Edit tour

Windows Analysis Report
https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website

Overview

General Information

Sample URL:	https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website
Analysis ID:	1431103
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site or detected (based on various text indicators)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3852 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3192 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1920 --field-trial-handle=2000,i,15121062990941181827,15700174186935151206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6392 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j101&tid=UA-62222314-1&cid=1644806613.1713964856&jid=43323795&gjid=1765189360&_gid=1017168493.1713964856&_u=SCCAAEABDAAAACAAI~&z=2103689005 HTTP/1.1Host: stats.g.doubleclick.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: https://lookerstudio.google.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://lookerstudio.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://lookerstudio.google.com/reporting/ce8908e1-d4e1-46d1-9087-7b8dc3e8dd6f?s=scrHqwjeA3k	HTTP Parser: No favicon
Source: https://lookerstudio.google.com/reporting/ce8908e1-d4e1-46d1-9087-7b8dc3e8dd6f?s=scrHqwjeA3k	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=o8p19a37kioz	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=o8p19a37kioz	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=e08lg5zdz084	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.206.6.29:443 -> 192.168.2.4:49756 version: TLS 1.2

Source:	Binary string: _.lg_.pdb=function(a){var b=this;if(this.Oc.isBrowser){var c=a.m0a;(a=this.J.get(c)\|\|0)\|\|this.Pb.Gc(function(){c.addEventListener("focus",b.W,lg_ycb);c.addEventListener("blur",b.W,lg_ycb)});this.J.set(c,a+1);1===++this.Pa&&(this.Pb.Gc(function(){((b.Mb\|\|document).defaultView\|\|window).addEventListener("focus",b.gb)}),this.ma.W.pipe(_.lg_h(this.Ya)).subscribe(function(d){b.UMa(d,!0)}))}}; source: chromecache_169.2.dr
Source:	Binary string: _.lg_.jMa=function(a){a.stopPropagation()};_.lg_.kMa=function(a){a.stopPropagation();this.checked\|\|this.disabled\|\|(a=this.D&&this.value!==this.D.value,this.checked=!0,this.hv(),this.D&&(this.D.qF(this.value),a&&this.D.hv()))};_.lg_.Zqa=function(a){this.kMa(a);this.disabled\|\|this.qt.La.focus()};_.lg_.Pdb=function(a){this.Zc!==a&&(this.Zc=a,this.H.Za())}; source: chromecache_169.2.dr
Source:	Binary string: _.lg_Fs.prototype.D=function(a,b){b=void 0===b?!1:b;a=_.lg_0g(a);if(!this.Oc.isBrowser\|\|1!==a.nodeType)return _.lg_d();var c=_.lg_iua(a)\|\|this.Mb\|\|document,d=this.H.get(a);if(d)return b&&(d.gfa=!0),d.subject;b={gfa:b,subject:new _.lg_f,m0a:c};this.H.set(a,b);this.pdb(b);return b.subject};_.lg_Gs=function(a,b){b=_.lg_0g(b);var c=a.H.get(b);c&&(c.subject.complete(),a.xra(b),a.H.delete(b),a.tdb(c))}; source: chromecache_169.2.dr
Source:	Binary string: this.checked&&(this.D.selected=this)))}},labelPosition:{configurable:!0,enumerable:!0,get:function(){return this.ma\|\|this.D&&this.D.labelPosition\|\|"after"},set:function(a){this.ma=a}},disabled:{configurable:!0,enumerable:!0,get:function(){return this.Zc\|\|null!==this.D&&this.D.disabled},set:function(a){this.Pdb(a)}},required:{configurable:!0,enumerable:!0,get:function(){return this.oa\|\|this.D&&this.D.required},set:function(a){this.oa=a}},color:{configurable:!0,enumerable:!0,get:function(){return this.Xk\|\| source: chromecache_169.2.dr

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.6.29
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_109.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Pj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),AC=["www.youtube.com","www.youtube-nocookie.com"],BC,CC=!1; equals www.youtube.com (Youtube)
Source: chromecache_169.2.dr	String found in binary or memory: a.put("activities/reporting/components/blendwarmwelcome/blend_warm_welcome.ng",'<md-dialog class="bigquery-interstitial">\n <md-dialog-content>\n \x3c!-- App icon. --\x3e\n <div class="appHeader">\n <div class="appIconHolder reporting">\n <div class="icon"></div>\n </div>\n </div>\n\n <iframe width="560" height="315" src="https://www.youtube.com/embed/E735sJTcjZk?rel=0&showinfo=0" frameborder="0" allow="autoplay; encrypted-media" allowfullscreen></iframe>\n <div class="welcome-msg">\n Get started with data blending\n </div>\n \x3c!-- Button list --\x3e\n </md-dialog-content>\n <md-dialog-actions>\n <md-button class="{{::button.class}}"\n ng-repeat="button in buttons"\n ng-click="button.action()">\n {{::button.label}}\n </md-button>\n </md-dialog-actions>\n</md-dialog>\n'); equals www.youtube.com (Youtube)
Source: chromecache_173.2.dr	String found in binary or memory: description:"Returns a hyperlink.",returnType:[(0,_.lg_R.ea)(_.lg_$[42])],examples:["HYPERLINK(URL, Link Label)","HYPERLINK(CONCAT('https://www.youtube.com/watch?v=', External Video Id), Video Title)","HYPERLINK(URL, Link Image)","HYPERLINK(CONCAT('https://www.youtube.com/watch?v=', External Video Id), Video Thumbnail)"],isEnabled:!0},{name:"IMAGE",articleId:"7570489",category:"Text",arguments:[{name:"Image URL",dataType:[(0,_.lg_R.ea)(_.lg_$[32]),(0,_.lg_R.ea)(_.lg_$[41])],description:"The full URL of the link location, enclosed in quotation marks, or an expression that returns such a URL."}, equals www.youtube.com (Youtube)
Source: chromecache_123.2.dr, chromecache_112.2.dr, chromecache_119.2.dr	String found in binary or memory: disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"},plus_share:{params:{url:""}, equals www.youtube.com (Youtube)
Source: chromecache_109.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Yg:d,Wg:e,Xg:f,Ih:g,Jh:h,ye:m,Ab:b},p=D.YT,q=function(){IC(n)};if(p)return p.ready&&p.ready(q),b;var r=D.onYouTubeIframeAPIReady;D.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(LC(w,"iframe_api")\|\|LC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!CC&&JC(x[B],n.ye))return Ic("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_177.2.dr	String found in binary or memory: gf=u(["https://sandbox.google.com/tools/feedback/"]),hf=u(["https://www.google.cn/tools/feedback/"]),jf=u(["https://help.youtube.com/tools/feedback/"]),kf=u(["https://asx-frontend-staging.corp.google.com/inapp/"]),lf=u(["https://asx-frontend-staging.corp.google.com/tools/feedback/"]),mf=u(["https://localhost.corp.google.com/inapp/"]),nf=u(["https://localhost.proxy.googlers.com/inapp/"]),of=S(Qe),pf=[S(Re),S(Se)],qf=[S(Te),S(Ue),S(Ve),S(We),S(Xe),S(Ye),S(Ze),S($e),S(af),S(bf)],rf=[S(cf),S(df)],sf= equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: static.licdn.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: sb.scorecardresearch.com
Source: global traffic	DNS traffic detected: DNS query: lookerstudio.google.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1920 --field-trial-handle=2000,i,15121062990941181827,15700174186935151206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1920 --field-trial-handle=2000,i,15121062990941181827,15700174186935151206,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website	0%	Avira URL Cloud	safe
https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website	0%	Virustotal		Browse
https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
lookerstudio.google.com	142.251.2.100	true	false		high
plus.l.google.com	142.251.2.139	true	false		high
sb.scorecardresearch.com	18.155.192.106	true	false	0%, Virustotal, Browse	unknown
cs1404.wpc.epsiloncdn.net	152.199.24.163	true	false	0%, Virustotal, Browse	unknown
www.google.com	74.125.137.106	true	false		high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	0%, Virustotal, Browse	unknown
stats.g.doubleclick.net	142.250.101.154	true	false		high
static.licdn.com	unknown	unknown	false		high
www.linkedin.com	unknown	unknown	false		high
apis.google.com	unknown	unknown	false		high

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	low
https://www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE	false		high
https://lookerstudio.google.com/getFirebaseAuthToken?appVersion=20240423_0000	false		high
https://lookerstudio.google.com/overview	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://cs.corp.google.com/piper/$2	chromecache_169.2.dr	false		high
https://apis.google.com/js/googleapis.proxy.js?onload=startup	chromecache_153.2.dr, chromecache_215.2.dr	false		high
https://stats.g.doubleclick.net/g/collect	chromecache_109.2.dr	false		high
https://feedback.googleusercontent.com/resources/annotator.css	chromecache_177.2.dr	false		high
https://myaccount.google.com/permissions	chromecache_169.2.dr	false		high
https://developers.google.com/recaptcha/docs/faq#localhost_support	chromecache_159.2.dr	false		high
https://apis.google.com/js/client.js	chromecache_112.2.dr	false		high
https://console.cloud.google.com/projectcreate	chromecache_169.2.dr	false		high
https://support.google.com	chromecache_169.2.dr	false		high
https://support.google.com/looker-studio/?p=cm-roles	chromecache_173.2.dr	false		high
https://support.google.com/looker-studio/answer/9706918?hl=en	chromecache_169.2.dr	false		high
https://apis.google.com/js/googleapis.proxy.js	chromecache_119.2.dr	false		high
http://g.co/dev/maps-no-account	chromecache_186.2.dr	false		high
http://localhost.proxy.googlers.com/inapp/	chromecache_177.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/looker-studio/answer/10043514	chromecache_169.2.dr	false		high
https://support.google.com/looker-studio/answer/6401549	chromecache_169.2.dr	false		high
https://stagingqual-feedback-pa-googleapis.sandbox.google.com	chromecache_177.2.dr	false		high
https://support.google.com/looker-studio/answer/10039127	chromecache_169.2.dr	false		high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_203.2.dr	false		high
https://lookerstudio-preprod.corp.google.com	chromecache_173.2.dr	false		high
https://lookerstudio-integration.corp.google.com	chromecache_173.2.dr	false		high
https://analyticssuitefrontend-pa-googleapis.corp.google.com/	chromecache_169.2.dr	false		high
https://support.google.com/looker-studio/?p=relnotes	chromecache_173.2.dr	false		high
https://support.google.com/looker-studio/answer/9093373	chromecache_169.2.dr	false		high
https://support.google.com/looker-studio/answer/7088031	chromecache_169.2.dr	false		high
https://groups.google.com/a/google.com/forum/#	chromecache_173.2.dr	false		high
https://support.google.com/looker-studio/answer/9061420	chromecache_173.2.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_119.2.dr	false		high
https://support.google.com/looker-studio?p=cm-team	chromecache_169.2.dr	false		high
https://support.google.com/looker-studio?p=formula-prompt-guide	chromecache_173.2.dr	false		high
https://developers.google.com/datastudio/connector/publish-connector	chromecache_173.2.dr	false		high
https://support.google.com/recaptcha/#6175971	chromecache_159.2.dr	false		high
https://support.google.com/looker-studio/answer/6371135	chromecache_173.2.dr	false		high
https://goo.gle/js-api-loading	chromecache_186.2.dr	false	URL Reputation: safe	unknown
https://www.postgresql.org/docs/9.6/static/libpq-ssl.html	chromecache_173.2.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_123.2.dr, chromecache_112.2.dr, chromecache_119.2.dr	false		high
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	chromecache_177.2.dr	false	URL Reputation: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_203.2.dr	false		high
https://support.google.com/looker-studio/answer/7314895	chromecache_169.2.dr	false		high
https://developers.google.com/	chromecache_107.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.101.113	unknown	United States	15169	GOOGLEUS	false
142.250.101.157	unknown	United States	15169	GOOGLEUS	false
152.199.24.163	cs1404.wpc.epsiloncdn.net	United States	15133	EDGECASTUS	false
142.250.101.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.137.106	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
18.155.192.106	sb.scorecardresearch.com	United States	16509	AMAZON-02US	false

Source	Detection	Scanner	Label	Link
http://localhost.proxy.googlers.com/inapp/	0%	URL Reputation	safe
https://goo.gle/js-api-loading	0%	URL Reputation	safe
https://asx-frontend-autopush.corp.google.co.uk/tools/feedback/	0%	URL Reputation	safe
about:blank	0%	Avira URL Cloud	safe
https://cnsviewer.corp.google.com$2	0%	Avira URL Cloud	safe
https://ngrx.io/guide/store/configuration/runtime-checks#strictactionwithinngzone	0%	Avira URL Cloud	safe
https://ngrx.io/guide/store/configuration/runtime-checks#strictactionwithinngzone	0%	Virustotal		Browse

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1431103
Start date and time:	2024-04-24 15:19:51 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 46s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.phis.win@21/184@24/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://lookerstudio.google.com/s/scrHqwjeA3k Browse: https://lookerstudio.google.com/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (17683)
Category:	downloaded
Size (bytes):	18278
Entropy (8bit):	5.623496272234338
Encrypted:	false
SSDEEP:	384:6CVlOu+6ONczau5v4yDb44f5wMZI/P+teaexfDIcrnOY4wb:6O+gt4yDbvf5wsIBaezrnOYtb
MD5:	7D07C2BBCB789E8A63340B6F449416E0
SHA1:	44856381D2A46155517776ADBB8B21B5EFE41FFD
SHA-256:	E892BB3E48503E380678166AC87282496B89283E5926617F93398FF50955D436
SHA-512:	6530BC8A5E56FEE5546CF6A3797D9EF0769A18DC92424E82273E80F39F29B79E905B3C8B65DE6B791EE466D502477D3CFEDD7139D917F3A9E4BA73F8562A4515
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/bg/6JK7PkhQPjgGeBZqyHKCSWuJKD5ZJmF_kzmP9QlV1DY.js
Preview:	/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t / (function(){var R=this\|\|self,L=function(n){return n},D=function(n,Y){if(!(Y=(n=null,R.trustedTypes),Y)\|\|!Y.createPolicy)return n;try{n=Y.createPolicy("bg",{createHTML:L,createScript:L,createScriptURL:L})}catch(d){R.console&&R.console.error(d.message)}return n};(0,eval)(function(n,Y){return(Y=D())&&1===n.eval(Y.createScript("1"))?function(d){return Y.createScript(d)}:function(d){return""+d}}(R)(Array(7824Math.random()\|0).join("\n")+['(function(){/',.'',.' SPDX-License-Identifier: Apache-2.0',.'/',.'var nW=function(n,Y){return Y=0,function(){return Y<n.length?{done:false,value:n[Y++]}:{done:true}}},YK=function(n,Y){return(n=n.create().shift(),Y.A).create().length\|\|Y.C.create().length\|\|(Y.A=void 0,Y.C=void 0),n},d4=function(n,Y){function R(){this.I=(this.n=0,[])}return[function(L){n.iS(L),Y.iS(L)},(Y=(R.prototype.dX=(R.prototype.iS=function(L,m){(this.n++,50)>this.I.length?this.I.push(L):(m=Math.f

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 24, 2024 15:20:42.045633078 CEST	53	51031	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:42.227931976 CEST	53	54982	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:43.516716003 CEST	53	50211	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:43.597467899 CEST	59936	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:43.597870111 CEST	53419	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:43.751379013 CEST	53	53419	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:44.506261110 CEST	50133	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:44.506412029 CEST	55947	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:44.660732031 CEST	53	55947	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:44.718568087 CEST	58660	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:44.718889952 CEST	60761	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:44.872034073 CEST	53	58660	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:44.872054100 CEST	53	60761	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:46.563920021 CEST	57913	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:46.564517021 CEST	59729	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:46.718446970 CEST	53	59729	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:46.766932964 CEST	53185	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:46.767376900 CEST	50556	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:46.920600891 CEST	53	53185	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:46.920689106 CEST	53	50556	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:50.247265100 CEST	51469	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:50.248507977 CEST	63025	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:50.400979042 CEST	53	51469	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:50.438287973 CEST	53	63025	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:50.798418045 CEST	57105	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:50.798890114 CEST	58669	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:50.952270031 CEST	53	58669	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:52.376220942 CEST	56499	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:52.376581907 CEST	54705	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:20:52.513662100 CEST	53	54923	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:52.515717983 CEST	53	53620	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:52.529282093 CEST	53	56499	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:52.529767990 CEST	53	54705	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:52.633774996 CEST	53	61692	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:55.858589888 CEST	53	51847	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:55.881306887 CEST	53	59433	1.1.1.1	192.168.2.4
Apr 24, 2024 15:20:58.435569048 CEST	53	53473	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:00.522972107 CEST	53	62974	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:04.294162989 CEST	53	56780	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:05.083034992 CEST	138	138	192.168.2.4	192.168.2.255
Apr 24, 2024 15:21:05.239618063 CEST	53	59992	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:06.086015940 CEST	61495	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:06.086169004 CEST	57891	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:06.239484072 CEST	53	61495	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:06.239898920 CEST	53	57891	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:06.488670111 CEST	53	61956	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:06.551822901 CEST	53	54529	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:06.929050922 CEST	64962	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:06.929157972 CEST	62521	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:07.077891111 CEST	53	58770	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:07.085207939 CEST	53	62521	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:07.120019913 CEST	53	64962	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:07.608186960 CEST	53	62650	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:09.521928072 CEST	53	55367	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:10.519685984 CEST	53	58832	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:10.965545893 CEST	53	56017	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:10.976747990 CEST	53	52706	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:11.320802927 CEST	53	56854	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:12.896609068 CEST	53	51904	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:14.419749975 CEST	53	52970	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:15.897213936 CEST	53845	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:15.897942066 CEST	62084	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:16.050728083 CEST	53	53845	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:16.051281929 CEST	53	62084	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:16.807775021 CEST	55675	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:16.807952881 CEST	62276	53	192.168.2.4	1.1.1.1
Apr 24, 2024 15:21:16.964077950 CEST	53	55675	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:16.964253902 CEST	53	62276	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:19.479967117 CEST	53	60190	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:41.059871912 CEST	53	59459	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:42.253319979 CEST	53	65057	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:43.600908995 CEST	53	54543	1.1.1.1	192.168.2.4
Apr 24, 2024 15:21:45.283907890 CEST	53	50947	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Apr 24, 2024 15:20:43.750627041 CEST	1.1.1.1	192.168.2.4	0xba05	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:43.750627041 CEST	1.1.1.1	192.168.2.4	0xba05	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:43.751379013 CEST	1.1.1.1	192.168.2.4	0x515b	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:43.751379013 CEST	1.1.1.1	192.168.2.4	0x515b	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:44.660588026 CEST	1.1.1.1	192.168.2.4	0x2dd2	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:44.660588026 CEST	1.1.1.1	192.168.2.4	0x2dd2	No error (0)	cs1404.wpc.epsiloncdn.net		152.199.24.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.660732031 CEST	1.1.1.1	192.168.2.4	0xd74a	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872034073 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	www.google.com		74.125.137.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872034073 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	www.google.com		74.125.137.104	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872034073 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	www.google.com		74.125.137.105	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872034073 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	www.google.com		74.125.137.99	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872034073 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	www.google.com		74.125.137.103	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872034073 CEST	1.1.1.1	192.168.2.4	0xdbec	No error (0)	www.google.com		74.125.137.147	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:44.872054100 CEST	1.1.1.1	192.168.2.4	0x62e7	No error (0)	www.google.com			65	IN (0x0001)	false
Apr 24, 2024 15:20:46.717529058 CEST	1.1.1.1	192.168.2.4	0xbfab	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:46.717529058 CEST	1.1.1.1	192.168.2.4	0xbfab	No error (0)	cs1404.wpc.epsiloncdn.net		152.199.24.163	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:46.718446970 CEST	1.1.1.1	192.168.2.4	0xf6f7	No error (0)	static.licdn.com	2-01-2c3e-003d.cdx.cedexis.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:46.920600891 CEST	1.1.1.1	192.168.2.4	0xd4c5	No error (0)	sb.scorecardresearch.com		18.155.192.106	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:46.920600891 CEST	1.1.1.1	192.168.2.4	0xd4c5	No error (0)	sb.scorecardresearch.com		18.155.192.84	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:46.920600891 CEST	1.1.1.1	192.168.2.4	0xd4c5	No error (0)	sb.scorecardresearch.com		18.155.192.33	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:46.920600891 CEST	1.1.1.1	192.168.2.4	0xd4c5	No error (0)	sb.scorecardresearch.com		18.155.192.47	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.400979042 CEST	1.1.1.1	192.168.2.4	0xede8	No error (0)	lookerstudio.google.com		142.251.2.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.400979042 CEST	1.1.1.1	192.168.2.4	0xede8	No error (0)	lookerstudio.google.com		142.251.2.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.400979042 CEST	1.1.1.1	192.168.2.4	0xede8	No error (0)	lookerstudio.google.com		142.251.2.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.400979042 CEST	1.1.1.1	192.168.2.4	0xede8	No error (0)	lookerstudio.google.com		142.251.2.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.400979042 CEST	1.1.1.1	192.168.2.4	0xede8	No error (0)	lookerstudio.google.com		142.251.2.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.400979042 CEST	1.1.1.1	192.168.2.4	0xede8	No error (0)	lookerstudio.google.com		142.251.2.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:50.951884985 CEST	1.1.1.1	192.168.2.4	0x9a0c	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:50.951884985 CEST	1.1.1.1	192.168.2.4	0x9a0c	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:50.952270031 CEST	1.1.1.1	192.168.2.4	0x57af	No error (0)	www.linkedin.com	exp1.www.linkedin.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:50.952270031 CEST	1.1.1.1	192.168.2.4	0x57af	No error (0)	exp1.www.linkedin.com	www-linkedin-com.l-0005.l-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	plus.l.google.com		142.251.2.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	plus.l.google.com		142.251.2.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	plus.l.google.com		142.251.2.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	plus.l.google.com		142.251.2.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	plus.l.google.com		142.251.2.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529282093 CEST	1.1.1.1	192.168.2.4	0x69a1	No error (0)	plus.l.google.com		142.251.2.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:52.529767990 CEST	1.1.1.1	192.168.2.4	0x423c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:58.441564083 CEST	1.1.1.1	192.168.2.4	0x2365	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:58.441564083 CEST	1.1.1.1	192.168.2.4	0x2365	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:20:59.087858915 CEST	1.1.1.1	192.168.2.4	0xfe9a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:20:59.087858915 CEST	1.1.1.1	192.168.2.4	0xfe9a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	plus.l.google.com		142.251.2.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	plus.l.google.com		142.251.2.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	plus.l.google.com		142.251.2.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	plus.l.google.com		142.251.2.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	plus.l.google.com		142.251.2.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239484072 CEST	1.1.1.1	192.168.2.4	0x43a8	No error (0)	plus.l.google.com		142.251.2.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:06.239898920 CEST	1.1.1.1	192.168.2.4	0x3638	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:21:07.120019913 CEST	1.1.1.1	192.168.2.4	0x81c4	No error (0)	lookerstudio.google.com		142.250.101.113	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:07.120019913 CEST	1.1.1.1	192.168.2.4	0x81c4	No error (0)	lookerstudio.google.com		142.250.101.100	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:07.120019913 CEST	1.1.1.1	192.168.2.4	0x81c4	No error (0)	lookerstudio.google.com		142.250.101.101	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:07.120019913 CEST	1.1.1.1	192.168.2.4	0x81c4	No error (0)	lookerstudio.google.com		142.250.101.139	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:07.120019913 CEST	1.1.1.1	192.168.2.4	0x81c4	No error (0)	lookerstudio.google.com		142.250.101.138	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:07.120019913 CEST	1.1.1.1	192.168.2.4	0x81c4	No error (0)	lookerstudio.google.com		142.250.101.102	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:13.855897903 CEST	1.1.1.1	192.168.2.4	0x5aee	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:21:13.855897903 CEST	1.1.1.1	192.168.2.4	0x5aee	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.050728083 CEST	1.1.1.1	192.168.2.4	0xa85e	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.050728083 CEST	1.1.1.1	192.168.2.4	0xa85e	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.050728083 CEST	1.1.1.1	192.168.2.4	0xa85e	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.050728083 CEST	1.1.1.1	192.168.2.4	0xa85e	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.964077950 CEST	1.1.1.1	192.168.2.4	0xd213	No error (0)	stats.g.doubleclick.net		142.250.101.157	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.964077950 CEST	1.1.1.1	192.168.2.4	0xd213	No error (0)	stats.g.doubleclick.net		142.250.101.156	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.964077950 CEST	1.1.1.1	192.168.2.4	0xd213	No error (0)	stats.g.doubleclick.net		142.250.101.154	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:16.964077950 CEST	1.1.1.1	192.168.2.4	0xd213	No error (0)	stats.g.doubleclick.net		142.250.101.155	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:34.556631088 CEST	1.1.1.1	192.168.2.4	0xee3b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:21:34.556631088 CEST	1.1.1.1	192.168.2.4	0xee3b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false
Apr 24, 2024 15:21:55.021596909 CEST	1.1.1.1	192.168.2.4	0x4a4b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Apr 24, 2024 15:21:55.021596909 CEST	1.1.1.1	192.168.2.4	0x4a4b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.211.108	A (IP address)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:45 UTC	560	OUT	GET /sc/h/3vg7r8ejqsag1yupubi3fjuy3 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:45 UTC	756	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686777 Cache-Control: max-age=31536000, immutable Content-Type: text/css Date: Wed, 24 Apr 2024 13:20:45 GMT Expires: Thu, 24 Apr 2025 13:20:45 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT Server: ECAcc (lac/55AA) Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 0006145f785956fc5e141b4980301828 X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZflb2uboZICt1cPgGQ== Content-Length: 146103 Connection: close
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 6c 69 2d 69 63 6f 6e 5b 74 79 70 65 3d 22 6c 69 6e 6b 65 64 69 6e 2d 62 75 67 22 5d 20 2e 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 30 30 30 30 30 30 7d 6c 69 2d 69 63 6f 6e 5b 74 79 70 65 3d 22 6c 69 6e 6b 65 64 69 6e 2d 62 75 67 22 5d 5b 63 6f 6c 6f 72 3d 22 62 72 61 6e 64 22 5d 20 2e 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 30 30 37 37 42 35 7d 6c 69 2d 69 63 6f 6e 5b 74 79 70 65 3d 22 6c 69 6e 6b 65 64 69 6e 2d 62 75 67 22 5d 5b 63 6f 6c 6f 72 3d 22 69 6e 76 65 72 73 65 22 5d 20 2e 62 61 63 6b 67 72 6f 75 6e 64 7b 66 69 6c 6c 3a 23 66 66 66 66 66 66 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 61 73 74 3a 20 61 63 74 69 76 65 29 7b 6c 69 2d 69 63 6f 6e 5b 74 79 70 65 3d 22 6c Data Ascii: li-icon[type="linkedin-bug"] .background{fill:#000000}li-icon[type="linkedin-bug"][color="brand"] .background{fill:#0077B5}li-icon[type="linkedin-bug"][color="inverse"] .background{fill:#ffffff}@media screen and (-ms-high-contrast: active){li-icon[type="l
2024-04-24 13:20:45 UTC	1	IN	Data Raw: 76 Data Ascii: v
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 62 61 73 65 6c 69 6e 65 3a 20 62 61 73 65 6c 69 6e 65 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 2d 6d 69 64 64 6c 65 3a 20 6d 69 64 64 6c 65 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 74 72 61 6e 73 70 61 72 65 6e 74 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 6f 70 61 63 69 74 79 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 74 6f 70 2d 7a 65 72 6f 3a 20 30 3b 2d 2d 61 72 74 64 65 63 6f 2d 72 65 73 65 74 2d 62 61 73 65 2d 70 6f 73 69 74 69 6f 6e 2d 61 62 73 6f 6c 75 74 65 3a 20 61 62 73 6f Data Ascii: ertical-align-baseline: baseline;--artdeco-reset-base-vertical-align-middle: middle;--artdeco-reset-base-background-transparent: transparent;--artdeco-reset-base-opacity-zero: 0;--artdeco-reset-base-top-zero: 0;--artdeco-reset-base-position-absolute: abso
2024-04-24 13:20:45 UTC	1	IN	Data Raw: 74 Data Ascii: t
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 38 70 78 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 2c 63 61 6c 63 28 31 36 2e 36 36 36 25 20 2b 20 31 70 78 29 20 31 30 30 25 2c 32 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 74 6f 70 20 6c 65 66 74 2c 20 2d 31 70 78 2c 20 33 36 2e 38 34 32 31 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 2c 20 72 65 70 65 61 74 2d 78 2c 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 2e 30 30 31 73 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 2e 30 30 31 73 Data Ascii: h:100%;height:16px;border-radius:16px;margin:8px 0;background-size:100%,calc(16.666% + 1px) 100%,200%;background-position:top left, -1px, 36.8421%;background-repeat:no-repeat, repeat-x, no-repeat;-webkit-animation-duration:0.001s;animation-duration:0.001s
2024-04-24 13:20:45 UTC	1	IN	Data Raw: 65 Data Ascii: e
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 3d 27 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 27 5d 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 66 6f 72 6d 2e 69 6e 76 65 72 73 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 65 6d 61 69 6c 27 5d 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 66 6f 72 6d 2e 69 6e 76 65 72 73 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 6d 6f 6e 74 68 27 5d 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 66 6f 72 6d 2e 69 6e 76 65 72 73 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 6e 75 6d 62 65 72 27 5d 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 66 6f 72 6d 2e 69 6e 76 65 72 73 65 2d 66 6f 72 6d 20 69 6e 70 75 74 5b 74 79 70 65 3d 27 70 61 73 73 77 6f 72 64 27 5d 3a 3a 2d 6d 6f 7a 2d 70 6c Data Ascii: ='datetime-local']::-moz-placeholder,form.inverse-form input[type='email']::-moz-placeholder,form.inverse-form input[type='month']::-moz-placeholder,form.inverse-form input[type='number']::-moz-placeholder,form.inverse-form input[type='password']::-moz-pl
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 5b 74 79 70 65 3d 22 64 61 74 65 74 69 6d 65 2d 6c 6f 63 61 6c 22 5d 2c 61 72 74 64 65 63 6f 2d 66 6c 6f 61 74 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 65 6d 61 69 6c 22 5d 2c 61 72 74 64 65 63 6f 2d 66 6c 6f 61 74 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6d 6f 6e 74 68 22 5d 2c 61 72 74 64 65 63 6f 2d 66 6c 6f 61 74 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 6e 75 6d 62 65 72 22 5d 2c 61 72 74 64 65 63 6f 2d 66 6c 6f 61 74 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 5d 2c 61 72 74 64 65 63 6f 2d 66 6c 6f 61 74 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 2c 61 72 74 64 65 63 6f 2d 66 6c 6f 61 74 6c 61 62 65 6c 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 Data Ascii: [type="datetime-local"],artdeco-floatlabel input[type="email"],artdeco-floatlabel input[type="month"],artdeco-floatlabel input[type="number"],artdeco-floatlabel input[type="password"],artdeco-floatlabel input[type="search"],artdeco-floatlabel input[type="
2024-04-24 13:20:45 UTC	2	IN	Data Raw: 61 72 Data Ascii: ar
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 74 64 65 63 6f 2d 70 69 6c 6c 5b 74 79 70 65 3d 22 74 6f 67 67 6c 65 22 5d 5b 63 68 65 63 6b 65 64 5d 5b 64 61 74 61 2d 61 72 74 64 65 63 6f 2d 66 6f 63 75 73 5d 20 6c 61 62 65 6c 2c 61 72 74 64 65 63 6f 2d 74 6f 67 67 6c 65 2d 70 69 6c 6c 5b 63 68 65 63 6b 65 64 5d 3a 68 6f 76 65 72 20 62 75 74 74 6f 6e 2c 61 72 74 64 65 63 6f 2d 74 6f 67 67 6c 65 2d 70 69 6c 6c 5b 63 68 65 63 6b 65 64 5d 5b 64 61 74 61 2d 61 72 74 64 65 63 6f 2d 66 6f 63 75 73 5d 20 62 75 74 74 6f 6e 2c 61 72 74 64 65 63 6f 2d 74 6f 67 67 6c 65 2d 70 69 6c 6c 5b 63 68 65 63 6b 65 64 5d 3a 68 6f 76 65 72 20 6c 61 62 65 6c 2c 61 72 74 64 65 63 6f 2d 74 6f 67 67 6c 65 2d 70 69 6c 6c 5b 63 68 65 63 6b 65 64 5d 5b 64 61 74 61 2d 61 72 74 64 65 63 6f 2d 66 6f 63 75 73 5d 20 6c 61 62 65 6c 7b Data Ascii: tdeco-pill[type="toggle"][checked][data-artdeco-focus] label,artdeco-toggle-pill[checked]:hover button,artdeco-toggle-pill[checked][data-artdeco-focus] button,artdeco-toggle-pill[checked]:hover label,artdeco-toggle-pill[checked][data-artdeco-focus] label{

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:45 UTC	546	OUT	GET /sc/h/8hfbuq1ftcvnnx4dd5067pi0t HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:45 UTC	783	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686955 Cache-Control: max-age=31536000, immutable Content-Type: text/javascript Date: Wed, 24 Apr 2024 13:20:45 GMT Expires: Thu, 24 Apr 2025 13:20:45 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT Server: ECAcc (lac/55B5) Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-EC-BBR-Enable: 1 X-FS-UUID: 0006101c6b13f8f005e0840ad6047340 X-Li-Fabric: prod-ltx1 X-Li-Pop: prod-ltx1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZe7AAFNQQXY7ucSBhg== Content-Length: 100174 Connection: close
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 69 6e 68 65 72 69 74 73 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 6e 75 6c 6c 21 3d 3d 65 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 65 29 3b 74 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 26 26 65 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 74 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c Data Ascii: !function(){"use strict";var t={inherits:function(t,e){if("function"!=typeof e&&null!==e)throw new TypeError("Super expression must either be null or a function, not "+typeof e);t.prototype=Object.create(e&&e.prototype,{constructor:{value:t,enumerable:!1,
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 2c 31 30 29 3a 6c 2e 74 65 73 74 28 63 2e 75 73 65 72 41 67 65 6e 74 29 3f 31 31 3a 6e 75 6c 6c 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 63 2e 64 6f 63 45 6c 2c 65 3d 63 2e 75 73 65 72 41 67 65 6e 74 2c 6e 3d 76 6f 69 64 20 30 2c 69 3d 30 2c 61 3d 75 2e 6c 65 6e 67 74 68 3b 69 3c 61 3b 69 2b 2b 29 69 66 28 28 6e 3d 75 5b 69 5d 29 2e 6d 61 74 63 68 2e 74 65 73 74 28 65 29 29 7b 72 28 74 2c 6e 2e 6e 61 6d 65 29 3b 62 72 65 61 6b 7d 7d 28 29 7d 7d 2c 70 3d 2f 28 3f 3a 5e 7c 5c 73 29 73 69 6d 70 6c 65 2d 66 6f 72 6d 28 3f 3a 5c 73 7c 24 29 2f 2c 76 3d 2f 28 3f 3a 5e 7c 5c 73 29 66 6c 6f 61 74 69 6e 67 2d 6c 61 62 65 6c 28 3f 3a 5c 73 7c 24 29 2f 2c 66 3d 22 64 61 74 61 2d 66 6f 72 6d 2d 65 6c 65 6d 2d 66 6f 63 75 73 22 2c 6d 3d 7b Data Ascii: ,10):l.test(c.userAgent)?11:null),function(){for(var t=c.docEl,e=c.userAgent,n=void 0,i=0,a=u.length;i<a;i++)if((n=u[i]).match.test(e)){r(t,n.name);break}}()}},p=/(?:^\|\s)simple-form(?:\s\|$)/,v=/(?:^\|\s)floating-label(?:\s\|$)/,f="data-form-elem-focus",m={
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 3d 30 7d 2c 69 6e 73 74 61 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 44 61 74 65 3a 65 74 2c 73 65 74 4c 6f 63 61 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 68 69 73 2e 6c 6f 63 61 6c 65 3d 74 3b 76 61 72 20 65 3d 51 2e 67 65 74 4c 6f 63 61 6c 65 49 6e 66 6f 28 74 68 69 73 2e 6c 6f 63 61 6c 65 29 2e 73 74 61 72 74 57 65 65 6b 64 61 79 3b 74 68 69 73 2e 66 69 72 73 74 44 61 79 4f 66 57 65 65 6b 3d 65 7d 2c 67 65 74 4d 6f 6e 74 68 42 79 4f 66 66 73 65 74 3a 6e 74 2c 67 65 74 50 72 65 76 69 6f 75 73 4d 6f 6e 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 74 28 74 2c 2d 31 29 7d 2c 67 65 74 4e 65 78 74 4d 6f 6e 74 68 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 74 28 74 2c 31 29 7d 2c 69 73 53 61 6d 65 Data Ascii: =0},install:function(){},isDate:et,setLocale:function(t){this.locale=t;var e=Q.getLocaleInfo(this.locale).startWeekday;this.firstDayOfWeek=e},getMonthByOffset:nt,getPreviousMonth:function(t){return nt(t,-1)},getNextMonth:function(t){return nt(t,1)},isSame
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 52 65 73 69 7a 65 29 2c 74 68 69 73 2e 5f 65 6c 26 26 74 68 69 73 2e 5f 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 5f 65 6c 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 5f 65 6c 29 7d 7d 5d 29 2c 65 7d 28 29 2c 57 74 3d 22 5f 62 6f 6f 74 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 22 3b 66 75 6e 63 74 69 6f 6e 20 6a 74 28 29 7b 76 61 72 20 74 3d 49 74 28 29 3b 72 65 74 75 72 6e 20 74 5b 57 74 5d 7c 7c 28 74 5b 57 74 5d 3d 7b 7d 29 2c 74 5b 57 74 5d 7d 76 61 72 20 42 74 3d 7b 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 6a 74 28 29 3b 21 30 3d 3d 3d 6e 5b 74 5d 3f 65 28 29 3a 28 6e 5b 74 5d 7c 7c 28 6e 5b 74 5d 3d 5b 5d 29 2c 6e 5b 74 5d 2e 70 75 73 68 28 65 29 29 7d 2c 74 72 Data Ascii: Resize),this._el&&this._el.parentNode&&this._el.parentNode.removeChild(this._el)}}]),e}(),Wt="_bootEventListeners";function jt(){var t=It();return t[Wt]\|\|(t[Wt]={}),t[Wt]}var Bt={on:function(t,e){var n=jt();!0===n[t]?e():(n[t]\|\|(n[t]=[]),n[t].push(e))},tr
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 62 61 63 6b 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 61 65 2e 69 6e 64 65 78 4f 66 28 74 29 3e 2d 31 26 26 28 22 74 79 70 65 22 3d 3d 3d 74 26 26 74 68 69 73 2e 6e 75 6c 6c 50 72 6f 70 43 68 65 63 6b 28 22 74 79 70 65 22 2c 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 29 2c 22 73 69 7a 65 22 3d 3d 3d 74 26 26 74 68 69 73 2e 6e 75 6c 6c 50 72 6f 70 43 68 65 63 6b 28 22 73 69 7a 65 22 2c 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 69 7a 65 22 29 29 2c 22 63 6f 6c 6f 72 22 3d 3d 3d 74 3f 74 68 69 73 2e 75 70 64 61 74 65 28 29 3a 65 26 26 74 68 69 73 2e 75 70 64 61 74 65 28 29 29 7d 7d 2c 7b 6b 65 79 3a 22 75 70 64 61 74 65 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 Data Ascii: back",value:function(t,e){ae.indexOf(t)>-1&&("type"===t&&this.nullPropCheck("type",this.getAttribute("type")),"size"===t&&this.nullPropCheck("size",this.getAttribute("size")),"color"===t?this.update():e&&this.update())}},{key:"update",value:function(){var
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 28 22 73 70 61 6e 22 2c 22 61 72 74 64 65 63 6f 2d 64 61 79 22 29 3b 6e 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 62 75 74 74 6f 6e 22 29 2c 74 2e 69 73 53 65 6c 65 63 74 65 64 26 26 69 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 61 72 74 64 65 63 6f 2d 73 65 6c 65 63 74 65 64 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 61 72 74 64 65 63 6f 2d 64 61 74 65 22 2c 74 2e 64 61 74 65 29 2c 69 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 74 2e 64 61 79 4f 66 4d 6f 6e 74 68 29 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 69 29 2c 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 29 7d 29 2c 74 2e 6e 65 78 74 4d 6f 6e 74 68 44 61 79 73 2e 6d 61 Data Ascii: ("span","artdeco-day");n.setAttribute("type","button"),t.isSelected&&i.classList.add("artdeco-selected"),i.setAttribute("data-artdeco-date",t.date),i.appendChild(document.createTextNode(t.dayOfMonth)),n.appendChild(i),e.appendChild(n)}),t.nextMonthDays.ma
2024-04-24 13:20:45 UTC	1876	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 29 66 6f 72 28 3b 74 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 28 74 29 2c 74 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 29 29 7d 7d 5d 29 2c 6e 7d 28 7a 65 29 3b 76 61 72 20 6a 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 2e 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 6e 29 2c 74 2e 67 65 74 28 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 Data Ascii: !function(t){if(t instanceof HTMLElement)for(;t.firstChild;)t.removeChild(t.firstChild)}(t),t.appendChild(document.createTextNode(e))}}]),n}(ze);var je=function(e){function n(){t.classCallCheck(this,n),t.get(Object.getPrototypeOf(n.prototype),"constructor

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:45 UTC	546	OUT	GET /sc/h/blb4csb5pzvjb2uosbetztrwk HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:45 UTC	783	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686371 Cache-Control: max-age=31536000, immutable Content-Type: text/javascript Date: Wed, 24 Apr 2024 13:20:45 GMT Expires: Thu, 24 Apr 2025 13:20:45 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT Server: ECAcc (lac/55C8) Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-EC-BBR-Enable: 1 X-FS-UUID: 00061383a80b0c1ca61f8d360a6443c9 X-Li-Fabric: prod-lva1 X-Li-Pop: prod-lva1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZhGY2KfL/hnMq8XNWg== Content-Length: 187042 Connection: close
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 63 6f 6e 73 74 20 65 3d 22 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 6f 2f 70 65 6d 2f 64 65 67 72 61 64 61 74 69 6f 6e 2d 74 72 61 63 6b 69 6e 67 2d 75 73 65 72 2d 67 75 69 64 65 20 66 6f 72 20 69 6e 73 74 72 75 6d 65 6e 74 61 74 69 6f 6e 20 69 6e 73 74 72 75 63 74 69 6f 6e 73 22 2c 74 3d 22 78 2d 6c 69 2d 70 6f 70 22 2c 6e 3d 22 78 2d 6d 73 65 64 67 65 2d 72 65 66 22 3b 63 6c 61 73 73 20 72 20 65 78 74 65 6e 64 73 20 63 6c 61 73 73 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 2c 74 2c 6e 29 7b 74 68 69 73 2e 5f 63 6f 6c 6c 65 63 74 65 64 46 65 61 74 75 72 65 4d 65 74 72 69 63 73 3d 65 2c 74 68 69 73 2e 5f 66 69 72 65 45 76 65 6e 74 43 61 6c 6c 62 61 63 6b 3d 74 2c 6e 28 74 68 69 73 2e Data Ascii: !function(){"use strict";const e="See https://go/pem/degradation-tracking-user-guide for instrumentation instructions",t="x-li-pop",n="x-msedge-ref";class r extends class{constructor(e,t,n){this._collectedFeatureMetrics=e,this._fireEventCallback=t,n(this.
2024-04-24 13:20:45 UTC	1	IN	Data Raw: 6f Data Ascii: o
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 6e 73 65 28 65 2c 61 2c 6e 2c 6c 2c 69 2c 63 2c 75 29 7d 5f 74 72 61 63 6b 52 65 73 70 6f 6e 73 65 28 65 2c 72 2c 69 2c 6f 2c 61 2c 73 2c 63 29 7b 69 66 28 34 32 39 3d 3d 3d 72 7c 7c 39 39 39 3d 3d 3d 72 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 75 3d 63 3f 6d 28 63 2c 73 29 3a 6e 75 6c 6c 2c 6c 3d 73 2e 67 65 74 28 74 29 7c 7c 6e 75 6c 6c 2c 64 3d 73 2e 67 65 74 28 22 78 2d 6c 69 2d 75 75 69 64 22 29 7c 7c 6e 75 6c 6c 2c 68 3d 73 2e 67 65 74 28 6e 29 7c 7c 6e 75 6c 6c 2c 66 3d 6e 65 77 20 53 65 74 2c 70 3d 6e 65 77 20 53 65 74 3b 69 66 28 6f 2e 66 6f 72 45 61 63 68 28 28 65 3d 3e 7b 66 2e 61 64 64 28 65 2e 70 72 6f 64 75 63 74 4e 61 6d 65 29 2c 70 2e 61 64 64 28 65 2e 66 65 61 74 75 72 65 4b 65 79 29 2c 65 2e 69 73 43 6f 75 6e 74 65 64 41 67 61 69 6e 73 Data Ascii: nse(e,a,n,l,i,c,u)}_trackResponse(e,r,i,o,a,s,c){if(429===r\|\|999===r)return;const u=c?m(c,s):null,l=s.get(t)\|\|null,d=s.get("x-li-uuid")\|\|null,h=s.get(n)\|\|null,f=new Set,p=new Set;if(o.forEach((e=>{f.add(e.productName),p.add(e.featureKey),e.isCountedAgains
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 78 69 6d 69 63 22 2c 22 79 61 68 6f 6f 5c 5c 2b 70 69 70 65 73 22 2c 22 28 28 3f 3d 61 70 6f 72 74 65 72 29 7c 6f 70 65 72 28 3f 3d 61 70 6f 72 74 61 62 6c 65 29 29 61 70 6f 72 74 22 2c 22 77 65 62 5c 5c 2b 64 6f 77 6e 6c 6f 61 64 65 72 22 2c 22 63 68 65 63 6b 5c 5c 5f 68 74 74 70 22 2c 22 67 72 61 62 62 65 72 22 2c 22 74 6f 70 73 79 5c 5c 2e 63 6f 6d 5c 5c 2f 62 75 74 74 65 72 66 6c 79 5c 5c 2f 22 2c 22 68 61 72 76 65 73 74 22 2c 22 5e 69 6e 61 67 69 73 74 5c 5c 2b 75 72 6c 5c 5c 2b 72 65 73 6f 6c 76 65 72 22 2c 22 66 61 73 74 22 2c 22 63 72 65 73 63 65 6e 74 28 3f 21 5c 5c 20 62 75 69 6c 64 7c 5c 5c 2b 62 75 69 6c 64 29 22 2c 22 73 6f 68 75 28 3f 21 65 6e 6e 65 77 73 7c 76 69 64 65 6f 7c 6e 65 77 73 29 22 2c 22 66 61 76 6f 72 67 22 2c 22 62 6c 6f 67 6c Data Ascii: ximic","yahoo\\+pipes","((?=aporter)\|oper(?=aportable))aport","web\\+downloader","check\\_http","grabber","topsy\\.com\\/butterfly\\/","harvest","^inagist\\+url\\+resolver","fast","crescent(?!\\ build\|\\+build)","sohu(?!ennews\|video\|news)","favorg","blogl
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 2c 72 3d 70 74 28 72 2c 69 2c 6f 2c 6e 2c 65 5b 61 2b 33 5d 2c 32 32 2c 2d 31 30 34 34 35 32 35 33 33 30 29 2c 6e 3d 70 74 28 6e 2c 72 2c 69 2c 6f 2c 65 5b 61 2b 34 5d 2c 37 2c 2d 31 37 36 34 31 38 38 39 37 29 2c 6f 3d 70 74 28 6f 2c 6e 2c 72 2c 69 2c 65 5b 61 2b 35 5d 2c 31 32 2c 31 32 30 30 30 38 30 34 32 36 29 2c 69 3d 70 74 28 69 2c 6f 2c 6e 2c 72 2c 65 5b 61 2b 36 5d 2c 31 37 2c 2d 31 34 37 33 32 33 31 33 34 31 29 2c 72 3d 70 74 28 72 2c 69 2c 6f 2c 6e 2c 65 5b 61 2b 37 5d 2c 32 32 2c 2d 34 35 37 30 35 39 38 33 29 2c 6e 3d 70 74 28 6e 2c 72 2c 69 2c 6f 2c 65 5b 61 2b 38 5d 2c 37 2c 31 37 37 30 30 33 35 34 31 36 29 2c 6f 3d 70 74 28 6f 2c 6e 2c 72 2c 69 2c 65 5b 61 2b 39 5d 2c 31 32 2c 2d 31 39 35 38 34 31 34 34 31 37 29 2c 69 3d 70 74 28 69 2c 6f 2c Data Ascii: ,r=pt(r,i,o,n,e[a+3],22,-1044525330),n=pt(n,r,i,o,e[a+4],7,-176418897),o=pt(o,n,r,i,e[a+5],12,1200080426),i=pt(i,o,n,r,e[a+6],17,-1473231341),r=pt(r,i,o,n,e[a+7],22,-45705983),n=pt(n,r,i,o,e[a+8],7,1770035416),o=pt(o,n,r,i,e[a+9],12,-1958414417),i=pt(i,o,
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 3a 6e 75 6c 6c 21 3d 72 26 26 65 2e 64 65 6c 65 74 65 28 49 44 42 4b 65 79 52 61 6e 67 65 2e 75 70 70 65 72 42 6f 75 6e 64 28 72 29 29 7d 2c 44 6e 28 65 2e 74 72 61 6e 73 61 63 74 69 6f 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 48 6e 28 29 7b 76 61 72 20 65 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 7b 6d 61 78 4e 75 6d 62 65 72 3a 31 65 33 2c 62 61 74 63 68 45 76 69 63 74 69 6f 6e 4e 75 6d 62 65 72 3a 33 30 30 7d 2c 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 55 6e 28 29 3b 72 65 74 75 72 6e 20 74 28 22 72 65 61 Data Ascii: :null!=r&&e.delete(IDBKeyRange.upperBound(r))},Dn(e.transaction)}function Hn(){var e=arguments.length>0&&void 0!==arguments[0]?arguments[0]:{maxNumber:1e3,batchEvictionNumber:300},t=arguments.length>1&&void 0!==arguments[1]?arguments[1]:Un();return t("rea
2024-04-24 13:20:45 UTC	4	IN	Data Raw: 4e 61 6d 65 Data Ascii: Name
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 7d 76 61 72 20 6d 72 2c 79 72 2c 62 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 6e 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 3b 47 65 28 74 68 69 73 2c 65 29 2c 58 65 28 74 68 69 73 2c 22 68 6f 73 74 22 2c 76 6f 69 64 20 30 29 2c 58 65 28 74 68 69 73 2c 22 63 6d 6f 54 72 61 6e 73 70 6f 72 74 65 72 22 2c 76 6f 69 64 20 30 29 2c 58 65 28 74 68 69 73 2c 22 63 6c 69 65 6e 74 4d 6f 6e 69 74 6f 72 69 6e 67 49 6e 73 74 61 6e 63 65 49 64 22 2c 41 74 28 29 29 2c 58 65 28 74 68 69 73 2c 22 63 75 72 72 65 6e 74 43 6f 6e 74 65 78 74 22 2c 43 72 28 29 29 2c 58 65 28 74 68 69 73 2c 22 Data Ascii: }var mr,yr,br=function(){function e(t){var n,r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:{};Ge(this,e),Xe(this,"host",void 0),Xe(this,"cmoTransporter",void 0),Xe(this,"clientMonitoringInstanceId",At()),Xe(this,"currentContext",Cr()),Xe(this,"
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 79 70 65 29 7d 7d 5d 2c 5b 7b 6b 65 79 3a 22 74 6f 50 6f 69 6e 74 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 69 64 3a 65 2e 69 64 2c 74 79 70 65 3a 65 2e 63 6c 69 65 6e 74 42 72 65 61 64 63 72 75 6d 62 54 79 70 65 7d 7d 7d 5d 29 2c 65 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 41 72 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 7b 7d 3b 76 61 72 20 74 3d 65 2e 74 72 6b 2c 6e 3d 21 31 2c 72 3d 65 2e 6c 69 63 75 26 26 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 2e 6c 69 63 75 29 3b 65 2e 65 78 74 65 72 6e 61 6c 5f 63 6f 6e 74 72 6f 6c 26 26 28 72 3d 22 75 72 6e 3a 6c 69 3a 65 78 74 65 72 6e 61 6c 43 6f 6e 74 72 6f 6c 3a 22 2e 63 6f 6e 63 61 74 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 Data Ascii: ype)}}],[{key:"toPointer",value:function(e){return{id:e.id,type:e.clientBreadcrumbType}}}]),e}();function Ar(e){if(!e)return{};var t=e.trk,n=!1,r=e.licu&&decodeURIComponent(e.licu);e.external_control&&(r="urn:li:externalControl:".concat(decodeURIComponent
2024-04-24 13:20:45 UTC	16383	IN	Data Raw: 29 7b 76 61 72 20 6e 2c 72 3d 65 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 6e 3d 21 65 2e 74 69 6d 69 6e 67 26 26 74 3f 4d 61 74 68 2e 66 6c 6f 6f 72 28 65 2e 74 69 6d 65 4f 72 69 67 69 6e 29 3a 65 2e 74 69 6d 69 6e 67 2e 6e 61 76 69 67 61 74 69 6f 6e 53 74 61 72 74 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 72 2b 6e 29 7d 72 65 74 75 72 6e 20 44 61 74 65 2e 6e 6f 77 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 69 28 65 29 7b 76 61 72 20 74 3d 65 7c 7c 70 65 72 66 6f 72 6d 61 6e 63 65 3b 72 65 74 75 72 6e 20 4d 61 74 68 2e 72 6f 75 6e 64 28 74 2e 6e 6f 77 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 73 69 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 22 6e 75 6c 6c 22 3b 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 Data Ascii: ){var n,r=e.now();return n=!e.timing&&t?Math.floor(e.timeOrigin):e.timing.navigationStart,Math.round(r+n)}return Date.now()}function ai(e){var t=e\|\|performance;return Math.round(t.now())}function si(e){if(!e)return"null";if(e.nodeType===Node.ELEMENT_NODE)

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:46 UTC	576	OUT	GET /sc/h/4vbn3bojmnmybj7crmfdbhuz4 HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.linkedin.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:46 UTC	759	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686369 Cache-Control: max-age=31536000, immutable Content-Type: image/svg+xml Date: Wed, 24 Apr 2024 13:20:46 GMT Expires: Thu, 24 Apr 2025 13:20:46 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT Server: ECAcc (lac/55D6) Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00060eeb81dfeef7f757042edf2b0e8a X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZhG/RlNOrG6Emlqqmw== Content-Length: 3338 Connection: close
2024-04-24 13:20:46 UTC	3338	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 73 76 67 2d 73 6f 75 72 63 65 22 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 33 39 30 70 78 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 64 65 66 73 20 69 64 3d 22 75 69 2d 69 63 6f 6e 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a Data Ascii: <svg id="svg-source" width="24px" height="390px" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" xmlns="http://www.w3.org/2000/svg"> <defs id="ui-icons">

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:46 UTC	635	OUT	GET /sc/h/fpxv8vfe817y6giishsfm40l HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://static.licdn.com/sc/h/3vg7r8ejqsag1yupubi3fjuy3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:46 UTC	758	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686371 Cache-Control: max-age=31536000, immutable Content-Type: image/svg+xml Date: Wed, 24 Apr 2024 13:20:46 GMT Expires: Thu, 24 Apr 2025 13:20:46 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT Server: ECAcc (lac/5586) Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00060d00b66896665f68bb16121b5552 X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZhGjyeOEcjvUtUHPoA== Content-Length: 463 Connection: close
2024-04-24 13:20:46 UTC	463	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 35 36 22 20 68 65 69 67 68 74 3d 22 35 36 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 35 36 20 35 36 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 35 36 64 70 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 63 69 72 63 6c 65 20 63 78 3d 22 32 38 22 20 63 79 3d 22 32 38 22 20 72 3d 22 32 31 22 20 73 74 79 6c 65 3d 22 66 69 6c 6c 3a 20 23 65 36 66 37 66 66 22 2f 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 32 38 2c 37 41 32 31 2c 32 31 2c 30 2c 31 2c 31 2c 37 2c 32 38 2c 32 31 2c 32 31 2c 30 2c 30 2c 31 2c 32 38 2c 37 6d 30 2d 33 41 32 34 2c 32 Data Ascii: <svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" width="56" height="56" viewBox="0 0 56 56"> <title>56dp</title> <circle cx="28" cy="28" r="21" style="fill: #e6f7ff"/> <path d="M28,7A21,21,0,1,1,7,28,21,21,0,0,1,28,7m0-3A24,2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Windows Analysis Report
https://www.linkedin.com/redir/redirect?url=https%3A%2F%2Flookerstudio%2Egoogle%2Ecom%2Fs%2FscrHqwjeA3k&urlhash=dcQj&trk=public_profile-settings_topcard-website

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:47 UTC	370	OUT	GET /sc/h/4vbn3bojmnmybj7crmfdbhuz4 HTTP/1.1 Host: static.licdn.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:47 UTC	759	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686370 Cache-Control: max-age=31536000, immutable Content-Type: image/svg+xml Date: Wed, 24 Apr 2024 13:20:47 GMT Expires: Thu, 24 Apr 2025 13:20:47 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT Server: ECAcc (lac/55D6) Timing-Allow-Origin: * Vary: Accept-Encoding X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 00060eeb81dfeef7f757042edf2b0e8a X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZhG/RlNOrG6Emlqqmw== Content-Length: 3338 Connection: close
2024-04-24 13:20:47 UTC	3338	IN	Data Raw: 3c 73 76 67 20 69 64 3d 22 73 76 67 2d 73 6f 75 72 63 65 22 20 77 69 64 74 68 3d 22 32 34 70 78 22 20 68 65 69 67 68 74 3d 22 33 39 30 70 78 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 20 20 3c 64 65 66 73 20 69 64 3d 22 75 69 2d 69 63 6f 6e 73 22 3e 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a 20 20 20 20 0a Data Ascii: <svg id="svg-source" width="24px" height="390px" xmlns:xlink="http://www.w3.org/1999/xlink" version="1.1" xmlns="http://www.w3.org/2000/svg"> <defs id="ui-icons">

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:47 UTC	606	OUT	GET /sc/h/al2o9zrvru7aqj8e1x2rzsrca HTTP/1.1 Host: static.licdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:47 UTC	1026	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Access-Control-Expose-Headers: X-CDN, X-CDN-Client-IP-Version, X-CDN-Proto, X-Cache, X-CDN-RCODE Age: 2686495 Cache-Control: max-age=31536000, immutable Content-Type: image/x-icon Date: Wed, 24 Apr 2024 13:20:47 GMT Expires: Thu, 24 Apr 2025 13:20:47 GMT Last-Modified: Mon, 05 Nov 2012 04:00:51 GMT NEL: {"report_to":"network-errors","max_age":1296000,"success_fraction":0.00066,"failure_fraction":1,"include_subdomains":true} Report-To: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://www.linkedin.com/li/rep"}],"include_subdomains":true} Server: ECAcc (lac/55DE) Timing-Allow-Origin: * X-Cache: HIT X-CDN: ECST X-CDN-CLIENT-IP-VERSION: IPV4 X-CDN-Proto: HTTP1 X-Content-Type-Options: nosniff X-FS-UUID: 000614660a500392ef76390fdc1518c8 X-Li-Fabric: prod-lor1 X-Li-Pop: prod-lor1-x X-LI-Proto: http/1.1 X-LI-Static-Content: 1 X-LI-UUID: AAYUZgpQA5LvdjkP3BUYyA== Content-Length: 24838 Connection: close
2024-04-24 13:20:47 UTC	16383	IN	Data Raw: 00 00 01 00 04 00 10 10 00 00 01 00 20 00 68 04 00 00 46 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 ae 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 36 0e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 de 1e 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 bb 84 1f bc b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff c0 8d 2f ba ff ff ff 00 ff ff ff 00 b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 Data Ascii: hF 6@@ (B( ssssssssssss/sss
2024-04-24 13:20:47 UTC	8455	IN	Data Raw: ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d9 b9 80 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff b2 73 00 ff ff ff ff 00 ff ff ff 00 Data Ascii: ssssssssssssssssssss

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:47 UTC	900	OUT	GET /b?c1=2&c2=6402952&c3=&c4=&c5=&c6=&c15=&ns__t=1713964846023&ns_c=UTF-8&c8=External%20Redirection%20%7C%20LinkedIn&c7=https%3A%2F%2Fwww.linkedin.com%2Fredir%2Fredirect%3Furl%3Dhttps%253A%252F%252Flookerstudio%252Egoogle%252Ecom%252Fs%252FscrHqwjeA3k%26urlhash%3DdcQj%26trk%3Dpublic_profile-settings_topcard-website&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-24 13:20:47 UTC	1088	IN	HTTP/1.1 302 Found Content-Length: 0 Connection: close Date: Wed, 24 Apr 2024 13:20:47 GMT Location: /b2?c1=2&c2=6402952&c3=&c4=&c5=&c6=&c15=&ns__t=1713964846023&ns_c=UTF-8&c8=External%20Redirection%20%7C%20LinkedIn&c7=https%3A%2F%2Fwww.linkedin.com%2Fredir%2Fredirect%3Furl%3Dhttps%253A%252F%252Flookerstudio%252Egoogle%252Ecom%252Fs%252FscrHqwjeA3k%26urlhash%3DdcQj%26trk%3Dpublic_profile-settings_topcard-website&c9= set-cookie: UID=15Ebad1dd95bba53328253c1713964847; SameSite=None; Secure; domain=.scorecardresearch.com; path=/; max-age=62208000 set-cookie: PID=120bad1dd9408a5332826ef1713964847; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=7776000 set-cookie: XID=15Ebad1dd95bba53328253c1713964847; SameSite=None; Secure; Partitioned; domain=.scorecardresearch.com; path=/; max-age=62208000 Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 6354bde44a975facce9c0ed03828827e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P1 X-Amz-Cf-Id: FbbazKQS32YWscQssK2SMwGeo3G3KZCwTnSxGKeqVRteeqsvKvILLg==

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:47 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 13:20:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (sac/2518) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=236581 Date: Wed, 24 Apr 2024 13:20:47 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:48 UTC	1026	OUT	GET /b2?c1=2&c2=6402952&c3=&c4=&c5=&c6=&c15=&ns__t=1713964846023&ns_c=UTF-8&c8=External%20Redirection%20%7C%20LinkedIn&c7=https%3A%2F%2Fwww.linkedin.com%2Fredir%2Fredirect%3Furl%3Dhttps%253A%252F%252Flookerstudio%252Egoogle%252Ecom%252Fs%252FscrHqwjeA3k%26urlhash%3DdcQj%26trk%3Dpublic_profile-settings_topcard-website&c9= HTTP/1.1 Host: sb.scorecardresearch.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.linkedin.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: UID=15Ebad1dd95bba53328253c1713964847; PID=120bad1dd9408a5332826ef1713964847; XID=15Ebad1dd95bba53328253c1713964847
2024-04-24 13:20:48 UTC	326	IN	HTTP/1.1 204 No Content Connection: close Date: Wed, 24 Apr 2024 13:20:48 GMT Accept-CH: UA, Platform, Arch, Model, Mobile X-Cache: Miss from cloudfront Via: 1.1 a11ff1ad6e4c16fe95e18b435889304a.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SFO53-P1 X-Amz-Cf-Id: B11GKgZ4fy0RcLOAgPlzubh2VW29pCRACucpthT9sFu2UPhKwu_1pA==

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:48 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-04-24 13:20:48 UTC	531	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0Fz4RYwAAAACZW8dCTzveR7lI76J6Z2l5U0pDRURHRTA1MTgAY2VmYzI1ODMtYTliMi00NGE3LTk3NTUtYjc2ZDE3ZTA1Zjdm Cache-Control: public, max-age=236573 Date: Wed, 24 Apr 2024 13:20:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-04-24 13:20:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:56 UTC	928	OUT	GET /recaptcha/api.js?trustedtypes=true&render=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=kG3_dyaOUX-DKbNfoJ1R-JAVGohP1tBEGI2nK9Rl9_XHPmrSfxAnpjGgn5wb0-JTIsu9bxX1XgDACnWTpZvkIxbfLKv4M-bjGK8HlXqZ9ZJI8lnN4vhHKjim19eamD0phMHcJoccaYRynkwzpGUkoITlWvJITrGEVbGY7PG85v8
2024-04-24 13:20:56 UTC	528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Expires: Wed, 24 Apr 2024 13:20:56 GMT Date: Wed, 24 Apr 2024 13:20:56 GMT Cache-Control: private, max-age=300 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 13:20:56 UTC	727	IN	Data Raw: 35 37 65 0d 0a 2f 2a 20 50 4c 45 41 53 45 20 44 4f 20 4e 4f 54 20 43 4f 50 59 20 41 4e 44 20 50 41 53 54 45 20 54 48 49 53 20 43 4f 44 45 2e 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 77 3d 77 69 6e 64 6f 77 2c 43 3d 27 5f 5f 5f 67 72 65 63 61 70 74 63 68 61 5f 63 66 67 27 2c 63 66 67 3d 77 5b 43 5d 3d 77 5b 43 5d 7c 7c 7b 7d 2c 4e 3d 27 67 72 65 63 61 70 74 63 68 61 27 3b 76 61 72 20 67 72 3d 77 5b 4e 5d 3d 77 5b 4e 5d 7c 7c 7b 7d 3b 67 72 2e 72 65 61 64 79 3d 67 72 2e 72 65 61 64 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 28 63 66 67 5b 27 66 6e 73 27 5d 3d 63 66 67 5b 27 66 6e 73 27 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 66 29 3b 7d 3b 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 Data Ascii: 57e/* PLEASE DO NOT COPY AND PASTE THIS CODE. */(function(){var w=window,C='___grecaptcha_cfg',cfg=w[C]=w[C]\|\|{},N='grecaptcha';var gr=w[N]=w[N]\|\|{};gr.ready=gr.ready\|\|function(f){(cfg['fns']=cfg['fns']\|\|[]).push(f);};w['__recaptcha_api']='https://www.g
2024-04-24 13:20:56 UTC	686	IN	Data Raw: 52 35 55 33 52 76 63 6d 46 6e 5a 56 42 68 63 6e 52 70 64 47 6c 76 62 6d 6c 75 5a 79 49 73 49 6d 56 34 63 47 6c 79 65 53 49 36 4d 54 63 79 4e 54 51 77 4e 7a 6b 35 4f 53 77 69 61 58 4e 54 64 57 4a 6b 62 32 31 68 61 57 34 69 4f 6e 52 79 64 57 55 73 49 6d 6c 7a 56 47 68 70 63 6d 52 51 59 58 4a 30 65 53 49 36 64 48 4a 31 5a 58 30 3d 27 3b 64 2e 68 65 61 64 2e 70 72 65 70 65 6e 64 28 6d 29 3b 76 61 72 20 73 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 2c 74 74 3d 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2c 63 70 3d 74 74 26 26 74 74 2e 63 72 65 61 Data Ascii: R5U3RvcmFnZVBhcnRpdGlvbmluZyIsImV4cGlyeSI6MTcyNTQwNzk5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=';d.head.prepend(m);var s='https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js',tt=w.trustedTypes,cp=tt&&tt.crea
2024-04-24 13:20:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:58 UTC	1194	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=e08lg5zdz084 HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=kG3_dyaOUX-DKbNfoJ1R-JAVGohP1tBEGI2nK9Rl9_XHPmrSfxAnpjGgn5wb0-JTIsu9bxX1XgDACnWTpZvkIxbfLKv4M-bjGK8HlXqZ9ZJI8lnN4vhHKjim19eamD0phMHcJoccaYRynkwzpGUkoITlWvJITrGEVbGY7PG85v8
2024-04-24 13:20:58 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 13:20:58 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-eCjSGKN9wFIwHtCz_KxIVg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 13:20:58 UTC	364	IN	Data Raw: 32 61 66 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2af1<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 65 43 6a 53 47 4b 4e 39 77 46 49 77 48 74 43 7a 5f 4b 78 49 56 67 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="eCjSGKN9wFIwHtCz_KxIVg" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 44 54 6b 38 51 39 2d 33 65 31 51 51 51 52 56 4e 76 63 69 58 5a 31 68 53 6a 36 47 6d 4d 4d 56 50 57 5f 75 38 39 41 73 69 55 4c 2d 74 41 6e 58 47 75 71 51 44 33 62 70 6d 50 37 42 62 68 78 41 5a 76 41 31 70 36 69 38 33 6a 76 59 57 6b 50 63 5f 4b 68 42 73 36 48 48 4c 4f 48 4e 47 76 68 51 6c 30 66 65 7a 56 42 4b 68 75 50 79 42 37 57 33 35 32 76 52 4c 63 62 4e 62 47 4d 31 53 6c 73 78 38 57 6d 53 63 6a 73 50 32 36 64 32 41 38 63 32 4e 58 36 7a 64 45 48 42 61 54 53 4b 76 4d 4f 73 43 48 31 53 6f 4b 35 34 59 6c 5a 61 57 67 4d 37 67 38 4a 32 54 58 67 49 6e 35 34 4e 38 75 4a 34 55 6c 6a 6b 55 77 6b 66 68 71 73 68 58 31 78 69 67 4f 64 2d 6c 41 79 4a 4c 58 38 62 76 43 70 5f 58 6a 48 73 32 6a 34 6d 52 75 6a 7a 68 4c 63 38 79 48 73 37 76 61 75 77 72 44 39 76 57 5a 6e 61 Data Ascii: DTk8Q9-3e1QQQRVNvciXZ1hSj6GmMMVPW_u89AsiUL-tAnXGuqQD3bpmP7BbhxAZvA1p6i83jvYWkPc_KhBs6HHLOHNGvhQl0fezVBKhuPyB7W352vRLcbNbGM1Slsx8WmScjsP26d2A8c2NX6zdEHBaTSKvMOsCH1SoK54YlZaWgM7g8J2TXgIn54N8uJ4UljkUwkfhqshX1xigOd-lAyJLX8bvCp_XjHs2j4mRujzhLc8yHs7vauwrD9vWZna
2024-04-24 13:20:58 UTC	1255	IN	Data Raw: 79 71 78 66 37 69 31 56 4d 73 70 30 4e 5a 78 6f 6d 58 7a 5f 6a 75 41 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 65 43 6a 53 47 4b 4e 39 77 46 49 77 48 74 43 7a 5f 4b 78 49 56 67 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 Data Ascii: yqxf7i1VMsp0NZxomXz_juA"><script type="text/javascript" nonce="eCjSGKN9wFIwHtCz_KxIVg"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22
2024-04-24 13:20:58 UTC	597	IN	Data Raw: 52 5a 63 6b 4e 35 51 7a 52 68 52 6b 39 69 63 57 56 5a 65 6d 59 78 55 47 35 4b 51 6e 4e 61 62 31 68 50 52 56 64 68 63 32 4e 44 55 69 73 79 63 7a 42 45 52 6d 5a 35 59 58 4a 6c 62 31 4a 48 4d 48 46 78 53 79 38 35 53 57 31 4d 61 55 4e 35 63 6c 56 78 51 6c 64 4f 4f 45 4a 42 5a 6a 59 78 61 55 46 51 62 6c 67 79 4e 58 6c 71 4e 6e 56 4a 52 46 4a 47 51 31 68 31 51 6d 64 5a 62 69 73 31 64 32 6c 4a 4d 6d 70 43 55 57 46 73 62 48 45 76 53 32 52 49 4e 6b 39 75 59 57 39 42 64 6b 39 61 4d 31 51 33 61 6c 64 30 64 6d 4a 35 65 55 52 4c 65 6e 64 59 64 33 63 79 55 48 6c 42 4d 6b 56 4e 51 30 74 55 59 57 70 45 61 30 70 34 57 58 4e 32 54 54 6c 7a 56 32 35 46 61 6b 39 31 63 48 52 32 64 47 4e 51 53 32 64 6e 53 47 74 7a 5a 6a 6c 61 61 57 6c 50 64 6e 4e 4c 65 47 39 53 53 56 42 6a 54 Data Ascii: RZckN5QzRhRk9icWVZemYxUG5KQnNab1hPRVdhc2NDUisyczBERmZ5YXJlb1JHMHFxSy85SW1MaUN5clVxQldOOEJBZjYxaUFQblgyNXlqNnVJRFJGQ1h1QmdZbis1d2lJMmpCUWFsbHEvS2RINk9uYW9Bdk9aM1Q3ald0dmJ5eURLendYd3cyUHlBMkVNQ0tUYWpEa0p4WXN2TTlzV25Fak91cHR2dGNQS2dnSGtzZjlaaWlPdnNLeG9SSVBjT

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:20:59 UTC	1194	OUT	GET /recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=o8p19a37kioz HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://lookerstudio.google.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=kG3_dyaOUX-DKbNfoJ1R-JAVGohP1tBEGI2nK9Rl9_XHPmrSfxAnpjGgn5wb0-JTIsu9bxX1XgDACnWTpZvkIxbfLKv4M-bjGK8HlXqZ9ZJI8lnN4vhHKjim19eamD0phMHcJoccaYRynkwzpGUkoITlWvJITrGEVbGY7PG85v8
2024-04-24 13:20:59 UTC	891	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Wed, 24 Apr 2024 13:20:59 GMT Content-Security-Policy: script-src 'report-sample' 'nonce-rSeVgKQXoTwidT3fHWIAew' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 13:20:59 UTC	364	IN	Data Raw: 32 62 30 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 3c 74 69 74 6c 65 3e 72 65 43 41 50 54 43 48 41 3c 2f 74 69 74 6c 65 3e 0a 3c 73 74 79 6c 65 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b Data Ascii: 2b0b<!DOCTYPE HTML><html dir="ltr" lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=edge"><title>reCAPTCHA</title><style type="text/css">/* cyrillic-ext */@font-face {
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 32 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 34 36 30 2d 30 35 32 46 2c 20 55 2b 31 43 38 30 2d 31 43 38 38 2c 20 55 2b 32 30 42 34 2c 20 55 2b 32 44 45 30 2d 32 44 46 46 2c 20 55 2b 41 36 34 30 2d 41 36 39 46 2c 20 55 2b 46 45 32 45 2d 46 45 32 46 3b 0a 7d 0a 2f 2a 20 63 79 72 69 6c 6c 69 63 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 Data Ascii: 18/KFOmCnqEu92Fr1Mu72xKOzY.woff2) format('woff2'); unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;}/* cyrillic */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//font
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 30 41 42 3b 0a 7d 0a 2f 2a 20 6c 61 74 69 6e 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6d 43 6e 71 45 75 39 32 46 72 31 4d 75 37 47 78 4b 4f 7a 59 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 31 30 30 2d 30 32 41 46 2c 20 55 2b 30 33 30 34 2c 20 55 2b 30 33 30 38 2c 20 55 2b 30 33 32 39 2c 20 55 2b 31 45 30 30 Data Ascii: 0AB;}/* latin-ext */@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 400; src: url(//fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu7GxKOzY.woff2) format('woff2'); unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 2b 30 34 42 30 2d 30 34 42 31 2c 20 55 2b 32 31 31 36 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 2d 65 78 74 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 42 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 31 46 30 30 2d 31 46 46 46 3b 0a 7d 0a 2f 2a 20 67 72 65 65 6b 20 Data Ascii: +04B0-04B1, U+2116;}/* greek-ext /@font-face { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2) format('woff2'); unicode-range: U+1F00-1FFF;}/ greek
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 42 42 63 34 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 30 30 30 2d 30 30 46 46 2c 20 55 2b 30 31 33 31 2c 20 55 2b 30 31 35 32 2d 30 31 35 33 2c 20 55 2b 30 32 42 42 2d 30 32 42 43 2c 20 55 2b 30 32 43 36 2c 20 55 2b 30 32 44 41 2c 20 55 2b 30 32 44 43 2c 20 55 2b 30 Data Ascii: e { font-family: 'Roboto'; font-style: normal; font-weight: 500; src: url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2) format('woff2'); unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 59 55 74 66 42 78 63 34 45 73 41 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 0a 20 20 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 20 55 2b 30 33 37 30 2d 30 33 37 37 2c 20 55 2b 30 33 37 41 2d 30 33 37 46 2c 20 55 2b 30 33 38 34 2d 30 33 38 41 2c 20 55 2b 30 33 38 43 2c 20 55 2b 30 33 38 45 2d 30 33 41 31 2c 20 55 2b 30 33 41 33 2d 30 33 46 46 3b 0a 7d 0a 2f 2a 20 76 69 65 74 6e 61 6d 65 73 65 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 52 6f 62 6f 74 6f 27 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a Data Ascii: ic.com/s/roboto/v18/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2) format('woff2'); unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;}/* vietnamese */@font-face { font-family: 'Roboto'; font-style: normal; font-weight:
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 0a 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 73 74 79 6c 65 73 5f 5f 6c 74 72 2e 63 73 73 22 3e 0a 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 72 53 65 56 67 4b 51 58 6f 54 77 69 64 54 33 66 48 57 49 41 65 77 22 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 77 69 6e 64 6f 77 5b 27 5f 5f 72 65 63 61 70 74 63 68 61 5f 61 70 69 27 5d 20 3d 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d Data Ascii: </style><link rel="stylesheet" type="text/css" href="https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/styles__ltr.css"><script nonce="rSeVgKQXoTwidT3fHWIAew" type="text/javascript">window['__recaptcha_api'] = 'https://www.google.com
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 38 55 41 33 53 56 4e 48 67 63 51 30 37 53 79 7a 66 4f 66 4d 42 6c 78 67 55 79 44 6a 61 43 64 43 45 67 45 62 35 68 65 71 30 69 62 66 63 75 75 2d 7a 65 48 51 5a 34 69 69 39 53 32 43 6a 6d 44 48 32 61 61 69 4c 75 53 4c 6d 32 76 4f 6d 6d 5a 4c 43 77 34 66 39 78 30 32 73 6c 35 79 42 73 71 48 6a 7a 75 4f 53 31 79 61 4f 4b 46 36 62 36 4a 73 35 44 73 35 41 74 57 5f 46 38 79 48 6b 62 5a 73 6a 67 55 68 6e 46 46 64 59 48 73 2d 54 63 52 45 37 6f 58 6c 45 5a 2d 49 58 57 77 45 48 6a 35 6b 57 61 5f 68 6a 72 44 53 75 46 77 64 56 4c 46 50 34 76 6f 56 6a 61 78 30 36 72 74 44 71 62 57 71 36 4c 45 6e 64 6d 52 43 54 63 6f 42 4e 37 4e 4a 65 56 58 43 39 6a 61 44 51 47 39 63 64 7a 36 45 6f 49 44 62 4b 47 42 63 70 75 4d 54 48 6c 58 62 47 30 34 78 55 65 6c 5a 4c 76 6a 70 35 7a 36 Data Ascii: 8UA3SVNHgcQ07SyzfOfMBlxgUyDjaCdCEgEb5heq0ibfcuu-zeHQZ4ii9S2CjmDH2aaiLuSLm2vOmmZLCw4f9x02sl5yBsqHjzuOS1yaOKF6b6Js5Ds5AtW_F8yHkbZsjgUhnFFdYHs-TcRE7oXlEZ-IXWwEHj5kWa_hjrDSuFwdVLFP4voVjax06rtDqbWq6LEndmRCTcoBN7NJeVXC9jaDQG9cdz6EoIDbKGBcpuMTHlXbG04xUelZLvjp5z6
2024-04-24 13:20:59 UTC	1255	IN	Data Raw: 6e 2d 71 5f 6c 4c 4f 67 72 63 74 73 42 36 7a 44 52 56 73 4c 79 6b 67 22 3e 0a 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 6e 6f 6e 63 65 3d 22 72 53 65 56 67 4b 51 58 6f 54 77 69 64 54 33 66 48 57 49 41 65 77 22 3e 0a 20 20 20 20 20 20 72 65 63 61 70 74 63 68 61 2e 61 6e 63 68 6f 72 2e 4d 61 69 6e 2e 69 6e 69 74 28 22 5b 5c 78 32 32 61 69 6e 70 75 74 5c 78 32 32 2c 5b 5c 78 32 32 62 67 64 61 74 61 5c 78 32 32 2c 5c 78 32 32 4c 79 39 33 64 33 63 75 5a 32 39 76 5a 32 78 6c 4c 6d 4e 76 62 53 39 71 63 79 39 69 5a 79 38 32 53 6b 73 33 55 47 74 6f 55 56 42 71 5a 30 64 6c 51 6c 70 78 65 55 68 4c 51 31 4e 58 64 55 70 4c 52 44 56 61 53 6d 31 47 58 32 74 36 62 56 41 35 55 57 78 57 4d 55 52 5a 4c 6d 70 7a 5c 78 32 32 Data Ascii: n-q_lLOgrctsB6zDRVsLykg"><script type="text/javascript" nonce="rSeVgKQXoTwidT3fHWIAew"> recaptcha.anchor.Main.init("[\x22ainput\x22,[\x22bgdata\x22,\x22Ly93d3cuZ29vZ2xlLmNvbS9qcy9iZy82Sks3UGtoUVBqZ0dlQlpxeUhLQ1NXdUpLRDVaSm1GX2t6bVA5UWxWMURZLmpz\x22
2024-04-24 13:20:59 UTC	623	IN	Data Raw: 49 31 54 69 74 61 57 48 70 78 64 6e 68 69 57 6c 42 58 61 33 42 69 4e 45 55 33 4d 6b 64 50 52 46 70 6b 53 6d 35 50 62 30 5a 78 55 56 42 42 52 33 70 4f 4e 47 64 6a 52 44 4e 4c 63 32 59 33 65 46 4a 45 4b 32 4a 52 63 57 68 33 52 57 6c 75 52 6e 70 45 52 48 4a 6e 61 31 52 79 65 6d 35 54 64 7a 4e 49 54 32 68 79 62 57 31 42 4e 45 4a 75 55 30 55 79 64 6e 55 7a 4e 6c 5a 53 56 7a 52 6a 4d 32 68 61 56 54 4a 35 51 6c 41 77 56 54 42 4d 54 47 4e 71 4d 46 42 54 53 32 39 6f 56 48 46 46 63 6e 56 58 51 6c 42 4c 5a 7a 64 46 56 58 70 35 63 30 74 6b 5a 6e 51 72 64 45 35 4d 4d 6b 38 78 56 45 46 6a 61 7a 56 32 4d 56 5a 70 59 30 46 35 65 58 5a 72 54 7a 41 7a 54 55 59 77 54 6e 56 55 53 45 64 74 54 55 6c 7a 64 47 30 35 51 54 56 33 52 79 73 76 57 57 6b 77 53 33 70 72 62 48 64 52 5a Data Ascii: I1TitaWHpxdnhiWlBXa3BiNEU3MkdPRFpkSm5Pb0ZxUVBBR3pONGdjRDNLc2Y3eFJEK2JRcWh3RWluRnpERHJna1Ryem5TdzNIT2hybW1BNEJuU0UydnUzNlZSVzRjM2haVTJ5QlAwVTBMTGNqMFBTS29oVHFFcnVXQlBLZzdFVXp5c0tkZnQrdE5MMk8xVEFjazV2MVZpY0F5eXZrTzAzTUYwTnVUSEdtTUlzdG05QTV3RysvWWkwS3prbHdRZ

Timestamp	Bytes transferred	Direction	Data
2024-04-24 13:21:01 UTC	1088	OUT	GET /recaptcha/api2/webworker.js?hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LcE_6MUAAAAACM2aL4qbFG8PNDIIl4krUNCLmXE&co=aHR0cHM6Ly9sb29rZXJzdHVkaW8uZ29vZ2xlLmNvbTo0NDM.&hl=en&v=QoukH5jSO3sKFzVEA7Vc8VgC&size=invisible&cb=o8p19a37kioz Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=513=kG3_dyaOUX-DKbNfoJ1R-JAVGohP1tBEGI2nK9Rl9_XHPmrSfxAnpjGgn5wb0-JTIsu9bxX1XgDACnWTpZvkIxbfLKv4M-bjGK8HlXqZ9ZJI8lnN4vhHKjim19eamD0phMHcJoccaYRynkwzpGUkoITlWvJITrGEVbGY7PG85v8
2024-04-24 13:21:01 UTC	655	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Wed, 24 Apr 2024 13:21:01 GMT Date: Wed, 24 Apr 2024 13:21:01 GMT Cache-Control: private, max-age=300 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-24 13:21:01 UTC	108	IN	Data Raw: 36 36 0d 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 2f 72 65 6c 65 61 73 65 73 2f 51 6f 75 6b 48 35 6a 53 4f 33 73 4b 46 7a 56 45 41 37 56 63 38 56 67 43 2f 72 65 63 61 70 74 63 68 61 5f 5f 65 6e 2e 6a 73 27 29 3b 0d 0a Data Ascii: 66importScripts('https://www.gstatic.com/recaptcha/releases/QoukH5jSO3sKFzVEA7Vc8VgC/recaptcha__en.js');
2024-04-24 13:21:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0