Windows Analysis Report
https://listfoo.org/zmg5f

Overview

General Information

Sample URL: https://listfoo.org/zmg5f
Analysis ID: 791296
Infos:

Detection

Score: 0
Range: 0 - 100
Whitelisted: false
Confidence: 80%

Signatures

No high impact signatures.

Classification

There are no high impact signatures.

Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\GoogleUpdater Jump to behavior
Source: unknown HTTPS traffic detected: 142.250.203.100:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: global traffic HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-104.0.5112.81Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic HTTP traffic detected: GET /zmg5f HTTP/1.1Host: listfoo.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIk6HLAQiQvMwBCNS8zAEIssHMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://listfoo.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: listfoo.orgConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://listfoo.org/zmg5fAccept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: global traffic HTTP traffic detected: GET / HTTP/1.1Host: www.google.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEIk6HLAQiQvMwBCNS8zAEIssHMAQjFwcwBCNbBzAE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://listfoo.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605
Source: global traffic HTTP traffic detected: GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY
Source: global traffic HTTP traffic detected: GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY
Source: global traffic HTTP traffic detected: GET /gen_204?atyp=i&ct=bxjs&cad=&b=0&ei=ruvQY6uHDeSP9u8PlpqO-Ak&zx=1674636206145 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY
Source: global traffic HTTP traffic detected: GET /_/scs/abc-static/_/js/k=gapi.gapi.en.WEPncdil2Uw.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-eOecLLtOXEl3I3kIuMsKXRkDMmA/cb=gapi.loaded_0 HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY
Source: global traffic HTTP traffic detected: GET /manifest?pwa=webhp HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY
Source: global traffic HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY
Source: global traffic HTTP traffic detected: GET /images/branding/googlelogo/2x/googlelogo_color_272x92dp.png HTTP/1.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.183 Safari/537.36Host: www.google.comCookie: CONSENT=YES+GB.en-GB+V9+BX
Source: global traffic HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/ed=1/dg=2/br=1/rs=ACT90oFLXSotrQJhVFHbtpFxrnCGNSmSlQ/m=cdos,dpf,hsm,jsa,d,csi HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg
Source: global traffic HTTP traffic detected: GET /gen_204?atyp=i&ct=bxjs&cad=&b=1&ei=ruvQY6uHDeSP9u8PlpqO-Ak&zx=1674636232161 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; __Secure-ENID=10.SE=rxeIaTyIOy9jvV9euSuawacjiWICJhymkzUVWH2HD2RDtSxeu71HLmeQFHp4TevkZZiCGMomUAh6rCb_bqWSB4wLcjLEZPM7DiRPynCzjLp5Ndh5EE9BekUAY_vsUkHATrOJYIU8KhR0mm8R0iBZ3HQLXPc9SXX0oCh5R3iDBkY; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg
Source: global traffic HTTP traffic detected: GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&hl=en-HR&authuser=0&psi=ruvQY6uHDeSP9u8PlpqO-Ak.1674636232907&nolsbt=1&dpr=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_GqnwW_fmk_5GMmJ_vg
Source: global traffic HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/ck=xjs.s.F0fY5Pm-eS0.L.W.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/exm=cdos,csi,d,dpf,hsm,jsa/ed=1/dg=2/br=1/rs=ACT90oHWjJk68F8W9qa5QTlNuGD_7xu0jA/ee=Pjplud:PoEs9b;QGR0gd:Mlhmy;uY49fb:COQbmf;EVNhjf:pw70Gc;sTsDMc:kHVSUb;g8nkx:U4MzKc;wQlYve:aLUfP;kbAm9d:MkHyGd;F9mqte:UoRcbe;oUlnpc:RagDlc;YV5bee:IvPZ6d;dtl0hd:lLQWFe;yGxLoc:FmAr0c;dIoSBb:ZgGg9b;pXdRYb:JKoKVe;wR5FRb:TtcOte;KpRAue:Tia57b;aZ61od:arTwJ;JXS8fb:Qj0suc;rQSrae:C6D5Fc;qavrXe:zQzcXe;UDrY1c:eps46d;w3bZCb:ZPGaIb;VGRfx:VFqbr;imqimf:jKGL2e;Np8Qkd:Dpx6qc;BjwMce:cXX2Wb;oGtAuc:sOXFj;NPKaK:PVlQOd;EmZ2Bf:zr1jrb;daB6be:lMxGPd;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;R4IIIb:QWfeKf;BMxAGc:E5bFse;WDGyFe:jcVOxd;wV5Pjc:L8KGxe;xbe2wc:wbTLEd;DpcR3d:zL72xf;tosKvd:ZCqP3;ESrPQc:mNTJvc;NSEoX:lazG7b;G6wU6e:hezEbd;kCQyJ:ueyPK;okUaUd:wItadb;GleZL:J1A7Od;Xeq57c:wZTUNc;eJZqRc:wUwbse;RiX1h:uiAbXc;oSUNyd:fTfGO;SJsSc:H1GVub;SMDL4c:fTfGO;JsbNhc:Xd8iUd;zOsCQe:Ko78Df;KcokUb:KiuZBf;WCEKNd:I46Hvd;LBgRLc:XVMNvd;LsNahb:ucGLNb;UyG7Kb:wQd0G;TxfV6d:YORN0b;qaS3gd:yiLg6e;aAJE9c:WHW6Ef;BgS6mb:fidj5d;UVmjEd:EesRsb;z97YGf:oug9te;CxXAWb:YyRLvc;VN6jIc:ddQyuf;SLtqO:Kh1xYe;VxQ32b:k0XsBb;DULqB:RKfG5c;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;hjRo6e:F62sG;whEZac:F4AmNb;qddgKe:x4FYXe;eBAeSb:Ck63tb;vfVwPd:OXTqFb;w9w86d:dt4g2b;lkq0A:Z0MWEf;KQzWid:mB4wNe;pNsl2d:j9Yuyc;eHDfl:ofjVkb;Nyt6ic:jn2sGd;SNUn3:x8cHvb;LEikZe:byfTOb,lsjVmc;io8t5d:sgY6Zb;Oj465e:KG2eXe;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;nAFL3:s39S4;iFQyKf:QIhFr/m=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_GqnwW_fmk_5GMmJ_vg
Source: global traffic HTTP traffic detected: GET /client_204?&atyp=i&biw=1280&bih=913&ei=ruvQY6uHDeSP9u8PlpqO-Ak HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_GqnwW_fmk_5GMmJ_vg
Source: global traffic HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/ck=xjs.s.F0fY5Pm-eS0.L.W.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/exm=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,cdos,csi,d,dpf,epYOx,hsm,jsa,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch/ed=1/dg=2/br=1/rs=ACT90oHWjJk68F8W9qa5QTlNuGD_7xu0jA/ee=Pjplud:PoEs9b;QGR0gd:Mlhmy;uY49fb:COQbmf;EVNhjf:pw70Gc;sTsDMc:kHVSUb;g8nkx:U4MzKc;wQlYve:aLUfP;kbAm9d:MkHyGd;F9mqte:UoRcbe;oUlnpc:RagDlc;YV5bee:IvPZ6d;dtl0hd:lLQWFe;yGxLoc:FmAr0c;dIoSBb:ZgGg9b;pXdRYb:JKoKVe;wR5FRb:TtcOte;KpRAue:Tia57b;aZ61od:arTwJ;JXS8fb:Qj0suc;rQSrae:C6D5Fc;qavrXe:zQzcXe;UDrY1c:eps46d;w3bZCb:ZPGaIb;VGRfx:VFqbr;imqimf:jKGL2e;Np8Qkd:Dpx6qc;BjwMce:cXX2Wb;oGtAuc:sOXFj;NPKaK:PVlQOd;EmZ2Bf:zr1jrb;daB6be:lMxGPd;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;R4IIIb:QWfeKf;BMxAGc:E5bFse;WDGyFe:jcVOxd;wV5Pjc:L8KGxe;xbe2wc:wbTLEd;DpcR3d:zL72xf;tosKvd:ZCqP3;ESrPQc:mNTJvc;NSEoX:lazG7b;G6wU6e:hezEbd;kCQyJ:ueyPK;okUaUd:wItadb;GleZL:J1A7Od;Xeq57c:wZTUNc;eJZqRc:wUwbse;RiX1h:uiAbXc;oSUNyd:fTfGO;SJsSc:H1GVub;SMDL4c:fTfGO;JsbNhc:Xd8iUd;zOsCQe:Ko78Df;KcokUb:KiuZBf;WCEKNd:I46Hvd;LBgRLc:XVMNvd;LsNahb:ucGLNb;UyG7Kb:wQd0G;TxfV6d:YORN0b;qaS3gd:yiLg6e;aAJE9c:WHW6Ef;BgS6mb:fidj5d;UVmjEd:EesRsb;z97YGf:oug9te;CxXAWb:YyRLvc;VN6jIc:ddQyuf;SLtqO:Kh1xYe;VxQ32b:k0XsBb;DULqB:RKfG5c;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;hjRo6e:F62sG;whEZac:F4AmNb;qddgKe:x4FYXe;eBAeSb:Ck63tb;vfVwPd:OXTqFb;w9w86d:dt4g2b;lkq0A:Z0MWEf;KQzWid:mB4wNe;pNsl2d:j9Yuyc;eHDfl:ofjVkb;Nyt6ic:jn2sGd;SNUn3:x8cHvb;LEikZe:byfTOb,lsjVmc;io8t5d:sgY6Zb;Oj465e:KG2eXe;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;nAFL3:s39S4;iFQyKf:QIhFr/m=CnSW2d,DPreE,WlNQGd,fXO0xe,kQvlef,nabPbb?xjs=s2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_GqnwW_fmk_
Source: global traffic HTTP traffic detected: GET /client_204?cs=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_GqnwW_fmk_5GMmJ_vg
Source: global traffic HTTP traffic detected: GET /xjs/_/js/md=1/k=xjs.s.en_GB.zobC7UqdsqU.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/rs=ACT90oFLXSotrQJhVFHbtpFxrnCGNSmSlQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_GqnwW_fmk_5GMmJ_vg
Source: global traffic HTTP traffic detected: GET /xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/ck=xjs.s.F0fY5Pm-eS0.L.W.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/exm=CnSW2d,DPreE,DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,WlNQGd,aa,abd,async,cdos,csi,d,dpf,epYOx,fXO0xe,hsm,jsa,kQvlef,nabPbb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch/ed=1/dg=2/br=1/rs=ACT90oHWjJk68F8W9qa5QTlNuGD_7xu0jA/ee=Pjplud:PoEs9b;QGR0gd:Mlhmy;uY49fb:COQbmf;EVNhjf:pw70Gc;sTsDMc:kHVSUb;g8nkx:U4MzKc;wQlYve:aLUfP;kbAm9d:MkHyGd;F9mqte:UoRcbe;oUlnpc:RagDlc;YV5bee:IvPZ6d;dtl0hd:lLQWFe;yGxLoc:FmAr0c;dIoSBb:ZgGg9b;pXdRYb:JKoKVe;wR5FRb:TtcOte;KpRAue:Tia57b;aZ61od:arTwJ;JXS8fb:Qj0suc;rQSrae:C6D5Fc;qavrXe:zQzcXe;UDrY1c:eps46d;w3bZCb:ZPGaIb;VGRfx:VFqbr;imqimf:jKGL2e;Np8Qkd:Dpx6qc;BjwMce:cXX2Wb;oGtAuc:sOXFj;NPKaK:PVlQOd;EmZ2Bf:zr1jrb;daB6be:lMxGPd;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;R4IIIb:QWfeKf;BMxAGc:E5bFse;WDGyFe:jcVOxd;wV5Pjc:L8KGxe;xbe2wc:wbTLEd;DpcR3d:zL72xf;tosKvd:ZCqP3;ESrPQc:mNTJvc;NSEoX:lazG7b;G6wU6e:hezEbd;kCQyJ:ueyPK;okUaUd:wItadb;GleZL:J1A7Od;Xeq57c:wZTUNc;eJZqRc:wUwbse;RiX1h:uiAbXc;oSUNyd:fTfGO;SJsSc:H1GVub;SMDL4c:fTfGO;JsbNhc:Xd8iUd;zOsCQe:Ko78Df;KcokUb:KiuZBf;WCEKNd:I46Hvd;LBgRLc:XVMNvd;LsNahb:ucGLNb;UyG7Kb:wQd0G;TxfV6d:YORN0b;qaS3gd:yiLg6e;aAJE9c:WHW6Ef;BgS6mb:fidj5d;UVmjEd:EesRsb;z97YGf:oug9te;CxXAWb:YyRLvc;VN6jIc:ddQyuf;SLtqO:Kh1xYe;VxQ32b:k0XsBb;DULqB:RKfG5c;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;hjRo6e:F62sG;whEZac:F4AmNb;qddgKe:x4FYXe;eBAeSb:Ck63tb;vfVwPd:OXTqFb;w9w86d:dt4g2b;lkq0A:Z0MWEf;KQzWid:mB4wNe;pNsl2d:j9Yuyc;eHDfl:ofjVkb;Nyt6ic:jn2sGd;SNUn3:x8cHvb;LEikZe:byfTOb,lsjVmc;io8t5d:sgY6Zb;Oj465e:KG2eXe;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;nAFL3:s39S4;iFQyKf:QIhFr/m=aLUfP?xjs=s2 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Chromium";v="104", " Not A;Brand";v="99", "Google Chrome";v="104"sec-ch-ua-full-version-list: "Chromium";v="104.0.5112.81", " Not A;Brand";v="99.0.0.0", "Google Chrome";v="104.0.5112.81"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "104.0.5112.81"sec-ch-ua-platform-version: "6.0.0"sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-model: sec-ch-ua-platform: "Windows"Accept: */*X-Client-Data: CJW2yQEIo7bJAQjEtskBCKmdygEI6PPKAQiTocsBCLm0zAEIkLzMAQjUvMwBCPTAzAEIm8HMAQiywcwBCMXBzAEI1sHMAQjcxMwBCN/EzAEI1sbMAQidycwBCOPLzAE=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.google.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8Cookie: CONSENT=PENDING+605; AEC=ARSKqsLf93qkGcXLgjc6TtVyNdibUWvHrhH1XKQc2B0L9uF7P0CyJ_n74Q; SOCS=CAISHAgBEhJnd3NfMjAyMzAxMTgtMF9SQzEaAmVuIAEaBgiA4sGeBg; NID=511=lhcqvASiDCO0DxZodcjlI6Ue9orYswUE8f7gKzLn_y1iAmcC7yPcUyJCzWUgV3pzof4UWqx9ONQ5GIrhYGNE0bjIeifCg6kTSRel7Hy66LJITNJHw7i1iThpWUtVQym0cJmjWOHVdyjs23AgDrapDyuK_Gqnw
Source: unknown DNS traffic detected: queries for: clients2.google.com
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 25 Jan 2023 08:43:25 GMTContent-Type: text/html; charset=UTF-8Content-Length: 59Connection: closeLast-Modified: Wed, 25 Jan 2023 03:40:04 GMTETag: "3b-5f30e6349b9f2"Accept-Ranges: bytes
Source: global traffic HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Wed, 25 Jan 2023 08:43:26 GMTContent-Type: text/html; charset=UTF-8Content-Length: 59Connection: closeLast-Modified: Wed, 25 Jan 2023 03:40:04 GMTETag: "3b-5f30e6349b9f2"Accept-Ranges: bytes
Source: unknown Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/104.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-GB,en-US;q=0.9,en;q=0.8
Source: unknown HTTPS traffic detected: 142.250.203.100:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: classification engine Classification label: clean0.win@26/0@11/10
Source: C:\Program Files\Google\Chrome\Application\chrome.exe File created: C:\Program Files\Google\GoogleUpdater Jump to behavior
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=1772,i,13714808044369432181,11901859910510463980,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8
Source: unknown Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://listfoo.org/zmg5f
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-GB --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=1772,i,13714808044369432181,11901859910510463980,131072 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationTargetPrediction /prefetch:8 Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Process created: unknown unknown Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe Directory created: C:\Program Files\Google\GoogleUpdater Jump to behavior
windows-stand
Hide Legend

Legend:

  • Process
  • Signature
  • Created File
  • DNS/IP Info
  • Is Dropped
  • Is Windows Process
  • Number of created Registry Values
  • Number of created Files
  • Visual Basic
  • Delphi
  • Java
  • .Net C# or VB.NET
  • C, C++ or other language
  • Is malicious
  • Internet
behaviorgraph top1 dnsIp2 2 Behavior Graph ID: 791296 URL: https://listfoo.org/zmg5f Startdate: 25/01/2023 Architecture: WINDOWS Score: 0 14 www.google.com 2->14 6 chrome.exe 15 1 2->6         started        9 chrome.exe 2->9         started        process3 dnsIp4 16 192.168.2.1 unknown unknown 6->16 18 239.255.255.250 unknown Reserved 6->18 11 chrome.exe 6->11         started        process5 dnsIp6 20 listfoo.org 185.180.199.229, 443, 49706, 49707 HOSTING-SOLUTIONSUS Netherlands 11->20 22 www.google.com 142.250.203.100, 443, 49710, 49711 GOOGLEUS United States 11->22 24 8 other IPs or domains 11->24
  • No. of IPs < 25%
  • 25% < No. of IPs < 50%
  • 50% < No. of IPs < 75%
  • 75% < No. of IPs

Contacted Public IPs

IP Domain Country Flag ASN ASN Name Malicious
216.58.215.238
 consent.google.com United States
15169 GOOGLEUS false
142.250.203.100
 www.google.com United States
15169 GOOGLEUS false
185.180.199.229
 listfoo.org Netherlands
14576 HOSTING-SOLUTIONSUS false
142.250.203.110
 clients.l.google.com United States
15169 GOOGLEUS false
172.217.168.78
 plus.l.google.com United States
15169 GOOGLEUS false
172.217.168.14
 google.com United States
15169 GOOGLEUS false
239.255.255.250
 unknown Reserved
unknown unknown false
142.250.203.109
 accounts.google.com United States
15169 GOOGLEUS false

Private

IP
192.168.2.1
127.0.0.1

Contacted Domains

Name IP Active
google.com 172.217.168.14 true
consent.google.com 216.58.215.238 true
accounts.google.com 142.250.203.109 true
plus.l.google.com 172.217.168.78 true
listfoo.org 185.180.199.229 true
www.google.com 142.250.203.100 true
clients.l.google.com 142.250.203.110 true
clients2.google.com unknown unknown
apis.google.com unknown unknown

Contacted URLs

Name Malicious Antivirus Detection Reputation
https://www.google.com/gen_204?atyp=i&ct=bxjs&cad=&b=0&ei=ruvQY6uHDeSP9u8PlpqO-Ak&zx=1674636206145 false
    		high
    https://www.google.com/ false
      		high
      https://www.google.com/manifest?pwa=webhp false
        		high
        https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard false
          		high
          https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=ruvQY6uHDeSP9u8PlpqO-Ak&rt=wsrt.486,aft.423,afti.423,prt.322&wh=913&imn=3&ima=3&imad=0&imac=0&aftp=913&bl=m-wt false
            		high
            https://www.google.com/client_204?cs=1 false
              		high
              https://www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png false
                		high
                https://www.google.com/gen_204?atyp=i&ct=bxjs&cad=&b=1&ei=ruvQY6uHDeSP9u8PlpqO-Ak&zx=1674636232161 false
                  		high
                  https://listfoo.org/zmg5f false
                    		unknown
                    https://www.google.com/gen_204?atyp=csi&ei=ruvQY6uHDeSP9u8PlpqO-Ak&s=webhp&t=all&bl=m-wt&wh=913&imn=3&ima=3&imad=0&imac=0&aftp=913&adh=&ime=3&imex=3&imeh=0&imea=0&imeb=0&imel=0&scp=0&net=dl.1300,ect.4g,rtt.100&mem=ujhs.10,tjhs.11,jhsl.2173,dm.8&sys=hc.4&rt=aft.423,afti.423,prt.322,dcl.327,aftqf.424,ol.904,xjsls.26226,xjses.26870,xjsee.26920,xjs.26921,lcp.356,fcp.193,wsrt.486,cst.75,dnst.32,rqst.232,rspt.116,sslt.75,rqstt.370,unt.257,cstt.295,dit.813&zx=1674636232860 false
                      		high
                      https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.WEPncdil2Uw.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-eOecLLtOXEl3I3kIuMsKXRkDMmA/cb=gapi.loaded_0 false
                        		high
                        https://www.google.com/gen_204?atyp=i&ei=ruvQY6uHDeSP9u8PlpqO-Ak&dt19=2&zx=1674636233492 false
                          		high
                          https://www.google.com/xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/ck=xjs.s.F0fY5Pm-eS0.L.W.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/exm=cdos,csi,d,dpf,hsm,jsa/ed=1/dg=2/br=1/rs=ACT90oHWjJk68F8W9qa5QTlNuGD_7xu0jA/ee=Pjplud:PoEs9b;QGR0gd:Mlhmy;uY49fb:COQbmf;EVNhjf:pw70Gc;sTsDMc:kHVSUb;g8nkx:U4MzKc;wQlYve:aLUfP;kbAm9d:MkHyGd;F9mqte:UoRcbe;oUlnpc:RagDlc;YV5bee:IvPZ6d;dtl0hd:lLQWFe;yGxLoc:FmAr0c;dIoSBb:ZgGg9b;pXdRYb:JKoKVe;wR5FRb:TtcOte;KpRAue:Tia57b;aZ61od:arTwJ;JXS8fb:Qj0suc;rQSrae:C6D5Fc;qavrXe:zQzcXe;UDrY1c:eps46d;w3bZCb:ZPGaIb;VGRfx:VFqbr;imqimf:jKGL2e;Np8Qkd:Dpx6qc;BjwMce:cXX2Wb;oGtAuc:sOXFj;NPKaK:PVlQOd;EmZ2Bf:zr1jrb;daB6be:lMxGPd;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;R4IIIb:QWfeKf;BMxAGc:E5bFse;WDGyFe:jcVOxd;wV5Pjc:L8KGxe;xbe2wc:wbTLEd;DpcR3d:zL72xf;tosKvd:ZCqP3;ESrPQc:mNTJvc;NSEoX:lazG7b;G6wU6e:hezEbd;kCQyJ:ueyPK;okUaUd:wItadb;GleZL:J1A7Od;Xeq57c:wZTUNc;eJZqRc:wUwbse;RiX1h:uiAbXc;oSUNyd:fTfGO;SJsSc:H1GVub;SMDL4c:fTfGO;JsbNhc:Xd8iUd;zOsCQe:Ko78Df;KcokUb:KiuZBf;WCEKNd:I46Hvd;LBgRLc:XVMNvd;LsNahb:ucGLNb;UyG7Kb:wQd0G;TxfV6d:YORN0b;qaS3gd:yiLg6e;aAJE9c:WHW6Ef;BgS6mb:fidj5d;UVmjEd:EesRsb;z97YGf:oug9te;CxXAWb:YyRLvc;VN6jIc:ddQyuf;SLtqO:Kh1xYe;VxQ32b:k0XsBb;DULqB:RKfG5c;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;hjRo6e:F62sG;whEZac:F4AmNb;qddgKe:x4FYXe;eBAeSb:Ck63tb;vfVwPd:OXTqFb;w9w86d:dt4g2b;lkq0A:Z0MWEf;KQzWid:mB4wNe;pNsl2d:j9Yuyc;eHDfl:ofjVkb;Nyt6ic:jn2sGd;SNUn3:x8cHvb;LEikZe:byfTOb,lsjVmc;io8t5d:sgY6Zb;Oj465e:KG2eXe;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;nAFL3:s39S4;iFQyKf:QIhFr/m=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch?xjs=s1 false
                            		high
                            https://www.google.com/xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/ck=xjs.s.F0fY5Pm-eS0.L.W.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/exm=CnSW2d,DPreE,DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,WlNQGd,aa,abd,async,cdos,csi,d,dpf,epYOx,fXO0xe,hsm,jsa,kQvlef,nabPbb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch/ed=1/dg=2/br=1/rs=ACT90oHWjJk68F8W9qa5QTlNuGD_7xu0jA/ee=Pjplud:PoEs9b;QGR0gd:Mlhmy;uY49fb:COQbmf;EVNhjf:pw70Gc;sTsDMc:kHVSUb;g8nkx:U4MzKc;wQlYve:aLUfP;kbAm9d:MkHyGd;F9mqte:UoRcbe;oUlnpc:RagDlc;YV5bee:IvPZ6d;dtl0hd:lLQWFe;yGxLoc:FmAr0c;dIoSBb:ZgGg9b;pXdRYb:JKoKVe;wR5FRb:TtcOte;KpRAue:Tia57b;aZ61od:arTwJ;JXS8fb:Qj0suc;rQSrae:C6D5Fc;qavrXe:zQzcXe;UDrY1c:eps46d;w3bZCb:ZPGaIb;VGRfx:VFqbr;imqimf:jKGL2e;Np8Qkd:Dpx6qc;BjwMce:cXX2Wb;oGtAuc:sOXFj;NPKaK:PVlQOd;EmZ2Bf:zr1jrb;daB6be:lMxGPd;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;R4IIIb:QWfeKf;BMxAGc:E5bFse;WDGyFe:jcVOxd;wV5Pjc:L8KGxe;xbe2wc:wbTLEd;DpcR3d:zL72xf;tosKvd:ZCqP3;ESrPQc:mNTJvc;NSEoX:lazG7b;G6wU6e:hezEbd;kCQyJ:ueyPK;okUaUd:wItadb;GleZL:J1A7Od;Xeq57c:wZTUNc;eJZqRc:wUwbse;RiX1h:uiAbXc;oSUNyd:fTfGO;SJsSc:H1GVub;SMDL4c:fTfGO;JsbNhc:Xd8iUd;zOsCQe:Ko78Df;KcokUb:KiuZBf;WCEKNd:I46Hvd;LBgRLc:XVMNvd;LsNahb:ucGLNb;UyG7Kb:wQd0G;TxfV6d:YORN0b;qaS3gd:yiLg6e;aAJE9c:WHW6Ef;BgS6mb:fidj5d;UVmjEd:EesRsb;z97YGf:oug9te;CxXAWb:YyRLvc;VN6jIc:ddQyuf;SLtqO:Kh1xYe;VxQ32b:k0XsBb;DULqB:RKfG5c;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;hjRo6e:F62sG;whEZac:F4AmNb;qddgKe:x4FYXe;eBAeSb:Ck63tb;vfVwPd:OXTqFb;w9w86d:dt4g2b;lkq0A:Z0MWEf;KQzWid:mB4wNe;pNsl2d:j9Yuyc;eHDfl:ofjVkb;Nyt6ic:jn2sGd;SNUn3:x8cHvb;LEikZe:byfTOb,lsjVmc;io8t5d:sgY6Zb;Oj465e:KG2eXe;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;nAFL3:s39S4;iFQyKf:QIhFr/m=aLUfP?xjs=s2 false
                              		high
                              https://www.google.com/favicon.ico false
                                		high
                                https://google.com/ false
                                  		high
                                  https://www.google.com/images/branding/googlelogo/2x/googlelogo_color_272x92dp.png false
                                    		high
                                    https://listfoo.org/favicon.ico false
                                    • Avira URL Cloud: safe
                                    		 unknown
                                    https://www.google.com/xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/ck=xjs.s.F0fY5Pm-eS0.L.W.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/exm=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,cdos,csi,d,dpf,epYOx,hsm,jsa,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf,sonic,spch/ed=1/dg=2/br=1/rs=ACT90oHWjJk68F8W9qa5QTlNuGD_7xu0jA/ee=Pjplud:PoEs9b;QGR0gd:Mlhmy;uY49fb:COQbmf;EVNhjf:pw70Gc;sTsDMc:kHVSUb;g8nkx:U4MzKc;wQlYve:aLUfP;kbAm9d:MkHyGd;F9mqte:UoRcbe;oUlnpc:RagDlc;YV5bee:IvPZ6d;dtl0hd:lLQWFe;yGxLoc:FmAr0c;dIoSBb:ZgGg9b;pXdRYb:JKoKVe;wR5FRb:TtcOte;KpRAue:Tia57b;aZ61od:arTwJ;JXS8fb:Qj0suc;rQSrae:C6D5Fc;qavrXe:zQzcXe;UDrY1c:eps46d;w3bZCb:ZPGaIb;VGRfx:VFqbr;imqimf:jKGL2e;Np8Qkd:Dpx6qc;BjwMce:cXX2Wb;oGtAuc:sOXFj;NPKaK:PVlQOd;EmZ2Bf:zr1jrb;daB6be:lMxGPd;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;R4IIIb:QWfeKf;BMxAGc:E5bFse;WDGyFe:jcVOxd;wV5Pjc:L8KGxe;xbe2wc:wbTLEd;DpcR3d:zL72xf;tosKvd:ZCqP3;ESrPQc:mNTJvc;NSEoX:lazG7b;G6wU6e:hezEbd;kCQyJ:ueyPK;okUaUd:wItadb;GleZL:J1A7Od;Xeq57c:wZTUNc;eJZqRc:wUwbse;RiX1h:uiAbXc;oSUNyd:fTfGO;SJsSc:H1GVub;SMDL4c:fTfGO;JsbNhc:Xd8iUd;zOsCQe:Ko78Df;KcokUb:KiuZBf;WCEKNd:I46Hvd;LBgRLc:XVMNvd;LsNahb:ucGLNb;UyG7Kb:wQd0G;TxfV6d:YORN0b;qaS3gd:yiLg6e;aAJE9c:WHW6Ef;BgS6mb:fidj5d;UVmjEd:EesRsb;z97YGf:oug9te;CxXAWb:YyRLvc;VN6jIc:ddQyuf;SLtqO:Kh1xYe;VxQ32b:k0XsBb;DULqB:RKfG5c;bcPXSc:gSZLJb;cFTWae:gT8qnd;gaub4:TN6bMe;hjRo6e:F62sG;whEZac:F4AmNb;qddgKe:x4FYXe;eBAeSb:Ck63tb;vfVwPd:OXTqFb;w9w86d:dt4g2b;lkq0A:Z0MWEf;KQzWid:mB4wNe;pNsl2d:j9Yuyc;eHDfl:ofjVkb;Nyt6ic:jn2sGd;SNUn3:x8cHvb;LEikZe:byfTOb,lsjVmc;io8t5d:sgY6Zb;Oj465e:KG2eXe;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;nAFL3:s39S4;iFQyKf:QIhFr/m=CnSW2d,DPreE,WlNQGd,fXO0xe,kQvlef,nabPbb?xjs=s2 false
                                      		high
                                      https://www.google.com/xjs/_/js/md=1/k=xjs.s.en_GB.zobC7UqdsqU.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/rs=ACT90oFLXSotrQJhVFHbtpFxrnCGNSmSlQ false
                                        		high
                                        https://www.google.com/gen_204?ei=ruvQY6uHDeSP9u8PlpqO-Ak&ved=0ahUKEwirlsyBquL8AhXkh_0HHRaNA58QiZAHCCA&uact=3 false
                                          		high
                                          https://consent.google.com/save?continue=https://www.google.com/&gl=HR&m=0&pc=shp&x=5&src=2&hl=en&bl=gws_20230118-0_RC1&uxe=none&set_eom=false&set_aps=true&set_sc=true false
                                            		high
                                            https://www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp false
                                              		high
                                              https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&hl=en-HR&authuser=0&psi=ruvQY6uHDeSP9u8PlpqO-Ak.1674636232907&nolsbt=1&dpr=1 false
                                                		high
                                                https://www.google.com/gen_204?atyp=csi&ei=ruvQY6uHDeSP9u8PlpqO-Ak&s=webhp&st=20420&fid=1&t=fi&zx=1674636232867 false
                                                  		high
                                                  https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=104.0.5112.81&lang=en-GB&acceptformat=crx3&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26ping%3Dr%253D-1%2526e%253D1 false
                                                    		high
                                                    https://www.google.com/client_204?&atyp=i&biw=1280&bih=913&ei=ruvQY6uHDeSP9u8PlpqO-Ak false
                                                      		high
                                                      https://www.google.com/gen_204?ei=ruvQY6uHDeSP9u8PlpqO-Ak&vet=10ahUKEwirlsyBquL8AhXkh_0HHRaNA58QhJAHCBk..s&gl=HR&pc=SEARCH_HOMEPAGE&isMobile=false false
                                                        		high
                                                        https://www.google.com/gen_204?ei=ruvQY6uHDeSP9u8PlpqO-Ak&vet=10ahUKEwirlsyBquL8AhXkh_0HHRaNA58QhJAHCBk..h&va=26014 false
                                                          		high
                                                          https://www.google.com/ false
                                                            		high
                                                            https://www.google.com/xjs/_/js/k=xjs.s.en_GB.zobC7UqdsqU.O/am=AAEqCFcAOAAAQAAAAAAkIAAAAAAAAgAwBkDwlA0I2BAOEIMBsCwBIAAgiNEPEQAABgADGBYABAAAAED-AAQ8AQCDCQsAAAAAAAAAELAEweAGCQoCQAAAAAAAAACU0uTFASAIAgAAAQ/d=1/ed=1/dg=2/br=1/rs=ACT90oFLXSotrQJhVFHbtpFxrnCGNSmSlQ/m=cdos,dpf,hsm,jsa,d,csi false
                                                              		high