28 5b 5d 2e 63 6f 6e 63 61 74 28 5f 2e 6b 64 28 68 29 29 29 3b 68 2e 68 61 73 28 22 5f 66 6d 74 22 29 7c 7c 68 2e 73 65 74 28 22 5f 66 6d 74 22 2c 22 70 72 6f 67 22 29 3b 66 26 26 68 2e 73 65 74 28 22 5f 69 64 22 2c 66 29 3b 28 66 3d 61 2e 47 79 61 29 26 26 68 2e 73 65 74 28 22 5f 78 73 72 66 22 2c 66 29 3b 6b 3d 6e 65 77 20 4d 61 70 28 6b 29 3b Data Ascii: Map:e.context;var k=e.Df===void 0?new Map:e.Df;var l=e.sE;var p=e.jpb;var r=e.I7;var t=e.vJ;var x=e.Dfc;e=e.sab;g=g===void 0?!1:g;h=new Map([].concat(_.kd(h)));h.has("_fmt")\|\|h.set("_fmt","prog");f&&h.set("_id",f);(f=a.Gya)&&h.set("_xsrf",f);k=new Map(k);
2024-10-03 07:12:22 UTC	1390	IN	Data Raw: 29 26 26 78 2e 73 65 74 28 22 76 65 74 22 2c 64 29 29 3b 66 3f 28 78 2e 73 65 74 28 22 76 65 64 22 2c 66 29 2c 67 6f 6f 67 6c 65 2e 6b 42 4c 26 26 78 2e 73 65 74 28 22 62 6c 22 2c 67 6f 6f 67 6c 65 2e 6b 42 4c 29 2c 67 6f 6f 67 6c 65 2e 73 6e 26 26 78 2e 73 65 74 28 22 73 22 2c 67 6f 6f 67 6c 65 2e 73 6e 29 29 3a 78 2e 73 65 74 28 22 65 69 22 2c 65 7c 7c 28 30 2c 5f 2e 65 6c 2e 46 79 29 28 29 29 3b 67 26 26 78 2e 73 65 74 28 22 6c 65 69 22 2c 67 29 3b 5f 2e 47 6a 61 28 78 2c 21 31 2c 21 30 29 3b 67 6f 6f 67 6c 65 2e 75 64 6d 26 26 78 2e 73 65 74 28 22 75 64 6d 22 2c 67 6f 6f 67 6c 65 2e 75 64 6d 29 3b 5f 2e 43 71 62 28 78 29 3b 78 2e 73 65 74 28 22 79 76 22 2c 22 33 22 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 42 29 7b 78 2e 73 Data Ascii: )&&x.set("vet",d));f?(x.set("ved",f),google.kBL&&x.set("bl",google.kBL),google.sn&&x.set("s",google.sn)):x.set("ei",e\|\|(0,_.el.Fy)());g&&x.set("lei",g);_.Gja(x,!1,!0);google.udm&&x.set("udm",google.udm);_.Cqb(x);x.set("yv","3");b.forEach(function(z,B){x.s

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:22 UTC	1398	OUT	GET /client_204?atyp=i&biw=1280&bih=907&ei=0kP-ZtawLumF9u8P542x-AU&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:22 UTC	758	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-kONWdy0-SjJ_G_1ttgSpcg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Thu, 03 Oct 2024 07:12:22 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-03 07:12:22 UTC	1923	OUT	POST /gen_204?atyp=csi&ei=0kP-ZtawLumF9u8P542x-AU&s=webhp&t=all&imn=11&ima=1&imad=0&imac=1&wh=907&aftie=NF&aft=1&aftp=907&adh=&ime=1&imeae=0&imeap=0&imex=1&imeh=0&imeha=0&imehb=0&imea=0&imeb=0&imel=0&imed=0&imeeb=0&scp=0&cb=201295&ucb=201295&ts=201595&mem=ujhs.9,tjhs.13,jhsl.2173,dm.8&nv=ne.1,feid.076b7aa2-9620-4cd6-93f1-3daf52e4ec7a&net=dl.10000,ect.4g,rtt.250&hp=&sys=hc.4&p=bs.true&rt=hst.74,cbt.106,prt.1139,afti.1610,aft.1610,aftqf.1611,xjses.2401,xjsee.2472,xjs.2472,lcp.1642,fcp.1152,wsrt.2908,cst.804,dnst.21,rqst.667,rspt.409,sslt.803,rqstt.2650,unt.1821,cstt.1846,dit.4053&zx=1727939540186&opi=89978449 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.149" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.149", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.149" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CI+2yQEIpbbJAQipncoBCO6LywEIkqHLAQic/swBCPqYzQEIhaDNAQjcvc0BCNrDzQEIucrNAQif0c0BCNzTzQEI0dbNAQj01s0BCKjYzQEI+cDUFRi60s0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7crXLjP1YV6hk8frUkIoOMCBwyRJNn2l59rA11aj7cTuREFKnM3Guw; NID=518=FxnJHgxvZyU25e8eniATaGONdU04PUstrWGAX5ypJix4zYBFdYSC5CAuTdEOOZdGnIZTAebpyIG7zKGfgrjXyIznqhXI8XqKwtXn4EG9pwWgiltNXcVoN0lLNOAAsmeGlQoIoSWPwo_LwG0gz_PWLZNGm9klwk92N9r7fcuGRh_fjU-MHd320glyZEJ3TBfsBsU
2024-10-03 07:12:22 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-7SY1ZBoDtwbdg9CmjQYZBw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Thu, 03 Oct 2024 07:12:22 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close