https://fstwbl-europe-west12.backstory.chronicle.security/search?query=target.url%20%3D%20%22mail-attachment.googleusercontent.com%2Fattachment%2Fu%2F0%2F%3Fui%3D2%26ik%3D5124c9fd9e%26attid%3D0.1%26permmsgid%3Dmsg-f:1879574038791275167%26th%3D1a1596a13f33429f%26view%3Datt%26zw%26disp%3Dsafe%26saddbat%3DANGjdJ-NwhjwKlt_tYXPichaSdduac6kV-FYKaK5TO1md-7507WM9EvXR3llFZW2Tird4_d_qLAZzdcKY1cyxAnW4Ts46OuzYGtuLZmGIjGWpiazmkp8LolR4DZJ2riYsHOePDTZAwWDZnIy75MKu6nlMU_3_dCpAkIDT5ol135lJQhwzzlCbecLObHY-gBOe5k_bUEaMLxEh7n1en-1EtqQxR8-sIMgocvdSgSAjJ33oELaGvsdVVxqYcWibCoyikGaQpRqD1R_2fQna_PezTr0UomZ85OS9JY91RZ2IrSR9uEMIdRNuusBdTMF5CknPgy-gCDMCMSyMVPA-NaLapcq93SOzIVU3FMAlRgA23hn_WnUDv8XYFsC5rIuZlLXpLsrKGCVRS5ipEeak-R4oUADKkyDU_5CLfmufs2Kh8FX63XOzKHvEtkjgFhiEZBjKeWyJUtFAxfG8DJr0DFOouhkAUe25Xc7BLqVOEpR8Zu9ZkkWUC5UItTj_AcVj456YBaejteVQkLvlMffI0BY-d56diYLmVkrZ1Yg1H5Ip0WXvRyWRyXNyB-KtB3IC_Eh1rFmWb3jhqq-78IRqKS21FEFePlHTRUHyZ2XRXvOEFhHLsSDynn4UcjBFwhz4fZELYTAxOJNu5m3zUYBCkbyXbxnHMS7h8quPohIbJ50jyLncotngyHf8wp1g0oDMRPSCyee10QgMEE-EmftbnIJ57iQA6nOpIEIPZbPYVFefOrZL1-KHIYcRSk8gSxFBDCO4Ik31PTLjSeGkkZZhr-jrfJ5OJNjUjHeNWWrHAk30-o1VGIY5s2kzHVrPmUzD-dwA3d9T10X1sAwFaZGDC9O8zstcuP8_pIvom5qyqZy29S525ewofqXQJ6-6OLlnCQaEJZVjDS5-m6uCx_wwUjvrirXrDemL3kUjwiTeceikCI0kmgYtpcUK3s8hV01zeJiufLLBsISi4UY8Ui5HhFSqQ9NJfbY5ODGrC2zvMpr7r6IGW9nLRqVmUgD7JaSVnTwQg9f4IHiH4iFj49XfouYwTbhAbxaeByHoMHpOzRU7Q%22&startTime=2026-10-20T12:35:01.000Z&endTime=2026-10-20T13:35:01.000Z&alertsSnapshotQuery=feedback_summary.status%20!%3D%20%22CLOSED%22&snapshotStartTime=2026-10-20T13:02:31.000Z&snapshotEndTime=2026-10-20T13:07:31.000Z&eventTimestamp=2026-10-20T13:05:01Z&eventIds=AAAAAOLuQGCevGb7DG%2FoSCV2Sn8AAAAABQAAAGwAAAA%3D&tab=events&entityTab=timed
Report summary
Submitted and final observations · captured HTTP activity
- Submitted URL
- https://fstwbl-europe-west12.backstory.chronicle.security/search?query=target.url%20%3D%20%22mail-attachment.googleusercontent.com%2Fattachment%2Fu%2F0%2F%3Fui%3D2%26ik%3D5124c9fd9e%26attid%3D0.1%26permmsgid%3Dmsg-f:1879574038791275167%26th%3D1a1596a13f33429f%26view%3Datt%26zw%26disp%3Dsafe%26saddbat%3DANGjdJ-NwhjwKlt_tYXPichaSdduac6kV-FYKaK5TO1md-7507WM9EvXR3llFZW2Tird4_d_qLAZzdcKY1cyxAnW4Ts46OuzYGtuLZmGIjGWpiazmkp8LolR4DZJ2riYsHOePDTZAwWDZnIy75MKu6nlMU_3_dCpAkIDT5ol135lJQhwzzlCbecLObHY-gBOe5k_bUEaMLxEh7n1en-1EtqQxR8-sIMgocvdSgSAjJ33oELaGvsdVVxqYcWibCoyikGaQpRqD1R_2fQna_PezTr0UomZ85OS9JY91RZ2IrSR9uEMIdRNuusBdTMF5CknPgy-gCDMCMSyMVPA-NaLapcq93SOzIVU3FMAlRgA23hn_WnUDv8XYFsC5rIuZlLXpLsrKGCVRS5ipEeak-R4oUADKkyDU_5CLfmufs2Kh8FX63XOzKHvEtkjgFhiEZBjKeWyJUtFAxfG8DJr0DFOouhkAUe25Xc7BLqVOEpR8Zu9ZkkWUC5UItTj_AcVj456YBaejteVQkLvlMffI0BY-d56diYLmVkrZ1Yg1H5Ip0WXvRyWRyXNyB-KtB3IC_Eh1rFmWb3jhqq-78IRqKS21FEFePlHTRUHyZ2XRXvOEFhHLsSDynn4UcjBFwhz4fZELYTAxOJNu5m3zUYBCkbyXbxnHMS7h8quPohIbJ50jyLncotngyHf8wp1g0oDMRPSCyee10QgMEE-EmftbnIJ57iQA6nOpIEIPZbPYVFefOrZL1-KHIYcRSk8gSxFBDCO4Ik31PTLjSeGkkZZhr-jrfJ5OJNjUjHeNWWrHAk30-o1VGIY5s2kzHVrPmUzD-dwA3d9T10X1sAwFaZGDC9O8zstcuP8_pIvom5qyqZy29S525ewofqXQJ6-6OLlnCQaEJZVjDS5-m6uCx_wwUjvrirXrDemL3kUjwiTeceikCI0kmgYtpcUK3s8hV01zeJiufLLBsISi4UY8Ui5HhFSqQ9NJfbY5ODGrC2zvMpr7r6IGW9nLRqVmUgD7JaSVnTwQg9f4IHiH4iFj49XfouYwTbhAbxaeByHoMHpOzRU7Q%22&startTime=2026-10-20T12:35:01.000Z&endTime=2026-10-20T13:35:01.000Z&alertsSnapshotQuery=feedback_summary.status%20!%3D%20%22CLOSED%22&snapshotStartTime=2026-10-20T13:02:31.000Z&snapshotEndTime=2026-10-20T13:07:31.000Z&eventTimestamp=2026-10-20T13:05:01Z&eventIds=AAAAAOLuQGCevGb7DG%2FoSCV2Sn8AAAAABQAAAGwAAAA%3D&tab=events&entityTab=timed
- Submitted IP / ASN
142.251.152.119 AS15169 · Google LLC
- Final URL
- https://accounts.google.com/v3/signin/identifier?opparams=%253Fresponse_mode%253Dform_post&dsh=S1060030599%3A1792502477582038&client_id=818089115710-24qtdbvhlh15fkkuapotkr0cdnbfj72m.apps.googleusercontent.com&code_challenge=VFukEReThjhhaKl8fUneNfWaD1Hpt8Jstzbys1RPJ8c&code_challenge_method=S256&nonce=36d221c7910571a829d3a93b6d8bf5124e256946218c6e7f67d9d7d7b9d8d4d8&o2v=2&redirect_uri=https%3A%2F%2Fauth.backstory.chronicle.security%2Fsignin-callback%2Fgoogle&response_type=code&scope=openid+email+profile+https%3A%2F%2Fwww.googleapis.com%2Fauth%2Fcloud-platform&service=lso&state=AVZqWEqu5GtAP_GfoVEluptnLhJTxrDKXpEZshcbTdPRmL6iaYY0xhOAGEtrcZXMS8RS2CROTEd6qRUBBUhqgM0QJADo1TdE5VME88DDLYVU4HeJLfZirdiKXGMmqG5wIfVX9aazSAgj9fNdo9oAWnJeK0Dh_Z_YTMfWg6aKkBzv9hjN8IsJBT8P6LYan-PBK8O1LhkNzAQ3EJlch7y9OYPEsEcbtswCIMsippe6h7ZY-1wUD4flpXFnGy_CVEphbleEcAIttLkDwQuI8dxSha0HMibEtHYynXJacrLhVxfQR7xRVGWz-H906f1uiX-Xn7JrWo1nr29ur3pdKvXyg6mImIG8bFOEi3yZUaMwlEtkWQx0L8ED1LFSWbkh0oCt-ReWKKmL0lkGpOaILTaRbvCaX7vLDt1zAo24Tmy5hXamK3Q9NwTHEUxzzqKiFotIjupygvZbqk7wztORAmrF3lEv9jes_mDnZhn1qjAnHwrnNPzPQ10Y7d8F9ieQje1ImTKNz1pntcyH9Xcho1Xxc_Nk5_cb0UKhUvompGbVlPAxOyoE3Felll9Htv-NTd28tWI__n8VTC09ZuyZ4bGnAYregsMDOPsunohuIkY22ljv7oOBfbufWddQWlHFSHp9PCQ3Hib_CwirSpRJ3zJsfTLSLlIWsYjMm0fcf0qn7mUiCoY5tIgmwA8IsGbVHBMIjbu8J_ibzYS5a6E4qTZNM3QM4Kdh4xqn_4smY7nfR2_Wn5lPRQDJe9NRgNFoZHlqK1HI9YQiaZLEVnDcrOg6guWVFL1imd3-lhOCXid0mu6jiZmvZyi5npYciTlU-Oe1iXjX0GN6jWFlo8yij_pnncys1PaOeeYC85h5OSMFXVVU39542rbC4Yc-at3Es9dx67Tso_C4-LAV-zWqkCoH9DARcLLMI1XDzbwF9H5ucQ5CQdioc9uMprKkEAQIWYxqmMiZZnUezjy_aKHwHkBsv71ugrhWeOXv97kIJmowj_gXX0L2tU2XTF7QtDP5IxQ0w5osRbmqyjHPROZMNuvjE7Y7Ozj8m075qDJDuB9rxiNB8FCzlNP7IHS_8TMkhyYHIJoiIjm8Lped1OhQGWn9weTPEyDCJHaaOkNWYg7bseidcc1wLqb0QC-l1YXKz86jw_D3C5vX8gQNrUJRLemjnc4Bqii9ENycVumG2qED56jO9mXYv3GMqOO-4qspfSAy1z9RQfLmY3mohcIilf3WQDGUYwqdVWf_Wav5ht5i543RcSuHi1lfCjSZlymltsgiBUj0dmiU_TpNqCE8YiRDN6ewn2xx7cD-DXsJ4EvYvYAWIwD4eMKD5W4Hic54Jw7zIMyOZiY4eN6X1TAkGP987Q6JJPna1qQ5iCNTSCqnmAVLJ7F1C_XU4683FPtxyytiweE8evSBPUQCiquO2G__wA1JKss0WR9V3M3PnMekOCxAC-DY4VuVNcZhSV9afFLv_WzMLHbjF4m5mQKS0rzgSf6DwKHYdmhYbHlG95Q_rtGhhe_O2LGymi2l7NLn2IKKVjzpliH_2uiqq496UBk1g1rUPRCU71-RvHTOXQqZiRtHRyX9FdNH42-j78SHeF-94-g7QvWCG9DW41_knA3fcul_aP-LZvjU238d3JEEe_pqhlmhXHrS07iVByNbt5YwTEHHv-Zp4D8AZ11J4eLLGp4rSr3tRfsQQxYBR15muagWsxwWJe4oWgL_3PJoEYmrz3NxqnQAesYDkOmI10vwLiN7kp0uDpH9iAInUwl1_9Jm0bGSsRFB7Z7UvR1bIPt67mLZVSFQfGcD6bHtggqGm04PsT4ZlzvljzGfV7gChlkW2D5vvzL4se04jLtlmcn1qJMuW-616j_un9LAGF1oBfWvlHKVepXLOnckbYN1nWtxoRxvHh07k2Gpi_-kuDGzdSbqp7oTKdDQOXGxY84OzdkR0Rp6nzVnGMAif0hxL9NEGv9Ndg9GkQ6UdFy0VDGz1ARtjNzMk4RncpSdWMEg1XW57A_eJeFzTPOjbdSKfS8cfxwiYmLDu7GDr-jCKYs4bgURQqNKgdEPsr2hr-uAKm5m6NW7qAbg0UBCa93Acaev5x0LHB0FPDoL6pZx5zS_lDmIk9pCjk8x77fqCt6N32xaxHLy1hjMjZxjDjHRaOrlwNzzlFKja3o85VX1vw2gnc-DJl0aCVrRTCPSQkMDR4FRDfhmr02cDzBiV4AA1Q052kSN3TPAI-OaXPMi9P2HKNZdanJERolUK1cwzD0hKSkQaxeSp5Bl0Jp7ZOSyjuSJfuhbM9rmrLlsk8x4EQio-7by-TihKHny-OTBs5Gvq5Wmy32mkzcxpWMBa59XaX-AhM9367mYxpPS-G3dyWcixtFbDPxJ1oepF4ihgcjYYku3JCnQCMeT3ak8LAixfCCjh2IjEySdYzDSj_eJsuhVz5EwRMpbGxKhIETwhqrFcbpWb1g0Zz1ZrQSt_9c9iw1GCQrz3X-GYe7n8u3Hd06T6e048d8GIjfreCLkqaja61rSk_xOa0NqigiyFD3nymuSxKTJ9IDYekEaNE68h6Ko_EJ-aatYkdFLJ3hzf0oAUs5CHE5ub0FPw0zF_ViSnTfk60TQFGpJUU8wriBAFzGoqiSGEY8gvSKDYOJ7SfcnK201o_1IAzlgfTh9wMSB_jYIeMbYmP9_SrAknXyQsgTFA3CibuHs-lhLh4CYqpmmwCcASfBNFv1mj9v2cj75x-WUyBZeaElBOfwk90FZvI4l6ncbWn07cnGv12MTK2lJV3tvPoLbbHKknak8jw0gw22WhOUsRgBvmnSx3C60kzA&flowName=GeneralOAuthFlow&continue=https%3A%2F%2Faccounts.google.com%2Fsignin%2Foauth%2Fv3%2Fconsent%3Fauthuser%3Dunknown%26part%3DAJi8hAMisDqlFeb_BJOL6ZrVWfJRfVGlBw0UMPrRU4l549RiFkXRFZLw-x7dPDirL4RLQ0TqSE8LnyxAOMF4hw0EqWCNx-6FzV3zBNAGX6FcN9nFBtnwJyhG9mlxyolj8ob35giDPC9bR6_IBAFOaFFQDAluXV-Kb_-GmRfxkXaM4m7QXtReHoxkqdHixLGYDl_OFkRh3JiAmOmCsHqfDjr3gkFeNeRhygnbSKnZz3uL9-gJvSHfQQBPz9TiOgbQeGQqvZBfjGZ1kus4tDzpRCkgDFnBUgCQLVHZ8EWRcnBOERRukq4wFGThUoXrBgKufvFCt52tavRGqnkQyLHCt8xVOBcH-5weu9sGz2RDWp6NvlOqjvCdjw6C-1kdcRDl6nYruARWREHjV7oGRMai7iN4g9K7GncaeNK9zKvcMsqXvLNJejVXMTvLyR4bm7P2JYPJ_fmkVB7jNPxE_psMO6eOWM8_P42xbWg4A04ApD9vPaN-1-T8V2MUQqKxaQT80E3aQWaRpiZ6%26flowName%3DGeneralOAuthFlow%26as%3DS1060030599%253A1792502477582038%26client_id%3D818089115710-24qtdbvhlh15fkkuapotkr0cdnbfj72m.apps.googleusercontent.com%26requestPath%3D%252Fsignin%252Foauth%252Fv3%252Fconsent%23&app_domain=https%3A%2F%2Fauth.backstory.chronicle.security&rart=ANgoxccefI9uV2i3q3SZ48OJfp4Aol315_JCKevaj1MZ_78mzqT2b3IuCzpk16QHGrR_whFRC2f3DpUHaVRIGtJw5jvID7abFferhybRj-lcqo43a98rqZ0
- Final IP / ASN
172.253.148.84 AS15169 · GOOGLE
Final page
- Page title
- Sign in - Google Accounts
- Final DOM MIME
- text/html; charset=utf-8
- Final DOM size
- 1.27 MB (1330392 bytes)
Detections
Activity
- HTTP requests
- 32
- Observed hosts
- 8
- Script records
- 156
Estimated HTTP data
- Sent
- ~47.9 KB
- Received
- ~3.62 MB
Page capture
Final browser state
available for this report.
Detection signals
URLQuery findings, Threat Detection Systems, and IDS alerts
Absence of findings is not a clean verdict.
Host infrastructure
Observed hosts are context, not independent maliciousness verdicts
| Host | Rank | Registered | First seen | Last seen | Sent | Received | IP | Fingerprints |
|---|---|---|---|---|---|---|---|---|
| accounts.youtube.com | 3245 | 2005-02-15 | 2012-06-27 | 2026-10-16 | 662 B | 3.2 KB | ||
| fstwbl-europe-west12.backstory.chronicle.security | N/A | 2017-11-20 | 2026-10-20 | 2026-10-20 | 6.8 KB | 7.5 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | |
| auth.backstory.chronicle.security | 2889996 | 2017-11-20 | 2022-11-12 | 2026-10-13 | 2.4 KB | 5.2 KB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. | |
| www.gstatic.com | 146047 | 2008-02-11 | 2012-05-29 | 2026-10-18 | 19.0 KB | 2.21 MB | ||
| play.google.com | 48 | 1997-09-15 | 2013-05-30 | 2026-10-19 | 3.4 KB | 2.3 KB | ||
| accounts.google.com | 103 | 1997-09-15 | 2012-05-23 | 2026-10-19 | 11.7 KB | 1.28 MB | HSTS Security HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS. OpenGSE Web servers OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine. Java Programming languages Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible. | |
| www.google.com | 22 | 1997-09-15 | 2015-05-10 | 2026-10-18 | 507 B | 6.0 KB | ||
| fonts.gstatic.com | N/A | 2008-02-11 | 2014-04-02 | 2026-10-18 | 1.1 KB | 109.4 KB |