Edit tour

Windows Analysis Report
http://google.com

Overview

General Information

Sample URL:	http://google.com
Analysis ID:	1525652
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3888 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2016,i,1204260803289667384,939716637059021967,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 7088 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://google.com" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=09P_ZvLrMK-si-gP8uTaiQU&rt=wsrt.2510,cbt.117,hst.94&opi=89978449&dt=&ts=300 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4

Source: http://google.com	URL Reputation: detection malicious, Label: malware
Source: http://google.com	URL Reputation: detection malicious, Label: malware

Source: https://www.google.com	HTTP Parser: No favicon
Source: https://www.google.com	HTTP Parser: No favicon
Source: https://www.google.com	HTTP Parser: No favicon
Source: https://ogs.google.com	HTTP Parser: No favicon
Source: https://ogs.google.com	HTTP Parser: No favicon
Source: https://ogs.google.com	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:49848 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.7:50091 version: TLS 1.2

Source:	Binary string: a);x.set("cs",document.body.dataset.dt?"1":"0");if(t)switch(t){case 2:x.set("mm","c");break;case 3:x.set("mm","s");break;default:x.set("mm","cs")}_.ADb(x);return x};_.vDb=function(){var a=_.pDb();BDb&&a.set("X-DoS-Behavior","Embed");return a};var xDb,BDb;xDb=/^[a-z0-9-_/]+(callback:\d+)?$/i;_.zDb=function(){};_.ADb=function(){};BDb=_.sya; source: chromecache_665.4.dr, chromecache_552.4.dr
Source:	Binary string: var zbb;_.Abb=function(a,b,c,d,e){this.wFa=a;this.nnd=b;this.wmb=c;this.ptd=d;this.QFd=e;this.pdb=0;this.vmb=zbb(this)};zbb=function(a){return Math.random()Math.min(a.nndMath.pow(a.wmb,a.pdb),a.ptd)};_.Abb.prototype.V4b=function(){return this.pdb};_.Abb.prototype.rka=function(a){return this.pdb>=this.wFa?!1:a!=null?!!this.QFd[a]:!0};_.Bbb=function(a){if(!a.rka())throw Error("Ae`"+a.wFa);++a.pdb;a.vmb=zbb(a)}; source: chromecache_371.4.dr, chromecache_511.4.dr
Source:	Binary string: _.pDb=function(){var a=new Map,b=_.Kc("ejMLCd");b.Kb()&&a.set("X-Geo",_.Zk(b));b=_.Kc("PYFuDc");b.Kb()&&a.set("X-Client-Data",_.Zk(b));b=_.Kc("JHHKub");b.Kb()&&a.set("X-Client-Pctx",_.Zk(b));b=_.Kc("qfI0Zc");b.Kb()&&a.set("X-Search-Ci-Fi",_.Zk(b));b=_.Kc("AUf7qc");b.Kb()&&a.set("X-Silk-Capabilities",_.Zk(b));return a}; source: chromecache_665.4.dr, chromecache_552.4.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: chromecache_562.4.dr	String found in binary or memory: "pagePath": "https://www.facebook.com/Google" equals www.facebook.com (Facebook)
Source: chromecache_562.4.dr	String found in binary or memory: "pagePath": "https://www.linkedin.com/company/google" equals www.linkedin.com (Linkedin)
Source: chromecache_562.4.dr	String found in binary or memory: "pagePath": "https://www.youtube.com/google" equals www.youtube.com (Youtube)
Source: chromecache_562.4.dr	String found in binary or memory: href="https://www.facebook.com/Google"> equals www.facebook.com (Facebook)
Source: chromecache_562.4.dr	String found in binary or memory: href="https://www.linkedin.com/company/google"> equals www.linkedin.com (Linkedin)
Source: chromecache_562.4.dr	String found in binary or memory: href="https://www.youtube.com/google"> equals www.youtube.com (Youtube)
Source: chromecache_562.4.dr	String found in binary or memory: '//www.youtube.com', equals www.youtube.com (Youtube)
Source: chromecache_562.4.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?caption=World%20Teachers%E2%80%99%20Day%202024&u=https://blog.google/outreach-initiatives/education/world-teachers-day-2024/" equals www.facebook.com (Facebook)
Source: chromecache_562.4.dr	String found in binary or memory: href="https://www.linkedin.com/shareArticle?mini=true&url=https://blog.google/outreach-initiatives/education/world-teachers-day-2024/&title=World%20Teachers%E2%80%99%20Day%202024" equals www.linkedin.com (Linkedin)
Source: chromecache_408.4.dr	String found in binary or memory: L.getElementsByTagName("iframe"),ka=P.length,na=0;na<ka;na++)if(!v&&c(P[na],H.He)){oJ("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_494.4.dr, chromecache_556.4.dr, chromecache_482.4.dr, chromecache_644.4.dr, chromecache_579.4.dr, chromecache_459.4.dr, chromecache_659.4.dr, chromecache_408.4.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_579.4.dr, chromecache_459.4.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_502.4.dr, chromecache_399.4.dr, chromecache_339.4.dr, chromecache_370.4.dr, chromecache_424.4.dr, chromecache_639.4.dr, chromecache_623.4.dr, chromecache_475.4.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: sustainability.google
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: googletagmanager.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com
Source: global traffic	DNS traffic detected: DNS query: mail.google.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2016,i,1204260803289667384,939716637059021967,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://google.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2016,i,1204260803289667384,939716637059021967,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://google.com	100%	URL Reputation	malware
http://google.com	100%	URL Reputation	malware

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
142.250.184.225	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.196	unknown	United States	15169	GOOGLEUS	false
142.250.186.37	mail.google.com	United States	15169	GOOGLEUS	false
216.58.206.46	play.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	plus.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
142.250.184.241	csp.withgoogle.com	United States	15169	GOOGLEUS	false
142.250.185.168	googletagmanager.com	United States	15169	GOOGLEUS	false
216.58.206.33	unknown	United States	15169	GOOGLEUS	false
216.239.34.21	blog.google	United States	15169	GOOGLEUS	false
216.239.38.21	sustainability.google	United States	15169	GOOGLEUS	false
142.250.185.83	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
216.239.32.21	unknown	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525652
Start date and time:	2024-10-04 13:37:58 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 17s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://google.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@27/591@42/17
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.google.com/url?q=https://blog.google/outreach-initiatives/education/world-teachers-day-2024%3Futm_source%3Dgoogle%26utm_medium%3Dhpp%26utm_campaign%3D2024wtd&source=hpp&id=19044219&ct=3&usg=AOvVaw2WG7nbD-Pm5zXS-QUNghvy&sa=X&ved=0ahUKEwiyoerv0fSIAxUv1gIHHXKyNlEQ8IcBCBc Browse: https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content= Browse: https://google.com/search/howsearchworks/?fg=1 Browse: https://mail.google.com/mail/&ogbl

Input	Output
URL: https://www.google.com Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Google Search", "I'm Feeling Lucky"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Google Search", "I'm Feeling Lucky"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"Check the facts with these Google features", "prominent_button_name":"Read post", "text_input_field_labels":["Learn more", "Read post", "Read article"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com Model: jbxai	{ "brand":["Gmail"], "contains_trigger_text":true, "trigger_text":"Get more done with Gmail. Now integrated with Google Chat, Google Meet, and more, all in one place.", "prominent_button_name":"Create an account", "text_input_field_labels":["For work"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://blog.google Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Subscribe", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://ogs.google.com Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":["Google Search", "I'm Feeling Lucky"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sustainability.google Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"How to be more sustainable while commuting on a road trip", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6293)
Category:	dropped
Size (bytes):	6299
Entropy (8bit):	6.110189839772295
Encrypted:	false
SSDEEP:	96:5qccyKzG3gNe0ThkpI90I/6nIq2rxNtTNNjnZmt4hyEmz/vRtytOvGuQDd:5qpyukC/6IzLtR5nZZyNjvRktOvGuUd
MD5:	9E8C1BB09E1DE613F07375C17FF986D5
SHA1:	6A13206C8E7AD8CFFA7F486E0682A9EEEEE244FB
SHA-256:	BF70783670A06220A965C7F6AE6B4AAF8649A25B4DEDC1D7FB06F1A0C490BBC3
SHA-512:	474614651778FBB0488808B01ED43378D93BD67C99E3F34AD0A055D430E80B77CDED4E0FA649D90BBB1724852985640A0DEBE353C7E2B95000E0A76C41DC952E
Malicious:	false
Reputation:	low
Preview:	)]}'.[[["padres joe musgrove injury",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["companion movie trailer",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["las vegas raiders",46,[3,357,362,396,143],{"lm":[],"zf":33,"zh":"Las Vegas Raiders","zi":"Football team","zl":8,"zp":{"gs_ssp":"eJzj4tDP1TcwzTE3NGD0EsxJLFYoS00HkkWJmSmpRcUAeb0JIw"},"zs":"data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFAAAABQCAMAAAC5zwKfAAAAhFBMVEUAAAAdHRv////O0dgbGxn5+fnu7u4SEg8ZGRfR1Nvr6+vOzs7d3d0WFhTj4+MMDAi2trbX19fExMSRkZG+vr6cnJysrKzX2uF6enpISEdzc3Kjo6PGyc9OTk1CQkKJiYlqamldXVw2NjUpKSi3ur+vsbaVl5tiY2WeoKXi5eyCgoVWVlhTgl/ZAAAHE0lEQVRYhe2YabeiuhKGizCPQWZFGVVs/P//71YloIDs7n1P73U+nVpLZQgPSaXqTUWA/+zfsssP82JmVD+Isw4MLf0xXoo0Az/O8DM4HVkRXAgZnP6WdnKZ7Jpmio4yPXt+78nmw+ddkXlM4AowFTTQMnHO3HRQNo215+Y9nBoawSGKkjBMIjfQ2WRRC1yRZgHU3nzd8FzZNvJEY3cNVNieBWEDsneTaRz6OjL22h7WwB67kkWHwDF0XTec4JCU9ZOvaVM38WrfxBl2jNrqRuC5Sekwb+MwxoqNW7ipfdBmqMk3jV0WrC9UCBSuki7GA58coSicvsVFS5zQrzj1p8Zyvj6AlwnInSAIMq4p/tFxXFB

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://sustainability.google/static/index.min.js?cache=47ade0f	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://sustainability.google/static/index.min.css?cache=732a3af	0%	URL Reputation	safe
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://lens.google.com	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	0%	URL Reputation	safe
https://lens.google.com/gen204	0%	URL Reputation	safe

Name	IP	Active	Malicious	Reputation
google.com	142.250.181.238	true	false	unknown
csp.withgoogle.com	142.250.184.241	true	false	unknown
plus.l.google.com	142.250.186.142	true	false	unknown
mail.google.com	142.250.186.37	true	false	unknown
googletagmanager.com	142.250.185.168	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www3.l.google.com	172.217.18.110	true	false	unknown
play.google.com	216.58.206.46	true	false	unknown
sustainability.google	216.239.38.21	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	142.250.185.83	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
blog.google	216.239.34.21	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.184.225	true	false	unknown
www.blog.google	unknown	unknown	false	unknown
ogs.google.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://blog.google/static/keyword/js/all/index.js?version=pr20241003-1647	false		unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	false		unknown
https://www.google.com/search/howsearchworks/assets/hIvGK13F.min.js	false		unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3XA-l6tJyz2qk7Xxk8ThS1-W78mBoEfPVKF4hm4=rw-e365-w2880	false		unknown
https://google.com/search/howsearchworks/?fg=1	false		unknown
https://www.google.com/search/howsearchworks/assets/bAPu5B1A.min.js	false		unknown
https://lh3.googleusercontent.com/uJrIoy0GJ8gU_MZo9wDRvrJM9LWV1noGXNytkoQtZE8sgTKXS5MM5NPMckKZyrk4sGykUMHv6DaMequsYcvqymH7jH6AF6dMesc=s0-rw-e365	false		unknown
https://www.google.com/search/howsearchworks/assets/J8wBfiw3.min.js	false		unknown
https://sustainability.google/static/index.min.js?cache=47ade0f	false	URL Reputation: safe	unknown
https://www.google.com/gmail/about/static-2.0/css/partials/app-downloads.css?fingerprint=9a6fb1bb67e1c16f7ce7c44e82c95da2	false		unknown
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=09P_ZvLrMK-si-gP8uTaiQU&rt=wsrt.2510,aft.1724,afti.1721,cbt.117,hst.94,prt.1724&imn=11&ima=2&imad=0&imac=0&wh=907&aftie=NF&aft=1&aftp=-1&opi=89978449&dt=&ts=202419	false		unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	false		unknown
https://www.google.com/search/howsearchworks/assets/BhmWRCy0.min.js	false		unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvPvw0z9l_L7kOtfVZH07iQuasGIGWyFqhpdY=s0-rw-e365	false		unknown
https://www.google.com/xjs/_/js/md=2/k=xjs.hd.en.-yh58R89BVo.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRLgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/rs=ACT90oFist2HkT-ZTinHYJoNKdEV9bDzTQ	false		unknown
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=09P_ZvLrMK-si-gP8uTaiQU&zx=1728041948314&opi=89978449	false		unknown
https://blog.google/static/blogv2/js/csp/gtm.js?version=pr20241003-1647	false		unknown
https://sustainability.google/static/index.min.css?cache=732a3af	false	URL Reputation: safe	unknown
https://www.google.com/favicon.ico	false		unknown
https://lh3.googleusercontent.com/Kkh1J0HrlRSnxSQrtnP4DFSMb4SI7Rz0yAT0G6ku1QOARBJJ4To-rDzu0tfCOMWvNCtYvCYaM92ISqiDPr-8KtwNqYO3xuJERwASsfn2=rw-e365-w2880	false		unknown
https://www.google.com/async/hpba?vet=10ahUKEwiyoerv0fSIAxUv1gIHHXKyNlEQj-0KCBU..i&ei=09P_ZvLrMK-si-gP8uTaiQU&opi=89978449&yv=3&sp_imghp=false&sp_hpte=1&sp_hpep=1&stick=&cs=0&async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.-yh58R89BVo.es5.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRLgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oFist2HkT-ZTinHYJoNKdEV9bDzTQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.HFq-c3Fv2Po.L.B1.O%2Fam%3DJFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAIAEAAAAEACoAAAAAAEAAAIggAABQBAAACEBACBAAgAAKIAQoQAICRRCPQgAAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAAIAiAAECAPQIBIABICYAAEKgB4AAAAAAEABAAAgAgJkADJABCAAAAAAAACADAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIACgAAAAAAAAAAAAAAAAAAAEA%2Fbr%3D1%2Frs%3DACT90oEXqKNVybsF4DOMwJvfGV6IH5KKUA,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.en.-yh58R89BVo.es5.O%2Fck%3Dxjs.hd.HFq-c3Fv2Po.L.B1.O%2Fam%3DJFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQgG6kwAAAKMAgA0ACAAAAAAAAQDAAIAAQQAAIgEAAAIEACsAAAIBAFAAgIggAEDQBOBRLkDACBAmgAAKIAQoQAICRRCPQgQAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAIIBiAAECAPQIBIABICYAAEKgB4AAAAAAEABQAAhAkJkADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oGuTHZ99aUgfk1CEgHTyDr1avKO6w,_fmt:prog,_id:_09P_ZvLrMK-si-gP8uTaiQU_8	false		unknown
https://www.google.com/search/howsearchworks/assets/NticlS_l.min.js	false		unknown
https://lh3.googleusercontent.com/Cle-1GLl4P8zbJafbrnN8-7CgfVSduAR1j2DACNepAm5JL37GANl8tIM1h72Cyga71wO2lGcNPONnQl5MKFi_1TGSBQM8mV9qaKdQw=rw-e365-w2880	false		unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.HFq-c3Fv2Po.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAIAEAAAAEACoAAAAAAEAAAIggAABQBAAACEBACBAAgAAKIAQoQAICRRCPQgAAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAAIAiAAECAPQIBIABICYAAEKgB4AAAAAAEABAAAgAgJkADJABCAAAAAAAACADAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIACgAAAAAAAAAAAAAAAAAAAEA/d=1/ed=1/br=1/rs=ACT90oEXqKNVybsF4DOMwJvfGV6IH5KKUA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false		unknown
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmpEQDirGidE1rvGwp9BnCPpv0QfzLqnZ-noZLw=s0-rw-e365	false		unknown
https://www.google.com/intl/en-US/gmail/about/	false		unknown
https://www.google.com/search/howsearchworks/assets/RpI-OtYr.min.js	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	false	URL Reputation: safe	unknown
https://www.google.com/gen_204?atyp=csi&ei=3tP_ZrCLBqD97_UPxJfLkAM&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.9,tjhs.13,jhsl.2173,dm.8&nv=ne.1,feid.eb1d2058-badf-4f88-b547-cb5582995dc6&hp=&rt=ttfb.1485,st.1486,bs.27,aaft.1495,acrt.1510,art.1510&zx=1728041949777&opi=89978449	false		unknown
https://www.google.com/search/howsearchworks/assets/0-7k4-1q.min.js	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://blog.google/static/blogv2/images/google-200x200.png	chromecache_562.4.dr	false		unknown
https://ogs.google.com/	chromecache_605.4.dr	false		unknown
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7u	chromecache_553.4.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_502.4.dr, chromecache_339.4.dr, chromecache_370.4.dr, chromecache_579.4.dr, chromecache_639.4.dr, chromecache_459.4.dr, chromecache_623.4.dr, chromecache_475.4.dr	false	URL Reputation: safe	unknown
https://www.google.com/gmail/about/policy/	chromecache_553.4.dr	false		unknown
https://support.google.com	chromecache_562.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/6Q907Y7fYBiaW6VAnv1r8BHZnFXjJm138u89gr8j8NSikSES5OrnMMP0bDiTWR7YyY	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/hi/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/en/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://ogs.google.com/widget/callout	chromecache_605.4.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_438.4.dr, chromecache_622.4.dr, chromecache_598.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/FU-s_R5k9ZDky6RTNWsdrN8xa9Jp7C2mwd_Kj9NHQe6Cw_EipUIFLjv0L7fGBh7Klo	chromecache_553.4.dr	false		unknown
https://www.google.com/intl/zh-TW/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://blog.google/outreach-initiatives/sustainability/helping-monarch-butterflies-2024/	chromecache_503.4.dr, chromecache_349.4.dr	false		unknown
https://lh3.googleusercontent.com/0fVDL02i6kLapIFkzsaMkokcsyNFdTDEaCm2Dy_BVkH_zQKnEmF7x0A0aLzXII5cvU	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3	chromecache_553.4.dr	false		unknown
https://twitter.com/intent/tweet?text=World%20Teachers%E2%80%99%20Day%202024%20%40google&url=https:/	chromecache_562.4.dr	false		unknown
https://www.google.com/intl/en-IN/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKi	chromecache_553.4.dr	false		unknown
https://blog.google/outreach-initiatives/education/world-teachers-day-2024/	chromecache_562.4.dr	false		unknown
https://lh3.googleusercontent.com/VzZoNfTFy0Q5bMd9mVfo4M7dp1-OXWmUWsSAttnwnbw6agWisqAeJeJUCzxiZq1UhJ	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/HX2vTdXOdmn1-AwipdtTylH6l-1DaI2BOwHwV7cKGy9WXDe7_BTaXdSQ7Yyrr3khwv	chromecache_454.4.dr	false		unknown
https://ogs.google.com/widget/callout?eom=1	chromecache_409.4.dr	false		unknown
https://lh3.googleusercontent.com/hgUtJ1raSgkAHurP6yDzukLnNF1V7vS4MTeqzThHkHTz1sc8nYizzkb6TPElQ0_LzI	chromecache_553.4.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_598.4.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/google	chromecache_562.4.dr	false		unknown
https://lh3.googleusercontent.com/iRxTGREAOizQhtbCjDGShDHvBc39qEI004M8SClsSzIBgvBsbUMFNVMDfAfzoEzgvr	chromecache_454.4.dr	false		unknown
https://one.google.com/about/ai-premium/	chromecache_553.4.dr	false		unknown
https://www.google.com/intl/no/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/MfSkcsOaJkmnP-qxR6nZ3jiaIbyEqxGs7zCkorzmvi-Y9oVUkr0UThdrhaqhC2CT1h	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvP	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/hr/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://workspace.google.com/products/gmail/index.html?utm_source=gmailforwork&utm_medium=et&amp	chromecache_553.4.dr	false		unknown
https://www.google.com/tools/feedback	chromecache_665.4.dr, chromecache_552.4.dr	false		unknown
https://lh3.googleusercontent.com/1n27m9ovZ73GRgjXGsPEwcfY9rDO-8DFeimUp0o1QGdlZZiApOoxjbei1TD8OWBZfl	chromecache_553.4.dr	false		unknown
https://lh3.googleusercontent.com/VT4SCA4b12NEXu4W5qmH5nMdrHvYyXiasJ8kqJWUd7rtLUdO78YTV5v0ulPoXyXn8X	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/es/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/el/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://about.google/	chromecache_562.4.dr, chromecache_553.4.dr, chromecache_454.4.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_596.4.dr, chromecache_388.4.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/es-419/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://blog.google/products/search/generative-ai-google-search-may-2024/	chromecache_454.4.dr	false		unknown
https://workspace.google.com/?utm_source=gmailforwork&utm_medium=et&utm_campaign=body&ut	chromecache_553.4.dr	false		unknown
https://lh3.googleusercontent.com/uEalHdGqJHrnhoH1O5rYmk5kO2c-xB5HxCobW5KSipKv22HsrmhZNjVvQmBdWcV06W	chromecache_454.4.dr	false		unknown
https://github.com/shoelace-style/shoelace/blob/next/src/internal/slot.ts	chromecache_439.4.dr, chromecache_318.4.dr	false		unknown
https://lh3.googleusercontent.com/fs2pYfDpV_ktdKUy3Tsfx44gSMoe50XLFzRMG0gxlF8aDmM1dKGDELLBDBibRd41nY	chromecache_454.4.dr	false		unknown
https://schema.org	chromecache_553.4.dr	false	URL Reputation: safe	unknown
https://blog.google/outreach-initiatives/sustainability/google-pixel-nest-fitbit-plastic-free-packag	chromecache_503.4.dr, chromecache_349.4.dr	false		unknown
https://plus.google.com	chromecache_526.4.dr	false		unknown
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	chromecache_503.4.dr, chromecache_349.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/gcivdVV-tvxWnRUDNOUocQhsZmT9Was6CexDLkqmigkLzk5ZcNjqcgj3q4UROg4b1x	chromecache_553.4.dr	false		unknown
https://www.google.com/intl/pt/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/en-GB/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmp	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/da/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/tr/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://workspace.google.com/solutions/ai/?utm_source=gmailforwork&utm_medium=et&utm_campaig	chromecache_553.4.dr	false		unknown
https://policies.google.com/privacy	chromecache_562.4.dr, chromecache_553.4.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy	chromecache_553.4.dr	false		unknown
https://blog.google/products/search/overview-our-rater-guidelines-search/	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/-l2uCHxepneGNmf6MyjbK_YHkf7i3lgbrUWvNJL8CQInmOWrMChhC9vcKs27pJqtER	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/bg/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://www.google.com/intl/vi/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/Z7fdA5csO9hp9G52NNhcRk_aKByQs5hUmgkLZ94RImIiVnep1WmtPENW8ypHvNvpvz	chromecache_553.4.dr	false		unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_437.4.dr, chromecache_596.4.dr, chromecache_388.4.dr, chromecache_472.4.dr	false		unknown
https://lens.google.com	chromecache_437.4.dr, chromecache_472.4.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/id/search/howsearchworks/	chromecache_454.4.dr	false		unknown
https://lh3.googleusercontent.com/vRVBEMgF_f6E8nMWsk-t0rIxQpFtNPQ1qNCIhoo9Wr2L0-vVHcbMBcB1aGeJ19S421	chromecache_553.4.dr	false		unknown
https://lens.google.com/gen204	chromecache_665.4.dr, chromecache_552.4.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/hu/search/howsearchworks/	chromecache_454.4.dr	false		unknown

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 13:38:57.486968994 CEST	192.168.2.7	1.1.1.1	0xaa34	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:57.487092972 CEST	192.168.2.7	1.1.1.1	0xb324	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:57.543391943 CEST	192.168.2.7	1.1.1.1	0xf88b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:57.543621063 CEST	192.168.2.7	1.1.1.1	0xdba	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 4, 2024 13:38:58.598845005 CEST	192.168.2.7	1.1.1.1	0x82bb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:58.599464893 CEST	192.168.2.7	1.1.1.1	0xc973	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:02.210083008 CEST	192.168.2.7	1.1.1.1	0x5fa8	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.211371899 CEST	192.168.2.7	1.1.1.1	0x8c5b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:03.666496038 CEST	192.168.2.7	1.1.1.1	0xc349	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.667139053 CEST	192.168.2.7	1.1.1.1	0x565c	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.579510927 CEST	192.168.2.7	1.1.1.1	0x29e8	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.579751015 CEST	192.168.2.7	1.1.1.1	0xe963	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:04.615844011 CEST	192.168.2.7	1.1.1.1	0xbeb9	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.616199017 CEST	192.168.2.7	1.1.1.1	0x5419	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:05.835975885 CEST	192.168.2.7	1.1.1.1	0xaa4a	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.836239100 CEST	192.168.2.7	1.1.1.1	0x2c34	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:06.097218037 CEST	192.168.2.7	1.1.1.1	0x65bf	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.097373009 CEST	192.168.2.7	1.1.1.1	0x6f4f	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:17.916301966 CEST	192.168.2.7	1.1.1.1	0x83c2	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.916547060 CEST	192.168.2.7	1.1.1.1	0x1bf4	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 4, 2024 13:39:20.344899893 CEST	192.168.2.7	1.1.1.1	0x4917	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:20.345222950 CEST	192.168.2.7	1.1.1.1	0x500d	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 4, 2024 13:39:26.636992931 CEST	192.168.2.7	1.1.1.1	0x34e6	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.637202978 CEST	192.168.2.7	1.1.1.1	0x5102	Standard query (0)	sustainability.google	65	IN (0x0001)	false
Oct 4, 2024 13:39:31.797034979 CEST	192.168.2.7	1.1.1.1	0x7841	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.797635078 CEST	192.168.2.7	1.1.1.1	0x7aaa	Standard query (0)	sustainability.google	65	IN (0x0001)	false
Oct 4, 2024 13:39:34.084939957 CEST	192.168.2.7	1.1.1.1	0x66d4	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:34.085041046 CEST	192.168.2.7	1.1.1.1	0xfede	Standard query (0)	www.blog.google	65	IN (0x0001)	false
Oct 4, 2024 13:39:35.260751009 CEST	192.168.2.7	1.1.1.1	0xfa9a	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:35.260751009 CEST	192.168.2.7	1.1.1.1	0xbbfb	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 4, 2024 13:39:45.053014040 CEST	192.168.2.7	1.1.1.1	0x6f88	Standard query (0)	googletagmanager.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.053303957 CEST	192.168.2.7	1.1.1.1	0x2aa7	Standard query (0)	googletagmanager.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:45.082974911 CEST	192.168.2.7	1.1.1.1	0x4d0	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.083435059 CEST	192.168.2.7	1.1.1.1	0xa6ec	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:46.911222935 CEST	192.168.2.7	1.1.1.1	0x24c5	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:46.911540985 CEST	192.168.2.7	1.1.1.1	0xdd5	Standard query (0)	lh3.googleusercontent.com	65	IN (0x0001)	false
Oct 4, 2024 13:39:55.168468952 CEST	192.168.2.7	1.1.1.1	0x97be	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:55.169895887 CEST	192.168.2.7	1.1.1.1	0x4f71	Standard query (0)	csp.withgoogle.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:01.540486097 CEST	192.168.2.7	1.1.1.1	0xdb55	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:01.540658951 CEST	192.168.2.7	1.1.1.1	0x7058	Standard query (0)	mail.google.com	65	IN (0x0001)	false
Oct 4, 2024 13:40:09.931355000 CEST	192.168.2.7	1.1.1.1	0x6d07	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.931613922 CEST	192.168.2.7	1.1.1.1	0xc0e6	Standard query (0)	www.google.com	65	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 13:38:57.494458914 CEST	1.1.1.1	192.168.2.7	0xaa34	No error (0)	google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:57.496545076 CEST	1.1.1.1	192.168.2.7	0xb324	No error (0)	google.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:57.550755024 CEST	1.1.1.1	192.168.2.7	0xdba	No error (0)	google.com			65	IN (0x0001)	false
Oct 4, 2024 13:38:57.550992966 CEST	1.1.1.1	192.168.2.7	0xf88b	No error (0)	google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:58.605762959 CEST	1.1.1.1	192.168.2.7	0x82bb	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:38:58.606170893 CEST	1.1.1.1	192.168.2.7	0xc973	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:02.217195034 CEST	1.1.1.1	192.168.2.7	0x5fa8	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:02.219065905 CEST	1.1.1.1	192.168.2.7	0x8c5b	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 13:39:03.673650980 CEST	1.1.1.1	192.168.2.7	0xc349	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:03.673650980 CEST	1.1.1.1	192.168.2.7	0xc349	No error (0)	www3.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:03.674732924 CEST	1.1.1.1	192.168.2.7	0x565c	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.587053061 CEST	1.1.1.1	192.168.2.7	0xe963	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.587085962 CEST	1.1.1.1	192.168.2.7	0x29e8	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:04.587085962 CEST	1.1.1.1	192.168.2.7	0x29e8	No error (0)	plus.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:04.622961044 CEST	1.1.1.1	192.168.2.7	0xbeb9	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:05.843300104 CEST	1.1.1.1	192.168.2.7	0xaa4a	No error (0)	play.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:06.109359026 CEST	1.1.1.1	192.168.2.7	0x6f4f	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.110368013 CEST	1.1.1.1	192.168.2.7	0x65bf	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:06.110368013 CEST	1.1.1.1	192.168.2.7	0x65bf	No error (0)	plus.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.940557957 CEST	1.1.1.1	192.168.2.7	0x797b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:09.940557957 CEST	1.1.1.1	192.168.2.7	0x797b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.924449921 CEST	1.1.1.1	192.168.2.7	0x83c2	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.924449921 CEST	1.1.1.1	192.168.2.7	0x83c2	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.924449921 CEST	1.1.1.1	192.168.2.7	0x83c2	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:17.924449921 CEST	1.1.1.1	192.168.2.7	0x83c2	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:20.442384958 CEST	1.1.1.1	192.168.2.7	0x4917	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:20.442384958 CEST	1.1.1.1	192.168.2.7	0x4917	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:20.442384958 CEST	1.1.1.1	192.168.2.7	0x4917	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:20.442384958 CEST	1.1.1.1	192.168.2.7	0x4917	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.660794020 CEST	1.1.1.1	192.168.2.7	0x34e6	No error (0)	sustainability.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.660794020 CEST	1.1.1.1	192.168.2.7	0x34e6	No error (0)	sustainability.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.660794020 CEST	1.1.1.1	192.168.2.7	0x34e6	No error (0)	sustainability.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:26.660794020 CEST	1.1.1.1	192.168.2.7	0x34e6	No error (0)	sustainability.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.853420019 CEST	1.1.1.1	192.168.2.7	0x7841	No error (0)	sustainability.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.853420019 CEST	1.1.1.1	192.168.2.7	0x7841	No error (0)	sustainability.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.853420019 CEST	1.1.1.1	192.168.2.7	0x7841	No error (0)	sustainability.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:31.853420019 CEST	1.1.1.1	192.168.2.7	0x7841	No error (0)	sustainability.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:34.105067968 CEST	1.1.1.1	192.168.2.7	0x66d4	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:34.105067968 CEST	1.1.1.1	192.168.2.7	0x66d4	No error (0)	ghs-svc-https-sni.ghs-ssl.googlehosted.com		142.250.185.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:34.128133059 CEST	1.1.1.1	192.168.2.7	0xfede	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:35.269125938 CEST	1.1.1.1	192.168.2.7	0xfa9a	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:35.269125938 CEST	1.1.1.1	192.168.2.7	0xfa9a	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:35.269125938 CEST	1.1.1.1	192.168.2.7	0xfa9a	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:35.269125938 CEST	1.1.1.1	192.168.2.7	0xfa9a	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.061681986 CEST	1.1.1.1	192.168.2.7	0x6f88	No error (0)	googletagmanager.com		142.250.185.168	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.091160059 CEST	1.1.1.1	192.168.2.7	0x4d0	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:45.091160059 CEST	1.1.1.1	192.168.2.7	0x4d0	No error (0)	googlehosted.l.googleusercontent.com		142.250.184.225	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:45.091555119 CEST	1.1.1.1	192.168.2.7	0xa6ec	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:46.917954922 CEST	1.1.1.1	192.168.2.7	0x24c5	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:46.917954922 CEST	1.1.1.1	192.168.2.7	0x24c5	No error (0)	googlehosted.l.googleusercontent.com		216.58.206.33	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:39:46.918484926 CEST	1.1.1.1	192.168.2.7	0xdd5	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 13:39:55.177283049 CEST	1.1.1.1	192.168.2.7	0x97be	No error (0)	csp.withgoogle.com		142.250.184.241	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:01.547410011 CEST	1.1.1.1	192.168.2.7	0xdb55	No error (0)	mail.google.com		142.250.186.37	A (IP address)	IN (0x0001)	false
Oct 4, 2024 13:40:09.938507080 CEST	1.1.1.1	192.168.2.7	0xc0e6	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 13:40:09.938710928 CEST	1.1.1.1	192.168.2.7	0x6d07	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:58 UTC	653	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:58 UTC	854	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-YIOE02kj4fbdt2CJWTdZwQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Fri, 04 Oct 2024 11:38:58 GMT Expires: Sun, 03 Nov 2024 11:38:58 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:38:58 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:38:59 UTC	657	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 11:38:59 UTC	1763	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:38:59 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-kxbm57BFbMNMZNh_-FRXQg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; expires=Wed, 02-Apr-2025 11:38:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4; expires=Sat, 05-Apr-2025 11:38:59 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 11:38:59 UTC	1763	IN	Data Raw: 32 33 30 35 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 2305<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-10-04 11:38:59 UTC	1763	IN	Data Raw: 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 76 61 72 20 64 3b 28 64 3d 67 6f 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 3d Data Ascii: e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];var d;(d=google).x\|\|(d.x=
2024-10-04 11:38:59 UTC	1763	IN	Data Raw: 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 74 3d 72 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 72 73 Data Ascii: &&"navigationStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,t=r?aa\|\|window.performance.timing.navigationStart:void 0;function u(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.rs
2024-10-04 11:38:59 UTC	1763	IN	Data Raw: 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 44 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 41 74 74 Data Ascii: emoveEventListener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var pa=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<D.length;++d)if(a.getAtt
2024-10-04 11:38:59 UTC	1763	IN	Data Raw: 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 49 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b 7d 2c 6d 3a Data Ascii: "),c=0,d=b.length;c<d;++c)a(I(b[c]))};function ra(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{},m:
2024-10-04 11:38:59 UTC	158	IN	Data Raw: 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 3b 50 28 30 29 3b 78 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 72 61 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4b 2c 21 30 29 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4b 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 0d 0a Data Ascii: tychange",Q,!0);P(0);x&&(google.c.oil=ra,B(document.documentElement,"load",K,!0),B(document.documentElement,"error",K,!0));google.cv=function(a,b,c,d){if(!a
2024-10-04 11:38:59 UTC	327	IN	Data Raw: 31 34 30 0d 0a 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 3b 72 65 74 75 72 6e 21 62 26 26 63 61 28 61 2c 64 2c 65 29 3f 30 3a 65 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 52 28 61 29 7b 74 72 79 7b 61 28 29 7d 63 61 74 63 68 28 62 29 7b 67 6f 6f 67 6c 65 2e 6d 6c 28 62 2c 21 31 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 61 66 74 71 21 3d 3d 6e 75 6c 6c 29 7b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 Data Ascii: 140\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var e=function(h){return h.getBoundingClientRect()};return!b&&ca(a,d,e)?0:ea(a,b,c,d,e)};function R(a){try{a()}catch(b){google.ml(b,!1)}}function sa(){if(google.aftq!==null){google.tick("load"
2024-10-04 11:38:59 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 62 2b 2b 5d 3b 29 52 28 63 29 3b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 6e 75 6c 6c 7d 7d 67 6f 6f 67 6c 65 2e 63 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 3d 3d 6e 75 6c 6c 3f 52 28 61 29 3a 28 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 7c 7c 5b 5d 2c 67 6f 6f 67 6c 65 2e 61 66 74 71 2e 70 75 73 68 28 61 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 53 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 61 76 69 67 61 74 69 6f 6e 2e 74 79 70 65 7d 3b 76 61 72 20 74 61 3d 77 69 6e 64 6f 77 2e Data Ascii: 8000b++];)R(c);google.aftq=null}}google.caft=function(a){google.aftq===null?R(a):(google.aftq=google.aftq\|\|[],google.aftq.push(a))};function S(){return window.performance&&window.performance.navigation&&window.performance.navigation.type};var ta=window.
2024-10-04 11:39:00 UTC	1390	IN	Data Raw: 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 2c 63 2e 6c 65 6e 67 74 68 21 3d 3d 30 29 29 7b 63 3d 0a 63 5b 30 5d 3b 62 72 65 61 6b 20 61 7d 63 3d 76 6f 69 64 20 30 7d 63 26 26 28 66 3d 63 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 74 79 70 65 6f 66 20 66 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 61 2b 3d 22 26 64 74 3d 22 2b 66 29 2c 63 3d 63 2e 74 72 61 6e 73 66 65 72 53 69 7a 65 2c 74 79 70 65 6f 66 20 63 3d 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 61 2b 3d 22 26 74 73 3d 22 2b 63 29 29 3b 63 3d 61 3b 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 28 63 2c 22 22 29 3a Data Ascii: ce.getEntriesByType("navigation"),c.length!==0)){c=c[0];break a}c=void 0}c&&(f=c.deliveryType,typeof f==="string"&&(a+="&dt="+f),c=c.transferSize,typeof c==="number"&&(a+="&ts="+c));c=a;typeof navigator.sendBeacon==="function"?navigator.sendBeacon(c,""):
2024-10-04 11:39:00 UTC	1390	IN	Data Raw: 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 49 62 37 45 66 63 22 29 2e 6c 65 6e 67 74 68 26 26 41 28 22 64 64 6c 22 2c 31 29 3b 41 28 22 77 68 22 2c 63 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 6c 29 7b 66 26 26 7a 28 22 61 66 74 69 22 2c 66 29 3b 67 26 26 7a 28 22 61 66 74 69 70 22 2c 67 29 3b 58 3e 30 26 26 7a 28 22 61 66 74 73 22 2c 59 29 3b 69 66 28 6c 29 7b 76 61 72 20 71 3b 67 3d 28 28 71 3d 6c 2e 63 6c 6f 73 65 73 74 28 22 5b 64 61 74 61 2d 76 65 64 5d 22 29 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 71 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 76 65 64 22 29 29 7c 7c 22 4e 46 22 3b 41 28 22 61 66 74 69 65 22 2c 67 29 7d 71 3d 59 3b 67 3d 58 3b 69 66 28 30 3e 71 7c 7c Data Ascii: document.getElementsByClassName("Ib7Efc").length&&A("ddl",1);A("wh",c)},function(f,g,l){f&&z("afti",f);g&&z("aftip",g);X>0&&z("afts",Y);if(l){var q;g=((q=l.closest("[data-ved]"))==null?void 0:q.getAttribute("data-ved"))\|\|"NF";A("aftie",g)}q=Y;g=X;if(0>q\|\|

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:00 UTC	1718	OUT	GET /xjs/_/ss/k=xjs.hd.HFq-c3Fv2Po.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAIAEAAAAEACoAAAAAAEAAAIggAABQBAAACEBACBAAgAAKIAQoQAICRRCPQgAAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAAIAiAAECAPQIBIABICYAAEKgB4AAAAAAEABAAAgAgJkADJABCAAAAAAAACADAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIACgAAAAAAAAAAAAAAAAAAAEA/d=1/ed=1/br=1/rs=ACT90oEXqKNVybsF4DOMwJvfGV6IH5KKUA/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4
2024-10-04 11:39:00 UTC	809	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/css; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 4232 Date: Fri, 04 Oct 2024 11:39:00 GMT Expires: Sat, 04 Oct 2025 11:39:00 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Oct 2024 17:10:52 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:00 UTC	581	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 76 5a 65 30 6a 62 3a 23 61 38 63 37 66 61 3b 2d 2d 6e 77 58 6f 62 62 3a 23 36 33 38 65 64 34 3b 2d 2d 56 75 5a 58 42 64 3a 23 30 30 31 64 33 35 3b 2d 2d 75 4c 7a 33 37 63 3a 23 35 34 35 64 37 65 3b 2d 2d 6a 49 4e 75 36 63 3a 23 30 30 31 64 33 35 3b 2d 2d 54 79 56 59 6c 64 3a 23 30 62 35 37 64 30 3b 2d 2d 5a 45 70 50 6d 64 3a 23 63 33 64 39 66 62 3b 2d 2d 51 57 61 61 61 66 3a 23 36 33 38 65 64 34 3b 2d 2d 44 45 65 53 74 66 3a 23 66 35 66 38 66 66 3b 2d 2d 54 53 57 5a 49 62 3a 23 65 35 65 64 66 66 3b 2d 2d 42 52 4c 77 45 3a 23 64 33 65 33 66 64 3b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 Data Ascii: :root{--COEmY:#1f1f1f;--xhUGwc:#fff}:root{--vZe0jb:#a8c7fa;--nwXobb:#638ed4;--VuZXBd:#001d35;--uLz37c:#545d7e;--jINu6c:#001d35;--TyVYld:#0b57d0;--ZEpPmd:#c3d9fb;--QWaaaf:#638ed4;--DEeStf:#f5f8ff;--TSWZIb:#e5edff;--BRLwE:#d3e3fd;--gS5jXb:#dadce0;--Aqn7xd:#
2024-10-04 11:39:00 UTC	1390	IN	Data Raw: 6c 54 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 79 55 54 4d 6a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 56 44 67 56 69 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 54 55 4f 73 55 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 7b 66 72 6f 6d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 Data Ascii: lTd{font-family:Roboto,Arial,sans-serif;font-size:14px;line-height:22px}.yUTMj{font-family:Roboto,Arial,sans-serif;font-weight:400}.VDgVie{text-align:center}.TUOsUe{text-align:left}@keyframes g-snackbar-show{from{pointer-events:none;transform:translateY(0
2024-10-04 11:39:00 UTC	1390	IN	Data Raw: 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 35 36 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 62 37 37 48 4b 66 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 70 78 7d 7d 2e 56 39 4f 31 59 64 20 2e 72 49 78 73 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 56 39 4f 31 59 64 20 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 56 39 4f 31 59 64 20 2e 73 48 46 4e 59 64 20 67 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6a 68 5a 76 6f 64 7b 6c 65 66 74 3a 31 36 70 78 3b 72 69 67 68 Data Ascii: :inline-block;max-width:568px;min-width:288px;text-align:left}.b77HKf{border-radius:8px}.sHFNYd{margin-left:40px}}.V9O1Yd .rIxsve{display:block;padding:8px 0}.V9O1Yd .sHFNYd{margin-left:0}.V9O1Yd .sHFNYd g-flat-button{padding-left:0}.jhZvod{left:16px;righ
2024-10-04 11:39:00 UTC	735	IN	Data Raw: 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 33 2e 34 33 35 70 78 3b 77 69 64 74 68 3a 31 33 2e 34 33 35 70 78 7d 2e 49 42 50 5a 75 20 2e 6f 51 63 50 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 74 6f 70 3a Data Ascii: eft:1px solid rgba(0,0,0,.2);border-right:none;border-top:1px solid rgba(0,0,0,.2);box-sizing:border-box;height:13.435px;width:13.435px}.IBPZu .oQcPt{border-bottom:1px solid rgba(0,0,0,.2);border-left:none;border-right:1px solid rgba(0,0,0,.2);border-top:
2024-10-04 11:39:00 UTC	136	IN	Data Raw: 6f 75 6e 64 2d 63 6f 6c 6f 72 20 31 30 30 6d 73 2c 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 32 35 30 6d 73 3b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 69 6e 73 65 74 3a 30 7d 2f 2a 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 73 75 67 67 65 73 74 69 6f 6e 5f 67 72 6f 75 70 2e 63 73 73 2e 6d 61 70 20 2a 2f 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: ound-color 100ms,visibility 0s 250ms;position:fixed;visibility:hidden;inset:0}/# sourceMappingURL=suggestion_group.css.map /sentinel{}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	1364	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4
2024-10-04 11:39:01 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Fri, 04 Oct 2024 11:39:01 GMT Expires: Fri, 04 Oct 2024 11:39:01 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:01 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-10-04 11:39:01 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://google.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Chrome Cache Entry: 319

Chrome Cache Entry: 320

Windows Analysis Report
http://google.com

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	3934	OUT	GET /xjs/_/js/k=xjs.hd.en.-yh58R89BVo.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRLgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/d=1/ed=1/dg=3/br=1/rs=ACT90oFist2HkT-ZTinHYJoNKdEV9bDzTQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4
2024-10-04 11:39:01 UTC	819	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1049467 Date: Fri, 04 Oct 2024 11:39:01 GMT Expires: Sat, 04 Oct 2025 11:39:01 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 04 Oct 2024 06:32:23 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:01 UTC	571	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Id
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 61 2c 44 63 61 2c 78 63 61 2c 45 63 61 2c 76 63 61 2c 46 63 61 2c 75 63 61 2c 47 63 61 2c 49 63 61 2c 50 63 61 2c 52 63 61 2c 53 63 61 2c 57 63 61 2c 58 63 61 2c 61 64 61 2c 64 64 61 2c 59 63 61 2c 63 64 61 2c 62 64 61 2c 24 63 61 2c 5a 63 61 2c 66 64 61 2c 67 64 61 2c 6b 64 61 2c 6d 64 61 2c 6c 64 61 2c 70 64 61 2c 71 64 61 2c 72 64 61 2c 74 64 61 2c 76 64 61 2c 75 64 61 2c 78 64 61 2c 79 64 61 2c 7a 64 61 2c 42 64 61 2c 43 64 61 2c 44 64 61 2c 45 64 61 2c 46 64 61 2c 49 64 61 2c 4a 64 61 2c 4b 64 61 2c 4f 64 61 2c 4e 64 61 2c 52 64 61 2c 53 64 61 2c 58 64 61 2c 59 64 61 2c 5a 64 61 2c 61 65 61 2c 24 64 61 2c 63 65 61 2c 62 65 61 2c 66 65 61 2c 65 65 61 2c 68 65 61 2c 6a 65 61 2c 6d 65 61 2c 6e 65 61 2c 71 65 61 2c 72 65 61 2c 76 65 61 2c 77 65 61 2c 42 Data Ascii: a,Dca,xca,Eca,vca,Fca,uca,Gca,Ica,Pca,Rca,Sca,Wca,Xca,ada,dda,Yca,cda,bda,$ca,Zca,fda,gda,kda,mda,lda,pda,qda,rda,tda,vda,uda,xda,yda,zda,Bda,Cda,Dda,Eda,Fda,Ida,Jda,Kda,Oda,Nda,Rda,Sda,Xda,Yda,Zda,aea,$da,cea,bea,fea,eea,hea,jea,mea,nea,qea,rea,vea,wea,B
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f Data Ascii: tureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 26 28 65 61 61 3d 76 6f 69 64 20 30 29 3b 74 68 72 6f 77 20 66 3b 7d 7d 3b 0a 5f 2e 6c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 62 3b 69 66 28 69 61 61 29 7b 69 66 28 62 26 26 28 6a 61 61 3f 21 61 2e 69 73 57 65 6c 6c 46 6f 72 6d 65 64 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 Data Ascii: &(eaa=void 0);throw f;}};_.laa=function(a,b){b=b===void 0?!1:b;if(iaa){if(b&&(jaa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("O");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 21 31 3a 5f 2e 69 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 75 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 5f 2e 69 61 28 22 45 64 67 2f 22 29 7d 3b 0a 5f 2e 76 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 61 28 22 46 69 72 65 66 6f 78 22 29 7c 7c 5f 2e 69 61 28 22 46 78 69 4f 53 22 29 7d 3b 5f 2e 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 6a 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 69 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c Data Ascii: a=function(){return _.qaa()?!1:_.ia("Edge")};_.uaa=function(){return _.qaa()?naa("Microsoft Edge"):_.ia("Edg/")};_.vaa=function(){return _.ia("Firefox")\|\|_.ia("FxiOS")};_.la=function(){return _.ia("Safari")&&!(_.ja()\|\|(_.qaa()?0:_.ia("Coast"))\|\|_.raa()\|\|
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 22 5d 29 7d 72 65 74 75 72 6e 20 61 3d 3d 3d 22 46 69 72 65 66 6f 78 22 26 26 5f 2e 76 61 61 28 29 7c 7c 61 3d 3d 3d 22 53 61 66 61 72 69 22 26 26 5f 2e 6c 61 28 29 7c 7c 61 3d 3d 3d 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 26 26 5f 2e 78 61 61 28 29 7c 7c 61 3d 3d 3d 22 53 69 6c 6b 22 26 26 5f 2e 77 61 61 28 29 3f 28 61 3d 62 5b 32 5d 29 26 26 0a 61 5b 31 5d 7c 7c 22 22 3a 22 22 7d 3b 5f 2e 42 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 66 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e Data Ascii: HeadlessChrome"])}return a==="Firefox"&&_.vaa()\|\|a==="Safari"&&_.la()\|\|a==="Android Browser"&&_.xaa()\|\|a==="Silk"&&_.waa()?(a=b[2])&&a[1]\|\|"":""};_.Baa=function(a){if(_.qaa()&&a!=="Silk"){var b=_.fa.brands.find(function(c){return c.brand===a});if(!b\|\|!b.
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 26 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 62 7c 7c 22 22 7d 3b 0a 5f 2e 4b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6f 61 28 5f 2e 4a 61 61 28 29 2c 61 29 3e 3d 30 7d 3b 5f 2e 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 5f 2e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 4c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 73 61 28 61 2c 62 2c 63 Data Ascii: &a[1]);return b\|\|""};_.Kaa=function(a){return _.oa(_.Jaa(),a)>=0};_.pa=function(a){return a[a.length-1]};_.ra=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.Laa=function(a,b,c){b=_.sa(a,b,c
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 5f 2e 42 61 28 64 29 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 30 2c 66 3d 64 2e 6c 65 6e 67 74 68 7c 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 5f 2e 55 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 54 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 54 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 41 72 72 61 79 2e 70 72 Data Ascii: arguments[c];if(_.Ba(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.Uaa=function(a,b,c,d){return Array.prototype.splice.apply(a,Taa(arguments,1))};Taa=function(a,b,c){return arguments.length<=2?Array.pr
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 69 73 41 72 72 61 79 28 64 29 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 7b 76 61 72 20 66 3d 54 61 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 3b 66 3d 5f 2e 63 62 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 66 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 64 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 5f 2e 64 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 77 65 62 6b 69 74 22 29 26 26 21 5f 2e 69 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 Data Ascii: isArray(d))for(var e=0;e<d.length;e+=8192){var f=Taa(d,e,e+8192);f=_.cba.apply(null,f);for(var g=0;g<f.length;g++)b.push(f[g])}else b.push(d)}return b};_.dba=function(){return _.ha(_.da().toLowerCase(),"webkit")&&!_.ia("Edge")};_.eba=function(){return _.i
2024-10-04 11:39:01 UTC	1390	IN	Data Raw: 29 2c 53 5f 3a 21 31 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 22 29 3b 7d 3b 73 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 42 69 67 49 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 3b 0a 5f 2e 76 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 62 61 3b 69 66 28 21 75 62 61 28 61 29 29 7b 76 61 72 20 63 2c 64 3b 62 3d 28 64 3d 28 63 3d 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 28 29 3a 62 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 63 2e 63 6f 6e 63 61 74 28 22 5c 6e 22 29 29 21 3d 6e 75 6c 6c 3f 64 3a 22 22 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 60 22 2b 62 2b 22 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 7d 3b 5f 2e 77 62 61 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ),S_:!1};throw Error("T");};sba=function(){return typeof BigInt==="function"};_.vba=function(a){var b=tba;if(!uba(a)){var c,d;b=(d=(c=typeof b==="function"?b():b)==null?void 0:c.concat("\n"))!=null?d:"";throw Error("U`"+b+"`"+String(a));}};_.wba=function

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	1445	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=09P_ZvLrMK-si-gP8uTaiQU&rt=wsrt.2510,cbt.117,hst.94&opi=89978449&dt=&ts=300 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4
2024-10-04 11:39:01 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-gLqKzrFRelVVG9zoLi1fCw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Fri, 04 Oct 2024 11:39:01 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 11:39:01 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=191172 Date: Fri, 04 Oct 2024 11:39:01 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	195	OUT	GET /rules/other-Win32-v19.bundle HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:02 UTC	540	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:02 GMT Content-Type: text/plain Content-Length: 218853 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public Last-Modified: Mon, 30 Sep 2024 13:16:38 GMT ETag: "0x8DCE1521DF74B57" x-ms-request-id: 90766f9b-701e-006f-578c-15afc4000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113902Z-15767c5fc55fdfx81a30vtr1fw0000000cwg000000002csu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:02 UTC	15844	IN	Data Raw: 31 30 30 30 76 35 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 30 30 22 20 56 3d 22 35 22 20 44 43 3d 22 45 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 52 75 6c 65 45 72 72 6f 72 73 41 67 67 72 65 67 61 74 65 64 22 20 41 54 54 3d 22 66 39 39 38 63 63 35 62 61 34 64 34 34 38 64 36 61 31 65 38 65 39 31 33 66 66 31 38 62 65 39 34 2d 64 64 31 32 32 65 30 61 2d 66 63 66 38 2d 34 64 63 35 2d 39 64 62 62 2d 36 61 66 61 63 35 33 32 35 31 38 33 2d 37 34 30 35 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 53 3d 22 37 30 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 20 50 53 55 22 20 Data Ascii: 1000v5+<?xml version="1.0" encoding="utf-8"?><R Id="1000" V="5" DC="ESM" EN="Office.Telemetry.RuleErrorsAggregated" ATT="f998cc5ba4d448d6a1e8e913ff18be94-dd122e0a-fcf8-4dc5-9dbb-6afac5325183-7405" SP="CriticalBusinessImpact" S="70" DL="A" DCa="PSP PSU"
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 22 30 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 42 22 20 49 3d 22 35 22 20 4f 3d 22 66 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 2f 3e Data Ascii: "0" /> </L> <R> <V V="400" T="I32" /> </R> </O> </R> </O> </C> <C T="B" I="5" O="false"> <O T="AND"> <L> <O T="GE"> <L> <S T="1" F="0" />
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 20 20 3c 53 54 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 31 22 20 2f 3e 0d 0a 20 20 3c 2f 53 54 3e 0d 0a 3c 2f 52 3e 0d 0a 3c 24 21 23 3e 31 30 38 32 30 76 33 2b 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 30 38 32 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 4f 75 74 6c 6f 6f 6b 2e 44 65 73 6b 74 6f 70 2e 43 6f 6e 74 61 63 74 43 61 72 64 50 72 6f 70 65 72 74 69 65 73 43 6f 75 6e 74 73 22 20 41 54 54 3d 22 64 38 30 37 36 30 39 32 37 36 37 34 34 32 34 35 62 61 66 38 31 62 66 37 62 63 38 30 33 33 66 36 2d 32 32 36 38 65 33 37 34 2d 37 37 36 36 2d 34 39 37 36 2d 62 65 34 34 2d 62 36 61 64 35 62 64 64 63 35 62 36 2d 37 38 31 Data Ascii: <ST> <S T="1" /> </ST></R><$!#>10820v3+<?xml version="1.0" encoding="utf-8"?><R Id="10820" V="3" DC="SM" EN="Office.Outlook.Desktop.ContactCardPropertiesCounts" ATT="d807609276744245baf81bf7bc8033f6-2268e374-7766-4976-be44-b6ad5bddc5b6-781
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 20 54 3d 22 55 36 34 22 20 49 3d 22 38 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 45 76 65 6e 74 73 5f 41 76 67 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 41 76 65 72 61 67 65 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 39 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 41 67 65 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 34 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 30 22 20 4f 3d 22 74 72 75 65 22 20 4e 3d 22 50 75 72 67 65 64 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 53 20 54 3d 22 35 22 20 46 3d 22 43 6f 75 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 Data Ascii: T="U64" I="8" O="false" N="Events_Avg"> <S T="2" F="Average" /> </C> <C T="U32" I="9" O="true" N="Purged_Age"> <S T="4" F="Count" /> </C> <C T="U32" I="10" O="true" N="Purged_Count"> <S T="5" F="Count" /> </C> <C T="U32"
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 50 65 72 73 6f 6e 61 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f 75 6e 74 5f 43 72 65 61 74 65 43 61 72 64 5f 56 61 6c 69 64 4d 61 6e 61 67 65 72 5f 46 61 6c 73 65 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 31 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 43 6f Data Ascii: "0" O="false" N="Count_CreateCard_ValidPersona_False"> <C> <S T="10" /> </C> </C> <C T="U32" I="1" O="false" N="Count_CreateCard_ValidManager_False"> <C> <S T="11" /> </C> </C> <C T="U32" I="2" O="false" N="Co
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 20 20 20 20 3c 53 20 54 3d 22 33 31 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 39 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 57 61 73 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 32 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 50 61 69 6e 74 5f 49 4d 73 6f 50 65 72 73 6f 6e 61 5f 4e 75 6c 6c 5f 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 33 33 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a Data Ascii: <S T="31" /> </C> </C> <C T="U32" I="19" O="false" N="Paint_IMsoPersona_WasNull_Count"> <C> <S T="32" /> </C> </C> <C T="U32" I="20" O="false" N="Paint_IMsoPersona_Null_Count"> <C> <S T="33" /> </C>
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 32 30 30 22 20 54 3d 22 49 36 34 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 4c 54 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 52 65 74 72 69 65 76 61 6c 4d 69 6c 6c 69 73 65 63 Data Ascii: <S T="3" F="RetrievalMilliseconds" /> </L> <R> <V V="200" T="I64" /> </R> </O> </L> <R> <O T="LT"> <L> <S T="3" F="RetrievalMillisec
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 30 22 20 54 3d 22 49 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 3c 2f 53 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 30 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e 74 65 67 72 61 74 69 6f 6e 46 69 72 73 74 43 61 6c 6c 53 75 63 63 65 73 73 43 6f 75 6e 74 22 3e 0d 0a 20 20 20 20 3c 43 3e 0d 0a 20 20 20 20 20 20 3c 53 20 54 3d 22 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 2f 43 3e 0d 0a 20 20 3c 2f 43 3e 0d 0a 20 20 3c 43 20 54 3d 22 55 33 32 22 20 49 3d 22 31 22 20 4f 3d 22 66 61 6c 73 65 22 20 4e 3d 22 4f 63 6f 6d 32 49 55 43 4f 66 66 69 63 65 49 6e Data Ascii: R> <V V="0" T="I32" /> </R> </O> </F> </S> <C T="U32" I="0" O="false" N="Ocom2IUCOfficeIntegrationFirstCallSuccessCount"> <C> <S T="9" /> </C> </C> <C T="U32" I="1" O="false" N="Ocom2IUCOfficeIn
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 54 65 6e 61 6e 74 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 33 22 20 46 3d 22 55 73 65 72 20 65 6e 61 62 6c 65 64 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: R> </O> </F> <F T="6"> <O T="AND"> <L> <S T="3" F="Tenant enabled" /> </L> <R> <O T="EQ"> <L> <S T="3" F="User enabled" /> </L>
2024-10-04 11:39:02 UTC	16384	IN	Data Raw: 54 3d 22 36 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 32 22 20 46 3d 22 48 74 74 70 53 74 61 74 75 73 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 4c 3e 0d 0a 20 20 20 20 20 20 20 20 3c 52 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 56 20 56 3d 22 34 30 34 22 20 54 3d 22 55 33 32 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 52 3e 0d 0a 20 20 20 20 20 20 3c 2f 4f 3e 0d 0a 20 20 20 20 3c 2f 46 3e 0d 0a 20 20 20 20 3c 46 20 54 3d 22 37 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 41 4e 44 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 4f 20 54 3d 22 47 45 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: T="6"> <O T="EQ"> <L> <S T="2" F="HttpStatus" /> </L> <R> <V V="404" T="U32" /> </R> </O> </F> <F T="7"> <O T="AND"> <L> <O T="GE"> <

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:02 UTC	1358	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4
2024-10-04 11:39:02 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Fri, 04 Oct 2024 11:39:02 GMT Expires: Fri, 04 Oct 2024 11:39:02 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 11:39:02 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 11:39:03 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=191245 Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 11:39:03 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	1533	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=09P_ZvLrMK-si-gP8uTaiQU&rt=wsrt.2510,aft.1724,afti.1721,cbt.117,hst.94,prt.1724&imn=11&ima=2&imad=0&imac=0&wh=907&aftie=NF&aft=1&aftp=-1&opi=89978449&dt=&ts=202419 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.134", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.134" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiFoM0BCNy9zQEIucrNAQii0c0BCIrTzQEIpNbNAQj01s0BCKfYzQEI+cDUFRj1yc0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7cqP59NH79alwynygZwhF-bZyxFpEqqONcGZ5VXy7fI725oL58q9vyM; NID=518=Y8CHh_z9YABtiBgK68c59hhVbgPCfA1qumY1bEux_GRjeARfYW38f5bNsPbmd3WWikPJ3YZBnCm5Uz4bKZLDqMcB8eeMZDdLzvXJ8VagH6nINGOph-i8nCujycdezOrRrxv0IA8Kab0EbjK-5zNVCH1gf8iud1GOhNNUvbVdiVKDUOaCVOGH6irgCbDzeehfKx4
2024-10-04 11:39:03 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DGXCn2lKtrtETLpt1pxp6w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Fri, 04 Oct 2024 11:39:03 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120600v4s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 2980 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:10 GMT ETag: "0x8DC582BA80D96A1" x-ms-request-id: b9d87bc3-001e-008d-128c-15d91e000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-15767c5fc55kg97hfq5uqyxxaw0000000ce0000000009asu x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	2980	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 30 22 20 56 3d 22 34 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 4d 65 74 61 64 61 74 61 44 65 76 69 63 65 43 6f 6e 73 6f 6c 69 64 61 74 65 64 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 44 43 22 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120600" V="4" DC="SM" EN="Office.System.SystemHealthMetadataDeviceConsolidated" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalBusinessImpact" DL="A" DCa="DC"

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	193	OUT	GET /rules/rule120402v21s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 3788 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:17 GMT ETag: "0x8DC582BAC2126A6" x-ms-request-id: 1cc2ff82-e01e-0071-478c-1508e7000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-15767c5fc55gq5fmm10nm5qqr80000000ch000000000ag9x x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	3788	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 34 30 32 22 20 56 3d 22 32 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 53 79 73 74 65 6d 2e 53 79 73 74 65 6d 48 65 61 6c 74 68 55 6e 67 72 61 63 65 66 75 6c 41 70 70 45 78 69 74 44 65 73 6b 74 6f 70 22 20 41 54 54 3d 22 63 64 38 33 36 36 32 36 36 31 31 63 34 63 61 61 61 38 66 63 35 62 32 65 37 32 38 65 65 38 31 64 2d 33 62 36 64 36 63 34 35 2d 36 33 37 37 2d 34 62 66 35 2d 39 37 39 32 2d 64 62 66 38 65 31 38 38 31 30 38 38 2d 37 35 32 31 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 43 65 6e 73 75 73 22 20 44 4c 3d 22 41 22 20 44 43 61 3d 22 50 53 50 22 20 78 6d 6c 6e 73 3d 22 22 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120402" V="21" DC="SM" EN="Office.System.SystemHealthUngracefulAppExitDesktop" ATT="cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521" SP="CriticalCensus" DL="A" DCa="PSP" xmlns=""

Timestamp	Bytes transferred	Direction	Data
2024-10-04 11:39:03 UTC	192	OUT	GET /rules/rule120608v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-04 11:39:03 UTC	563	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 11:39:03 GMT Content-Type: text/xml Content-Length: 2160 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:26:03 GMT ETag: "0x8DC582BA3B95D81" x-ms-request-id: 39d43082-801e-00ac-658c-15fd65000000 x-ms-version: 2018-03-28 x-azure-ref: 20241004T113903Z-15767c5fc554l9xf959gp9cb1s00000006mg00000000a0gg x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-04 11:39:03 UTC	2160	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 30 38 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 44 43 61 3d 22 50 53 55 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 32 22 20 52 3d 22 31 32 30 36 37 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 33 22 20 52 3d 22 31 32 30 36 31 30 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 34 22 20 52 3d 22 31 32 30 36 31 32 22 20 2f 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 35 22 20 52 3d 22 31 32 30 36 31 34 22 20 2f 3e 0d 0a 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120608" V="0" DC="SM" T="Subrule" DCa="PSU" xmlns=""> <S> <R T="1" R="120609" /> <R T="2" R="120679" /> <R T="3" R="120610" /> <R T="4" R="120612" /> <R T="5" R="120614" />