Windows Analysis Report
Invoice INV-0003.pdf

Compliance

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49706 version: TLS 1.2

Source:	Binary string: _.Vdb=_.C("EEDORb",[_.Gdb,_.Mdb,_.Pdb]); source: chromecache_265.16.dr
Source:	Binary string: _.ku=function(a,b,c,d){var e=void 0===d?{}:d;d=void 0===e.Es?!0:e.Es;e=void 0===e.preventScroll?!1:e.preventScroll;_.PDb(a,b,{Es:d,preventScroll:e});c?_.QDb(a,b,c,{Es:d,preventScroll:e}):b.el().contains(_.Ol(a.oa.Ih()))||RDb(a,b,{Es:d,preventScroll:e})}; source: chromecache_248.16.dr
Source:	Binary string: a.service.yj;this.PDb=a.Kd.PDb};_.G(Wtk,_.F);Wtk.Ga=function(){return{service:{j4b:_.Rtk,yj:_.KE},Kd:{PDb:"Fd92vb"}}}; source: chromecache_256.16.dr
Source:	Binary string: _.Qdb=function(a){_.xn.call(this,a.Ka)};_.G(_.Qdb,_.xn);_.Qdb.nb=_.xn.nb;_.Qdb.Ga=function(){return{}};_.Qdb.prototype.oa=function(a){return _.Xbb(a)};_.zn(_.Pdb,_.Qdb); source: chromecache_265.16.dr
Source:	Binary string: _.PDb=function(a,b,c){c=void 0===c?{}:c;var d=void 0===c.Es?!0:c.Es,e=void 0===c.preventScroll?!1:c.preventScroll;c=SDb(a);var f=SDb(a);_.oe(c.el(),"focus",function(){this.gzb(b,{Es:d,preventScroll:e})},a);_.oe(f.el(),"focus",function(){_.TDb(this,b,{Es:d,preventScroll:e})},a);b.children().first().before(c);b.append(f)}; source: chromecache_248.16.dr
Source:	Binary string: Wtk.prototype.wa=function(){var a=this;this.ka||(this.ka=!0,this.j4b.ABa().then(function(){a.ka=!1;a.yj.reload()},function(){Xtk(a)}))};Wtk.prototype.oa=function(){var a=this;this.ka||(this.ka=!0,Vtk(this.j4b).then(function(){a.ka=!1;a.yj.reload()},function(){Xtk(a)}))};var Xtk=function(a){a.PDb&&(a.PDb.setTimeout(3E4),a.PDb.show());a.ka=!1};_.J(Wtk.prototype,"XZ94se",function(){return this.oa});_.J(Wtk.prototype,"xoizsc",function(){return this.wa});_.J(Wtk.prototype,"i3viod",function(){return this.Aa}); source: chromecache_256.16.dr
Source:	Binary string: _.Pdb=_.C("aurFic"); source: chromecache_265.16.dr
Source:	Binary string: _.fcf=function(a){_.iu.call(this,a.Ka);this.ka=!1;this.container=new _.Vf([]);this.Ba=!1;this.Aa=[];this.wa=[];this.Ha=new _.ODb(null)};_.G(_.fcf,_.iu);_.fcf.nb=_.iu.nb;_.fcf.Ga=_.iu.Ga;_.fcf.prototype.isOpen=function(){return this.ka};_.fcf.prototype.open=function(a,b,c){c=void 0===c?!1:c;this.ka||(this.Ha=new _.ODb(document.activeElement),this.Ja=_.oe(a.el(),_.QCb,this.Qa,this),this.container=a,gcf(this,a),c?_.PDb(this,a):_.ku(this,a,b),this.ka=this.Ba=!0)}; source: chromecache_248.16.dr

Networking

Source: Joe Sandbox View	IP Address: 104.94.108.142 104.94.108.142
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.112.54
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 104.94.108.142
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 23.204.76.112
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50

Source: global traffic	HTTP traffic detected: GET /onboarding/smskillreader.txt HTTP/1.1Host: armmf.adobe.comConnection: keep-aliveAccept-Language: en-US,en;q=0.9User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) ReaderServices/23.6.20320 Chrome/105.0.0.0 Safari/537.36Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: */*Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DWP23o5EnE1h4Lz&MD=RHUsShKZ HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=DWP23o5EnE1h4Lz&MD=RHUsShKZ HTTP/1.1Connection: Keep-AliveAccept: */*User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&oft=1&pgcl=20&gs_rn=42&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/ddljson?async=ntp:2 HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_ogb?hl=en-US&async=fixed:0 HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /async/newtab_promos HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_ogb%3Fhl%3Den-US%26async%3Dfixed:0&hl=en-US&q=EgRmgZjcGOWRr7EGIjBl3Z8mdV7iuQlXx3vrRkL4AVRIBUGOwGPzUYmxiw-erxFt5zhM4ErcjFfPkRW3OPQyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=aAgFRJ-84LrbS9myeZFj7--hl8Dl4FLDUfiX76lTQbi2Vo5UrN8T2kyvmso5OxT9Qmo7_JvmFUzyGh_QG94RwcSkdq4r-AqUEAYA_OpqVQNBnMyLpAmzfueFr-LWRkcvSxq62OizXI3GcnHQUmK96YelFaRGPMZALMKDlzywC7E
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/async/newtab_promos&q=EgRmgZjcGOWRr7EGIjAHwueNDSQI-WXeAdig1ilxcW5kJRzd2zjnuDDx24OkMugOmCswnljnlrWZEzXJrwEyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=1&oit=4&cp=1&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=10&oit=4&cp=2&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104&oit=4&cp=3&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.&oit=4&cp=4&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94&oit=4&cp=6&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.&oit=4&cp=7&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.1&oit=4&cp=8&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109&oit=4&cp=10&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.&oit=4&cp=11&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.1&oit=3&cp=12&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142%3A&oit=3&cp=15&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142&oit=3&cp=14&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=17&pgcl=7&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE
Source: global traffic	HTTP traffic detected: GET /sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUM HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/webworker.js?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /js/bg/lkTXq49YG5_ej1w7m4T9Nw_1Lx1Ocd1gteWQpsfV_Tk.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/recaptcha/api2/anchor?ar=1&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&co=aHR0cHM6Ly93d3cuZ29vZ2xlLmNvbTo0NDM.&hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&size=normal&s=KAN_iKlHLO8R0NKiNKk0WWR6Z4gU4gG-TPOCOwjgtQNuPSfT4mukUg8B3rgwcZpUeZThhdud0p8kEuaohNHeLAcLw0ux1hPsgJBn1gjdnNI3jWHwexkcVfz0HXBxWL9dURbBXp0dPLOVXmf9O3riZSDttRSH47QuZk9GsRQYh5pRA1fVKpGZKKvfHwMuWe6uuVUYxRa19V86h5I4JU8bMZfoqXUPctpZ7ib1akxUq5T0kaC4wuEFOI8V6PwRbaxi1ink_9AZRHy9f4zmxv7kclRLhUX4SKM&cb=7zgrwx65alt9Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4usRjYkJfr9srSp2HD4-ZZAVZywMgBTv-cvcNDNMdzhtedLDEkllNnkQiQBbtl3h4As3V2Iew446Zxj5dcFMe0MMOrTyv4ts3-hjod8380h_vsvEgOVv7dHXvzSlPNaf0Z9uZQr8h58zsC5_C-Yi198SrWQsa7MZ5u3dpR8HcvIT4q5vas_t9yZ6LuKTyDOaezHVWLaYozqtkSHXw9w1wzsX9jSQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA6u0-JMSOaecoCXHzdsX-xxrcVrgCsTYc59nt6KMq8BRd5Ex-67_RPGwRPMTEZi8lNpFhlcgy5Y7-wQWe2KnHVK5ZfToZL-Vmn0Gttkh5Yl8o5rao17hCvwzK1zjndSb_zIf76VRoc2NtYot5-zOEOdfcEXA6g2mN7FHkMnr0u6AnUZuYajaPHwihB0Zx4V6YIUYxUYXrwQdWApHkKoki170EAOfQ&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=ced8fd5d7352b74 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=d14cdf2cf524340b HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA4qo7BvEsw6c5x7L0zWkwDxk41s4QXBFq-UTbLoYi4mYg5pWAHsT9vh8DMhbPPHIyjECIZ4cYU41ywyA8hdRigYZQJnKI4_I3uv32GImq_xmDdqm2nF9i9bAfGu7AlTCwBDt7YWEwIJ3RtEJzTJZfrDDqE8Eyg8H6v_CVaI8sLZw3REAQxg9HgOdQ_aRKGSEE8JfJrWqTp2iL71Gqv5cBxUH_2LMA&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=abd561db531187e4 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/payload?p=06AFcWeA5n2WF8wv-ME7L61a1BMVDol7SKjmXRzD04LO-5qnc5Yo-7Uv3YESGK03INgkSkcBpqFw2IVRslTj_HEYCSE0bVNqb0YyT3pUC2Pe29yUaioY0zttD_Tipl2_G5Tpu8XD-YvFrTqIJ61dTX4sv2npmlKj-lwoCG7y0yslq1m5awBb8XY2F4ks8gOphnefktV5tmjcSue1lYveyn69HCB7uZNEAi1g&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b&id=1868db878e889a63 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _GRECAPTCHA=09AEdsM9PDFaukKvlTlHSflSkwqygHONJPfvWK7qQ1uvIFU_r50US66f4O1u9-2AWCLMB8FOo6Nmt9GdiEovjwKxM; 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8&google_abuse=GOOGLE_ABUSE_EXEMPTION%3DID%3D211ac792a2de2ae0:TM%3D1714145544:C%3Dr:IP%3D102.129.152.220-:S%3DbW_BRuXgiNkknohxpUtoqJ0%3B+path%3D/%3B+domain%3Dgoogle.com%3B+expires%3DFri,+26-Apr-2024+18:32:24+GMT HTTP/1.1Host: www.google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g
Source: global traffic	HTTP traffic detected: GET /search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8 HTTP/1.1Host: www.google.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.google.com/sorry/index?continue=https://www.google.com/search%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&q=EgRmgZjcGPORr7EGIjAjT-is8k6Uwm1EagwkXv7b_3Y6lH1AXZSE6X-OCgzMA9YBQPBGvSt1H2oAX7BK9VoyAXJKGVNPUlJZX0FCVVNJVkVfTkVUX01FU1NBR0VaAUMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=1/ed=1/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,*/*;q=0.1X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /images/branding/googlelogo/2x/googlelogo_color_92x30dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/search?q=104.94.109.142443&oq=104.94.109.142443&gs_lcrp=EgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA&sourceid=chrome&ie=UTF-8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/ed=1/dg=2/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf,FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe,KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google
Source: global traffic	HTTP traffic detected: GET /verify/AAtmn1bTSyw2hAKlZ3LnbiQ1Wqu5634m12FM1sn670oINgsM5w6AM4xkxQt_rNluBR52tCI5NrrO_xyQcOfIPkLWLk9JFqI6z1l0UNJetPNOAxmS HTTP/1.1Host: id.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=b51YpLo4VR1MIeifPjI6wC1AZiY3GgI94kQnKHVX8ICBbDBgB6C1XG4hPNwsOPh0zeb4QtsPOdjysJlWqeTZk0yQDpcqoBuOXBu5GHyB2hq29z3ahDw9JiGpGyYTB1lqXMlrGtwa4kVVcxFGFVSG8PXDFAkU-VSj6gACLVMtelxQalQ9CTU
Source: global traffic	HTTP traffic detected: GET /compressiontest/gzip.html HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=2&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&nolsbt=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=3&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /complete/search?q=104.94.109.142443&cp=0&client=gws-wiz-serp&xssi=t&gs_pcrt=undefined&hl=en&authuser=0&pq=104.94.109.142443&psi=C8krZr7QHOyTwbkPuNyGwAw.1714145550203&dpr=1&ofp=EAE HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/md=3/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/ck=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKYGgmXAACsCGIADgg0MAAMAQAABCAAjA5oEKARQhIABgAIAggZ__BAAAHACBAQAgZAICBEC4AJIQkIMAAEQwwQCkAgDDjwAAIIAEAAAcoMB-AAEDESA8hAABgACYYPwDoIIAICQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=1/exm=SNUn3,attn,cEt90b,cdos,csi,d,dtl0hd,eHDfl,gwc,hsm,jsa,mb4ZUb,qddgKe,sTsDMc/excm=ABxRVc,AD6AIb,AOTkuc,CVVp5c,FmnE6b,KYXthe,KiXlnd,NsEUGe,Ok4XMd,Ollhtb,PlCTlc,RP6nyf,SpjoE,Ut0TMc,VL58m,WFRJOb,WuIPnb,ZGLUZ,ZrXR8b,bXyZdf,fNMhz,gKO30e,hU1IHe,hWJjIf,rL2AR,xB2dQd,y25qZb,yChgtb/ed=1/dg=0/br=1/ujg=1/rs=ACT90oFHhWzRDSD7HZXJ5E0CbPv4n89phQ/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;Afksuc:wMx0R;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DM55c:imLrKe;DULqB:RKfG5c;Dkk6ge:wJqrrd;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;IsdWVc:qzxzOb;JXS8fb:Qj0suc;JbMT3:M25sS;JsbNhc:Xd8iUd;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KeeMUb:HiPxjc;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;Me32dd:MEeYgc;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;Oj465e:KG2eXe;OohIYe:mpEAQb;Pjplud:EEDORb,PoEs9b;PqHfGe:im2cZe;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RDNBlf:zPRCJb;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:ZwDk9d,x8cHvb;ShpF6e:N0pvGc;TxfV6d:YORN0b;U96pRd:FsR04;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VsAqSb:PGf2Re;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;XUezZ:sa7lqb;YV5bee:IvPZ6d;YkQtAf:rx8ur;ZMvdv:PHFPjb;ZWEUA:afR4Cf;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bDXwRe:UsyOtc;bFZ6gf:gU6kfd;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:VruDBd;eHDfl:ofjVkb;eO3lse:nFClrf;fWLTFc:TVBJbf;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:cEt90b;hK67qb:QWEO5b;heHB1:sFczq;hjRo6e:F62sG;hsLsYc:Vl118;iFQyKf:QIhFr,vfuNJf;imqimf:jKGL2e;io8t5d:sgY6Zb;jY0zg:Q6tNgc;k2Qxcb:XY51pe;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kbAm9d:MkHyGd;lkq0A:JyBE3e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;p2tIDb:tp1Cx;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qGV2uc:HHi04c;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tH4IIe:Ymry6;tosKvd:ZCqP3;trZL0b:qY8PFe;uY49fb:COQbmf;uknmt:GkPrzb;uuQkY:u2V3ud;vGrMZ:lPJJ0c;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:uRMPBc;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zaIgPb:Qtpxbd/m=Eox39d,GElbSc,HYSCof,KHourd,ajbYod,pHXghd,tIj4fb,vrkJ0e,xdV1C?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-m
Source: global traffic	HTTP traffic detected: GET /client_204?atyp=i&biw=1034&bih=870&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552364&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552380&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=rcm&cad=&ei=C8krZr7QHOyTwbkPuNyGwAw&ved=0ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ39UDCAw&jsname=gLFyf&zx=1714145552500&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /xjs/_/ss/k=xjs.s.GGin1mxRzvU.L.W.O/am=gB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ/d=0/br=1/rs=ACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ/m=y05UD,sy13c,sy1k1,sy1qj,sy1pf,sy1qq,sy2fh,sy13j,sy1pb,sy1pc,sy1pd,sy1qy,sy16x,sy3hx,sy6z8,epYOx,L1AAkb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sb_wiz,aa,abd,sy1ee,sy1ek,sy1el,sy1ej,sy1em,sy1yg,async,bgd,sy3z4,sy3z5,foot,sy2jo,sy6iz,kyn,sy1k9,lli,sf,sy1e8,sy1e9,sy3fx,sonic,TxCJfd,sy6y9,sy6ya,qzxzOb,IsdWVc,sy15m,sy170,sy173,sy316,sy6y8,syeq,sy155,sy6yc,spch,tl,MpJwZc,UUJqVe,sy7m,sOXFj,sy7l,s39S4,NTMZac,nAFL3,oGtAuc,sy8f,sy8g,q0xTif,y05UD,sy12g,sy13c,sy13a,sy13b,sy13e,sy13g,sy13h,sy13d,sy13i,sy1k1,sy1k2,sy1ph,sy1pi,sy1qf,sy1qj,sy1p9,sy1qn,sy1pr,sy1pf,sy1po,sy1pp,sy1qq,sy1qr,sy2ge,sy2gf,sy2fh,sy2lf,sy13j,sy13k,sy1pb,sy1pc,sy1pd,sy13x,sy1pg,sy175,sy1pj,syf2,sy142,sy1pk,sy1pl,sy1pm,sy1qy,sy1r0,sy16x,sy3hx,sy3hy,sy6z8,epYOx,synw,synv,rtH1bd,syo2,syxb,syxr,syo0,sy1ef,sy1eg,sy1eh,sy2ot,sy2ou,sy2ov,EkevXb,syzp,syzq,syzr,syzo,syzs,syzn,sy1cd,SMquOb,syzy,sy1ce,sy1cf,sy1cg,sy1ch,sy1ci,d5EhJe,sy1cj,sy1ck,sy1cl,syzt,syzu,sy1au,sy1cn,sy1co,zx30Y,syyf,sy1d9,sy1da,sy1db,sy1dc,sy1dd,sy1df,sy1de,T1HOxc,sy1dh,sy1di,DQfvme,syzl,sy1dj,Wo3n8,synz,L1AAkb,sy1f2,SZXsif,sy1zj,fiAufb,syn5,syos,syor,sy2xd,sy3yf,sy40p,sy40q,sy40o,sy4e7,sYEX8b,sy4u7,GU4Gab,sy3a5,T5VV,sy1zu,aDVF7,sy4u9,rhYw1b,E9M6Uc,Zilivc,syzw,sy11c,sy1cp,sy10i,sy10j,sy10e,sy10f,sy10g,sy10h,sy10d,sy10l,sy10m,sy10k,sy10n,sy10o,sy113,sy114,sy10u,sy10y,sy10z,sy110,sy111,sy10v,sy115,sy112,sy10s,sy10t,sy10r,sy10q,sy12p,sy1ii,sy1ik,sy1ij,sy1im,sy1il,sy1ip,sy1io,sy2mu,sy2mx,sy2n5,sy2n2,sy2n6,sy116,sy118,sy119,sy2mv,sy2n7,sy2n9,Hlw0zd,M6QgBb,sy2ni,sy2nj,EO13pd,RagDlc?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySw
Source: global traffic	HTTP traffic detected: GET /logos/fnbx/zrp/full_yeti.json HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBRAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10943804590251964565&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQICBAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=10194214981100978668&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /async/asyncContextualTask?vet=12ahUKEwj-gc3jmeCFAxXsSTABHTiuAcgQ4dMLegQIBhAA..i&ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cid=4586455008918215834&cs=0&async=_k:xjs.s.en_US.DNHITQOYOgk.O,_am:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.s.GGin1mxRzvU.L.W.O%2Fam%3DgB1QCAAABAYNCAAAAAAAAAAAAAAAAAkAgBAAAABAKACAmXAAAsCGAADgg0MAAIAAAAACAACAwgEAABAgIABgAAAgAAAAAAAAHAABAAAgBAACBECAAJIQkIEAAEQwwQCkAgDDjwAAIIAEAAAAoEAAAAEDESA8hAABgACQQAQCIIIAACAHCAEAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgAAAAAAAAAAAAAAAAAAAQ%2Fbr%3D1%2Frs%3DACT90oGSC2kJ5MOZFnDJZQWz14iwbMFYQQ,_fmt:prog,_id:rNi7Zc HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=uKlGbf,syyj,sy3ze,DpX64d,sy3zf,EufiNb,sy1fp,P10Owf,syy4,syzv,gSZvdb,sy5ul,vTw9Fc,sym1,syoh,syoi,syoj,syok,syol,DPreE,sy2tx,qcH9Lc,sy3l6,ROaKxe,sy3l8,sy3l9,pj8IAe,sy15a,sy37l,sy3lf,sy3zm,YFicMc?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /async/bgasy?ei=C8krZr7QHOyTwbkPuNyGwAw&opi=89978449&yv=3&cs=0&async=_fmt:jspb HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36X-DoS-Behavior: Embedsec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0
Source: global traffic	HTTP traffic detected: GET /client_204?cs=1&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sy3zk,sy4e6,w4UyN,sywu,sywv,EbPKJf,sy4tu,sy72c,J9Q59e,sy4tv,a6Sgfb,Tia57b,KpRAue,sy1kd,NyeqM,sy2t9,sy2ta,O9SqHb?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; NID=513=SZLmA6UiSOao1YpPP2tVXymAzYEbZ6smyjQpEYDk1eZIGsp5OZNCNXL588Uy_wjc1Pd2xI5pjxeYqMIcrovJHuAncov0VoH6aXM9qhxCZILkZNzdgRTrw4wAySwas05dEH1WE4m0PI4EMlVxDgPjxG_Ubws2DbVDL3NQAsMmbRUPYAG47l9z3wrSwwyFt9dV; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=sywy,syx0,syx1,WlNQGd,sy2mm,sy2mn,nabPbb,syww,sywx,sywz,CnSW2d,sy1f9,sy1fa,sy1fb,sy1fc,sy1fd,sy1fe,sy4dj,sy6y6,VD4Qme,syf9,BYwJlf,syns,syo1,syo6,VEbNoe,symg,sy2ob,sy2oc,sy5a0,ND0kmf,pjDTFb,sy1wv,sy2t7,sy2tg,sy2th,KgxeNb,sy2tc,khkNpe?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=syfc,syfd,aLUfP?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_US.DNHITQOYOgk.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAAAAAAAIYEgAAAACgAAIAAAAAAAAMAQAABCAAjA5oEKAQQhIABgAIAggZ__BAAAAACBAQAgYAIAAAC4AIAQAIIAAEAAAACAAgAAAAAAAAAAAAAcIIB-AAAAAAAAAAAAAACYIPgBgAAAIAQHCAEAIAAAAIA8AM8DhoMUFgAAAAAAAAAAAABAABIEc0D6CwKAAAAAAAAAAAAAAABIpROXxwAACQ/d=0/dg=0/br=1/rs=ACT90oEbqmiJA6IEvz6PO2Lr2vCdQ-a7SA/m=kMFpHd,sy8s,bm51tf?xjs=s3 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=C8krZr7QHOyTwbkPuNyGwAw&zx=1714145560773&opi=89978449 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g; GOOGLE_ABUSE_EXEMPTION=ID=211ac792a2de2ae0:TM=1714145544:C=r:IP=102.129.152.220-:S=bW_BRuXgiNkknohxpUtoqJ0; GZ=Z=0; DV=MwsGE8W4wMoVcJwiBMaOV26pWpWw8Rg; NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=104.94.109.142443&oit=4&cp=15&url=https%3A%2F%2Fwww.google.com%2Fsearch%3Fq%3D104.94.109.142443%26oq%3D104.94.109.142443%26gs_lcrp%3DEgZjaHJvbWUyBggAEEUYOdIBCTExNDQxajBqN6gCALACAA%26sourceid%3Dchrome%26ie%3DUTF-8&pgcl=9&gs_rn=42&psi=uP-5m4QVderHBMsc&sugkey=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=513=MuwO3d2tTlKeMpaSa7jTo2Iys3rkReoLhogoQ0C0QWN2FqxDlYXtN2kNAixJJIOW-CNkY4hm10Uqe38yARSdO7Gxo7dvtK_M8o9JWcmjjFkAANNjgSi8804FyZUctEVzDKzjCdjGBPBAgoXMLOuzHzhXZWZ3ANyUm77nTHR-0LL8wiRV3_2mU9X8E4_mOabgCfm-2gREqcE; 1P_JAR=2024-04-26-15
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 104.94.109.142:443Connection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: id.google.com

Source: unknown

HTTP traffic detected: POST /recaptcha/api2/reload?k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1b HTTP/1.1Host: www.google.comConnection: keep-aliveContent-Length: 7790sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-protobufferAccept: */*Origin: https://www.google.comX-Client-Data: CIu2yQEIprbJAQipncoBCLbgygEIkqHLAQj2mM0BCIWgzQEI3L3NAQiRys0BCLnKzQEIx9HNAQiJ080BCNzTzQEIy9bNAQj01s0BCIrXzQEIp9jNAQj5wNQVGLrSzQEYy9jNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/recaptcha/api2/bframe?hl=en&v=V6_85qpc2Xf2sbe3xTnRte7m&k=6LfwuyUTAAAAAOAmoS0fdqijC2PbbdH4kjq62Y1bAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: 1P_JAR=2024-04-26-15; NID=513=LPej6OG04Rcb0snzaZn34zvI2TmLcb0-3wnUowazmjg8G_aJBjV6MhRt2BlxOd6XXATZmJ0X8ektW44hgT3OlRfg_YNmffH8wClnoyJ6PVyOp4ICMyoALmDKGdmyOXU6h73Zp0q28wjUQsq0qhtbYviAAEV0hSIHDLW1F4brOfE; AEC=AQTF6HzDn9iV-4n2o3fyy-Ev4pwJoOU3BWCRkK9WKefp5aa1ICREHvHs_g

Source: chromecache_246.16.dr	String found in binary or memory: http://schema.org/SearchResultsPage
Source: Invoice INV-0003.pdf	String found in binary or memory: http://www.aiim.org/pdfa/ns/extension/
Source: Invoice INV-0003.pdf	String found in binary or memory: http://www.aiim.org/pdfa/ns/id/
Source: Invoice INV-0003.pdf	String found in binary or memory: http://www.aiim.org/pdfa/ns/schema#
Source: chromecache_285.16.dr	String found in binary or memory: http://www.broofa.com
Source: 57976eb8-e795-42a2-ae2a-36f82186c22f.tmp.3.dr, e1a9dfbb-a1c2-45d1-94ed-f4999b77d8cf.tmp.3.dr	String found in binary or memory: https://chrome.cloudflare-dns.com
Source: chromecache_242.16.dr	String found in binary or memory: https://cloud.google.com/contact
Source: chromecache_242.16.dr	String found in binary or memory: https://cloud.google.com/recaptcha-enterprise/billing-information
Source: chromecache_248.16.dr	String found in binary or memory: https://content-push.googleapis.com/upload/
Source: chromecache_242.16.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#are-there-any-qps-or-daily-limits-on-my-use-of-reca
Source: chromecache_242.16.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#localhost_support
Source: chromecache_242.16.dr	String found in binary or memory: https://developers.google.com/recaptcha/docs/faq#my-computer-or-network-may-be-sending-automated-que
Source: chromecache_248.16.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/A
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_285.16.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_274.16.dr	String found in binary or memory: https://lens.google.com
Source: chromecache_248.16.dr	String found in binary or memory: https://lens.google.com/gen204
Source: chromecache_242.16.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_248.16.dr	String found in binary or memory: https://push.clients6.google.com/upload/
Source: chromecache_242.16.dr	String found in binary or memory: https://recaptcha.net
Source: chromecache_248.16.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha#6262736
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha/#6175971
Source: chromecache_242.16.dr	String found in binary or memory: https://support.google.com/recaptcha/?hl=en#6223828
Source: chromecache_274.16.dr	String found in binary or memory: https://support.google.com/websearch/answer/106230
Source: chromecache_274.16.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_242.16.dr	String found in binary or memory: https://www.apache.org/licenses/
Source: chromecache_265.16.dr	String found in binary or memory: https://www.google.
Source: chromecache_285.16.dr	String found in binary or memory: https://www.google.com
Source: chromecache_274.16.dr	String found in binary or memory: https://www.google.com/log?format=json&hasfast=true
Source: chromecache_265.16.dr	String found in binary or memory: https://www.google.com/logos/fnbx/zrp/full_yeti.json
Source: chromecache_265.16.dr	String found in binary or memory: https://www.google.com/logos/fnbx/zrp/full_yeti_dm.json
Source: chromecache_264.16.dr, chromecache_242.16.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/
Source: chromecache_248.16.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_248.16.dr	String found in binary or memory: https://www.googleapis.com/language/translate/v2
Source: chromecache_242.16.dr	String found in binary or memory: https://www.gstatic.c..?/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__.
Source: chromecache_265.16.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Source: chromecache_285.16.dr	String found in binary or memory: https://www.gstatic.com/gb/html/afbp.html
Source: chromecache_285.16.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_medium.css
Source: chromecache_285.16.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/anim/mspin/mspin_googcolor_small.css
Source: chromecache_264.16.dr, chromecache_244.16.dr	String found in binary or memory: https://www.gstatic.com/recaptcha/releases/V6_85qpc2Xf2sbe3xTnRte7m/recaptcha__en.js
Source: chromecache_248.16.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.204.76.112:443 -> 192.168.2.16:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.16:49706 version: TLS 1.2

System Summary

Source: classification engine

Classification label: clean1.winPDF@47/160@4/6

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2024-04-26 17-30-52-579.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Invoice INV-0003.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1568,i,12462945902927182256,8710539947262449294,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1924,i,1629623515606547392,5655261091976178097,262144 /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2268 --field-trial-handle=1568,i,12462945902927182256,8710539947262449294,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2044 --field-trial-handle=1924,i,1629623515606547392,5655261091976178097,262144 /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.15.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: _.Vdb=_.C("EEDORb",[_.Gdb,_.Mdb,_.Pdb]); source: chromecache_265.16.dr
Source:	Binary string: _.ku=function(a,b,c,d){var e=void 0===d?{}:d;d=void 0===e.Es?!0:e.Es;e=void 0===e.preventScroll?!1:e.preventScroll;_.PDb(a,b,{Es:d,preventScroll:e});c?_.QDb(a,b,c,{Es:d,preventScroll:e}):b.el().contains(_.Ol(a.oa.Ih()))||RDb(a,b,{Es:d,preventScroll:e})}; source: chromecache_248.16.dr
Source:	Binary string: a.service.yj;this.PDb=a.Kd.PDb};_.G(Wtk,_.F);Wtk.Ga=function(){return{service:{j4b:_.Rtk,yj:_.KE},Kd:{PDb:"Fd92vb"}}}; source: chromecache_256.16.dr
Source:	Binary string: _.Qdb=function(a){_.xn.call(this,a.Ka)};_.G(_.Qdb,_.xn);_.Qdb.nb=_.xn.nb;_.Qdb.Ga=function(){return{}};_.Qdb.prototype.oa=function(a){return _.Xbb(a)};_.zn(_.Pdb,_.Qdb); source: chromecache_265.16.dr
Source:	Binary string: _.PDb=function(a,b,c){c=void 0===c?{}:c;var d=void 0===c.Es?!0:c.Es,e=void 0===c.preventScroll?!1:c.preventScroll;c=SDb(a);var f=SDb(a);_.oe(c.el(),"focus",function(){this.gzb(b,{Es:d,preventScroll:e})},a);_.oe(f.el(),"focus",function(){_.TDb(this,b,{Es:d,preventScroll:e})},a);b.children().first().before(c);b.append(f)}; source: chromecache_248.16.dr
Source:	Binary string: Wtk.prototype.wa=function(){var a=this;this.ka||(this.ka=!0,this.j4b.ABa().then(function(){a.ka=!1;a.yj.reload()},function(){Xtk(a)}))};Wtk.prototype.oa=function(){var a=this;this.ka||(this.ka=!0,Vtk(this.j4b).then(function(){a.ka=!1;a.yj.reload()},function(){Xtk(a)}))};var Xtk=function(a){a.PDb&&(a.PDb.setTimeout(3E4),a.PDb.show());a.ka=!1};_.J(Wtk.prototype,"XZ94se",function(){return this.oa});_.J(Wtk.prototype,"xoizsc",function(){return this.wa});_.J(Wtk.prototype,"i3viod",function(){return this.Aa}); source: chromecache_256.16.dr
Source:	Binary string: _.Pdb=_.C("aurFic"); source: chromecache_265.16.dr
Source:	Binary string: _.fcf=function(a){_.iu.call(this,a.Ka);this.ka=!1;this.container=new _.Vf([]);this.Ba=!1;this.Aa=[];this.wa=[];this.Ha=new _.ODb(null)};_.G(_.fcf,_.iu);_.fcf.nb=_.iu.nb;_.fcf.Ga=_.iu.Ga;_.fcf.prototype.isOpen=function(){return this.ka};_.fcf.prototype.open=function(a,b,c){c=void 0===c?!1:c;this.ka||(this.Ha=new _.ODb(document.activeElement),this.Ja=_.oe(a.el(),_.QCb,this.Qa,this),this.container=a,gcf(this,a),c?_.PDb(this,a):_.ku(this,a,b),this.ka=this.Ba=!0)}; source: chromecache_248.16.dr

Source: Invoice INV-0003.pdf	Initial sample: PDF keyword /JS count = 0
Source: Invoice INV-0003.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Invoice INV-0003.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Boot Survival

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Hooking and other Techniques for Hiding and Protection

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX			Jump to behavior

Malware Analysis System Evasion

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe

Process information queried: ProcessInformation

Jump to behavior