Edit tour

Windows Analysis Report
http://lonerprevailed.com

Overview

General Information

Sample URL:	http://lonerprevailed.com
Analysis ID:	1525751
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2000 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1792,i,32488999995775075,10296086755632177723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lonerprevailed.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /gen_204?s=webhp&t=cap&atyp=csi&ei=peH_Zv34MtyI7NYPvZmh4QM&rt=wsrt.2505,cbt.136,hst.91&opi=89978449&dt=&ts=300 HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"Content-Type: text/plain;charset=UTF-8sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-prefers-color-scheme: lightsec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco

Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon
Source: https://www.google.com/imghp?hl=en&ogbl	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:62782 version: TLS 1.2

Source:	Binary string: a);x.set("cs",document.body.dataset.dt?"1":"0");if(t)switch(t){case 2:x.set("mm","c");break;case 3:x.set("mm","s");break;default:x.set("mm","cs")}_.ADb(x);return x};_.vDb=function(){var a=_.pDb();BDb&&a.set("X-DoS-Behavior","Embed");return a};var xDb,BDb;xDb=/^[a-z0-9-_/]+(callback:\d+)?$/i;_.zDb=function(){};_.ADb=function(){};BDb=_.sya; source: chromecache_287.2.dr, chromecache_403.2.dr
Source:	Binary string: case 7:if(!_.PDb(a,h))return q.return(!1);a.setState("yf");_.QDb(m,a.element);return q.return(!0);case 2:p=_.Hg(q);_.RDb(l,e.C7a);if(!_.PDb(a,h))return q.return(!1);_.MDb(a,"ye");throw p;}})};_.LDb=function(a,b,c,d){b.start();b.Gc("astyp",a.lH);(c==null?void 0:c.get("arc_id"))==="stev"&&(b.Gc("trt","st"),b.Gc("ssr","0"),d&&b.Gc("bb","1"));a=b.oa.startDate;var e,f,g,h;c=(e=google)==null?void 0:(f=e.timers)==null?void 0:(g=f.async)==null?void 0:(h=g.t)==null?void 0:h.atit;a&&c&&b.cB("tcdt",a-c)}; source: chromecache_332.2.dr, chromecache_519.2.dr
Source:	Binary string: _.oDb=function(a,b){nDb++;nDb===1&&_.Fqa("dos",function(){return""+nDb});_.Xd().Gc("dos","ssrc."+nDb+",target."+b).log()};_.pDb=function(a,b){_.Xd().Gc("dos","solved,target."+b).log()}; source: chromecache_332.2.dr, chromecache_519.2.dr
Source:	Binary string: google.jslm=10;google.jsla=void 0}),4);case 4:_.Ig(g);d=_.n(b.Da);for(e=d.next();!e.done;e=d.next())f=e.value,nEb(b,f);XDb(_.jua());_.Jg(g,3);break;case 7:return _.Ig(g),_.Fg(g,10),g.yield(c,12);case 12:return g.yield(Promise.all(b.Ca),10);case 10:_.Ig(g,0,0,1);XDb(_.jua());_.Jg(g,11,1);break;case 11:_.Jg(g,3);break;case 3:if(!b.oa&&b.isActive())throw Error("bf");_.hg();_.Cg(g)}})};_.wDb.prototype.isActive=function(){return _.PDb(this.target,this.Fa)}; source: chromecache_332.2.dr, chromecache_519.2.dr
Source:	Binary string: var zbb;_.Abb=function(a,b,c,d,e){this.wFa=a;this.nnd=b;this.wmb=c;this.ptd=d;this.QFd=e;this.pdb=0;this.vmb=zbb(this)};zbb=function(a){return Math.random()Math.min(a.nndMath.pow(a.wmb,a.pdb),a.ptd)};_.Abb.prototype.V4b=function(){return this.pdb};_.Abb.prototype.rka=function(a){return this.pdb>=this.wFa?!1:a!=null?!!this.QFd[a]:!0};_.Bbb=function(a){if(!a.rka())throw Error("Ae`"+a.wFa);++a.pdb;a.vmb=zbb(a)}; source: chromecache_594.2.dr, chromecache_535.2.dr
Source:	Binary string: _.pDb=function(){var a=new Map,b=_.Kc("ejMLCd");b.Kb()&&a.set("X-Geo",_.Zk(b));b=_.Kc("PYFuDc");b.Kb()&&a.set("X-Client-Data",_.Zk(b));b=_.Kc("JHHKub");b.Kb()&&a.set("X-Client-Pctx",_.Zk(b));b=_.Kc("qfI0Zc");b.Kb()&&a.set("X-Search-Ci-Fi",_.Zk(b));b=_.Kc("AUf7qc");b.Kb()&&a.set("X-Silk-Capabilities",_.Zk(b));return a}; source: chromecache_287.2.dr, chromecache_403.2.dr
Source:	Binary string: eEb=function(a){var b,c,d;_.Mg(function(e){if(e.oa==1){if(a.oa!==a.Aa)return e.return();a.Gi.Gc("ima",String(a.Da));a.Gi.Gc("imn",String(a.oa));b=_.n(Object.keys(_.JCb));for(c=b.next();!c.done;c=b.next())d=c.value,a.Gi.Gc(d,_.JCb[d]());_.ko(a.Gi,"art");return a.C7a?e.yield(a.C7a(a.Gi),2):e.Fb(2)}a.Gi.log();_.Cg(e)})};var sDb=_.oDb,vDb=_.pDb;var hEb,iEb,jEb,lEb,kEb;hEb=0;_.GDb=function(a){this.element=a;this.Kra=_.dzb(a);this.oa=_.ezb(a);this.lH=_.fzb(this.Kra,this.oa,a);this.bJa=_.Yc(a,"asyncRclass")\|\|"";this.method=(this.P1=_.Yc(a,"asyncToken"))\|\|_.Yc(a,"asyncMethod")==="stateful"?"POST":"GET"};_.GDb.prototype.startUpdate=function(){hEb++;return this.element.__yup=hEb};_.PDb=function(a,b){return b===a.element.__yup}; source: chromecache_332.2.dr, chromecache_519.2.dr

Source: global traffic	TCP traffic: 192.168.2.4:64978 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:62660 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_524.2.dr	String found in binary or memory: "pagePath": "https://www.facebook.com/Google" equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr	String found in binary or memory: "pagePath": "https://www.linkedin.com/company/google" equals www.linkedin.com (Linkedin)
Source: chromecache_524.2.dr	String found in binary or memory: "pagePath": "https://www.youtube.com/google" equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr	String found in binary or memory: href="https://www.facebook.com/Google"> equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr	String found in binary or memory: href="https://www.linkedin.com/company/google"> equals www.linkedin.com (Linkedin)
Source: chromecache_524.2.dr	String found in binary or memory: href="https://www.youtube.com/google"> equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr	String found in binary or memory: '//www.youtube.com', equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr	String found in binary or memory: href="https://www.facebook.com/sharer/sharer.php?caption=World%20Teachers%E2%80%99%20Day%202024&u=https://blog.google/outreach-initiatives/education/world-teachers-day-2024/" equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr	String found in binary or memory: href="https://www.linkedin.com/shareArticle?mini=true&url=https://blog.google/outreach-initiatives/education/world-teachers-day-2024/&title=World%20Teachers%E2%80%99%20Day%202024" equals www.linkedin.com (Linkedin)
Source: chromecache_521.2.dr	String found in binary or memory: L.getElementsByTagName("iframe"),ka=P.length,na=0;na<ka;na++)if(!v&&c(P[na],H.He)){oJ("https://www.youtube.com/iframe_api");v=!0;break}})}}else F(u.vtp_gtmOnSuccess)}var q=["www.youtube.com","www.youtube-nocookie.com"],r={UNSTARTED:-1,ENDED:0,PLAYING:1,PAUSED:2,BUFFERING:3,CUED:5},t,v=!1;Z.__ytl=n;Z.__ytl.o="ytl";Z.__ytl.isVendorTemplate=!0;Z.__ytl.priorityOverride=0;Z.__ytl.isInfrastructure=!1; equals www.youtube.com (Youtube)
Source: chromecache_443.2.dr, chromecache_541.2.dr, chromecache_454.2.dr, chromecache_521.2.dr, chromecache_423.2.dr	String found in binary or memory: Math.round(q);u["gtm.videoElapsedTime"]=Math.round(f);u["gtm.videoPercent"]=r;u["gtm.videoVisible"]=t;return u},bk:function(){e=zb()},nd:function(){d()}}};var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)
Source: chromecache_541.2.dr, chromecache_423.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={hh:e,fh:f,gh:g,Rh:k,Sh:m,He:n,Cb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),v=t.length,u=0;u<v;u++){var w=t[u].getAttribute("src");if(WC(w,"iframe_api")\|\|WC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!NC&&UC(x[A],p.He))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_463.2.dr, chromecache_392.2.dr, chromecache_369.2.dr, chromecache_318.2.dr, chromecache_598.2.dr, chromecache_580.2.dr	String found in binary or memory: return b}JC.F="internal.enableAutoEventOnTimer";var gc=la(["data-gtm-yt-inspected-"]),LC=["www.youtube.com","www.youtube-nocookie.com"],MC,NC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: lonerprevailed.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ogs.google.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: blog.google
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: 50.23.12.20.in-addr.arpa
Source: global traffic	DNS traffic detected: DNS query: sustainability.google
Source: global traffic	DNS traffic detected: DNS query: www.blog.google
Source: global traffic	DNS traffic detected: DNS query: googletagmanager.com
Source: global traffic	DNS traffic detected: DNS query: lh3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: mail.google.com
Source: global traffic	DNS traffic detected: DNS query: csp.withgoogle.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1792,i,32488999995775075,10296086755632177723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lonerprevailed.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2188 --field-trial-handle=1792,i,32488999995775075,10296086755632177723,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://lonerprevailed.com"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://sustainability.google/static/index.min.js?cache=47ade0f	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
https://sustainability.google/static/index.min.css?cache=732a3af	0%	URL Reputation	safe
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	0%	URL Reputation	safe
https://workspace.google.com/solutions/ai/?utm_source=gmailforwork&utm_medium=et&utm_campaig	0%	URL Reputation	safe
https://policies.google.com/privacy	0%	URL Reputation	safe
https://lens.google.com	0%	URL Reputation	safe
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	0%	URL Reputation	safe

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.212.142	unknown	United States	15169	GOOGLEUS	false
142.250.74.206	unknown	United States	15169	GOOGLEUS	false
142.250.184.229	mail.google.com	United States	15169	GOOGLEUS	false
142.250.185.142	play.google.com	United States	15169	GOOGLEUS	false
216.239.36.21	sustainability.google	United States	15169	GOOGLEUS	false
192.243.59.20	lonerprevailed.com	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
142.250.184.228	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.68	unknown	United States	15169	GOOGLEUS	false
216.58.206.83	ghs-svc-https-sni.ghs-ssl.googlehosted.com	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	googlehosted.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.184.232	googletagmanager.com	United States	15169	GOOGLEUS	false
142.250.186.46	google.com	United States	15169	GOOGLEUS	false
142.250.184.241	csp.withgoogle.com	United States	15169	GOOGLEUS	false
172.217.23.110	unknown	United States	15169	GOOGLEUS	false
142.250.181.238	www3.l.google.com	United States	15169	GOOGLEUS	false
216.239.32.21	unknown	United States	15169	GOOGLEUS	false

IP
192.168.2.9
192.168.2.4
192.168.2.10

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1525751
Start date and time:	2024-10-04 14:36:49 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://lonerprevailed.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean1.win@28/540@34/21
Cookbook Comments:	Browse: https://www.google.com/url?q=https://blog.google/outreach-initiatives/education/world-teachers-day-2024%3Futm_source%3Dgoogle%26utm_medium%3Dhpp%26utm_campaign%3D2024wtd&source=hpp&id=19044219&ct=3&usg=AOvVaw2WG7nbD-Pm5zXS-QUNghvy&sa=X&ved=0ahUKEwi93_KG3_SIAxVcBNsEHb1MKDwQ8IcBCBY Browse: https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content= Browse: https://google.com/search/howsearchworks/?fg=1 Browse: https://mail.google.com/mail/&ogbl Browse: https://www.google.com/imghp?hl=en&ogbl

Input	Output
URL: https://www.google.com/ Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"To the teachers who inspire us: Thank you!", "prominent_button_name":"Sign in", "text_input_field_labels":["Google Search", "I'm Feeling Lucky"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/ Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"To the teachers who inspire us: Thank you!", "prominent_button_name":"Sign in", "text_input_field_labels":["Google Search", "I'm Feeling Lucky"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://blog.google/outreach-initiatives/education/world-teachers-day-2024/?utm_source=google&utm_medium=hpp&utm_campaign=2024wtd Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Subscribe", "text_input_field_labels":["unknown"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://sustainability.google/?utm_source=googlehpfooter&utm_medium=housepromos&utm_campaign=bottom-footer&utm_content= Model: jbxai	{ "brand":["Google"], "contains_trigger_text":true, "trigger_text":"How to be more sustainable while commuting on a road trip", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/intl/en-US/gmail/about/ Model: jbxai	{ "brand":["Gmail"], "contains_trigger_text":true, "trigger_text":"Gmail inbox screen with enlarged function icons", "prominent_button_name":"Create an account", "text_input_field_labels":["For work"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/imghp?hl=en&ogbl Model: jbxai	{ "brand":["Google"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign in", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.google.com/intl/en-US/gmail/about/ Model: jbxai	{ "brand":["Gmail"], "contains_trigger_text":true, "trigger_text":"Get more done with Gmail. Now integrated with Google Chat, Google Meet, and more, all in one place.", "prominent_button_name":"Create an account", "text_input_field_labels":["For work"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Name	IP	Active	Malicious	Reputation
google.com	142.250.186.46	true	false	unknown
csp.withgoogle.com	142.250.184.241	true	false	unknown
plus.l.google.com	142.250.185.206	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
mail.google.com	142.250.184.229	true	false	unknown
googletagmanager.com	142.250.184.232	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www3.l.google.com	142.250.181.238	true	false	unknown
play.google.com	142.250.185.142	true	false	unknown
sustainability.google	216.239.36.21	true	false	unknown
ghs-svc-https-sni.ghs-ssl.googlehosted.com	216.58.206.83	true	false	unknown
lonerprevailed.com	192.243.59.20	true	false	unknown
www.google.com	142.250.184.228	true	false	unknown
blog.google	216.239.36.21	true	false	unknown
googlehosted.l.googleusercontent.com	142.250.185.193	true	false	unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false	unknown
www.blog.google	unknown	unknown	false	unknown
ogs.google.com	unknown	unknown	false	unknown
lh3.googleusercontent.com	unknown	unknown	false	unknown
apis.google.com	unknown	unknown	false	unknown
50.23.12.20.in-addr.arpa	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/gen_204?atyp=i&ei=6-H_ZqSWJvGO7NYPioSJ4QQ&dt19=2&prm23=0&zx=1728045552626&opi=89978449	false		unknown
https://blog.google/static/keyword/js/all/index.js?version=pr20241003-1647	false		unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKinVM98Qkjr1uN3BhQ3StGXCp1-O_wPwoLZeDQ=rw-e365-w2880	false		unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.HFq-c3Fv2Po.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAIAEAAAAEACoAAAAAAEAAAIggAABQBAAAAEBACBAAgAAKIAQoQAICRRCPQgAAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAAIAiAAECAPQIBIABICYAAEKgB4AAAAAAEABAAAgAgJkADJABCAAAAAAAACADAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIACgAAAAAAAAAAAAAAAAAAAEA/d=1/ed=1/br=1/rs=ACT90oF_tAztOuFhjIXnyMt3ns5pMHBzVQ/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false		unknown
https://www.google.com/search/howsearchworks/assets/hIvGK13F.min.js	false		unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3XA-l6tJyz2qk7Xxk8ThS1-W78mBoEfPVKF4hm4=rw-e365-w2880	false		unknown
https://google.com/search/howsearchworks/?fg=1	false		unknown
https://www.google.com/search/howsearchworks/assets/bAPu5B1A.min.js	false		unknown
https://www.google.com/search/howsearchworks/assets/J8wBfiw3.min.js	false		unknown
https://www.google.com/gen_204?s=webhp&t=cap&atyp=csi&ei=peH_Zv34MtyI7NYPvZmh4QM&rt=wsrt.2505,cbt.136,hst.91&opi=89978449&dt=&ts=300	false		unknown
https://sustainability.google/static/index.min.js?cache=47ade0f	false	URL Reputation: safe	unknown
https://www.google.com/imghp?hl=en&ogbl	false		unknown
https://www.google.com/gmail/about/static-2.0/css/partials/app-downloads.css?fingerprint=9a6fb1bb67e1c16f7ce7c44e82c95da2	false		unknown
https://www.google.com/gen_204?s=imghp&t=cap&atyp=csi&ei=6-H_ZqSWJvGO7NYPioSJ4QQ&rt=wsrt.1189,cbs.226,cbt.824,hst.196,prt.606&opi=89978449&dt=&ts=192243	false		unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy22DROUcJKCaZbeDHpT7raQ-ZKBmj1MM1JqGQ=rw-e365-w2880	false		unknown
https://www.google.com/search/howsearchworks/assets/BhmWRCy0.min.js	false		unknown
https://www.google.com/xjs/_/js/md=2/k=xjs.hd.en.-yh58R89BVo.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRJgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/rs=ACT90oHYzfbeFNclAKpF94XrZIGOyUFFxg	false		unknown
https://www.google.com/gen_204?atyp=i&ei=peH_Zv34MtyI7NYPvZmh4QM&ct=slh&v=t1&im=M&m=HV&pv=0.2505182416191205&me=1:1728045478906,V,0,0,1280,907:0,B,907:0,N,1,peH_Zv34MtyI7NYPvZmh4QM:0,R,1,1,0,0,1280,907:3938,x:4176,e,B&zx=1728045487020&opi=89978449	false		unknown
https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=peH_Zv34MtyI7NYPvZmh4QM&rt=wsrt.2505,aft.1313,afti.1313,cbt.136,hst.91,prt.1251&imn=11&ima=2&imad=0&imac=0&wh=907&aftie=NF&aft=1&aftp=907&opi=89978449&dt=&ts=198222	false		unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvPvw0z9l_L7kOtfVZH07iQuasGIGWyFqhpdY=s0-rw-e365	false		unknown
https://www.google.com/xjs/_/js/k=xjs.s.en_US.cKQTCx5lUyg.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAABAgQCAAAAAAACgAAAAAAAAAAAAAAAAAAAAAQCACAkBAAAAQAAAAWAAAAICAAABAAAAICAAAIEAEAABAAAAAAAAAAAAAiAJgAAAAAAIALAAACRQAAAIAAAAAYAAAACAAAAAAAUAAAAAAAAAAAAAAAAAAAAAAAAAABBKAfAAAAAAAAAAAAgAAAAAAAMAAAAAAAAAAAABAAAAAEAQAAA2QAAgAAAAAAALgPAIIHAIYUFgAAAAAAAAAAAAAAAAAkCMaCBBQEAAAAAAAAAAAAAAAAAAAAkBI0cYA/d=0/dg=0/br=1/rs=ACT90oGcL457ufXBy35OD3jabo1wiUcEjg/m=lOO0Vd,sy99,P6sQOc?xjs=s4	false		unknown
http://lonerprevailed.com/	false		unknown
https://blog.google/static/blogv2/js/csp/gtm.js?version=pr20241003-1647	false		unknown
https://sustainability.google/static/index.min.css?cache=732a3af	false	URL Reputation: safe	unknown
https://www.google.com/favicon.ico	false		unknown
https://www.google.com/xjs/_/js/k=xjs.hd.en.-yh58R89BVo.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRJgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/d=0/dg=0/br=1/rs=ACT90oHYzfbeFNclAKpF94XrZIGOyUFFxg/m=lOO0Vd,sy8u,P6sQOc?xjs=s4	false		unknown
https://lh3.googleusercontent.com/Kkh1J0HrlRSnxSQrtnP4DFSMb4SI7Rz0yAT0G6ku1QOARBJJ4To-rDzu0tfCOMWvNCtYvCYaM92ISqiDPr-8KtwNqYO3xuJERwASsfn2=rw-e365-w2880	false		unknown
https://www.google.com/xjs/_/js/k=xjs.s.en_US.cKQTCx5lUyg.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAABAgQCAAAAAAACgAAAAAAAAAAAAAAAAAAAAAQCACAkBAAAAQAAAAWAAAAICAAABAAAAICAAAIEAEAABAAAAAAAAAAAAAiAJgAAAAAAIALAAACRQAAAIAAAAAYAAAACAAAAAAAUAAAAAAAAAAAAAAAAAAAAAAAAAABBKAfAAAAAAAAAAAAgAAAAAAAMAAAAAAAAAAAABAAAAAEAQAAA2QAAgAAAAAAALgPAIIHAIYUFgAAAAAAAAAAAAAAAAAkCMaCBBQEAAAAAAAAAAAAAAAAAAAAkBI0cYA/d=0/dg=0/br=1/rs=ACT90oGcL457ufXBy35OD3jabo1wiUcEjg/m=sygv,sygw,aLUfP?xjs=s4	false		unknown
https://www.google.com/xjs/_/ss/k=xjs.hd.HFq-c3Fv2Po.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAIAEAAAAEACoAAAAAAEAAAIggAABQBAAAAEBACBAAgAAKIAQoQAICRRCPQgAAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAAIAiAAECAPQIBIABICYAAEKgB4AAAAAAEABAAAgAgJkADJABCAAAAAAAACADAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIACgAAAAAAAAAAAAAAAAAAAEA/d=0/br=1/rs=ACT90oF_tAztOuFhjIXnyMt3ns5pMHBzVQ/m=syjx,syo1?xjs=s4	false		unknown
https://www.google.com/gen_204?atyp=i&ei=peH_Zv34MtyI7NYPvZmh4QM&dt19=2&prm23=0&zx=1728045482841&opi=89978449	false		unknown
https://www.google.com/search/howsearchworks/assets/NticlS_l.min.js	false		unknown
https://lh3.googleusercontent.com/Cle-1GLl4P8zbJafbrnN8-7CgfVSduAR1j2DACNepAm5JL37GANl8tIM1h72Cyga71wO2lGcNPONnQl5MKFi_1TGSBQM8mV9qaKdQw=rw-e365-w2880	false		unknown
https://www.google.com/gen_204?atyp=i&ei=peH_Zv34MtyI7NYPvZmh4QM&ct=slh&v=t1&im=M&pv=0.2505182416191205&me=7:1728045487021,V,0,0,0,0:3450,V,0,0,1280,907:5854,e,B&zx=1728045496325&opi=89978449	false		unknown
https://www.google.com/intl/en-US/gmail/about/	false		unknown
https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.SpvAvsXfWWo.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-MoqWi0fF1M09Ccs-6QfulXvxfdg/cb=gapi.loaded_0	false	URL Reputation: safe	unknown
https://www.google.com/xjs/_/js/md=2/k=xjs.s.en_US.cKQTCx5lUyg.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAABAgQCAAAAAAACgAAAAAAAAAAAAAAAAAAAAAQCACAkBAAAAQAAAAWAAAAICAAABAAAAICAAAIEAEAABAAAAAAAAAAAAAiAJgAAAAAAIALAAACRQAAAIAAAAAYAAAACAAAAAAAUAAAAAAAAAAAAAAAAAAAAAAAAAABBKAfAAAAAAAAAAAAgAAAAAAAMAAAAAAAAAAAABAAAAAEAQAAA2QAAgAAAAAAALgPAIIHAIYUFgAAAAAAAAAAAAAAAAAkCMaCBBQEAAAAAAAAAAAAAAAAAAAAkBI0cYA/rs=ACT90oGcL457ufXBy35OD3jabo1wiUcEjg	false		unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://blog.google/static/blogv2/images/google-200x200.png	chromecache_524.2.dr	false		unknown
https://ogs.google.com/	chromecache_564.2.dr	false		unknown
https://lh3.googleusercontent.com/N_lV5xwErJpAK4jkrNwMMQfbQN7gs0loaMzQHVF768czQNAHsMWW6Kk1FUJnbH0c7u	chromecache_517.2.dr	false		unknown
https://stats.g.doubleclick.net/g/collect	chromecache_463.2.dr, chromecache_541.2.dr, chromecache_318.2.dr, chromecache_598.2.dr, chromecache_580.2.dr, chromecache_423.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/gmail/about/policy/	chromecache_517.2.dr	false		unknown
https://support.google.com	chromecache_524.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/hi/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/en/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://ogs.google.com/widget/callout	chromecache_564.2.dr	false		unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_401.2.dr, chromecache_560.2.dr, chromecache_579.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/FU-s_R5k9ZDky6RTNWsdrN8xa9Jp7C2mwd_Kj9NHQe6Cw_EipUIFLjv0L7fGBh7Klo	chromecache_517.2.dr	false		unknown
https://www.google.com/intl/zh-TW/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://blog.google/outreach-initiatives/sustainability/helping-monarch-butterflies-2024/	chromecache_329.2.dr, chromecache_464.2.dr	false		unknown
https://lh3.googleusercontent.com/0fVDL02i6kLapIFkzsaMkokcsyNFdTDEaCm2Dy_BVkH_zQKnEmF7x0A0aLzXII5cvU	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/YqGm39Z5sh9A5xtQbH_iZFAKj6kwCkY447q5cjzGcb85qccGrZn5xO_N_XwKpx1nd3	chromecache_517.2.dr	false		unknown
https://twitter.com/intent/tweet?text=World%20Teachers%E2%80%99%20Day%202024%20%40google&url=https:/	chromecache_524.2.dr	false		unknown
https://www.google.com/intl/en-IN/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/2noIz2X2ov5fXwxhW8AbSDnLpp8tT3mI3-iV_OQ2UOwX_EhIBBgip7FPRs10DYmPKi	chromecache_517.2.dr	false		unknown
https://blog.google/outreach-initiatives/education/world-teachers-day-2024/	chromecache_524.2.dr	false		unknown
https://lh3.googleusercontent.com/VzZoNfTFy0Q5bMd9mVfo4M7dp1-OXWmUWsSAttnwnbw6agWisqAeJeJUCzxiZq1UhJ	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/HX2vTdXOdmn1-AwipdtTylH6l-1DaI2BOwHwV7cKGy9WXDe7_BTaXdSQ7Yyrr3khwv	chromecache_417.2.dr	false		unknown
https://ogs.google.com/widget/callout?eom=1	chromecache_582.2.dr	false		unknown
https://lh3.googleusercontent.com/hgUtJ1raSgkAHurP6yDzukLnNF1V7vS4MTeqzThHkHTz1sc8nYizzkb6TPElQ0_LzI	chromecache_517.2.dr	false		unknown
https://stats.g.doubleclick.net/j/collect	chromecache_579.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/google	chromecache_524.2.dr	false		unknown
https://lh3.googleusercontent.com/iRxTGREAOizQhtbCjDGShDHvBc39qEI004M8SClsSzIBgvBsbUMFNVMDfAfzoEzgvr	chromecache_417.2.dr	false		unknown
https://one.google.com/about/ai-premium/	chromecache_517.2.dr	false		unknown
https://www.google.com/intl/no/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/fvNhHugJAnsAS2DJW1V3kQ-0lsCTl2eDWV9NW2p4KXStsynp7EjqGSiACH9xSdCIvP	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/hr/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://workspace.google.com/products/gmail/index.html?utm_source=gmailforwork&utm_medium=et&amp	chromecache_517.2.dr	false		unknown
https://www.google.com/tools/feedback	chromecache_287.2.dr, chromecache_332.2.dr, chromecache_403.2.dr, chromecache_519.2.dr	false		unknown
https://lh3.googleusercontent.com/1n27m9ovZ73GRgjXGsPEwcfY9rDO-8DFeimUp0o1QGdlZZiApOoxjbei1TD8OWBZfl	chromecache_517.2.dr	false		unknown
https://lh3.googleusercontent.com/VT4SCA4b12NEXu4W5qmH5nMdrHvYyXiasJ8kqJWUd7rtLUdO78YTV5v0ulPoXyXn8X	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/es/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/el/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://about.google/	chromecache_524.2.dr, chromecache_517.2.dr	false		unknown
https://apis.google.com/js/api.js	chromecache_359.2.dr, chromecache_558.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/es-419/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://blog.google/products/search/generative-ai-google-search-may-2024/	chromecache_417.2.dr	false		unknown
https://workspace.google.com/?utm_source=gmailforwork&utm_medium=et&utm_campaign=body&ut	chromecache_517.2.dr	false		unknown
https://lh3.googleusercontent.com/uEalHdGqJHrnhoH1O5rYmk5kO2c-xB5HxCobW5KSipKv22HsrmhZNjVvQmBdWcV06W	chromecache_417.2.dr	false		unknown
https://github.com/shoelace-style/shoelace/blob/next/src/internal/slot.ts	chromecache_299.2.dr, chromecache_402.2.dr	false		unknown
https://schema.org	chromecache_517.2.dr	false	URL Reputation: safe	unknown
https://blog.google/outreach-initiatives/sustainability/google-pixel-nest-fitbit-plastic-free-packag	chromecache_329.2.dr, chromecache_464.2.dr	false		unknown
https://plus.google.com	chromecache_489.2.dr	false		unknown
https://blog.google/outreach-initiatives/sustainability/google-wildfire-boundary-maps-europe-africa/	chromecache_329.2.dr, chromecache_464.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/gcivdVV-tvxWnRUDNOUocQhsZmT9Was6CexDLkqmigkLzk5ZcNjqcgj3q4UROg4b1x	chromecache_517.2.dr	false		unknown
https://www.google.com/intl/pt/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/en-GB/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/OMmSijDU0neu_vZPqLWBrVJsQGT_D0ejrnpIgQMPkTZC-0s9dO6_kbV3sGb2q9BWmp	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/da/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/tr/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://workspace.google.com/solutions/ai/?utm_source=gmailforwork&utm_medium=et&utm_campaig	chromecache_517.2.dr	false	URL Reputation: safe	unknown
https://policies.google.com/privacy	chromecache_524.2.dr, chromecache_517.2.dr	false	URL Reputation: safe	unknown
https://lh3.googleusercontent.com/GhfIwA6ZINFkFgE77BVZ596ZtFXFc72Z6OfHGeHh4VO8ZSNBZkXXcRdgWvhzJKDzmy	chromecache_517.2.dr	false		unknown
https://lh3.googleusercontent.com/-l2uCHxepneGNmf6MyjbK_YHkf7i3lgbrUWvNJL8CQInmOWrMChhC9vcKs27pJqtER	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/bg/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://www.google.com/intl/vi/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/Z7fdA5csO9hp9G52NNhcRk_aKByQs5hUmgkLZ94RImIiVnep1WmtPENW8ypHvNvpvz	chromecache_517.2.dr	false		unknown
https://www.google.com/log?format=json&hasfast=true	chromecache_439.2.dr, chromecache_328.2.dr, chromecache_359.2.dr, chromecache_601.2.dr, chromecache_558.2.dr	false		unknown
https://lens.google.com	chromecache_439.2.dr, chromecache_328.2.dr, chromecache_601.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/intl/id/search/howsearchworks/	chromecache_417.2.dr	false		unknown
https://lh3.googleusercontent.com/vRVBEMgF_f6E8nMWsk-t0rIxQpFtNPQ1qNCIhoo9Wr2L0-vVHcbMBcB1aGeJ19S421	chromecache_517.2.dr	false		unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	322864
Entropy (8bit):	3.7253988995392264
Encrypted:	false
SSDEEP:	3072:yp8owIBMCofb1byXaFQLC8OEzCxpapWt4:TI9iBb7EOEqEct4
MD5:	61F4CE1795C76A236FA455EFBB5980F8
SHA1:	06FB72DCB6136A460335059C883A4C973A9BEC8A
SHA-256:	91D63A003F5DDD872C2A2AFF6CF4BEE11053DB924EA94D501012BA4C2473DF5D
SHA-512:	299DC3098C56155C275674978F77A788EE1AE6E20301794A1493C54B9A460E0807879EBC34BE8796E1B95D10A9446AFB8BFF8BD033ABA0DBD0885719378A5B7E
Malicious:	false
Reputation:	low
Preview:	RIFF(...WEBPVP8L..../..D..u!...B.m..........f..,.D.K.V.0^:P.....m.....fp...."..EY.I[.i2..:6.tm..@mcj7-..c..{...F.J....ZfS...4....h.r.&."...c9.CY.-..(..Er....\........E.........D.?.../k....GJ.J.H.*.P...Zq....0..2.J.:B..AZ.t&..uz.8-.N.I..I..mk.....}...[.m{.i..y...W.b.bW...ff.%fZ.^d.......T8...8.bF..K....u...l.......T .6...S.@..Nt.'i.8.W.J.....pV.......Fp....`[..e.&M....,..?""...?.M$..<.R.d.l.E.....y.1..M..v...!v<..U;S....3...}.3.Xw.R.....f7.Q..D...`%..^..}Y...q....iY.Le..D.y2SJ.I...zm.Vm[r..s.s.}...df.K...........,yQ...CZl1..3.w..s...m..^..1.>..._.fJ.rf.........c......2f&I....w.=..........'.N.......................................................................................................................................................................................................................................................................................................................................................................................

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 4, 2024 14:37:55.540314913 CEST	192.168.2.4	1.1.1.1	0x686	Standard query (0)	lonerprevailed.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.540443897 CEST	192.168.2.4	1.1.1.1	0x2e97	Standard query (0)	lonerprevailed.com	65	IN (0x0001)	false
Oct 4, 2024 14:37:56.040323973 CEST	192.168.2.4	1.1.1.1	0x114b	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:56.040456057 CEST	192.168.2.4	1.1.1.1	0x836c	Standard query (0)	google.com	65	IN (0x0001)	false
Oct 4, 2024 14:37:56.976423979 CEST	192.168.2.4	1.1.1.1	0x5dae	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:56.976572037 CEST	192.168.2.4	1.1.1.1	0xbe55	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:01.296139002 CEST	192.168.2.4	1.1.1.1	0x8e65	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:01.296139956 CEST	192.168.2.4	1.1.1.1	0x899f	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:01.365665913 CEST	192.168.2.4	1.1.1.1	0xfbf7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:01.366118908 CEST	192.168.2.4	1.1.1.1	0x8b64	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:01.955786943 CEST	192.168.2.4	1.1.1.1	0x1371	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:01.956191063 CEST	192.168.2.4	1.1.1.1	0x2e1f	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:02.784955025 CEST	192.168.2.4	1.1.1.1	0xce50	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:02.785164118 CEST	192.168.2.4	1.1.1.1	0x170c	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:04.915179968 CEST	192.168.2.4	1.1.1.1	0xf4e6	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:04.915492058 CEST	192.168.2.4	1.1.1.1	0xa8d9	Standard query (0)	play.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:05.006192923 CEST	192.168.2.4	1.1.1.1	0x97d7	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:05.006436110 CEST	192.168.2.4	1.1.1.1	0x4e0e	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Oct 4, 2024 14:38:17.602952957 CEST	192.168.2.4	1.1.1.1	0x5d9c	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:17.603142977 CEST	192.168.2.4	1.1.1.1	0x5aae	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 4, 2024 14:38:20.455336094 CEST	192.168.2.4	1.1.1.1	0xc2e0	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:20.455993891 CEST	192.168.2.4	1.1.1.1	0xfc96	Standard query (0)	blog.google	65	IN (0x0001)	false
Oct 4, 2024 14:38:23.452871084 CEST	192.168.2.4	1.1.1.1	0x6cf1	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 4, 2024 14:38:25.315622091 CEST	192.168.2.4	1.1.1.1	0x108a	Standard query (0)	50.23.12.20.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Oct 4, 2024 14:38:27.520148993 CEST	192.168.2.4	1.1.1.1	0x5826	Standard query (0)	sustainability.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:35.130939960 CEST	192.168.2.4	1.1.1.1	0x13b6	Standard query (0)	www.blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:36.245170116 CEST	192.168.2.4	1.1.1.1	0xc19b	Standard query (0)	blog.google	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:37.983083010 CEST	192.168.2.4	1.1.1.1	0xa00e	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:44.934144974 CEST	192.168.2.4	1.1.1.1	0xdd1a	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:46.040767908 CEST	192.168.2.4	1.1.1.1	0x8716	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:48.175061941 CEST	192.168.2.4	1.1.1.1	0xedba	Standard query (0)	googletagmanager.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:48.307434082 CEST	192.168.2.4	1.1.1.1	0x2e52	Standard query (0)	lh3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:50.622205019 CEST	192.168.2.4	1.1.1.1	0xcd57	Standard query (0)	mail.google.com	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:39:01.775810003 CEST	192.168.2.4	1.1.1.1	0xd4ad	Standard query (0)	csp.withgoogle.com	A (IP address)	IN (0x0001)	false

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		192.243.59.20	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		192.243.61.227	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		192.243.59.12	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		172.240.127.234	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		172.240.108.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		192.243.61.225	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		172.240.108.76	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		172.240.253.132	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		172.240.108.84	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:55.550126076 CEST	1.1.1.1	192.168.2.4	0x686	No error (0)	lonerprevailed.com		192.243.59.13	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:56.048259020 CEST	1.1.1.1	192.168.2.4	0x114b	No error (0)	google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:37:56.048274040 CEST	1.1.1.1	192.168.2.4	0x836c	No error (0)	google.com			65	IN (0x0001)	false
Oct 4, 2024 14:37:56.992218018 CEST	1.1.1.1	192.168.2.4	0xbe55	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 14:37:56.992424965 CEST	1.1.1.1	192.168.2.4	0x5dae	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:01.304670095 CEST	1.1.1.1	192.168.2.4	0x8e65	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:01.304670095 CEST	1.1.1.1	192.168.2.4	0x8e65	No error (0)	www3.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:01.304681063 CEST	1.1.1.1	192.168.2.4	0x899f	No error (0)	ogs.google.com	www3.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:01.376224995 CEST	1.1.1.1	192.168.2.4	0xfbf7	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:01.376272917 CEST	1.1.1.1	192.168.2.4	0x8b64	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 4, 2024 14:38:01.965759993 CEST	1.1.1.1	192.168.2.4	0x1371	No error (0)	play.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:02.795011044 CEST	1.1.1.1	192.168.2.4	0xce50	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:02.795011044 CEST	1.1.1.1	192.168.2.4	0xce50	No error (0)	plus.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:02.795025110 CEST	1.1.1.1	192.168.2.4	0x170c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:04.925909042 CEST	1.1.1.1	192.168.2.4	0xf4e6	No error (0)	play.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:05.015186071 CEST	1.1.1.1	192.168.2.4	0x4e0e	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:05.015221119 CEST	1.1.1.1	192.168.2.4	0x97d7	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:05.015221119 CEST	1.1.1.1	192.168.2.4	0x97d7	No error (0)	plus.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:09.576914072 CEST	1.1.1.1	192.168.2.4	0x8955	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:09.576914072 CEST	1.1.1.1	192.168.2.4	0x8955	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:17.610096931 CEST	1.1.1.1	192.168.2.4	0x5d9c	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:17.610096931 CEST	1.1.1.1	192.168.2.4	0x5d9c	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:17.610096931 CEST	1.1.1.1	192.168.2.4	0x5d9c	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:17.610096931 CEST	1.1.1.1	192.168.2.4	0x5d9c	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:20.462647915 CEST	1.1.1.1	192.168.2.4	0xc2e0	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:20.462647915 CEST	1.1.1.1	192.168.2.4	0xc2e0	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:20.462647915 CEST	1.1.1.1	192.168.2.4	0xc2e0	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:20.462647915 CEST	1.1.1.1	192.168.2.4	0xc2e0	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:23.461479902 CEST	1.1.1.1	192.168.2.4	0x6cf1	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 4, 2024 14:38:25.326514959 CEST	1.1.1.1	192.168.2.4	0x108a	Name error (3)	50.23.12.20.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Oct 4, 2024 14:38:27.653455019 CEST	1.1.1.1	192.168.2.4	0x5826	No error (0)	sustainability.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:27.653455019 CEST	1.1.1.1	192.168.2.4	0x5826	No error (0)	sustainability.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:27.653455019 CEST	1.1.1.1	192.168.2.4	0x5826	No error (0)	sustainability.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:27.653455019 CEST	1.1.1.1	192.168.2.4	0x5826	No error (0)	sustainability.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:35.173322916 CEST	1.1.1.1	192.168.2.4	0x13b6	No error (0)	www.blog.google	ghs-svc-https-sni.ghs-ssl.googlehosted.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:35.173322916 CEST	1.1.1.1	192.168.2.4	0x13b6	No error (0)	ghs-svc-https-sni.ghs-ssl.googlehosted.com		216.58.206.83	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:36.253082037 CEST	1.1.1.1	192.168.2.4	0xc19b	No error (0)	blog.google		216.239.36.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:36.253082037 CEST	1.1.1.1	192.168.2.4	0xc19b	No error (0)	blog.google		216.239.38.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:36.253082037 CEST	1.1.1.1	192.168.2.4	0xc19b	No error (0)	blog.google		216.239.34.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:36.253082037 CEST	1.1.1.1	192.168.2.4	0xc19b	No error (0)	blog.google		216.239.32.21	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:37.993340015 CEST	1.1.1.1	192.168.2.4	0xa00e	No error (0)	play.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:39.970622063 CEST	1.1.1.1	192.168.2.4	0xd7ee	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:39.970622063 CEST	1.1.1.1	192.168.2.4	0xd7ee	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:44.941261053 CEST	1.1.1.1	192.168.2.4	0xdd1a	No error (0)	google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:46.053745985 CEST	1.1.1.1	192.168.2.4	0x8716	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:48.181689024 CEST	1.1.1.1	192.168.2.4	0xedba	No error (0)	googletagmanager.com		142.250.184.232	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:48.322182894 CEST	1.1.1.1	192.168.2.4	0x2e52	No error (0)	lh3.googleusercontent.com	googlehosted.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Oct 4, 2024 14:38:48.322182894 CEST	1.1.1.1	192.168.2.4	0x2e52	No error (0)	googlehosted.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:38:50.629374981 CEST	1.1.1.1	192.168.2.4	0xcd57	No error (0)	mail.google.com		142.250.184.229	A (IP address)	IN (0x0001)	false
Oct 4, 2024 14:39:01.824608088 CEST	1.1.1.1	192.168.2.4	0xd4ad	No error (0)	csp.withgoogle.com		142.250.184.241	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Oct 4, 2024 14:37:55.558130026 CEST	433	OUT	GET / HTTP/1.1 Host: lonerprevailed.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 4, 2024 14:37:56.013128996 CEST	595	IN	HTTP/1.1 301 Moved Permanently Server: nginx/1.19.5 Date: Fri, 04 Oct 2024 12:37:55 GMT Content-Type: text/html Content-Length: 169 Connection: keep-alive Location: https://google.com Expires: Thu, 01 Jan 1970 00:00:01 GMT Cache-Control: no-cache X-Request-ID: 11c44da88ccabda03a735562d8baeee5 Cache-Control: max-age=0, private, no-cache Pragma: no-cache Strict-Transport-Security: max-age=0; includeSubdomains Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 39 2e 35 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.19.5</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:56 UTC	653	OUT	GET / HTTP/1.1 Host: google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:37:56 UTC	854	IN	HTTP/1.1 301 Moved Permanently Location: https://www.google.com/ Content-Type: text/html; charset=UTF-8 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-IQSmKBc9b6j4RyrVjgpr1A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Fri, 04 Oct 2024 12:37:56 GMT Expires: Sun, 03 Nov 2024 12:37:56 GMT Cache-Control: public, max-age=2592000 Server: gws Content-Length: 220 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:37:56 UTC	220	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 31 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>301 Moved</TITLE></HEAD><BODY><H1>301 Moved</H1>The document has moved<A HREF="https://www.google.com/">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:57 UTC	657	OUT	GET / HTTP/1.1 Host: www.google.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-04 12:37:58 UTC	1762	IN	HTTP/1.1 200 OK Date: Fri, 04 Oct 2024 12:37:57 GMT Expires: -1 Cache-Control: private, max-age=0 Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-Ds1mkGaV12_tqX1Tk3femA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Set-Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; expires=Wed, 02-Apr-2025 12:37:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax Set-Cookie: NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco; expires=Sat, 05-Apr-2025 12:37:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 12:37:58 UTC	1762	IN	Data Raw: 32 32 34 65 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 69 74 65 6d 73 63 6f 70 65 3d 22 22 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 50 61 67 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 69 67 69 6e 22 20 6e 61 6d 65 3d 22 72 65 66 65 72 72 65 72 22 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 67 2f 31 78 2f 67 6f 6f 67 6c 65 67 5f 73 74 61 6e 64 61 72 64 5f 63 6f 6c 6f 72 5f 31 32 38 64 70 2e 70 6e 67 22 20 69 74 65 6d 70 72 6f 70 3d 22 69 6d 61 67 65 22 3e 3c 74 69 74 6c 65 3e Data Ascii: 224e<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta charset="UTF-8"><meta content="origin" name="referrer"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop="image"><title>
2024-10-04 12:37:58 UTC	1762	IN	Data Raw: 2c 65 2c 64 2c 6b 29 29 3b 69 66 28 63 3d 72 28 63 29 29 7b 61 3d 6e 65 77 20 49 6d 61 67 65 3b 76 61 72 20 67 3d 6e 2e 6c 65 6e 67 74 68 3b 6e 5b 67 5d 3d 61 3b 61 2e 6f 6e 65 72 72 6f 72 3d 61 2e 6f 6e 6c 6f 61 64 3d 61 2e 6f 6e 61 62 6f 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 65 6c 65 74 65 20 6e 5b 67 5d 7d 3b 61 2e 73 72 63 3d 63 7d 7d 3b 67 6f 6f 67 6c 65 2e 6c 6f 67 55 72 6c 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 6c 3a 62 3b 72 65 74 75 72 6e 20 74 28 22 22 2c 61 2c 62 29 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 67 6f 6f 67 6c 65 2e 79 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 79 3d 5b 5d 3b 76 61 72 20 64 3b 28 64 3d 67 6f 6f 67 6c 65 29 2e 78 7c 7c 28 64 2e 78 Data Ascii: ,e,d,k));if(c=r(c)){a=new Image;var g=n.length;n[g]=a;a.onerror=a.onload=a.onabort=function(){delete n[g]};a.src=c}};google.logUrl=function(a,b){b=b===void 0?l:b;return t("",a,b)};}).call(this);(function(){google.y={};google.sy=[];var d;(d=google).x\|\|(d.x
2024-10-04 12:37:58 UTC	1762	IN	Data Raw: 6e 67 26 26 22 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 22 69 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2c 61 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 6e 73 2c 74 3d 72 3f 61 61 7c 7c 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 3a 76 6f 69 64 20 30 3b 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 2d 28 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e 70 6e 6f 7c 7c 30 29 7d 76 61 72 20 62 61 3d 67 6f 6f 67 6c 65 2e 73 74 76 73 63 26 26 67 6f 6f 67 6c 65 2e 73 74 76 73 63 2e Data Ascii: ng&&"navigationStart"in window.performance.timing,aa=google.stvsc&&google.stvsc.ns,t=r?aa\|\|window.performance.timing.navigationStart:void 0;function u(){return window.performance.now()-(google.stvsc&&google.stvsc.pno\|\|0)}var ba=google.stvsc&&google.stvsc.
2024-10-04 12:37:58 UTC	1762	IN	Data Raw: 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 64 7c 7c 21 31 29 3a 61 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 61 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 62 2c 63 29 7d 3b 76 61 72 20 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 68 69 73 2e 67 3d 61 3b 74 68 69 73 2e 76 3d 5b 5d 3b 74 68 69 73 2e 42 3d 74 68 69 73 2e 67 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 6f 61 66 74 22 29 3b 74 68 69 73 2e 6a 3d 21 21 74 68 69 73 2e 67 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 64 65 66 65 72 72 65 64 22 29 3b 76 61 72 20 64 3b 69 66 28 64 3d 21 74 68 69 73 2e 6a 29 61 3a 7b 66 6f 72 28 64 3d 30 3b 64 3c 44 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 69 66 28 61 2e 67 65 74 Data Ascii: a.removeEventListener(b,c,d\|\|!1):a.attachEvent&&a.detachEvent("on"+b,c)};var pa=function(a,b,c){this.g=a;this.v=[];this.B=this.g.hasAttribute("data-noaft");this.j=!!this.g.getAttribute("data-deferred");var d;if(d=!this.j)a:{for(d=0;d<D.length;++d)if(a.get
2024-10-04 12:37:58 UTC	1742	IN	Data Raw: 22 69 6d 67 22 29 2c 63 3d 30 2c 64 3d 62 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 2b 2b 63 29 61 28 49 28 62 5b 63 5d 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 61 28 61 29 7b 69 66 28 61 26 26 28 61 3d 61 2e 74 61 72 67 65 74 2c 61 2e 74 61 67 4e 61 6d 65 3d 3d 3d 22 49 4d 47 22 29 29 7b 76 61 72 20 62 3d 44 61 74 65 2e 6e 6f 77 28 29 3b 47 28 49 28 61 2c 76 6f 69 64 20 30 2c 21 30 2c 21 30 29 2c 62 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 28 61 29 7d 3b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 3d 7b 7d 3b 67 6f 6f 67 6c 65 2e 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 74 69 6d 65 72 73 5b 61 5d 3d 7b 74 3a 7b 73 74 61 72 74 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 65 3a 7b Data Ascii: "img"),c=0,d=b.length;c<d;++c)a(I(b[c]))};function ra(a){if(a&&(a=a.target,a.tagName==="IMG")){var b=Date.now();G(I(a,void 0,!0,!0),b)}}function K(a){google.c.oil(a)};google.timers={};google.startTick=function(a){google.timers[a]={t:{start:Date.now()},e:{
2024-10-04 12:37:58 UTC	394	IN	Data Raw: 31 38 33 0d 0a 66 69 6e 69 74 79 3b 42 28 64 6f 63 75 6d 65 6e 74 2c 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 51 2c 21 30 29 3b 50 28 30 29 3b 78 26 26 28 67 6f 6f 67 6c 65 2e 63 2e 6f 69 6c 3d 72 61 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 6c 6f 61 64 22 2c 4b 2c 21 30 29 2c 42 28 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 22 65 72 72 6f 72 22 2c 4b 2c 21 30 29 29 3b 67 6f 6f 67 6c 65 2e 63 76 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 21 61 7c 7c 21 62 26 26 64 61 28 61 29 29 72 65 74 75 72 6e 20 30 3b 69 66 28 21 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 29 72 65 74 75 72 6e 20 31 3b 76 61 72 20 65 3d 66 75 6e Data Ascii: 183finity;B(document,"visibilitychange",Q,!0);P(0);x&&(google.c.oil=ra,B(document.documentElement,"load",K,!0),B(document.documentElement,"error",K,!0));google.cv=function(a,b,c,d){if(!a\|\|!b&&da(a))return 0;if(!a.getBoundingClientRect)return 1;var e=fun
2024-10-04 12:37:58 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 73 61 28 29 7b 69 66 28 67 6f 6f 67 6c 65 2e 61 66 74 71 21 3d 3d 6e 75 6c 6c 29 7b 67 6f 6f 67 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 61 66 74 71 66 22 2c 44 61 74 65 2e 6e 6f 77 28 29 29 3b 66 6f 72 28 76 61 72 20 61 2c 62 3d 30 2c 63 3b 63 3d 28 61 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 61 5b 62 2b 2b 5d 3b 29 52 28 63 29 3b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 6e 75 6c 6c 7d 7d 67 6f 6f 67 6c 65 2e 63 61 66 74 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 3d 3d 6e 75 6c 6c 3f 52 28 61 29 3a 28 67 6f 6f 67 6c 65 2e 61 66 74 71 3d 67 6f 6f 67 6c 65 2e 61 66 74 71 7c 7c 5b 5d 2c 67 6f 6f 67 6c 65 2e 61 66 74 71 2e 70 75 73 68 28 61 29 29 7d 3b 66 75 6e 63 74 Data Ascii: 8000sa(){if(google.aftq!==null){google.tick("load","aftqf",Date.now());for(var a,b=0,c;c=(a=google.aftq)==null?void 0:a[b++];)R(c);google.aftq=null}}google.caft=function(a){google.aftq===null?R(a):(google.aftq=google.aftq\|\|[],google.aftq.push(a))};funct
2024-10-04 12:37:58 UTC	1390	IN	Data Raw: 26 28 63 3d 54 28 22 71 73 64 22 29 2c 63 3e 30 26 26 28 61 2b 3d 22 26 71 73 64 3d 22 2b 63 29 29 3b 61 3a 7b 69 66 28 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 26 26 28 63 3d 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 29 2c 63 2e 6c 65 6e 67 74 68 21 3d 3d 30 29 29 7b 63 3d 0a 63 5b 30 5d 3b 62 72 65 61 6b 20 61 7d 63 3d 76 6f 69 64 20 30 7d 63 26 26 28 66 3d 63 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 74 79 70 65 6f 66 20 66 3d 3d 3d 22 73 74 72 69 6e 67 22 26 26 28 61 2b 3d 22 26 64 74 3d 22 2b 66 29 2c 63 3d 63 2e 74 72 61 6e 73 Data Ascii: &(c=T("qsd"),c>0&&(a+="&qsd="+c));a:{if(window.performance&&window.performance.getEntriesByType&&(c=window.performance.getEntriesByType("navigation"),c.length!==0)){c=c[0];break a}c=void 0}c&&(f=c.deliveryType,typeof f==="string"&&(a+="&dt="+f),c=c.trans
2024-10-04 12:37:58 UTC	1390	IN	Data Raw: 29 72 65 74 75 72 6e 21 31 3b 69 66 28 66 2e 41 29 72 65 74 75 72 6e 2b 2b 6d 2c 21 66 2e 42 3b 46 28 66 29 26 34 26 26 28 6e 3d 21 30 29 3b 66 2e 6a 26 26 2b 2b 6b 3b 2b 2b 68 3b 72 65 74 75 72 6e 21 30 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 41 28 22 69 6d 61 22 2c 68 29 3b 41 28 22 69 6d 61 64 22 2c 6b 29 3b 41 28 22 69 6d 61 63 22 2c 6d 29 3b 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 22 49 62 37 45 66 63 22 29 2e 6c 65 6e 67 74 68 26 26 41 28 22 64 64 6c 22 2c 31 29 3b 41 28 22 77 68 22 2c 63 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 6c 29 7b 66 26 26 7a 28 22 61 66 74 69 22 2c 66 29 3b 67 26 26 7a 28 22 61 66 74 69 70 22 2c 67 29 3b 58 3e 30 26 26 7a 28 22 61 66 74 73 22 2c 59 29 3b 69 66 28 Data Ascii: )return!1;if(f.A)return++m,!f.B;F(f)&4&&(n=!0);f.j&&++k;++h;return!0},function(){A("ima",h);A("imad",k);A("imac",m);document.getElementsByClassName("Ib7Efc").length&&A("ddl",1);A("wh",c)},function(f,g,l){f&&z("afti",f);g&&z("aftip",g);X>0&&z("afts",Y);if(
2024-10-04 12:37:58 UTC	1390	IN	Data Raw: 6c 65 2e 74 69 63 6b 28 22 6c 6f 61 64 22 2c 22 64 63 6c 22 29 7d 5d 3b 67 6f 6f 67 6c 65 2e 64 63 6c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 6f 6f 67 6c 65 2e 64 72 63 2e 6c 65 6e 67 74 68 3f 67 6f 6f 67 6c 65 2e 64 72 63 2e 70 75 73 68 28 61 29 3a 61 28 29 7d 3b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 28 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 62 2c 21 31 29 2c 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 62 2c 21 31 29 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 62 29 3b Data Ascii: le.tick("load","dcl")}];google.dclc=function(a){google.drc.length?google.drc.push(a):a()};window.addEventListener?(document.addEventListener("DOMContentLoaded",b,!1),window.addEventListener("load",b,!1)):window.attachEvent&&window.attachEvent("onload",b);

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:58 UTC	1729	OUT	GET /xjs/_/ss/k=xjs.hd.HFq-c3Fv2Po.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQAGwkwAAACMAgA0ACAAAAAAAAQDAAAAAAAAAIAEAAAAEACoAAAAAAEAAAIggAABQBAAAAEBACBAAgAAKIAQoQAICRRCPQgAAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAAIAiAAECAPQIBIABICYAAEKgB4AAAAAAEABAAAgAgJkADJABCAAAAAAAACADAAAAAAAAAAAAAAAAAAAAAAAAAAAIAAIACgAAAAAAAAAAAAAAAAAAAEA/d=1/ed=1/br=1/rs=ACT90oF_tAztOuFhjIXnyMt3ns5pMHBzVQ/m=cdos,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:37:59 UTC	820	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 4232 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 04 Oct 2024 09:52:28 GMT Expires: Sat, 04 Oct 2025 09:52:28 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Oct 2024 17:10:52 GMT Content-Type: text/css; charset=UTF-8 Vary: Accept-Encoding, Origin Age: 9930 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:37:59 UTC	570	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 43 4f 45 6d 59 3a 23 31 66 31 66 31 66 3b 2d 2d 78 68 55 47 77 63 3a 23 66 66 66 7d 3a 72 6f 6f 74 7b 2d 2d 76 5a 65 30 6a 62 3a 23 61 38 63 37 66 61 3b 2d 2d 6e 77 58 6f 62 62 3a 23 36 33 38 65 64 34 3b 2d 2d 56 75 5a 58 42 64 3a 23 30 30 31 64 33 35 3b 2d 2d 75 4c 7a 33 37 63 3a 23 35 34 35 64 37 65 3b 2d 2d 6a 49 4e 75 36 63 3a 23 30 30 31 64 33 35 3b 2d 2d 54 79 56 59 6c 64 3a 23 30 62 35 37 64 30 3b 2d 2d 5a 45 70 50 6d 64 3a 23 63 33 64 39 66 62 3b 2d 2d 51 57 61 61 61 66 3a 23 36 33 38 65 64 34 3b 2d 2d 44 45 65 53 74 66 3a 23 66 35 66 38 66 66 3b 2d 2d 54 53 57 5a 49 62 3a 23 65 35 65 64 66 66 3b 2d 2d 42 52 4c 77 45 3a 23 64 33 65 33 66 64 3b 2d 2d 67 53 35 6a 58 62 3a 23 64 61 64 63 65 30 3b 2d 2d 41 71 6e 37 78 64 3a 23 Data Ascii: :root{--COEmY:#1f1f1f;--xhUGwc:#fff}:root{--vZe0jb:#a8c7fa;--nwXobb:#638ed4;--VuZXBd:#001d35;--uLz37c:#545d7e;--jINu6c:#001d35;--TyVYld:#0b57d0;--ZEpPmd:#c3d9fb;--QWaaaf:#638ed4;--DEeStf:#f5f8ff;--TSWZIb:#e5edff;--BRLwE:#d3e3fd;--gS5jXb:#dadce0;--Aqn7xd:#
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 6e 67 3a 30 70 78 7d 2e 77 48 59 6c 54 64 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 32 70 78 7d 2e 79 55 54 4d 6a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 56 44 67 56 69 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 54 55 4f 73 55 65 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 67 2d 73 6e 61 63 6b 62 61 72 2d 73 68 6f 77 7b 66 72 6f 6d 7b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 Data Ascii: ng:0px}.wHYlTd{font-family:Roboto,Arial,sans-serif;font-size:14px;line-height:22px}.yUTMj{font-family:Roboto,Arial,sans-serif;font-weight:400}.VDgVie{text-align:center}.TUOsUe{text-align:left}@keyframes g-snackbar-show{from{pointer-events:none;transform:t
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 6a 71 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 35 36 38 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 38 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 62 37 37 48 4b 66 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 30 70 78 7d 7d 2e 56 39 4f 31 59 64 20 2e 72 49 78 73 76 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 30 7d 2e 56 39 4f 31 59 64 20 2e 73 48 46 4e 59 64 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 56 39 4f 31 59 64 20 2e 73 48 46 4e 59 64 20 67 2d 66 6c 61 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 7d 2e 6a 68 5a 76 6f 64 7b 6c 65 66 Data Ascii: jqe{display:inline-block;max-width:568px;min-width:288px;text-align:left}.b77HKf{border-radius:8px}.sHFNYd{margin-left:40px}}.V9O1Yd .rIxsve{display:block;padding:8px 0}.V9O1Yd .sHFNYd{margin-left:0}.V9O1Yd .sHFNYd g-flat-button{padding-left:0}.jhZvod{lef
2024-10-04 12:37:59 UTC	882	IN	Data Raw: 6e 65 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 33 2e 34 33 35 70 78 3b 77 69 64 74 68 3a 31 33 2e 34 33 35 70 78 7d 2e 49 42 50 5a 75 20 2e 6f 51 63 50 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b Data Ascii: ne;border-left:1px solid rgba(0,0,0,.2);border-right:none;border-top:1px solid rgba(0,0,0,.2);box-sizing:border-box;height:13.435px;width:13.435px}.IBPZu .oQcPt{border-bottom:1px solid rgba(0,0,0,.2);border-left:none;border-right:1px solid rgba(0,0,0,.2);

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://lonerprevailed.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Chrome Cache Entry: 294

Chrome Cache Entry: 295

Chrome Cache Entry: 296

Chrome Cache Entry: 297

Chrome Cache Entry: 298

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Windows Analysis Report
http://lonerprevailed.com

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:58 UTC	1375	OUT	GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:37:59 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/png Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 5969 Date: Fri, 04 Oct 2024 12:37:59 GMT Expires: Fri, 04 Oct 2024 12:37:59 GMT Cache-Control: private, max-age=31536000 Last-Modified: Tue, 22 Oct 2019 18:30:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:37:59 UTC	719	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 10 00 00 00 5c 08 06 00 00 00 a6 e7 ea b6 00 00 17 18 49 44 41 54 78 01 ed 5d 0b 94 1c 55 99 be 3a d3 81 c0 2e 82 c2 2a 82 08 12 10 90 05 92 aa 9a 84 90 d8 5d b7 7b b2 41 e2 41 81 28 b8 bb 0a 08 8a 1b 5c 84 98 05 e5 31 9a ae 9a 09 89 c0 02 0a 41 40 36 e1 81 06 17 10 1f 90 cc 24 01 f4 08 28 c8 43 58 58 7c 10 1e 64 fa 11 92 49 55 75 1e 99 64 7a ef b7 e6 b8 a4 b7 67 e6 bf d5 75 bb aa 87 fb 9d 73 4f e7 31 d3 d3 67 ea d6 57 ff fd ff ef ff 7e 16 07 66 76 ad db 2b ed 54 4c ee 7a a7 71 d7 9f 63 bb c1 65 b6 eb 3b dc f1 7b c4 df e7 8b bf 5f 22 d6 b9 d9 ee 60 56 da f5 8f 4e 77 55 77 67 1a 1a 1a ef 4c a4 7b 36 1f cc 9d ca 79 dc 0d ee b2 5d ff cf e2 b5 2a b3 32 79 6f bb 78 7d 5e 7c ef cd dc f5 ff 29 dd e5 ed cb Data Ascii: PNGIHDR\IDATx]U:.]{AA(\1A@6$(CXX\|dIUudzgusO1gW~fv+TLzqce;{_"`VNwUwgL{6y]2yox}^\|)
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 43 84 69 68 68 02 89 07 5d 5d d5 77 73 d7 7f 4c 92 3c e6 31 0d 0d 0d 4d 20 82 0c 3e 2f 79 6c b9 86 1e 79 68 68 8c 59 68 02 99 79 ed d0 6e dc f5 d6 48 94 69 57 21 d9 ca 34 34 34 34 81 70 27 38 47 82 3c d6 a1 8c ca 34 34 34 34 81 20 f7 21 d3 24 27 92 95 5f 60 80 86 86 86 26 10 f4 ba c8 68 3d 40 38 0c d0 d0 d0 d0 04 c2 f3 c1 9d 54 02 41 6f 0c 03 34 34 34 34 81 a0 23 96 da 69 9b 71 fd 27 74 d5 a5 75 a0 a1 09 a4 da c5 de 8d c5 54 01 e2 2b 6a f4 41 53 79 6a 54 d3 e9 f6 75 dc e8 28 66 cd 79 c5 ac 75 77 81 1b bf 2d 65 8d 42 c9 b6 2a 85 ac 35 84 57 fc 1d ff 2e fe ff ae a2 6d 7e bd 9c 35 2d 7c 5f 22 3e ff 6a d6 be ad af bd 63 5b 6f fb bc 6d 2b da ef 1e ec 4b fd 76 eb 8a 54 61 6b 5f aa 22 fe 5c 15 7f 1e 14 ab 3c d8 db f6 8c f8 ba 1f 89 75 b1 f8 da e3 f1 7d 2c 01 c0 Data Ascii: Cihh]]wsL<1M >/ylyhhYhynHiW!4444p'8G<4444 !$'_`&h=@8TAo4444#iq'tuT+jASyjTu(fyuw-eB*5W.m~5-\|_">jc[om+KvTak_"\<u},
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 43 0f b1 f7 8a 23 ce 72 99 ca cc 96 87 c6 1d 31 aa d5 c4 4e b1 23 71 fd 11 92 83 b0 09 5a 54 77 92 40 20 90 a4 4b 44 a3 cf 23 ca 0d 59 51 5c 48 8c 42 9e c5 91 aa 36 2c bc 92 96 44 f5 1e 1c f3 11 88 13 5c 3c cc 85 5c 2a 71 21 ef ad 1a 46 8a 35 80 ea ec a3 c6 15 b3 d6 4f 24 7e e6 6d 6c 04 88 68 62 89 c4 b1 e2 9e 46 fb 59 aa 4f b2 94 78 9f fb 24 a2 9d 11 f3 6b 19 c7 3b 55 86 3c a6 3b c1 fe ac 01 80 7c 32 6e f0 56 d3 09 a4 f6 98 91 b5 7c 62 14 fa 5f 88 56 1a e9 db c2 51 9b f2 b3 10 55 d7 3a b0 cf 25 26 51 5f 1e eb 04 62 77 07 5f 67 35 28 e7 26 7e 90 aa f7 28 64 cd 27 11 16 32 02 68 6a 43 e3 19 a2 c8 6c 10 99 fa ba 11 c1 83 6c 7f b2 de 63 45 ea 09 91 93 d8 8d 45 80 a1 5f b3 f1 22 2f f2 3b 6a 14 32 b4 62 fc b0 ee 76 f0 9f 21 b6 5a 78 c8 75 b0 08 20 f6 c2 8c 38 Data Ascii: C#r1N#qZTw@ KD#YQ\HB6,D\<\*q!F5O$~mlhbFYOx$k;U<;\|2nV\|b_VQU:%&Q_bw_g5(&~(d'2hjCllcEE_"/;j2bv!Zxu 8
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 0d 7f e3 9a a7 13 2f d6 0f 98 42 60 68 10 d1 bf f2 33 ec 6d d8 de 97 3a 9d 56 3e 6d bb 45 71 19 f7 0e ca e7 c0 e7 dd c5 81 2c bf f9 10 e2 3e 7c 89 29 42 6e be 77 64 93 85 64 d8 77 3d 0d 3a f8 3f 02 43 21 9a cc 5d 01 30 40 4a 72 86 c6 d2 d9 cb aa 6d 2c 01 80 7a 51 90 da 6f c9 47 31 a7 72 f2 b0 12 e0 f4 e4 83 89 5d b8 eb c3 74 e1 52 65 c8 d4 b6 ee da 27 cd e6 d5 bb 1d 4c ac 7e bc 25 5a f8 95 7c 7e e4 57 44 72 d4 a3 7c 8e cd cb 77 3b a4 f6 e9 4f 95 17 a0 08 c0 14 00 1a 93 a6 2b 51 73 e6 29 21 88 c3 2f 71 eb 7b 30 5f 8e ff 26 5c 18 7c 40 90 c8 7a c9 6e d6 65 18 f2 c3 62 c4 cc ae 75 7b 71 37 78 44 22 7a 7a 7a b4 06 2c 6a b7 62 39 6b 7e 49 51 33 dd bf 12 37 d0 1f ea 3b b0 b7 bd 42 24 91 73 14 4d bc fb 2a e5 e7 e3 73 d6 73 3f e3 f9 e0 4e 62 1e eb 56 05 f3 75 db Data Ascii: /B`h3m:V>mEq,>\|)Bnwddw=:?C!]0@Jrm,zQoG1r]tRe'L~%Z\|~WDr\|w;O+Qs)!/q{0_&\\|@znebu{q7xD"zzz,jb9k~IQ37;B$sM*ss?NbVu
2024-10-04 12:37:59 UTC	1080	IN	Data Raw: 35 71 cf fd be 90 35 3f c2 54 03 c2 2c 54 56 70 03 c7 73 5c 81 fd bf b7 04 19 75 d6 44 94 b2 1d 27 29 0e 2d 51 3e 5b 8b 11 13 4c 01 44 27 ee 49 22 09 da af 92 38 f0 fe 98 f4 af 46 4c 58 b1 60 2b a1 60 3f 55 60 54 04 55 75 92 08 04 78 79 e6 84 dd f0 30 41 45 44 2d 79 98 37 10 12 a6 d1 13 09 ca a5 b6 eb bd d6 ac 88 03 ea 43 94 7e 59 93 51 33 08 79 11 ca aa 51 db ce 95 b2 e6 95 aa 1b a5 44 3e 62 2f 11 1d 2c c2 78 cb 48 89 03 ef 87 a8 03 93 fe 15 02 33 61 6c d7 ff 56 54 0f af bf 54 1a fd 63 98 00 85 40 90 a8 57 42 20 84 36 8b 02 b7 1e 8e 9a 38 10 e1 14 73 c6 34 16 27 a0 04 84 f0 cb 76 fc 5b b8 1b 94 23 26 8d 6d f0 21 e1 4e 70 4e 6e c1 7a 85 9b 53 be 09 a9 c4 ad 6e 44 24 8d 46 1c c5 ac e9 d4 cc e2 50 0e e8 3d c4 8d df dd 68 44 b2 b3 81 ae 07 fa 90 66 77 91 43 Data Ascii: 5q5?T,TVps\uD')-Q>[LD'I"8FLX`+`?U`TUuxy0AED-y7C~YQ3yQD>b/,xH3alVTTc@WB 68s4'v[#&m!NpNnzSnD$FP=hDfwC

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:58 UTC	3945	OUT	GET /xjs/_/js/k=xjs.hd.en.-yh58R89BVo.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRJgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/d=1/ed=1/dg=3/br=1/rs=ACT90oHYzfbeFNclAKpF94XrZIGOyUFFxg/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HoYVKb:PkDN7e;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:37:59 UTC	819	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 1049463 Date: Fri, 04 Oct 2024 12:37:59 GMT Expires: Sat, 04 Oct 2025 12:37:59 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 04 Oct 2024 06:32:23 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:37:59 UTC	571	IN	Data Raw: 74 68 69 73 2e 5f 68 64 3d 74 68 69 73 2e 5f 68 64 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 0a 74 72 79 7b 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 34 20 47 6f 6f 67 6c 65 2c 20 49 6e 63 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 Data Ascii: this._hd=this._hd\|\|{};(function(_){var window=this;try{/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright 2024 Google, Inc SPDX-License-Id
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 61 2c 44 63 61 2c 78 63 61 2c 45 63 61 2c 76 63 61 2c 46 63 61 2c 75 63 61 2c 47 63 61 2c 49 63 61 2c 50 63 61 2c 52 63 61 2c 53 63 61 2c 57 63 61 2c 58 63 61 2c 61 64 61 2c 64 64 61 2c 59 63 61 2c 63 64 61 2c 62 64 61 2c 24 63 61 2c 5a 63 61 2c 66 64 61 2c 67 64 61 2c 6b 64 61 2c 6d 64 61 2c 6c 64 61 2c 70 64 61 2c 71 64 61 2c 72 64 61 2c 74 64 61 2c 76 64 61 2c 75 64 61 2c 78 64 61 2c 79 64 61 2c 7a 64 61 2c 42 64 61 2c 43 64 61 2c 44 64 61 2c 45 64 61 2c 46 64 61 2c 49 64 61 2c 4a 64 61 2c 4b 64 61 2c 4f 64 61 2c 4e 64 61 2c 52 64 61 2c 53 64 61 2c 58 64 61 2c 59 64 61 2c 5a 64 61 2c 61 65 61 2c 24 64 61 2c 63 65 61 2c 62 65 61 2c 66 65 61 2c 65 65 61 2c 68 65 61 2c 6a 65 61 2c 6d 65 61 2c 6e 65 61 2c 71 65 61 2c 72 65 61 2c 76 65 61 2c 77 65 61 2c 42 Data Ascii: a,Dca,xca,Eca,vca,Fca,uca,Gca,Ica,Pca,Rca,Sca,Wca,Xca,ada,dda,Yca,cda,bda,$ca,Zca,fda,gda,kda,mda,lda,pda,qda,rda,tda,vda,uda,xda,yda,zda,Bda,Cda,Dda,Eda,Fda,Ida,Jda,Kda,Oda,Nda,Rda,Sda,Xda,Yda,Zda,aea,$da,cea,bea,fea,eea,hea,jea,mea,nea,qea,rea,vea,wea,B
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 29 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 5f 2e 61 61 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 3b 63 26 26 28 74 68 69 73 2e 73 74 61 63 6b 3d 63 29 7d 61 26 26 28 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 53 74 72 69 6e 67 28 61 29 29 3b 62 21 3d 3d 76 6f 69 64 20 30 26 26 28 74 68 69 73 2e 63 61 75 73 65 3d 62 29 7d 3b 5f 2e 61 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 2e 73 70 6c 69 74 28 22 25 73 22 29 3b 66 6f 72 28 76 61 72 20 63 3d 22 22 2c 64 3d 61 2e 6c 65 6e 67 74 68 2d 31 2c 65 3d 30 3b 65 3c 64 3b 65 2b 2b 29 63 2b 3d 61 5b 65 5d 2b 28 65 3c 62 2e 6c 65 6e 67 74 68 3f 62 5b 65 5d 3a 22 25 73 22 29 3b 5f Data Ascii: tureStackTrace)Error.captureStackTrace(this,_.aa);else{var c=Error().stack;c&&(this.stack=c)}a&&(this.message=String(a));b!==void 0&&(this.cause=b)};_.aaa=function(a,b){a=a.split("%s");for(var c="",d=a.length-1,e=0;e<d;e++)c+=a[e]+(e<b.length?b[e]:"%s");_
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 26 28 65 61 61 3d 76 6f 69 64 20 30 29 3b 74 68 72 6f 77 20 66 3b 7d 7d 3b 0a 5f 2e 6c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 62 3b 69 66 28 69 61 61 29 7b 69 66 28 62 26 26 28 6a 61 61 3f 21 61 2e 69 73 57 65 6c 6c 46 6f 72 6d 65 64 28 29 3a 2f 28 3f 3a 5b 5e 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 7c 5e 29 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 7c 5b 5c 75 44 38 30 30 2d 5c 75 44 42 46 46 5d 28 3f 21 5b 5c 75 44 43 30 30 2d 5c 75 44 46 46 46 5d 29 2f 2e 74 65 73 74 28 61 29 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 4f 22 29 3b 61 3d 28 6b 61 61 7c 7c 28 6b 61 61 3d 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 29 2e 65 6e 63 6f 64 65 28 61 29 7d 65 6c 73 65 7b 66 6f 72 28 76 61 72 Data Ascii: &(eaa=void 0);throw f;}};_.laa=function(a,b){b=b===void 0?!1:b;if(iaa){if(b&&(jaa?!a.isWellFormed():/(?:[^\uD800-\uDBFF]\|^)[\uDC00-\uDFFF]\|[\uD800-\uDBFF](?![\uDC00-\uDFFF])/.test(a)))throw Error("O");a=(kaa\|\|(kaa=new TextEncoder)).encode(a)}else{for(var
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 21 31 3a 5f 2e 69 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 75 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 71 61 61 28 29 3f 6e 61 61 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 5f 2e 69 61 28 22 45 64 67 2f 22 29 7d 3b 0a 5f 2e 76 61 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 61 28 22 46 69 72 65 66 6f 78 22 29 7c 7c 5f 2e 69 61 28 22 46 78 69 4f 53 22 29 7d 3b 5f 2e 6c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 61 28 22 53 61 66 61 72 69 22 29 26 26 21 28 5f 2e 6a 61 28 29 7c 7c 28 5f 2e 71 61 61 28 29 3f 30 3a 5f 2e 69 61 28 22 43 6f 61 73 74 22 29 29 7c 7c 5f 2e 72 61 61 28 29 7c 7c Data Ascii: a=function(){return _.qaa()?!1:_.ia("Edge")};_.uaa=function(){return _.qaa()?naa("Microsoft Edge"):_.ia("Edg/")};_.vaa=function(){return _.ia("Firefox")\|\|_.ia("FxiOS")};_.la=function(){return _.ia("Safari")&&!(_.ja()\|\|(_.qaa()?0:_.ia("Coast"))\|\|_.raa()\|\|
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 48 65 61 64 6c 65 73 73 43 68 72 6f 6d 65 22 5d 29 7d 72 65 74 75 72 6e 20 61 3d 3d 3d 22 46 69 72 65 66 6f 78 22 26 26 5f 2e 76 61 61 28 29 7c 7c 61 3d 3d 3d 22 53 61 66 61 72 69 22 26 26 5f 2e 6c 61 28 29 7c 7c 61 3d 3d 3d 22 41 6e 64 72 6f 69 64 20 42 72 6f 77 73 65 72 22 26 26 5f 2e 78 61 61 28 29 7c 7c 61 3d 3d 3d 22 53 69 6c 6b 22 26 26 5f 2e 77 61 61 28 29 3f 28 61 3d 62 5b 32 5d 29 26 26 0a 61 5b 31 5d 7c 7c 22 22 3a 22 22 7d 3b 5f 2e 42 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 5f 2e 71 61 61 28 29 26 26 61 21 3d 3d 22 53 69 6c 6b 22 29 7b 76 61 72 20 62 3d 5f 2e 66 61 2e 62 72 61 6e 64 73 2e 66 69 6e 64 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 62 72 61 6e 64 3d 3d 3d 61 7d 29 3b 69 66 28 21 62 7c 7c 21 62 2e Data Ascii: HeadlessChrome"])}return a==="Firefox"&&_.vaa()\|\|a==="Safari"&&_.la()\|\|a==="Android Browser"&&_.xaa()\|\|a==="Silk"&&_.waa()?(a=b[2])&&a[1]\|\|"":""};_.Baa=function(a){if(_.qaa()&&a!=="Silk"){var b=_.fa.brands.find(function(c){return c.brand===a});if(!b\|\|!b.
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 26 61 5b 31 5d 29 3b 72 65 74 75 72 6e 20 62 7c 7c 22 22 7d 3b 0a 5f 2e 4b 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 5f 2e 6f 61 28 5f 2e 4a 61 61 28 29 2c 61 29 3e 3d 30 7d 3b 5f 2e 70 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 7d 3b 5f 2e 72 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 74 79 70 65 6f 66 20 61 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 61 2e 73 70 6c 69 74 28 22 22 29 3a 61 2c 65 3d 61 2e 6c 65 6e 67 74 68 2d 31 3b 65 3e 3d 30 3b 2d 2d 65 29 65 20 69 6e 20 64 26 26 62 2e 63 61 6c 6c 28 63 2c 64 5b 65 5d 2c 65 2c 61 29 7d 3b 5f 2e 4c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 62 3d 5f 2e 73 61 28 61 2c 62 2c 63 Data Ascii: &a[1]);return b\|\|""};_.Kaa=function(a){return _.oa(_.Jaa(),a)>=0};_.pa=function(a){return a[a.length-1]};_.ra=function(a,b,c){for(var d=typeof a==="string"?a.split(""):a,e=a.length-1;e>=0;--e)e in d&&b.call(c,d[e],e,a)};_.Laa=function(a,b,c){b=_.sa(a,b,c
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 5f 2e 42 61 28 64 29 29 7b 76 61 72 20 65 3d 61 2e 6c 65 6e 67 74 68 7c 7c 30 2c 66 3d 64 2e 6c 65 6e 67 74 68 7c 7c 30 3b 61 2e 6c 65 6e 67 74 68 3d 65 2b 66 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 3b 67 2b 2b 29 61 5b 65 2b 67 5d 3d 64 5b 67 5d 7d 65 6c 73 65 20 61 2e 70 75 73 68 28 64 29 7d 7d 3b 5f 2e 55 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 70 6c 69 63 65 2e 61 70 70 6c 79 28 61 2c 54 61 61 28 61 72 67 75 6d 65 6e 74 73 2c 31 29 29 7d 3b 54 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3c 3d 32 3f 41 72 72 61 79 2e 70 72 Data Ascii: arguments[c];if(_.Ba(d)){var e=a.length\|\|0,f=d.length\|\|0;a.length=e+f;for(var g=0;g<f;g++)a[e+g]=d[g]}else a.push(d)}};_.Uaa=function(a,b,c,d){return Array.prototype.splice.apply(a,Taa(arguments,1))};Taa=function(a,b,c){return arguments.length<=2?Array.pr
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 69 73 41 72 72 61 79 28 64 29 29 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 64 2e 6c 65 6e 67 74 68 3b 65 2b 3d 38 31 39 32 29 7b 76 61 72 20 66 3d 54 61 61 28 64 2c 65 2c 65 2b 38 31 39 32 29 3b 66 3d 5f 2e 63 62 61 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 66 29 3b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 66 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 62 2e 70 75 73 68 28 66 5b 67 5d 29 7d 65 6c 73 65 20 62 2e 70 75 73 68 28 64 29 7d 72 65 74 75 72 6e 20 62 7d 3b 5f 2e 64 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 68 61 28 5f 2e 64 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 77 65 62 6b 69 74 22 29 26 26 21 5f 2e 69 61 28 22 45 64 67 65 22 29 7d 3b 5f 2e 65 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 2e 69 Data Ascii: isArray(d))for(var e=0;e<d.length;e+=8192){var f=Taa(d,e,e+8192);f=_.cba.apply(null,f);for(var g=0;g<f.length;g++)b.push(f[g])}else b.push(d)}return b};_.dba=function(){return _.ha(_.da().toLowerCase(),"webkit")&&!_.ia("Edge")};_.eba=function(){return _.i
2024-10-04 12:37:59 UTC	1390	IN	Data Raw: 29 2c 53 5f 3a 21 31 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 22 29 3b 7d 3b 73 62 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 42 69 67 49 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 3b 0a 5f 2e 76 62 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 62 61 3b 69 66 28 21 75 62 61 28 61 29 29 7b 76 61 72 20 63 2c 64 3b 62 3d 28 64 3d 28 63 3d 74 79 70 65 6f 66 20 62 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 62 28 29 3a 62 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 30 3a 63 2e 63 6f 6e 63 61 74 28 22 5c 6e 22 29 29 21 3d 6e 75 6c 6c 3f 64 3a 22 22 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 60 22 2b 62 2b 22 60 22 2b 53 74 72 69 6e 67 28 61 29 29 3b 7d 7d 3b 5f 2e 77 62 61 3d 66 75 6e 63 74 69 6f 6e Data Ascii: ),S_:!1};throw Error("T");};sba=function(){return typeof BigInt==="function"};_.vba=function(a){var b=tba;if(!uba(a)){var c,d;b=(d=(c=typeof b==="function"?b():b)==null?void 0:c.concat("\n"))!=null?d:"";throw Error("U`"+b+"`"+String(a));}};_.wba=function

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:58 UTC	1456	OUT	POST /gen_204?s=webhp&t=cap&atyp=csi&ei=peH_Zv34MtyI7NYPvZmh4QM&rt=wsrt.2505,cbt.136,hst.91&opi=89978449&dt=&ts=300 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:37:59 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-zmmbmj6vifbkCy38HiAS0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Fri, 04 Oct 2024 12:37:59 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:37:59 UTC	1369	OUT	GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:38:00 UTC	671	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable" Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]} Content-Length: 660 Date: Fri, 04 Oct 2024 12:38:00 GMT Expires: Fri, 04 Oct 2024 12:38:00 GMT Cache-Control: private, max-age=31536000 Last-Modified: Wed, 22 Apr 2020 22:00:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:38:00 UTC	660	IN	Data Raw: 52 49 46 46 8c 02 00 00 57 45 42 50 56 50 38 4c 80 02 00 00 2f 27 c0 1e 10 d5 48 76 b6 3d 6e 95 fb bf 0a bb 07 b8 51 ea d8 9f 99 61 e5 e8 28 52 76 0c 6f ab da 55 98 1c c6 fe ea 8a 99 6c 18 b6 6d 1b a6 ff 1f dc da f4 06 30 6c db 36 6c ae ed 66 da 0c b1 ed 09 a4 90 41 3f 42 08 43 98 41 19 94 c1 32 68 06 9d 41 67 30 84 10 0e e1 47 38 07 6e 23 29 52 ba 6a f1 78 a0 e6 be 50 9e 46 e5 ce 49 3b cc 4f 78 a1 e7 c7 cf f5 1c 37 2d f7 c8 cf 62 58 9e 2f eb c0 5d c5 88 96 af 33 cb b8 1c 54 80 ab 93 e1 a2 35 b7 ba 01 78 ee ac da f6 47 2e 43 09 aa 19 e0 b7 25 e2 75 03 8e 19 f9 14 75 2f 97 5f b4 3d f0 b2 94 98 bc 10 3c 21 71 06 5c 86 f8 07 39 02 f7 de b2 c2 15 5c f7 a6 1a 07 70 3a 14 bc 50 f8 34 1f 61 53 00 4e 29 9c 3e b0 3e 18 ae 22 06 db 83 39 99 e0 56 68 20 a7 aa d0 80 Data Ascii: RIFFWEBPVP8L/'Hv=nQa(RvoUlm0l6lfA?BCA2hAg0G8n#)RjxPFI;Ox7-bX/]3T5xG.C%uu/_=<!q\9\p:P4aSN)>>"9Vh

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:38:00 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 12:38:00 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=187633 Date: Fri, 04 Oct 2024 12:38:00 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:38:00 UTC	1545	OUT	POST /gen_204?s=webhp&t=aft&atyp=csi&ei=peH_Zv34MtyI7NYPvZmh4QM&rt=wsrt.2505,aft.1313,afti.1313,cbt.136,hst.91,prt.1251&imn=11&ima=2&imad=0&imac=0&wh=907&aftie=NF&aft=1&aftp=907&opi=89978449&dt=&ts=198222 HTTP/1.1 Host: www.google.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.google.com X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:38:01 UTC	715	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-z2oBiyc0zw_4Ych-_-5AZQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]} Permissions-Policy: unload=() Date: Fri, 04 Oct 2024 12:38:01 GMT Server: gws Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:38:01 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-04 12:38:01 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=187707 Date: Fri, 04 Oct 2024 12:38:01 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-04 12:38:01 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:38:01 UTC	1380	OUT	GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=peH_Zv34MtyI7NYPvZmh4QM.1728045480013&dpr=1&nolsbt=1 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:38:01 UTC	1305	IN	HTTP/1.1 200 OK X-Content-Type-Options: nosniff Date: Fri, 04 Oct 2024 12:38:01 GMT Expires: Fri, 04 Oct 2024 12:38:01 GMT Cache-Control: private, max-age=3600 Content-Type: application/json; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-EoTgyduyrSssL4HL8jBg-A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-10-04 12:38:01 UTC	85	IN	Data Raw: 63 66 33 0d 0a 29 5d 7d 27 0a 5b 5b 5b 22 73 6f 63 69 61 6c 20 73 65 63 75 72 69 74 79 20 63 6f 6c 61 20 69 6e 63 72 65 61 73 65 20 32 30 32 35 20 73 73 69 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c Data Ascii: cf3)]}'[[["social security cola increase 2025 ssi",0,[3,357,362,396,143],{"zf":33,
2024-10-04 12:38:01 UTC	1390	IN	Data Raw: 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 74 79 70 68 6f 6f 6e 20 77 65 61 74 68 65 72 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 6d 65 6c 6c 75 73 69 20 77 69 73 63 6f 6e 73 69 6e 20 66 6f 6f 74 62 61 6c 6c 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 36 2c 31 34 33 5d 2c 7b 22 7a 66 22 3a 33 33 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 22 3a 22 31 22 7d 7d 5d 2c 5b 22 70 72 6f 6a 65 63 74 20 73 6b 79 64 72 6f 70 20 74 72 65 61 73 75 72 65 20 68 75 6e 74 22 2c 30 2c 5b 33 2c 33 35 37 2c 33 36 32 2c 33 39 Data Ascii: "zl":8,"zp":{"gs_ss":"1"}}],["typhoon weather information",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["mellusi wisconsin football",0,[3,357,362,396,143],{"zf":33,"zl":8,"zp":{"gs_ss":"1"}}],["project skydrop treasure hunt",0,[3,357,362,39
2024-10-04 12:38:01 UTC	1390	IN	Data Raw: 36 49 35 73 54 4a 68 59 33 72 59 36 67 4e 58 53 75 61 48 59 75 76 56 6f 4c 36 68 72 46 73 78 33 69 53 76 36 6f 69 4f 4e 6c 63 71 63 62 56 45 4f 50 6b 4b 4c 4a 68 51 74 54 61 4e 38 6c 6f 59 6c 78 38 68 34 48 48 63 51 7a 33 35 4f 61 54 73 67 59 30 37 48 50 41 65 62 51 59 76 39 33 78 67 70 31 4e 50 46 54 4d 62 69 51 46 6a 79 52 48 65 51 6f 4e 50 51 58 30 71 51 6a 64 67 68 6e 69 2b 33 72 35 64 56 62 54 44 6c 59 65 39 35 54 75 67 50 75 58 52 66 59 73 2b 6f 30 45 43 53 49 58 65 59 6c 37 6c 70 2f 57 62 59 59 79 30 43 48 6b 54 54 66 48 56 68 77 32 41 35 39 6e 73 68 58 2b 58 68 38 59 68 62 34 79 59 69 48 71 57 37 31 52 71 36 56 78 2b 79 33 4e 36 66 7a 30 52 33 69 68 61 79 53 7a 30 67 54 39 5a 75 6a 66 65 69 39 6c 39 4a 62 78 49 4b 65 4d 2b 67 4f 33 68 50 2f 44 4b Data Ascii: 6I5sTJhY3rY6gNXSuaHYuvVoL6hrFsx3iSv6oiONlcqcbVEOPkKLJhQtTaN8loYlx8h4HHcQz35OaTsgY07HPAebQYv93xgp1NPFTMbiQFjyRHeQoNPQX0qQjdghni+3r5dVbTDlYe95TugPuXRfYs+o0ECSIXeYl7lp/WbYYy0CHkTTfHVhw2A59nshX+Xh8Yhb4yYiHqW71Rq6Vx+y3N6fz0R3ihaySz0gT9Zujfei9l9JbxIKeM+gO3hP/DK
2024-10-04 12:38:01 UTC	457	IN	Data Raw: 4f 72 78 74 56 65 62 56 69 77 67 54 33 67 2b 44 30 77 51 59 71 68 54 59 67 68 78 46 65 34 61 32 4c 63 37 58 79 7a 70 38 66 62 75 72 6d 79 41 4d 69 38 72 43 7a 2b 69 6e 41 77 54 71 49 38 51 71 76 76 2f 73 39 50 37 78 72 31 63 79 6a 6d 53 35 30 4e 73 77 55 6f 4c 58 72 6d 4e 5a 73 7a 6e 45 64 50 78 73 4e 4b 73 47 44 6c 35 42 33 2f 34 47 62 75 4d 43 62 4a 45 6a 6f 78 77 72 69 34 5a 6f 51 6c 2f 37 2f 35 70 65 76 45 39 41 77 37 6f 7a 6c 77 57 6f 65 78 58 69 46 2f 62 74 34 6d 64 50 7a 70 58 70 44 46 4c 47 6b 36 36 4a 36 47 51 35 70 62 34 55 4c 65 4b 6b 50 6d 73 32 42 4c 77 36 72 38 31 63 39 59 2b 2f 6a 76 49 57 6d 7a 35 76 7a 72 35 35 36 38 30 2f 74 72 7a 37 55 41 4b 6a 36 50 55 34 55 50 39 64 72 65 69 69 65 35 76 4f 54 72 68 4e 6e 53 65 4e 6b 35 45 57 63 4e 35 Data Ascii: OrxtVebViwgT3g+D0wQYqhTYghxFe4a2Lc7Xyzp8fburmyAMi8rCz+inAwTqI8Qqvv/s9P7xr1cyjmS50NswUoLXrmNZsznEdPxsNKsGDl5B3/4GbuMCbJEjoxwri4ZoQl/7/5pevE9Aw7ozlwWoexXiF/bt4mdPzpXpDFLGk66J6GQ5pb4ULeKkPms2BLw6r81c9Y+/jvIWmz5vzr55680/trz7UAKj6PU4UP9dreiie5vOTrhNnSeNk5EWcN5
2024-10-04 12:38:01 UTC	89	IN	Data Raw: 35 33 0d 0a 5a 47 44 77 61 44 6a 59 68 6a 54 55 4f 43 42 73 32 4c 54 73 2f 6e 6d 32 61 7a 36 5a 63 75 36 51 41 69 66 5a 59 4e 77 79 49 30 33 50 6a 44 4f 57 43 63 4e 34 62 4d 4f 37 4a 2b 75 55 43 6f 54 7a 6f 4a 4f 30 5a 75 4e 68 73 2f 43 78 44 51 39 62 50 30 76 0d 0a Data Ascii: 53ZGDwaDjYhjTUOCBs2LTs/nm2az6Zcu6QAifZYNwyI03PjDOWCcN4bMO7J+uUCoTzoJO0ZuNhs/CxDQ9bP0v
2024-10-04 12:38:01 UTC	1390	IN	Data Raw: 31 35 63 61 0d 0a 44 35 4c 49 45 32 68 6d 4c 44 78 65 2b 46 34 4b 4d 48 7a 33 78 77 63 65 53 32 43 53 78 65 34 32 64 64 43 6e 34 4a 73 7a 6e 58 66 52 54 43 51 52 6c 33 37 6f 36 4f 4e 62 34 51 34 37 36 43 52 68 59 4f 65 77 54 34 52 2f 44 79 76 7a 32 76 69 4a 4d 43 51 37 32 4c 51 45 6f 4d 32 32 30 44 47 70 4a 44 48 49 79 64 66 68 6c 4c 38 53 61 36 46 66 78 6a 59 6b 50 2f 48 73 4a 49 7a 55 43 59 35 6e 6b 7a 79 57 6a 4c 5a 4d 51 4d 4e 31 2b 59 4d 68 67 65 39 71 56 30 4a 47 66 48 78 61 57 71 65 4f 4e 47 79 54 67 6c 4d 61 6a 75 42 53 77 31 48 6a 6b 59 75 6d 31 65 59 53 48 64 50 43 54 64 70 74 6a 5a 4b 6a 35 38 7a 35 71 65 74 52 38 31 4f 7a 34 6f 54 61 69 32 6b 37 53 61 70 57 7a 4e 35 30 42 68 47 6d 70 47 61 5a 64 39 59 44 51 73 63 33 57 63 4e 32 33 4e 34 34 50 Data Ascii: 15caD5LIE2hmLDxe+F4KMHz3xwceS2CSxe42ddCn4JsznXfRTCQRl37o6ONb4Q476CRhYOewT4R/Dyvz2viJMCQ72LQEoM220DGpJDHIydfhlL8Sa6FfxjYkP/HsJIzUCY5nkzyWjLZMQMN1+YMhge9qV0JGfHxaWqeONGyTglMajuBSw1HjkYum1eYSHdPCTdptjZKj58z5qetR81Oz4oTai2k7SapWzN50BhGmpGaZd9YDQsc3WcN23N44P
2024-10-04 12:38:01 UTC	1390	IN	Data Raw: 6e 38 39 34 59 6f 55 63 2f 43 65 52 4f 75 69 38 70 59 54 76 38 75 78 65 57 76 5a 42 58 39 55 50 48 6c 5a 4b 51 63 6c 74 41 5a 68 4b 6f 54 49 68 78 68 41 35 4b 2b 50 64 30 35 69 6e 34 4c 66 7a 4a 64 48 37 2b 47 6f 2f 48 68 55 4b 6a 4f 74 55 61 33 53 41 49 33 75 4e 41 35 53 43 4a 45 52 39 72 4d 74 37 52 32 61 71 56 53 48 4c 52 39 76 56 2f 43 72 6d 47 71 6c 62 69 51 4f 34 6a 52 4e 30 4f 54 63 75 51 31 6a 36 64 52 59 79 43 74 50 6f 79 71 75 36 56 38 41 56 50 55 51 62 45 42 55 52 6f 31 59 58 32 4d 30 68 6b 7a 72 42 36 72 56 76 62 68 51 52 50 55 57 59 55 47 6c 4a 36 34 51 4f 64 30 6e 6e 4d 35 76 58 61 53 4b 55 52 44 7a 4a 6f 2b 2b 7a 67 6e 68 49 74 62 6f 51 43 50 39 31 4c 35 7a 4b 48 54 44 32 36 4f 4c 6c 6f 53 77 64 48 4d 51 75 4d 53 35 55 48 39 4f 36 30 61 71 Data Ascii: n894YoUc/CeROui8pYTv8uxeWvZBX9UPHlZKQcltAZhKoTIhxhA5K+Pd05in4LfzJdH7+Go/HhUKjOtUa3SAI3uNA5SCJER9rMt7R2aqVSHLR9vV/CrmGqlbiQO4jRN0OTcuQ1j6dRYyCtPoyqu6V8AVPUQbEBURo1YX2M0hkzrB6rVvbhQRPUWYUGlJ64QOd0nnM5vXaSKURDzJo++zgnhItboQCP91L5zKHTD26OLloSwdHMQuMS5UH9O60aq
2024-10-04 12:38:01 UTC	1390	IN	Data Raw: 22 3a 22 70 65 74 65 20 61 6c 6f 6e 73 6f 20 6d 65 74 73 22 2c 22 7a 69 22 3a 22 50 65 74 65 20 41 6c 6f 6e 73 6f 20 5c 75 32 30 31 34 20 41 6d 65 72 69 63 61 6e 20 62 61 73 65 62 61 6c 6c 20 66 69 72 73 74 20 62 61 73 65 6d 61 6e 22 2c 22 7a 6c 22 3a 38 2c 22 7a 70 22 3a 7b 22 67 73 5f 73 73 70 22 3a 22 65 4a 7a 6a 34 74 56 50 31 7a 63 30 54 44 59 74 4e 73 75 6f 4e 45 77 32 59 50 51 53 4b 45 67 74 53 56 56 49 7a 4d 6e 50 4b 38 35 58 79 45 30 74 4b 51 59 41 70 38 73 4b 73 77 22 7d 2c 22 7a 73 22 3a 22 64 61 74 61 3a 69 6d 61 67 65 2f 6a 70 65 67 3b 62 61 73 65 36 34 2c 2f 39 6a 2f 34 41 41 51 53 6b 5a 4a 52 67 41 42 41 51 41 41 41 51 41 42 41 41 44 2f 32 77 43 45 41 41 6b 47 42 77 67 48 42 67 6b 49 42 77 67 4b 43 67 6b 4c 44 52 59 50 44 51 77 4d 44 52 73 Data Ascii: ":"pete alonso mets","zi":"Pete Alonso \u2014 American baseball first baseman","zl":8,"zp":{"gs_ssp":"eJzj4tVP1zc0TDYtNsuoNEw2YPQSKEgtSVVIzMnPK85XyE0tKQYAp8sKsw"},"zs":"data:image/jpeg;base64,/9j/4AAQSkZJRgABAQAAAQABAAD/2wCEAAkGBwgHBgkIBwgKCgkLDRYPDQwMDRs
2024-10-04 12:38:01 UTC	1390	IN	Data Raw: 44 6a 46 54 4c 79 52 59 52 4b 75 6d 55 4e 57 70 68 68 70 37 4f 37 62 35 34 70 67 4f 47 55 4f 43 56 7a 37 56 32 6b 64 6e 61 74 75 37 71 50 50 38 57 30 5a 70 49 30 79 36 30 6e 53 72 6a 76 78 48 43 57 32 37 47 6c 61 46 6f 69 52 36 41 6b 63 6a 4e 4d 38 31 35 62 58 46 6d 73 38 62 68 6b 50 51 69 76 47 63 52 67 71 4d 39 34 53 76 62 70 6a 5a 79 6d 32 6a 33 45 4b 51 69 4c 35 6e 79 46 4c 47 6f 53 43 7a 46 78 4c 4a 4b 36 4a 5a 53 49 34 61 4f 55 68 58 48 50 47 50 63 38 66 6c 52 53 7a 75 32 75 49 78 48 46 67 4d 57 38 4f 66 31 2b 6c 49 76 62 66 74 44 4a 71 6b 61 32 73 55 58 64 51 51 73 63 38 35 4c 6b 63 44 37 44 6e 48 31 6f 2b 69 30 78 31 4e 77 55 38 65 63 44 66 71 46 30 79 45 6a 6e 79 67 52 39 62 64 47 38 42 70 6f 37 4e 36 73 6c 79 6f 45 72 44 70 35 31 6e 71 77 4f 35 Data Ascii: DjFTLyRYRKumUNWphhp7O7b54pgOGUOCVz7V2kdnatu7qPP8W0ZpI0y60nSrjvxHCW27GlaFoiR6AkcjNM815bXFms8bhkPQivGcRgqM94SvbpjZym2j3EKQiL5nyFLGoSCzFxLJK6JZSI4aOUhXHPGPc8flRSzu2uIxHFgMW8Of1+lIvbftDJqka2sUXdQQsc85LkcD7DnH1o+i0x1NwU8ecDfqF0yEjnygR9bdG8Bpo7N6slyoErDp51nqwO5
2024-10-04 12:38:01 UTC	26	IN	Data Raw: 38 75 77 41 75 63 44 31 45 6f 74 66 79 64 56 65 49 33 59 6e 55 22 7d 5d 0d 0a Data Ascii: 8uwAucD1EotfydVeI3YnU"}]

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:38:01 UTC	1641	OUT	GET /xjs/_/js/md=2/k=xjs.hd.en.-yh58R89BVo.es5.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAAgEKAAAAAKAAAAAAAAAAAAAAAAAAAIAAQQAAIgEAAAIAAAsAAAIBABAAgIAAAECABOBRJgCACAAmAAAAAAAIAAACRQAAAAQAAGAAAAAQAAAAAACgAAAAAAAAAAAAAAAAAAAAIIBAAAAAAAAAAAAAAAIAAACgBwAAAAAAAAAQAABAEAAADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/rs=ACT90oHYzfbeFNclAKpF94XrZIGOyUFFxg HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:38:02 UTC	817	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 12199 Date: Fri, 04 Oct 2024 12:38:02 GMT Expires: Sat, 04 Oct 2025 12:38:02 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Fri, 04 Oct 2024 06:32:23 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:38:02 UTC	573	IN	Data Raw: 7b 22 63 68 75 6e 6b 54 79 70 65 73 22 3a 22 31 30 30 30 30 31 31 31 31 31 31 31 30 30 31 31 31 31 30 30 30 31 30 30 30 30 31 30 31 31 30 31 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 30 31 31 31 31 31 31 31 31 31 31 31 30 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: {"chunkTypes":"100001111111001111000100001011010000001111111111111111111111111111111011011111111111010111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 32 32 32 32 32 31 32 32 31 32 32 31 32 31 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 32 32 32 32 31 32 32 31 32 32 31 32 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 32 31 32 Data Ascii: 212121212121212121212121212121212121212221212121212121212221222222122122121221212121212121212121212121212121222121212121212121212121212121212121212121212222122122122212212212212212212212212212212212212212212212212212212212212212212212212212212212212212212
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 32 31 33 31 33 31 31 32 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111211111111111111111111111311121311111111111111111111111111111111111111111311111313111111111111111111111111111111111121111111111111111111111111111011111111111111111111111111111111111111311111111111111111111111112111111112131311213111111111111111111
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 31 31 31 32 32 31 33 32 32 32 32 32 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 31 31 33 31 31 31 31 31 31 31 31 31 33 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 31 32 32 31 32 32 32 32 32 33 31 31 33 31 31 31 31 31 31 31 32 32 31 32 31 31 31 31 32 33 32 32 32 32 32 31 31 31 33 31 31 32 32 32 32 33 31 31 33 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 Data Ascii: 111111112222222111221322222111111131111111111110111111111111111111111111111111111111111111111111111111111122113111111111313131111111111111111111112122222222212222222221221222223113111111122121111232222211131122223113131111111111111111111111111111111111111
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 31 31 31 31 31 31 32 31 32 32 32 32 31 32 32 32 31 32 32 32 32 31 32 32 31 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 32 32 32 32 32 32 32 32 32 32 32 31 32 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 32 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 31 31 31 31 31 32 32 32 32 32 32 32 32 31 32 32 32 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 32 31 32 31 31 32 31 32 31 32 31 32 31 32 31 32 31 32 31 31 31 31 31 31 31 31 31 31 31 32 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 31 32 31 32 32 31 31 32 32 31 31 32 32 32 31 31 31 32 31 31 31 31 32 32 32 31 32 32 32 31 Data Ascii: 111111212222122212222122122222222122222222222222222122222222222212111111111121111211111111122222222222222222222111111222222221222211111111111111111111111112111111111111111111111121212112121212121212111111111112122222222222222121221122112221112111122212221
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 33 31 32 31 31 31 32 31 31 31 31 31 31 33 33 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 31 31 32 31 31 31 31 32 31 33 32 31 31 31 31 32 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 33 31 33 31 32 32 31 33 32 33 31 31 31 31 31 31 31 31 31 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 32 33 32 32 32 32 32 31 32 32 32 32 32 31 31 31 31 31 31 31 31 31 Data Ascii: 312111211111133311111111111111111111111111111111121121111213211112111111111111111111111111111111111111111111111111111111111111111111113131221323111111111222222222222222222222222222222222222222222222222222222222222222222222222222222222322222122222111111111
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 31 31 32 33 30 32 33 30 30 32 32 32 33 30 30 30 30 30 30 31 31 31 31 31 32 33 33 33 31 33 33 31 33 31 31 31 31 31 32 33 33 33 33 31 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 33 32 32 33 31 31 31 32 32 31 33 32 31 31 31 31 31 32 32 33 31 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 Data Ascii: 112302300222300000011111233313313111112333311111111311111113111111111111111111111111123223111221321111122310000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000001111111111111111111111111111111111111111111111112
2024-10-04 12:38:02 UTC	506	IN	Data Raw: 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 31 31 31 31 31 31 32 32 32 32 32 33 30 30 30 30 30 30 30 31 31 31 31 31 32 32 32 32 32 32 32 31 31 30 30 30 30 31 31 31 31 32 32 32 32 33 30 30 30 32 33 32 32 33 32 30 30 30 30 30 30 30 30 30 32 30 30 30 30 30 30 30 30 30 30 30 30 30 32 30 30 30 32 32 32 32 32 32 32 32 32 32 32 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 30 31 31 31 31 33 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 31 32 32 33 31 30 30 30 30 30 32 33 30 31 32 32 31 31 32 33 33 31 30 30 30 31 31 31 32 33 32 32 32 32 33 30 30 30 30 30 30 30 32 32 33 30 30 32 32 33 32 31 31 32 31 32 32 32 32 32 32 33 31 31 31 31 31 31 Data Ascii: 000000002000000000000000000000011111112222230000000111112222222110000111122223000232232000000000200000000000002000222222222220000000000000000000000000000001111311111111111111111111111111112231000002301221123310001112322223000000022300223211212222223111111

Timestamp	Bytes transferred	Direction	Data
2024-10-04 12:38:01 UTC	3477	OUT	GET /xjs/_/js/k=xjs.hd.en.-yh58R89BVo.es5.O/ck=xjs.hd.HFq-c3Fv2Po.L.B1.O/am=JFUAAAAAAAAAAAwAAAAAAAAAAAAAAAAAAAAAgAAAABAAAAAAAAAAQgG6kwAAAKMAgA0ACAAAAAAAAQDAAIAAQQAAIgEAAAIEACsAAAIBAFAAgIggAEDQBOBRJkDACBAmgAAKIAQoQAICRRCPQgQAAGAAAIAQAAYYBiCoAGAUIAAAAAAAAIAACAEAIIBiAAECAPQIBIABICYAAEKgB4AAAAAAEABQAAhAkJkADJABCAAAAAAAAOgDgOABMKSwAAAAAAAAAAAAAACAACQI5kICCgIQAAAAAAAAAAAAAAAAAFLSxIUN/d=0/dg=0/br=1/ujg=1/rs=ACT90oGBjapBjWhBMHSZ_OMXjJETCXedvg/m=sb_wiz,aa,abd,sysk,sysj,syse,syfy,sysi,sys4,sy10j,syzr,sys9,syzq,syt9,sysf,sysh,sysd,sysx,sys1,sysy,sysz,sysq,sysu,sysa,syso,sysr,syss,syru,sysm,sys5,sys6,syrz,syri,syrg,syrf,sys8,syzp,syt8,syrs,syt7,async,syw5,ifl,pHXghd,sf,syto,sytr,sy49f,sonic,TxCJfd,sy49j,qzxzOb,IsdWVc,sy49l,sy1f9,sy1bm,sy1bi,syre,syrc,syrd,syrb,syra,sy484,sy487,sy2c8,sy17g,sy12d,sy12e,syro,syr6,syfc,sybw,sybz,sybu,syby,sybx,sycq,spch,syun,syum,rtH1bd,sy1cr,sy18j,sy178,syga,sy1cq,sy12j,sy1cp,sy179,sygc,sy1cs,SMquOb,sy8h,sygj,sygg,sygh,sygk,sygf,sygs,sygq,sygo,syge,sycn,syci,sycl,syal,syad,syb7,syak,syaj,sy [TRUNCATED] Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-prefers-color-scheme: light sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: AEC=AVYB7coe9p6R4EeLti2m5j3UMH2-Kz0F4tM05XOZ__yLVVgLgHlFLMTlLw; NID=518=IIXSfA2AMKNnsov-_BktW3Yy4uBd3m81ew8ynP1qcSzJS5ii2Z1IZff-c2fPQGC92bwCq131OND5pVvdUWS46nSGq5wDMGiCCyu_ccZgu58OfCbKB8q2giwD8QkKH9qJAUB84Yi5G-niGAU834x1iRGxHxcxdSprlQHuLZxy5LQfOrELKD_Nj1vXpbeyrJQ6Zco
2024-10-04 12:38:02 UTC	818	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding, Origin Content-Type: text/javascript; charset=UTF-8 Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gws-team" Report-To: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]} Content-Length: 502423 Date: Fri, 04 Oct 2024 12:38:02 GMT Expires: Sat, 04 Oct 2025 12:38:02 GMT Cache-Control: public, immutable, max-age=31536000 Last-Modified: Thu, 03 Oct 2024 17:10:52 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-10-04 12:38:02 UTC	572	IN	Data Raw: 5f 46 5f 69 6e 73 74 61 6c 6c 43 73 73 28 22 63 2d 77 69 7a 7b 63 6f 6e 74 61 69 6e 3a 73 74 79 6c 65 7d 63 2d 77 69 7a 3e 63 2d 64 61 74 61 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 72 45 54 53 44 7b 63 6f 6e 74 61 69 6e 3a 6e 6f 6e 65 7d 63 2d 77 69 7a 2e 55 62 69 38 5a 7b 63 6f 6e 74 61 69 6e 3a 6c 61 79 6f 75 74 20 73 74 79 6c 65 7d 2e 6a 62 42 49 74 66 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 44 55 30 4e 4a 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 6c 50 33 4a 6f 66 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c Data Ascii: _F_installCss("c-wiz{contain:style}c-wiz>c-data{display:none}c-wiz.rETSD{contain:none}c-wiz.Ubi8Z{contain:layout style}.jbBItf{display:block;position:relative}.DU0NJ{bottom:0;left:0;position:absolute;right:0;top:0}.lP3Jof{display:inline-block;position:rel
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 68 2c 71 6c 69 2d 62 6c 75 65 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 6e 4e 4d 75 4f 64 20 2e 49 45 71 69 41 66 7b 61 6e 69 6d 61 74 69 6f 6e 3a 71 6c 69 2d 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 2c 71 6c 69 2d 72 65 64 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 35 33 33 32 6d 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 30 2c 30 2e 32 2c 31 29 20 69 6e 66 69 6e 69 74 65 20 62 6f 74 68 7d 2e 6e 4e 4d 75 4f 64 20 2e 73 6d 6f 63 73 65 7b 61 6e 69 6d 61 74 Data Ascii: h,qli-blue-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .IEqiAf{animation:qli-fill-unfill-rotate 5332ms cubic-bezier(0.4,0,0.2,1) infinite both,qli-red-fade-in-out 5332ms cubic-bezier(0.4,0,0.2,1) infinite both}.nNMuOd .smocse{animat
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 61 63 69 74 79 3a 30 2e 39 39 7d 39 30 25 7b 6f 70 61 63 69 74 79 3a 30 2e 39 39 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 7d 2e 62 65 44 51 50 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 35 30 25 7d 2e 46 63 58 66 69 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6c 65 66 74 3a 34 35 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 25 7d 2e 53 50 4b 46 6d 63 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 Data Ascii: acity:0.99}90%{opacity:0.99}100%{opacity:0}}.beDQP{display:inline-block;height:100%;overflow:hidden;position:relative;width:50%}.FcXfi{box-sizing:border-box;height:100%;left:45%;overflow:hidden;position:absolute;top:0;width:10%}.SPKFmc{border-radius:50%;b
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 20 2e 74 53 33 50 35 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 45 70 46 4e 57 29 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 6c 65 66 74 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 35 64 65 67 29 7d 31 30 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 33 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 71 6c 69 2d 72 69 67 68 74 2d 73 70 69 6e 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 33 30 64 65 67 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 35 Data Ascii: .tS3P5{border-color:var(--EpFNW);border-bottom-color:transparent}@keyframes qli-left-spin{0%{transform:rotate(130deg)}50%{transform:rotate(-5deg)}100%{transform:rotate(130deg)}}@keyframes qli-right-spin{0%{transform:rotate(-130deg)}50%{transform:rotate(5
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 30 25 7d 2e 5a 65 56 42 74 63 7b 63 6f 6c 6f 72 3a 72 67 62 28 39 35 2c 39 39 2c 31 30 34 29 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 5c 22 47 6f 6f 67 6c 65 20 53 61 6e 73 5c 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 33 30 30 70 78 7d 2e 61 6c 54 42 51 65 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 32 35 32 2c 32 33 32 2c 32 33 30 29 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 38 70 78 3b 6a 75 73 74 69 66 79 Data Ascii: 0%}.ZeVBtc{color:rgb(95,99,104);font-family:\"Google Sans\",Roboto,Arial,sans-serif;font-size:16px;line-height:25px;max-width:300px}.alTBQe{align-items:center;background-color:rgb(252,232,230);border-top-left-radius:8px;border-top-right-radius:8px;justify
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 50 58 54 36 63 64 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 34 70 78 7d 2e 63 42 39 4d 37 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 28 32 31 38 2c 32 32 30 2c 32 32 34 29 3b 63 6f 6c 6f 72 3a 72 67 62 28 36 30 2c 36 34 2c 36 37 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 36 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 66 61 Data Ascii: ,sans-serif;font-size:14px;margin-left:20px;margin-right:20px}.PXT6cd{display:flex;margin-top:14px}.cB9M7{background-color:#fff;border:1px solid rgb(218,220,224);color:rgb(60,64,67);border-radius:36px;display:inline-flex;flex-grow:1;font-size:14px;font-fa
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 79 7b 0a 5f 2e 77 28 22 61 61 22 29 3b 0a 0a 5f 2e 79 28 29 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 77 28 22 61 62 64 22 29 3b 0a 76 61 72 20 76 68 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 6f 72 28 76 61 72 20 62 3d 22 22 2c 63 3d 32 31 2c 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 64 25 34 21 3d 33 26 26 28 62 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 5b 64 5d 5e 63 29 2c 63 2b 2b 29 3b 72 65 74 75 72 6e 20 62 7d 2c 77 68 69 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 2c 63 3b 66 6f 72 28 63 20 69 6e 20 61 29 69 66 28 61 5b 63 5d 2e 65 29 69 66 28 61 5b 63 5d 2e 62 29 62 2b 2b 3b 65 6c 73 65 20 72 65 74 75 72 6e 21 Data Ascii: y{_.w("aa");_.y();}catch(e){_._DumpException(e)}try{_.w("abd");var vhi=function(a){for(var b="",c=21,d=0;d<a.length;d++)d%4!=3&&(b+=String.fromCharCode(a[d]^c),c++);return b},whi=function(a){var b=0,c;for(c in a)if(a[c].e)if(a[c].b)b++;else return!
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 29 3b 62 2e 4b 62 28 29 26 26 61 2e 73 65 74 28 22 58 2d 43 6c 69 65 6e 74 2d 50 63 74 78 22 2c 5f 2e 5a 6b 28 62 29 29 3b 62 3d 5f 2e 4b 63 28 22 71 66 49 30 5a 63 22 29 3b 62 2e 4b 62 28 29 26 26 61 2e 73 65 74 28 22 58 2d 53 65 61 72 63 68 2d 43 69 2d 46 69 22 2c 5f 2e 5a 6b 28 62 29 29 3b 62 3d 5f 2e 4b 63 28 22 41 55 66 37 71 63 22 29 3b 62 2e 4b 62 28 29 26 26 61 2e 73 65 74 28 22 58 2d 53 69 6c 6b 2d 43 61 70 61 62 69 6c 69 74 69 65 73 22 2c 5f 2e 5a 6b 28 62 29 29 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f 2e 5f 44 75 6d 70 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 0a 74 72 79 7b 0a 5f 2e 6e 44 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 7d 3b 5f 2e 6f 44 62 3d 21 31 3b 0a 7d 63 61 74 63 68 28 65 29 7b 5f Data Ascii: );b.Kb()&&a.set("X-Client-Pctx",_.Zk(b));b=_.Kc("qfI0Zc");b.Kb()&&a.set("X-Search-Ci-Fi",_.Zk(b));b=_.Kc("AUf7qc");b.Kb()&&a.set("X-Silk-Capabilities",_.Zk(b));return a};}catch(e){_._DumpException(e)}try{_.nDb=function(){return""};_.oDb=!1;}catch(e){_
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 4d 61 70 3a 65 2e 63 6f 6e 74 65 78 74 3b 76 61 72 20 6b 3d 65 2e 44 66 3d 3d 3d 76 6f 69 64 20 30 3f 6e 65 77 20 4d 61 70 3a 65 2e 44 66 3b 76 61 72 20 6c 3d 65 2e 77 45 3b 76 61 72 20 70 3d 65 2e 6e 70 62 3b 76 61 72 20 72 3d 65 2e 4f 37 3b 76 61 72 20 74 3d 65 2e 77 4a 3b 76 61 72 20 78 3d 65 2e 4b 66 63 3b 65 3d 65 2e 41 61 62 3b 67 3d 67 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 67 3b 68 3d 6e 65 77 20 4d 61 70 28 5b 5d 2e 63 6f 6e 63 61 74 28 5f 2e 6b 64 28 68 29 29 29 3b 68 2e 68 61 73 28 22 5f 66 6d 74 22 29 7c 7c 68 2e 73 65 74 28 22 5f 66 6d 74 22 2c 22 70 72 6f 67 22 29 3b 66 26 26 68 2e 73 65 74 28 22 5f 69 64 22 2c 66 29 3b 28 66 3d 61 2e 51 79 61 29 26 26 68 2e 73 65 74 28 22 5f 78 73 72 66 22 2c 66 29 3b 6b 3d 6e 65 77 20 4d 61 70 28 6b 29 3b Data Ascii: Map:e.context;var k=e.Df===void 0?new Map:e.Df;var l=e.wE;var p=e.npb;var r=e.O7;var t=e.wJ;var x=e.Kfc;e=e.Aab;g=g===void 0?!1:g;h=new Map([].concat(_.kd(h)));h.has("_fmt")\|\|h.set("_fmt","prog");f&&h.set("_id",f);(f=a.Qya)&&h.set("_xsrf",f);k=new Map(k);
2024-10-04 12:38:02 UTC	1390	IN	Data Raw: 29 26 26 78 2e 73 65 74 28 22 76 65 74 22 2c 64 29 29 3b 66 3f 28 78 2e 73 65 74 28 22 76 65 64 22 2c 66 29 2c 67 6f 6f 67 6c 65 2e 6b 42 4c 26 26 78 2e 73 65 74 28 22 62 6c 22 2c 67 6f 6f 67 6c 65 2e 6b 42 4c 29 2c 67 6f 6f 67 6c 65 2e 73 6e 26 26 78 2e 73 65 74 28 22 73 22 2c 67 6f 6f 67 6c 65 2e 73 6e 29 29 3a 78 2e 73 65 74 28 22 65 69 22 2c 65 7c 7c 28 30 2c 5f 2e 65 6c 2e 46 79 29 28 29 29 3b 67 26 26 78 2e 73 65 74 28 22 6c 65 69 22 2c 67 29 3b 5f 2e 48 6a 61 28 78 2c 21 31 2c 21 30 29 3b 67 6f 6f 67 6c 65 2e 75 64 6d 26 26 78 2e 73 65 74 28 22 75 64 6d 22 2c 67 6f 6f 67 6c 65 2e 75 64 6d 29 3b 5f 2e 45 71 62 28 78 29 3b 78 2e 73 65 74 28 22 79 76 22 2c 22 33 22 29 3b 62 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 7a 2c 42 29 7b 78 2e 73 Data Ascii: )&&x.set("vet",d));f?(x.set("ved",f),google.kBL&&x.set("bl",google.kBL),google.sn&&x.set("s",google.sn)):x.set("ei",e\|\|(0,_.el.Fy)());g&&x.set("lei",g);_.Hja(x,!1,!0);google.udm&&x.set("udm",google.udm);_.Eqb(x);x.set("yv","3");b.forEach(function(z,B){x.s