{"report_id":"8733541b-cb59-4146-a877-cbeaa2681cda","version":6,"status":"done","tags":[],"date":"2025-08-22T23:00:48Z","url":{"schema":"http","addr":"exodus-task.com","fqdn":"exodus-task.com","domain":"exodus-task.com","tld":"com"},"ip":{"addr":"196.251.84.140","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"final":{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"title":"Google"},"submit":{"url":{"schema":"http","addr":"exodus-task.com","fqdn":"exodus-task.com","domain":"exodus-task.com","tld":"com"},"ip":{"addr":"196.251.84.140","port":0,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-09-26T23:00:48Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":2,"urlquery":0,"analyzer":0}},"detection":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:37Z","timestamp":1755903637,"ip_dst":{"addr":"172.18.0.13","port":47494,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:37.808503+0000\",\"flow_id\":1063193226026914,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47494,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":738,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:32.761762+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:40Z","timestamp":1755903640,"ip_dst":{"addr":"172.18.0.13","port":47506,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:40.989192+0000\",\"flow_id\":1084672357630840,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47506,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":552,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:35.918392+0000\"}}"}],"analyzer":null,"urlquery":null},"summary":[{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-08-20T15:10:53.071671Z","alert_count":0,"request_count":1,"received_data":40351,"sent_data":536,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ogads-pa.clients6.google.com","ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":508,"first_seen":"2025-03-25T10:27:20.769449Z","last_seen":"2025-08-20T18:35:14.834195Z","alert_count":0,"request_count":2,"received_data":1294,"sent_data":1732,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2025-08-20T15:13:39.8381Z","alert_count":0,"request_count":22,"received_data":1750259,"sent_data":31575,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"google.com","ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":1,"first_seen":"2013-10-02T17:25:49Z","last_seen":"2025-08-20T17:32:14.638731Z","alert_count":0,"request_count":1,"received_data":158902,"sent_data":548,"comment":"","tags":null,"fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}]},{"fqdn":"exodus-task.com","ip":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":4,"request_count":2,"received_data":158316,"sent_data":884,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"csp.withgoogle.com","ip":{"addr":"142.250.178.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":4614,"first_seen":"2015-10-29T09:31:36Z","last_seen":"2025-08-20T19:45:29.157912Z","alert_count":0,"request_count":1,"received_data":1679,"sent_data":480,"comment":"","tags":null,"fingerprints":null},{"fqdn":"play.google.com","ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":48,"first_seen":"2013-05-30T23:24:35Z","last_seen":"2025-08-20T17:18:12.511183Z","alert_count":0,"request_count":1,"received_data":1046,"sent_data":982,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2025-08-20T15:25:39.983132Z","alert_count":0,"request_count":2,"received_data":227563,"sent_data":1071,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:37Z","timestamp":1755903637,"ip_dst":{"addr":"172.18.0.13","port":47494,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:37.808503+0000\",\"flow_id\":1063193226026914,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47494,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":738,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:32.761762+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:40Z","timestamp":1755903640,"ip_dst":{"addr":"172.18.0.13","port":47506,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:40.989192+0000\",\"flow_id\":1084672357630840,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47506,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":552,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:35.918392+0000\"}}"}]}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a86bc8f95bb891d615dfe3878748ccc","sha1":"320b87eb8383b2a00f7683e7f134d8c59251aeff","sha256":"67d3bf0009cf8aa8856fb534790a3b4c42b2caf44563e5d7519816dad7bbccd1","sha512":"2d06056dedc12f90bf46fcd491cc77ad453afd8210b765b5092ed8ebcb4b555974bc4c534d110cf4dc9a3d2c735294712353fe7b63320992ea2dae9aa969f601","ssdeep":"","tlshash":"68d0c9aef104b691151a69396d3fb294a83635237d80d441055a94429ce6b8e1455ca9","size":199,"data":"","first_seen":"2024-05-18T13:24:22Z","last_seen":"2026-06-27T05:52:29.16308Z","times_seen":75503,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9dfe4eae33cace2f3fef4f16b0d22364","sha1":"8bd02535f5534d56816913e04a261751224afff7","sha256":"181217aeed0277001fddd9c378229a7702bd14ba5164e593293ffa03f009478b","sha512":"b185636898889276cdaad10502ff7c05e4bacb22ec8592a2833d6b061c64f30b5f551a5392d532cb3cc82de7214eb1088f95d06a349885491f32680bf5093ac7","ssdeep":"","tlshash":"ca70008c8000028082e0000c03022a2222000a2008e2020083aa28a33082e032288088","size":23,"data":"","first_seen":"2024-11-22T19:38:42.458021Z","last_seen":"2026-07-23T17:58:44.234667Z","times_seen":85814,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sb_wiz,aa,abd,U9EYge,syul,syuk,syug,syfj,syuj,syu7,syxa,syv8,syuo,syuh,syuf,syui,syuq,syup,syum,syua,syu9,syu2,sytx,syt7,syt6,syub,syv7,syv5,syv6,syv0,sybz,syc0,syby,syuz,syux,syv3,syv4,syv2,syv1,sytv,syfk,syfi,syuw,async,pHXghd,syw8,syw7,rtH1bd,syzd,syze,syzi,syzh,syzg,syzc,syzb,sydz,sydx,syaj,syag,syae,syz0,SMquOb,sy7y,sy7x,syg1,syg0,sygd,sygb,syfz,syfw,syfv,syfu,sy8d,sy8a,sy8c,syft,syfx,syfs,sybp,sybu,sybm,syav,syb7,sybl,sybg,sy9z,sy9x,sybf,sybe,syb1,syb4,syb3,syb2,syb0,syap,syay,syb5,sybh,syab,syak,syba,syar,syas,syat,syb8,syax,syau,syc3,syc4,syal,sy9y,syc2,sya2,sya5,syah,syao,sybi,syfr,syfq,syfn,syfl,sy8g,uxMpU,syfc,sycc,syc8,syca,syc6,sycb,sybd,syc7,syc1,sy8y,sy8u,sy8t,sy8s,sy8r,sy8q,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sy8n,A1yn5d,YIZmRd,sy87,sy85,sy86,sy84,sy83,sy81,byfTOb,lsjVmc,LEikZe,sy7z,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy112,sy110,sy10y,sywh,sye0,d5EhJe,sy1dn,fCxEDd,sy1dm,sy1dl,sy1dk,sy1dj,sy1di,sy14q,sy14p,sy14o,sy11a,syz3,sy117,sy11b,syy7,syy3,T1HOxc,sy118,sy115,sy116,sy113,syqt,zx30Y,sy1dp,sy1do,sy1dd,sy18g,Wo3n8,ZgGg9b,dIoSBb,sy1is,sy1iz?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"91f7530cef44c1e07b1449e8ecd46e94","sha1":"54702d009e1678fa3ae9b0d8885edf9df4e8b23f","sha256":"720f9bcb1007f56d8e5e2dff368c018d01745caf41bd801d96ee04fb5272e0ad","sha512":"8548153751fcfdeda1aa4a0a0316afa722bc77b697ba71b53541923e897b2e33db857d0bb760c2dc2eb0ca36eb747c7daea0c1d0ffd3c8d9fd692ea503ddd5eb","ssdeep":"6144:IsOOHtSFcgGW99PH5Q9OiV2G20rlTaGGZxGaTtz7fX+7XyTAMxr6yCcY6gLe9JwK:IsOOHtSbGW99PH5Q9OO2G20rlTaGGZxx","tlshash":"1a74d9a47293b0b35762b5d4813b418ab3fea492f448cc6cb9acc8e17df444641f6b79","size":338126,"data":"","first_seen":"2025-08-22T23:00:54.239598Z","last_seen":"2025-08-23T04:02:25.850337Z","times_seen":19,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"7f18ac23052fba30a169d8b52e0d4277","sha1":"f9ef7d4bf3270f21c1787caf1d8c72f45ddbcba9","sha256":"942f72b0cef827a12a8fbf7778c62ca1ab371fe00d53b8b7375784c15d4b0e11","sha512":"18b8973d7b146b60b0b77c623a8f03c44c2710119af881a860ba5d2f473298317077dd077a60d0090ca285ddef0fa26e452b8f34d12e4bd3b7a81a2315685f07","ssdeep":"384:A1oc6qfDef6/5q8ntoMgG8TUSSuqpyd6oRoraxCsXgnsWqDEaou3lVlMD8XXM:A1oc6qfDef6/5/toUSS66WPhgmIaL3lS","tlshash":"aa92c5bfb720743345a3e676516f610a3d33606bb94c844860a8d4f07db4e9a40a7fee","size":20578,"data":"","first_seen":"2025-08-22T23:00:54.408589Z","last_seen":"2025-08-22T23:00:54.408589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sy1ev,P10Owf,sy1df,gSZvdb,syyh,WlNQGd,sytu,sytr,sytq,DPreE,syyj,syyi,nabPbb,syyf,syyd,syki,syo1,CnSW2d,syy9,syy6,syy8,nRwWne,syyc,fXO0xe?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c137b5ae5e2c398da0e55283e641388c","sha1":"779b97b414902d9f6d64457b56f41ed721a8e849","sha256":"c65f7dc57cf471b59e3d16b2470039f64f5d342b2cab9db18710af6ada624a98","sha512":"88109e14da8d61404e0de464e2744128ecfa1e2b0b40b431c9690d44492b242729057d8511c3721ad1198895345af8b2d635a57c2c3b90f407c5f1edd3e53cbc","ssdeep":"768:ArnX8MpPINRfueHh5FMdSxF/rFVYnMAR5xBp8U4xuSTY2nvtPrPeto2gJCOp/uSl:kpP0fueNpY6etQp/QtTs","tlshash":"c8d2f9a872a170235674f4e9803f034ab33eb599b949515cbd5c8de27cf088a4973fb9","size":28974,"data":"","first_seen":"2025-08-22T23:00:54.247037Z","last_seen":"2025-08-23T04:02:25.855434Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ad368a7aa19ee433ce40f61c0f0186eb","sha1":"2fdc66beea71070c1f83c8143e3be55c7740167c","sha256":"c17aba2b9358e02988a7f087ec3301f9dbbd6fffa0edc6cac25db750eca6b9c3","sha512":"125410b015bddcadf775f58eb14e890a51deeb5534916ff2f705037326c903169e731ea1c36dc4742bd3344a21b904be8c6da463a74365608b88ea33eb9f35cd","ssdeep":"192:2Ryye4nz3Y2gNdMvF5svbuoumpK4BJdMvF5svbuoumpK4Bv:Xb4E2RF5svKou0BQF5svKou0Bv","tlshash":"f2f12b7153113c1a6ba266f5643b2a883dab0a6f638ca31c3ad6b174e0b1c47c615a53","size":7627,"data":"","first_seen":"2025-08-22T23:00:54.409886Z","last_seen":"2025-08-22T23:00:54.409886Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"afe2a77c05c38ffdd1e689c8425112b1","sha1":"1133101d5bf058e7cf2d84fd27702444ae3cbfaa","sha256":"8c4003e001fd4ac1a05391c8ab7f1b67151461896e4746381da1a28a82249dbe","sha512":"8cad153bf4b7af5bcdd837e5823dc1f8d2fad01f05c8e92de2421fd0aac1ebcdbebd7f4bd2a630cc1775ca0b644f1c4d3af66de97a3364f48891eaf36a79d95c","ssdeep":"","tlshash":"743146cbbfa628fb14a5c490387b79d635319156141cf013c15a513b2329dcb94b1deb","size":1686,"data":"","first_seen":"2025-08-22T22:07:19.390522Z","last_seen":"2025-08-22T23:07:30.106788Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARIAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=1/ed=1/dg=3/br=1/rs=ACT90oFqc50VnsuhXrso8qczw1W6W9ktkA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,xD8Kp;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:M8uRWb;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;iySzae:a6xXfd;jJj2G:kF2o2b;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mWzs9c:fz5ukf;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:hjoqoe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tbg2ob:nMC03e;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zB3wie:WtgrP;zOsCQe:Ko78Df;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4f9fc6039765fae318a03519dcfdb164","sha1":"b10bc8c1ca908ff4343911372c0bd6dded0d7d9b","sha256":"c35d2daf0454bc055567b12783a91f0c9e40d5a284482b3e9e9044102e194d4a","sha512":"cf39c2d6ce3f875109cf134caa162dcdaad8ee4402bd5ba44ec083e4089ddcf1122354658ba4fbcffa321f5b71894b1095dd31ef0a2f515c45624374ce1607c2","ssdeep":"24576:bk+cJDozzH0uCQK+FTHW/HbNdc7kHjXeezabYz0ySWAkEwDyMsJwoyjSyxQSNR+F:bk+cJDozzH0uCQK+FTHW/HbNdc7kHjX2","tlshash":"fc15fa993393b59392a2f5d4503f114af3bab891f44d48acf9a8ddd27db088540f6b38","size":954218,"data":"","first_seen":"2025-08-22T23:00:54.402444Z","last_seen":"2025-08-22T23:07:30.098348Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"94c2f603bad6c50f62780f7f056ab3c2","sha1":"44bc70ba15154cc557ef9557ae0aa1ecbcdcc87c","sha256":"395a9dbf8ee9f0304366938746009f1243f15d1747ece342f125c877bcd427fa","sha512":"9abff992ef97bcc7f20819a2cb1fa7e5a51cd78e43f8faee58d480774a71aac9e344642ec0ef6a25f8be389bdac58d8bfb3fb087265a63b3973fa8807117d7b5","ssdeep":"","tlshash":"34d022f47e32e2f5218e6eb742dfd76431bb689ba6090214b8198c543a38f090422a71","size":221,"data":"","first_seen":"2024-06-11T16:49:58Z","last_seen":"2026-07-23T17:58:44.241196Z","times_seen":83752,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"2e1f9712ddfe210b369b13b360939e44","sha1":"718d5fc1c723ff3020e892f0106f6da36fa2c7f8","sha256":"ca7551d76e35277931bbfca31c9afa3c3a16a2b0bf4e4dbfbf79a1c15049ff84","sha512":"3a24b2e998b9e2a083c4a48e719f5fe96b843ecaf079ea7d4b477aaa05a31f13f9261248e74743de46f2e6fc9435701851ef6ca1d4293207f72bc80cf7d5e053","ssdeep":"192:pfn+SVJ70zgft70ujLOZZ5r4uc3jaqeEc6BtN1eE/0zWPBFPGFuw4GfwTrp3M:pfBVSzgft70ujLOtr9sjaqeELeE/0zWe","tlshash":"8d22e8b73210647b12d3b8eb213f1288acb0d063f489d84d619dddf27965d9214bafb9","size":10207,"data":"","first_seen":"2025-08-22T23:00:54.411929Z","last_seen":"2025-08-22T23:00:54.411929Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ec2b7833ffb07263f9d234dd9638e26","sha1":"18ee7b3ff7eb5a13cea62125aa18c230cc352f44","sha256":"8252c23967362ef1481819945fbf9d39c52ee8147e875f890421a38f6674475b","sha512":"2048a317d07ab8140202ce22f79fa4090b4dedd5cbc446bac161f3a1ed308a984a282f371896712c70dbd94cd7901205f538254431ea0d4c37732ed0d5f45dc5","ssdeep":"","tlshash":"0c41d97212077dfbde26b740c6647a46b89d9237a88c0cb6c7c95c9c0f644f3158459d","size":2169,"data":"","first_seen":"2025-08-22T23:00:54.412837Z","last_seen":"2025-08-22T23:00:54.412837Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sy1j0,sytg,sy1it,sy1iy,sy1ix,b6knsb,sy1io,sy1in,sy1e6,syy5,syef,sycn,sycl,sy9n,sycp,JKoKVe,pXdRYb,sy21p,sy9o,sy9l,sy8f,O1Gjze,TtcOte,wR5FRb,kQvlef,syed,syea,sye6,sye5,sybj,sye4,sycg,sye3,sye2,sye1,sydy,syds,sydq,syaf,syad,sya9,sya3,sya4,sy9v,sy9u,sy9t,sydw,sydp,sydo,sydn,sydb,sydk,syd1,sycs,syct,sydj,sybc,syd9,sydi,sycw,sycx,sydg,sycv,sydf,sycf,sycy,sycq,syd8,sydd,syd7,sydc,syd6,syd5,sycu,syd3,syd2,syd0,sycz,syda,sycr,syck,sy9s,sy9i,sy7t,zbML3c,gskBEc,sy18k,s980lf,syu5,loL8vb,syut,syus,syur,ms4mZb,sysf,B2qlPe,syy1,NzU6V,sy11g,sy11f,zGLm3b,sy1i1,sy1i0,sy1hz,sy18v,sy18w,DhPYme,sy1jf,sy1jh,sy1ii,sy1ig,sy1jg,sy1if,sy1jk,sy1jj,sy1jd,sy1je,KHourd,MpJwZc,UUJqVe,sy95,sOXFj,sy94,qTnoBf,oGtAuc,NJ1rfe,sy9f,q0xTif,y05UD,PPhKqf,sy14n,sy1au,sy1bd,sy1be,sy1b2,sy168,sy14m,sy14l,sy14k,syf7,sy1b1,sy1bg,sy14i,sy15y,sy1bc,sy157,sy1bb,sy151,sy1b3,sy160,sy1aq,sy1av,sy1ar,sy166,sy167,sy1b4,sy14s,sy1az,sy1ay,sy1aw,syml,symj,synw,sy1ax,syt5,sy1am,sy1b6,sy1as,sy1al,sy1ap,sy1ao,sy1an,sy1ak,sy173,sy1at,sy1aj,sy1ag,sy16a,sy16b,epYOx?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dc04aa24bb7df5e2592c4067a0ddcd0","sha1":"0a33a426207f248131e96060b18bfecfd7c0a574","sha256":"c938f0f0b076e7ef1b22c3f3ef866f37f76fa247b4785916ff09eb1d06dbf977","sha512":"20eafc6874e77c8d1fd6af26f29f7c559b3744e24cac51a368bf2989afa2a0eee11fe3663d7a42a0d2ca2d87d7ba6ab247d4f2169141613165643533d5d0c95d","ssdeep":"6144:uAWkVjLfzMlRUBP9FCBZMxf+G59zursDnrsDn3UFbnCD3+kvOZOTM3/9IIFz9:uAWkN7MlRUrFCBZMxf+G59zS3UFbnCDw","tlshash":"9934fad972a3f0933352a9c4506b0246f3bab492f148846db9f8d8f1bdf444946f5bb8","size":236684,"data":"","first_seen":"2025-08-22T04:44:41.55068Z","last_seen":"2025-08-23T04:02:25.848614Z","times_seen":122,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/rs=ACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ/m=lOO0Vd,sy8o,P6sQOc?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a150406362136ad47f44ed1eab932837","sha1":"47f38da0b400fc51046f1d8ec895374ad20466fb","sha256":"22748943812ffbbbfed2fb976f4705f4d3377937b3f23e80bb352efe89f80f72","sha512":"ad7c29438340657127b11e12ba7ae6e45b47edb4834bfaccf88966c4fe29d399d5567a7aa0c3ac947721b1105c964b9af2549453bd6fc326e5d9a3c6b5402567","ssdeep":"","tlshash":"0021461c21a6e4921971f2f044661106b27fb85eb489452cb1592dd3fef60e2c59773e","size":1394,"data":"","first_seen":"2025-08-22T04:44:41.54449Z","last_seen":"2025-08-23T04:02:25.852773Z","times_seen":129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"1e8877668000d2f72fb0a2d450198f32","sha1":"7231613489d01339a66552d76d6501ff323c12e1","sha256":"0801e6ed24b200d774b1c01443c80fe2f751f4b01227050a43471e99e6e43469","sha512":"a2b9b80c2bfd914e8eefd26346237946244d68e08eb5a46d51af70af4366b54956834edbe6430dd038441f10f83b63aac6f75ccce36fc6c702e3822ba602e6fc","ssdeep":"","tlshash":"c5b0926a260887797deba586ed22c3a4bc48c52064096044888e962ac9a0e70282bc89","size":122,"data":"","first_seen":"2025-04-22T12:45:40.909616Z","last_seen":"2026-07-25T01:17:08.287606Z","times_seen":75226,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ba369d7c059af0a73a1763a88696adcd","sha1":"00ed96f9f6b7d66e5c16e7bd673c69bebc0e28fd","sha256":"26cd639d933f5062cf883bef8238782fbad1e62a19a8b9315400cae8fe1e3fdc","sha512":"e9ed662fd72d3e77180554ace52a1c6512f42edd16561e934c6af5a77fa1f034c586098734117f1bd0f2bf2f195e31446399f9a572474079ae14dd8a00da0383","ssdeep":"384:vYZ6qZTarU9+6zkLktKvKMgoagdyOBT6AwtNOwq6671ZgPztvYty1917VacYbNyF:vYZ6GaI9+9CAwtNGl6Yc1917VacYbNOF","tlshash":"649242295106eef5fd456d16433d7e0e30eca0ff564a6af096c3ec484aa897be1052cd","size":20952,"data":"","first_seen":"2025-08-22T23:00:54.414432Z","last_seen":"2025-08-22T23:00:54.414432Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/js/k=og.asy.en_US.Rk4MybkdYq0.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTtYO1d8IwWd1y7U50RI1dSYsKb7ug","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"00bcebb633811ac4951415478240a0df","sha1":"28d8133c920aa3b5fc8770b22a9bab18f0e47b73","sha256":"26836a414cdfb38ece27f9dcf1fbf93ec361a121ef6a20459e1ec205e6d8af76","sha512":"36b915d638328cf6d0262b320e51b310533e2104f25e010ac3cab69c25bbbe9d5b38680fa7393e95f4edf031abc85cbf9bcccb6a5fbe27c913c5ef83e8c5b826","ssdeep":"6144:WjBgPhMNWqCM2gQpMPzRFiEbP/A7EBkYS0yxfvTV5pcBG+alSmNUHiBUn3kfqk+n:WjBgPhUWpM2gQpMrRFiEbP/A7EBkYS0R","tlshash":"1d24099c72a2706782a6f4d6412b0046b26ab466f44c8cacb69cddf26ef4d4511f7f3c","size":220292,"data":"","first_seen":"2025-08-19T10:34:35.584188Z","last_seen":"2025-08-26T09:53:02.966571Z","times_seen":1258,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ogads-pa.clients6.google.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData","fqdn":"ogads-pa.clients6.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:57 GMT","end":"Mon, 29 Sep 2025 08:34:56 GMT"},"fingerprint":{"sha1":"1C:AA:5A:F2:9F:3B:93:06:6B:B6:C3:EA:DA:E3:BC:62:68:E6:8D:8F","sha256":"F0:44:42:50:BB:49:0E:9D:D8:D8:3A:FD:83:0D:C2:5E:1A:9C:58:47:4F:14:30:6C:55:FF:0D:0D:39:21:B8:44"}}},"request":{"raw":"OPTIONS /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/1.1\r\nHost: ogads-pa.clients6.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-origin: https://www.google.com\r\nvary: origin, referer, x-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT\r\naccess-control-allow-headers: content-type,x-goog-api-key,x-user-agent\r\naccess-control-max-age: 3600\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\ncontent-type: text/html\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=10\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":216,"timings":{"blocked":99,"dns":0,"connect":8,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ogads-pa.clients6.google.com/$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData","fqdn":"ogads-pa.clients6.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"172.217.21.170","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.865Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleapis.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:57 GMT","end":"Mon, 29 Sep 2025 08:34:56 GMT"},"fingerprint":{"sha1":"1C:AA:5A:F2:9F:3B:93:06:6B:B6:C3:EA:DA:E3:BC:62:68:E6:8D:8F","sha256":"F0:44:42:50:BB:49:0E:9D:D8:D8:3A:FD:83:0D:C2:5E:1A:9C:58:47:4F:14:30:6C:55:FF:0D:0D:39:21:B8:44"}}},"request":{"raw":"POST /$rpc/google.internal.onegoogle.asyncdata.v1.AsyncDataService/GetAsyncData HTTP/1.1\r\nHost: ogads-pa.clients6.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nX-Goog-Api-Key: AIzaSyCbsbvGCe7C9mCtdaTycZB2eUFuzsYKG_E\r\nContent-Type: application/json+protobuf\r\nX-User-Agent: grpc-web-javascript/0.1\r\nContent-Length: 68\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json+protobuf; charset=UTF-8\r\nstrict-transport-security: max-age=10886400; includeSubdomains\r\nvary: Origin, X-Origin, Referer\r\ncontent-encoding: gzip\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nserver: ESF\r\ncontent-length: 30\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://www.google.com\r\naccess-control-allow-credentials: true\r\naccess-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length\r\nserver-timing: gfet4t7; dur=14\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":53,"size_decoded":0,"mime_type":"application/json+protobuf; charset=UTF-8","magic":"JSON text data","md5":"cc21f616ac48633008e6768c2cd65f2c","sha1":"2dc662e723a9ccfe2b40469396d10074472064ae","sha256":"2b4b20e1fa834bf64509e94dd18eca0865abc217fcb62e769d6b6002084236a7","sha512":"4ab5a1da0f7c483d05c086e7e6fe0516bf872627e5865e913a9cc78019b604f3c3e14847ebfe616af56d2efee69393674341786277944c56af8d88e4b3f33652","ssdeep":"","tlshash":"3190000000000cf0cc0033c000000003300c00330000003000cc0ccc000c000000000c","first_seen":"2024-06-18T16:50:07Z","last_seen":"2026-07-25T04:47:51.258683Z","times_seen":236866,"resource_available":false,"data":null}},"time_used":299,"timings":{"blocked":4,"dns":1,"connect":21,"send":0,"wait":35,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sb_wiz,aa,abd,U9EYge,syul,syuk,syug,syfj,syuj,syu7,syxa,syv8,syuo,syuh,syuf,syui,syuq,syup,syum,syua,syu9,syu2,sytx,syt7,syt6,syub,syv7,syv5,syv6,syv0,sybz,syc0,syby,syuz,syux,syv3,syv4,syv2,syv1,sytv,syfk,syfi,syuw,async,pHXghd,syw8,syw7,rtH1bd,syzd,syze,syzi,syzh,syzg,syzc,syzb,sydz,sydx,syaj,syag,syae,syz0,SMquOb,sy7y,sy7x,syg1,syg0,sygd,sygb,syfz,syfw,syfv,syfu,sy8d,sy8a,sy8c,syft,syfx,syfs,sybp,sybu,sybm,syav,syb7,sybl,sybg,sy9z,sy9x,sybf,sybe,syb1,syb4,syb3,syb2,syb0,syap,syay,syb5,sybh,syab,syak,syba,syar,syas,syat,syb8,syax,syau,syc3,syc4,syal,sy9y,syc2,sya2,sya5,syah,syao,sybi,syfr,syfq,syfn,syfl,sy8g,uxMpU,syfc,sycc,syc8,syca,syc6,sycb,sybd,syc7,syc1,sy8y,sy8u,sy8t,sy8s,sy8r,sy8q,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sy8n,A1yn5d,YIZmRd,sy87,sy85,sy86,sy84,sy83,sy81,byfTOb,lsjVmc,LEikZe,sy7z,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy112,sy110,sy10y,sywh,sye0,d5EhJe,sy1dn,fCxEDd,sy1dm,sy1dl,sy1dk,sy1dj,sy1di,sy14q,sy14p,sy14o,sy11a,syz3,sy117,sy11b,syy7,syy3,T1HOxc,sy118,sy115,sy116,sy113,syqt,zx30Y,sy1dp,sy1do,sy1dd,sy18g,Wo3n8,ZgGg9b,dIoSBb,sy1is,sy1iz?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.918Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sb_wiz,aa,abd,U9EYge,syul,syuk,syug,syfj,syuj,syu7,syxa,syv8,syuo,syuh,syuf,syui,syuq,syup,syum,syua,syu9,syu2,sytx,syt7,syt6,syub,syv7,syv5,syv6,syv0,sybz,syc0,syby,syuz,syux,syv3,syv4,syv2,syv1,sytv,syfk,syfi,syuw,async,pHXghd,syw8,syw7,rtH1bd,syzd,syze,syzi,syzh,syzg,syzc,syzb,sydz,sydx,syaj,syag,syae,syz0,SMquOb,sy7y,sy7x,syg1,syg0,sygd,sygb,syfz,syfw,syfv,syfu,sy8d,sy8a,sy8c,syft,syfx,syfs,sybp,sybu,sybm,syav,syb7,sybl,sybg,sy9z,sy9x,sybf,sybe,syb1,syb4,syb3,syb2,syb0,syap,syay,syb5,sybh,syab,syak,syba,syar,syas,syat,syb8,syax,syau,syc3,syc4,syal,sy9y,syc2,sya2,sya5,syah,syao,sybi,syfr,syfq,syfn,syfl,sy8g,uxMpU,syfc,sycc,syc8,syca,syc6,sycb,sybd,syc7,syc1,sy8y,sy8u,sy8t,sy8s,sy8r,sy8q,Mlhmy,QGR0gd,PoEs9b,Pjplud,OTA3Ae,sy8n,A1yn5d,YIZmRd,sy87,sy85,sy86,sy84,sy83,sy81,byfTOb,lsjVmc,LEikZe,sy7z,kWgXee,ovKuLd,sgY6Zb,qafBPd,ebZ3mb,dowIGb,sy112,sy110,sy10y,sywh,sye0,d5EhJe,sy1dn,fCxEDd,sy1dm,sy1dl,sy1dk,sy1dj,sy1di,sy14q,sy14p,sy14o,sy11a,syz3,sy117,sy11b,syy7,syy3,T1HOxc,sy118,sy115,sy116,sy113,syqt,zx30Y,sy1dp,sy1do,sy1dd,sy18g,Wo3n8,ZgGg9b,dIoSBb,sy1is,sy1iz?xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 107393\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nexpires: Sat, 22 Aug 2026 23:00:33 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":338126,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1052)","md5":"91f7530cef44c1e07b1449e8ecd46e94","sha1":"54702d009e1678fa3ae9b0d8885edf9df4e8b23f","sha256":"720f9bcb1007f56d8e5e2dff368c018d01745caf41bd801d96ee04fb5272e0ad","sha512":"8548153751fcfdeda1aa4a0a0316afa722bc77b697ba71b53541923e897b2e33db857d0bb760c2dc2eb0ca36eb747c7daea0c1d0ffd3c8d9fd692ea503ddd5eb","ssdeep":"6144:IsOOHtSFcgGW99PH5Q9OiV2G20rlTaGGZxGaTtz7fX+7XyTAMxr6yCcY6gLe9JwK:IsOOHtSbGW99PH5Q9OO2G20rlTaGGZxx","tlshash":"1a74d9a47293b0b35762b5d4813b418ab3fea492f448cc6cb9acc8e17df444641f6b79","first_seen":"2025-08-22T23:00:54.239598Z","last_seen":"2025-08-23T04:02:25.850337Z","times_seen":19,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026s=promo\u0026rt=hpbas.1028,hpbarr.2\u0026zx=1755903634134\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.142Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026s=promo\u0026rt=hpbas.1028,hpbarr.2\u0026zx=1755903634134\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-YU1f7DE2M4jXuYLAa5t6tg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026zx=1755903634216\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.226Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /gen_204?atyp=i\u0026ct=psnt\u0026cad=\u0026nt=navigate\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026zx=1755903634216\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=EnGF17SLCUWrIfAvJEfGXziZ5m5cIS6mCvUQZF7vhOYElIWbB6UXre_D4gOAVfTTE24VU2kp4p-sh180pjNuc9BmpZzJVuVHh6AO7YHNu4OHUp5UxELhIoh5MFcKQQYNY7DSmt1TV8iG9vwYxcTiwTNfaeHWBtPv6O2H5_-qNWFcX0yzlMzEBY1dACOkV6NEvsO9hH4abGmevK_ew2bAcneWeV5QdfjVAIF5LlKoaTdrC87Zd-ZgP7_5Jb72w39Mjv_FBpcjH9L9Qh8tnMh0WdIRjws\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-3lRly8FaZaUkUEZpzExH6w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"google.com/","fqdn":"google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.78","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-22T23:00:32.811Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 Moved Permanently\r\nlocation: https://www.google.com/\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-GXnVYq2RTkzsbMnRnzdZzQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:32 GMT\r\nexpires: Sun, 21 Sep 2025 23:00:32 GMT\r\ncache-control: public, max-age=2592000\r\nserver: gws\r\ncontent-length: 220\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":158080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":113,"dns":0,"connect":20,"send":0,"wait":34,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"http","addr":"exodus-task.com/","fqdn":"exodus-task.com","domain":"exodus-task.com","tld":"com"},"ip":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-22T23:00:32.762Z","timestamp":0,"http_version":"","security_state":"insecure","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: exodus-task.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 302 Found\r\nDate: Fri, 22 Aug 2025 23:00:32 GMT\r\nServer: Apache/2.4.29 (Ubuntu)\r\nLocation: https://google.com\r\nContent-Length: 0\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"Apache HTTP Server:2.4.29","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":158080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":63,"timings":{"blocked":20,"dns":0,"connect":20,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:37Z","timestamp":1755903637,"ip_dst":{"addr":"172.18.0.13","port":47494,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:37.808503+0000\",\"flow_id\":1063193226026914,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47494,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":738,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:32.761762+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:40Z","timestamp":1755903640,"ip_dst":{"addr":"172.18.0.13","port":47506,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:40.989192+0000\",\"flow_id\":1084672357630840,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47506,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":552,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:35.918392+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"csp.withgoogle.com/csp/gws/other-hp","fqdn":"csp.withgoogle.com","domain":"csp.withgoogle.com","tld":"withgoogle.com"},"ip":{"addr":"142.250.178.113","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"csp","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.appspot.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:33:44 GMT","end":"Mon, 29 Sep 2025 08:33:43 GMT"},"fingerprint":{"sha1":"84:E1:AF:2F:FF:14:3C:ED:28:C1:94:6A:46:3A:26:4A:0F:F3:CC:93","sha256":"E1:36:D3:33:A3:F3:2D:2D:1E:01:85:11:A2:DB:65:9B:F6:26:30:F0:4A:A3:60:B6:EA:8B:8C:02:C0:E2:F1:5F"}}},"request":{"raw":"POST /csp/gws/other-hp HTTP/1.1\r\nHost: csp.withgoogle.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/csp-report\r\nContent-Length: 513\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: report\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 No Content\r\ncontent-type: text/html; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport, script-src 'nonce-x_3QV9HS7r24SboQUUrwkg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist\r\ncross-origin-opener-policy: same-origin\r\ncross-origin-resource-policy: cross-origin\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\nreporting-endpoints: default=\"/csp/_/CspCollectorHttp/web-reports?context=eJzj4tDikmJw05BiEOLhmPh28VE2gQVP1mxnUtJLyi-ML05NLi3KLKnUTS4u0E3Oz8lJTS7JL9LNKCkpiDcyMDI1sDAy1DOwiC8wAAAzXBc5\"\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":370,"timings":{"blocked":137,"dns":9,"connect":28,"send":0,"wait":91,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026s=webhp\u0026t=all\u0026folr=_kfaoaMmZA7TMwPAPpJTF0Ao_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026adh=\u0026ime=0\u0026imeh=1\u0026imeha=0\u0026imehb=0\u0026imea=0\u0026imeb=0\u0026imel=0\u0026imed=0\u0026imeeb=0\u0026imexb=0\u0026scp=0\u0026cb=47201\u0026ucb=158080\u0026lts=48673\u0026hp=\u0026p=bs.true\u0026rt=hst.263,prt.385,aft.385,xjses.624,xjsee.724,xjs.724,fcp.412,wsrt.356,cst.63,dnst.0,rqst.90,rspt.14,sslt.53,rqstt.280,unt.214,cstt.217,dit.753\u0026zx=1755903633834\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.893Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026s=webhp\u0026t=all\u0026folr=_kfaoaMmZA7TMwPAPpJTF0Ao_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026adh=\u0026ime=0\u0026imeh=1\u0026imeha=0\u0026imehb=0\u0026imea=0\u0026imeb=0\u0026imel=0\u0026imed=0\u0026imeeb=0\u0026imexb=0\u0026scp=0\u0026cb=47201\u0026ucb=158080\u0026lts=48673\u0026hp=\u0026p=bs.true\u0026rt=hst.263,prt.385,aft.385,xjses.624,xjsee.724,xjs.724,fcp.412,wsrt.356,cst.63,dnst.0,rqst.90,rspt.14,sslt.53,rqstt.280,unt.214,cstt.217,dit.753\u0026zx=1755903633834\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-LL7twHLyBZSUUFaTY8lq0A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026s=promo\u0026rt=hpbas.1028\u0026zx=1755903634133\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.139Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /gen_204?atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026s=promo\u0026rt=hpbas.1028\u0026zx=1755903634133\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-WmgAGsj2MMxDxNb2uQOedQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"play.google.com/log?format=json\u0026hasfast=true","fqdn":"play.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /log?format=json\u0026hasfast=true HTTP/1.1\r\nHost: play.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nContent-Type: application/x-www-form-urlencoded;charset=utf-8\r\nContent-Length: 1375\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=EnGF17SLCUWrIfAvJEfGXziZ5m5cIS6mCvUQZF7vhOYElIWbB6UXre_D4gOAVfTTE24VU2kp4p-sh180pjNuc9BmpZzJVuVHh6AO7YHNu4OHUp5UxELhIoh5MFcKQQYNY7DSmt1TV8iG9vwYxcTiwTNfaeHWBtPv6O2H5_-qNWFcX0yzlMzEBY1dACOkV6NEvsO9hH4abGmevK_ew2bAcneWeV5QdfjVAIF5LlKoaTdrC87Zd-ZgP7_5Jb72w39Mjv_FBpcjH9L9Qh8tnMh0WdIRjws\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 200 OK\r\ncross-origin-opener-policy-report-only: same-origin; report-to=coop_reporting\r\nreport-to: {\"group\":\"clearcut-frontend-http-prod-hiqos\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/httpsserver2/clearcut-frontend-http-prod-hiqos\"}]}\r\ncontent-security-policy-report-only: script-src 'none';form-action 'none';frame-src 'none'; report-uri https://csp.withgoogle.com/csp/httpsserver2/clearcut-frontend-http-prod-hiqos\r\naccess-control-allow-origin: https://www.google.com\r\ncross-origin-resource-policy: cross-origin\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: X-Playlog-Web\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: Playlog\r\ncontent-length: 131\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":131,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"JSON text data","md5":"ca0b7e866005f6774d284b9f438ebfd2","sha1":"53644f5ee3640189bdb223473ba6a2d46606c556","sha256":"502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358","sha512":"939c4526c623db033ad40bfdc6c8848a1dcd0ca797f17fbbd89fbec1b49dededc16e89084b3759e62fa0ffc8fe896980b10a1ff8daee22736a70b08f1ee13e2f","ssdeep":"","tlshash":"58c08c50330469e1080e82c8c0026858228c903b46708cf10bbd68125d3234a1004854","first_seen":"2023-04-05T03:14:56Z","last_seen":"2026-07-25T04:47:51.243287Z","times_seen":580801,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":58,"dns":0,"connect":21,"send":0,"wait":31,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"exodus-task.com/","fqdn":"exodus-task.com","domain":"exodus-task.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-22T23:00:25.666Z","timestamp":0,"http_version":"","security_state":"broken","security_info":null,"request":{"raw":"GET / HTTP/1.1\r\nHost: exodus-task.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":7080,"timings":{"blocked":7002,"dns":0,"connect":28,"send":0,"wait":0,"receive":0,"ssl":50},"alerts":{"ids":[{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:37Z","timestamp":1755903637,"ip_dst":{"addr":"172.18.0.13","port":47494,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:37.808503+0000\",\"flow_id\":1063193226026914,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47494,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":5,\"pkts_toclient\":4,\"bytes_toserver\":738,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:32.761762+0000\"}}"},{"sensor_name":"suricata","title":"Suricata IDS","description":"Suricata /w Emerging Threats Pro","date":"2025-08-22T23:00:40Z","timestamp":1755903640,"ip_dst":{"addr":"172.18.0.13","port":47506,"asn":0,"as":"","country":"","country_code":"zz"},"ip_src":{"addr":"196.251.84.140","port":80,"asn":0,"as":"","country":"Seychelles","country_code":"SC"},"severity":"low","alert":"ET INFO Generic 302 Redirect to Google","source":"{\"timestamp\":\"2025-08-22T23:00:40.989192+0000\",\"flow_id\":1084672357630840,\"in_iface\":\"br-31613a7ed13b\",\"event_type\":\"alert\",\"src_ip\":\"196.251.84.140\",\"src_port\":80,\"dest_ip\":\"172.18.0.13\",\"dest_port\":47506,\"proto\":\"TCP\",\"metadata\":{\"flowbits\":[\"ET.Evil\",\"ET.DROPIP\"]},\"tx_id\":0,\"alert\":{\"action\":\"allowed\",\"gid\":1,\"signature_id\":2030594,\"rev\":3,\"signature\":\"ET INFO Generic 302 Redirect to Google\",\"category\":\"Misc activity\",\"severity\":3,\"metadata\":{\"affected_product\":[\"Web_Browsers\"],\"attack_target\":[\"Client_Endpoint\"],\"confidence\":[\"High\"],\"created_at\":[\"2020_07_24\"],\"deployment\":[\"Perimeter\"],\"signature_severity\":[\"Informational\"],\"updated_at\":[\"2020_12_11\"]}},\"http\":{\"hostname\":\"exodus-task.com\",\"url\":\"/\",\"http_user_agent\":\"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\",\"http_content_type\":\"text/html\",\"http_method\":\"GET\",\"protocol\":\"HTTP/1.1\",\"status\":302,\"redirect\":\"https://google.com\",\"length\":0},\"app_proto\":\"http\",\"flow\":{\"pkts_toserver\":4,\"pkts_toclient\":4,\"bytes_toserver\":552,\"bytes_toclient\":508,\"start\":\"2025-08-22T23:00:35.918392+0000\"}}"}],"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/complete/search?q\u0026cp=0\u0026client=gws-wiz\u0026xssi=t\u0026gs_pcrt=2\u0026hl=no\u0026authuser=0\u0026psi=kfaoaMmZA7TMwPAPpJTF0Ao.1755903633887\u0026dpr=1\u0026nolsbt=1","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.901Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /complete/search?q\u0026cp=0\u0026client=gws-wiz\u0026xssi=t\u0026gs_pcrt=2\u0026hl=no\u0026authuser=0\u0026psi=kfaoaMmZA7TMwPAPpJTF0Ao.1755903633887\u0026dpr=1\u0026nolsbt=1 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-content-type-options: nosniff\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nexpires: Fri, 22 Aug 2025 23:00:33 GMT\r\ncache-control: private, max-age=3600\r\ncontent-type: application/json; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-gr-XLtloBinDAxiDakUFpQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\ncontent-encoding: br\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":73,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"ASCII text","md5":"f8d4a2815dcda795b431e7a67a570b14","sha1":"d1628ca44604fba071b07fe8cf56e306852c399a","sha256":"8430fbe3947fdfd0e9154624a2125fef9738349b20192f56ccd1d389f8f9e5a1","sha512":"d79c110519f8e20c891c975c6e4a58a8df2832894b2149f9cd8d04c35d957028f898a39acb6581f3937ad916824c03a299efc97624cce6eed909ab1e43d5a770","ssdeep":"","tlshash":"d9a022c000803f808b2b802e22030bc0808b032823c00202b8c008030ccac0382c2880","first_seen":"2025-08-22T23:00:54.396937Z","last_seen":"2025-08-22T23:00:54.396937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/tia/tia.png","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.393Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /tia/tia.png HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 258\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 Aug 2025 10:35:09 GMT\r\nexpires: Fri, 21 Aug 2026 10:35:09 GMT\r\ncache-control: public, max-age=31536000\r\nage: 131124\r\nlast-modified: Fri, 27 Sep 2019 01:00:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":258,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 27 x 23, 8-bit/color RGB, non-interlaced","md5":"201e50d8dd7a30c0a918213686ca43b7","sha1":"6678592120e899f0d2245c8afeaf9d4a3043c41b","sha256":"c532312eea8020a0370685b222a02b11becd58cd394b509029dff5956127dd81","sha512":"50cc19dd554d51fe79eef2c8cd45941504ea2edddaf06d425ba3a1e41dc974d866b8dad9d91609efa39afb1f083f2f611d324e57f54ce84a984f6b5bdde0f383","ssdeep":"","tlshash":"09d095dd7dfd9c94fe6143d7c0435d94ad79547d1c7a5643417cc99d2c26807800314b","first_seen":"2023-04-07T11:58:26Z","last_seen":"2026-07-25T04:47:51.284987Z","times_seen":129112,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/js/k=og.asy.en_US.Rk4MybkdYq0.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTtYO1d8IwWd1y7U50RI1dSYsKb7ug","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /og/_/js/k=og.asy.en_US.Rk4MybkdYq0.2019.O/rt=j/m=_ac,_awd,ada,lldp,qads,abld/exm=/d=1/ed=1/rs=AA2YrTtYO1d8IwWd1y7U50RI1dSYsKb7ug HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"one-google-eng\"\r\nreport-to: {\"group\":\"one-google-eng\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/one-google-eng\"}]}\r\ncontent-length: 80191\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 Aug 2025 11:44:19 GMT\r\nexpires: Fri, 21 Aug 2026 11:44:19 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 18 Aug 2025 01:30:31 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 126974\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":220292,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (2190)","md5":"00bcebb633811ac4951415478240a0df","sha1":"28d8133c920aa3b5fc8770b22a9bab18f0e47b73","sha256":"26836a414cdfb38ece27f9dcf1fbf93ec361a121ef6a20459e1ec205e6d8af76","sha512":"36b915d638328cf6d0262b320e51b310533e2104f25e010ac3cab69c25bbbe9d5b38680fa7393e95f4edf031abc85cbf9bcccb6a5fbe27c913c5ef83e8c5b826","ssdeep":"6144:WjBgPhMNWqCM2gQpMPzRFiEbP/A7EBkYS0yxfvTV5pcBG+alSmNUHiBUn3kfqk+n:WjBgPhUWpM2gQpMrRFiEbP/A7EBkYS0R","tlshash":"1d24099c72a2706782a6f4d6412b0046b26ab466f44c8cacb69cddf26ef4d4511f7f3c","first_seen":"2025-08-19T10:34:35.584188Z","last_seen":"2025-08-26T09:53:02.966571Z","times_seen":1258,"resource_available":true,"data":null}},"time_used":180,"timings":{"blocked":73,"dns":0,"connect":8,"send":0,"wait":9,"receive":16,"ssl":72},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/og/_/ss/k=og.asy.s2IVsHDXiHE.L.F4.O/m=ll_tdm,adcgm3,ll_fw,abld/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTtKfQH0U9O2_T7m-2S0EP4kwuohTA","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.548Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /og/_/ss/k=og.asy.s2IVsHDXiHE.L.F4.O/m=ll_tdm,adcgm3,ll_fw,abld/excm=/d=1/ed=1/ct=zgms/rs=AA2YrTtKfQH0U9O2_T7m-2S0EP4kwuohTA HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"one-google-eng\"\r\nreport-to: {\"group\":\"one-google-eng\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/one-google-eng\"}]}\r\ncontent-length: 1518\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 Aug 2025 10:04:39 GMT\r\nexpires: Fri, 21 Aug 2026 10:04:39 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Tue, 01 Jul 2025 01:28:24 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 132954\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5547,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5547), with no line terminators","md5":"8e4e44e2060ba89d2620a36a3a9c068f","sha1":"6774544633622a8bc8d0fee3b56af137893e84b9","sha256":"2edd0a8a58fc9e1124037b391c62ac674b39bd6da553fdcedc4a333840d867a1","sha512":"a0f756b83d34a63ac95d259aa1534d3e99aec4d4a7a07011552b4fad90a9e2efb135d9d70c06dba4bcd54a6c3062af7fcfad273743c83743812cbc9d21adb5e3","ssdeep":"96:TfKyR/E7Bb8llMU2Wl20mpeqCfco7shdiIY7q0gvOGAA:P/E7Bb6B2WlKpgRR7q0gvMA","tlshash":"3eb122f1d15830bfec27c07d7754f6cdd2224656e8ae0f68fc6971249a881f62a22726","first_seen":"2025-07-01T05:39:13.416619Z","last_seen":"2025-08-26T09:53:02.962214Z","times_seen":6068,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/client_204?cs=1\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /client_204?cs=1\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-jYCAVp2r3c_0K3Nuf04MXg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: __Secure-ENID=28.SE=EnGF17SLCUWrIfAvJEfGXziZ5m5cIS6mCvUQZF7vhOYElIWbB6UXre_D4gOAVfTTE24VU2kp4p-sh180pjNuc9BmpZzJVuVHh6AO7YHNu4OHUp5UxELhIoh5MFcKQQYNY7DSmt1TV8iG9vwYxcTiwTNfaeHWBtPv6O2H5_-qNWFcX0yzlMzEBY1dACOkV6NEvsO9hH4abGmevK_ew2bAcneWeV5QdfjVAIF5LlKoaTdrC87Zd-ZgP7_5Jb72w39Mjv_FBpcjH9L9Qh8tnMh0WdIRjws; expires=Tue, 22-Sep-2026 15:18:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":23,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/ss/k=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgAAABgAAQCCAAAAIADAIAUAAAAACAAAAAAAIAAAIAAAAAAAAAACCCAABBEAAKLAgACECIAAAgAAAAEAAgQJAAAEgAZAACQBBAFAABggEmgAQAICEYAAABAAyAAAAgAAAAAAAAAAAAAAAAAAAAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAAQACAgAAAABAAEgAABwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIARADAAAAmAIYoGAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAEBAgAAiABAAAAAAAAAAAAAAAAAAAAAAAAAAIAAACA/d=1/ed=1/br=1/rs=ACT90oEDNhvu-63hvrQG8OJgjv69LaWEBg/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.387Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/ss/k=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgAAABgAAQCCAAAAIADAIAUAAAAACAAAAAAAIAAAIAAAAAAAAAACCCAABBEAAKLAgACECIAAAgAAAAEAAgQJAAAEgAZAACQBBAFAABggEmgAQAICEYAAABAAyAAAAgAAAAAAAAAAAAAAAAAAAAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAAQACAgAAAABAAEgAABwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIARADAAAAmAIYoGAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAEBAgAAiABAAAAAAAAAAAAAAAAAAAAAAAAAAIAAACA/d=1/ed=1/br=1/rs=ACT90oEDNhvu-63hvrQG8OJgjv69LaWEBg/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1230\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nexpires: Sat, 22 Aug 2026 23:00:33 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2755,"size_decoded":0,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2755), with no line terminators","md5":"453b3ccc0bd9df06bcd4968eb6c69855","sha1":"b866e12a0c7edefd2665ec151a88aa6271ce46a6","sha256":"8818ebe882ba377ee3c2ce96f2d835a37097551de85b3331c9adc88c84990a23","sha512":"ba024f765fbfff47e1494c80c950299cd693abf95057a94efec473cb0919fb10d9318cc6d4aef8eedc0127c4d423a2b7fdc4232e9ed34c519d46a5e54baab89e","ssdeep":"","tlshash":"5351b7214ba91098714bc373d7e0be18a0f9de57e137566da012829df7d829313dab2e","first_seen":"2025-06-13T10:19:17.059609Z","last_seen":"2025-08-28T00:19:40.763708Z","times_seen":8275,"resource_available":false,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sy1j0,sytg,sy1it,sy1iy,sy1ix,b6knsb,sy1io,sy1in,sy1e6,syy5,syef,sycn,sycl,sy9n,sycp,JKoKVe,pXdRYb,sy21p,sy9o,sy9l,sy8f,O1Gjze,TtcOte,wR5FRb,kQvlef,syed,syea,sye6,sye5,sybj,sye4,sycg,sye3,sye2,sye1,sydy,syds,sydq,syaf,syad,sya9,sya3,sya4,sy9v,sy9u,sy9t,sydw,sydp,sydo,sydn,sydb,sydk,syd1,sycs,syct,sydj,sybc,syd9,sydi,sycw,sycx,sydg,sycv,sydf,sycf,sycy,sycq,syd8,sydd,syd7,sydc,syd6,syd5,sycu,syd3,syd2,syd0,sycz,syda,sycr,syck,sy9s,sy9i,sy7t,zbML3c,gskBEc,sy18k,s980lf,syu5,loL8vb,syut,syus,syur,ms4mZb,sysf,B2qlPe,syy1,NzU6V,sy11g,sy11f,zGLm3b,sy1i1,sy1i0,sy1hz,sy18v,sy18w,DhPYme,sy1jf,sy1jh,sy1ii,sy1ig,sy1jg,sy1if,sy1jk,sy1jj,sy1jd,sy1je,KHourd,MpJwZc,UUJqVe,sy95,sOXFj,sy94,qTnoBf,oGtAuc,NJ1rfe,sy9f,q0xTif,y05UD,PPhKqf,sy14n,sy1au,sy1bd,sy1be,sy1b2,sy168,sy14m,sy14l,sy14k,syf7,sy1b1,sy1bg,sy14i,sy15y,sy1bc,sy157,sy1bb,sy151,sy1b3,sy160,sy1aq,sy1av,sy1ar,sy166,sy167,sy1b4,sy14s,sy1az,sy1ay,sy1aw,syml,symj,synw,sy1ax,syt5,sy1am,sy1b6,sy1as,sy1al,sy1ap,sy1ao,sy1an,sy1ak,sy173,sy1at,sy1aj,sy1ag,sy16a,sy16b,epYOx?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sy1j0,sytg,sy1it,sy1iy,sy1ix,b6knsb,sy1io,sy1in,sy1e6,syy5,syef,sycn,sycl,sy9n,sycp,JKoKVe,pXdRYb,sy21p,sy9o,sy9l,sy8f,O1Gjze,TtcOte,wR5FRb,kQvlef,syed,syea,sye6,sye5,sybj,sye4,sycg,sye3,sye2,sye1,sydy,syds,sydq,syaf,syad,sya9,sya3,sya4,sy9v,sy9u,sy9t,sydw,sydp,sydo,sydn,sydb,sydk,syd1,sycs,syct,sydj,sybc,syd9,sydi,sycw,sycx,sydg,sycv,sydf,sycf,sycy,sycq,syd8,sydd,syd7,sydc,syd6,syd5,sycu,syd3,syd2,syd0,sycz,syda,sycr,syck,sy9s,sy9i,sy7t,zbML3c,gskBEc,sy18k,s980lf,syu5,loL8vb,syut,syus,syur,ms4mZb,sysf,B2qlPe,syy1,NzU6V,sy11g,sy11f,zGLm3b,sy1i1,sy1i0,sy1hz,sy18v,sy18w,DhPYme,sy1jf,sy1jh,sy1ii,sy1ig,sy1jg,sy1if,sy1jk,sy1jj,sy1jd,sy1je,KHourd,MpJwZc,UUJqVe,sy95,sOXFj,sy94,qTnoBf,oGtAuc,NJ1rfe,sy9f,q0xTif,y05UD,PPhKqf,sy14n,sy1au,sy1bd,sy1be,sy1b2,sy168,sy14m,sy14l,sy14k,syf7,sy1b1,sy1bg,sy14i,sy15y,sy1bc,sy157,sy1bb,sy151,sy1b3,sy160,sy1aq,sy1av,sy1ar,sy166,sy167,sy1b4,sy14s,sy1az,sy1ay,sy1aw,syml,symj,synw,sy1ax,syt5,sy1am,sy1b6,sy1as,sy1al,sy1ap,sy1ao,sy1an,sy1ak,sy173,sy1at,sy1aj,sy1ag,sy16a,sy16b,epYOx?xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 67904\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nexpires: Sat, 22 Aug 2026 23:00:33 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":236684,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"ASCII text, with very long lines (8270)","md5":"9dc04aa24bb7df5e2592c4067a0ddcd0","sha1":"0a33a426207f248131e96060b18bfecfd7c0a574","sha256":"c938f0f0b076e7ef1b22c3f3ef866f37f76fa247b4785916ff09eb1d06dbf977","sha512":"20eafc6874e77c8d1fd6af26f29f7c559b3744e24cac51a368bf2989afa2a0eee11fe3663d7a42a0d2ca2d87d7ba6ab247d4f2169141613165643533d5d0c95d","ssdeep":"6144:uAWkVjLfzMlRUBP9FCBZMxf+G59zursDnrsDn3UFbnCD3+kvOZOTM3/9IIFz9:uAWkN7MlRUrFCBZMxf+G59zS3UFbnCDw","tlshash":"9934fad972a3f0933352a9c4506b0246f3bab492f148846db9f8d8f1bdf444946f5bb8","first_seen":"2025-08-22T04:44:41.55068Z","last_seen":"2025-08-23T04:02:25.848614Z","times_seen":122,"resource_available":true,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/client_204?atyp=i\u0026biw=1280\u0026bih=1024\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.937Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /client_204?atyp=i\u0026biw=1280\u0026bih=1024\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-bgo0bjL_Hpa_46muL1Z1OQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/fff\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sy1ev,P10Owf,sy1df,gSZvdb,syyh,WlNQGd,sytu,sytr,sytq,DPreE,syyj,syyi,nabPbb,syyf,syyd,syki,syo1,CnSW2d,syy9,syy6,syy8,nRwWne,syyc,fXO0xe?xjs=s3","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.136Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/ck=xjs.hd.6SI0hMC_LQM.L.F4.O/am=EAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/ujg=1/rs=ACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg/m=sy1ev,P10Owf,sy1df,gSZvdb,syyh,WlNQGd,sytu,sytr,sytq,DPreE,syyj,syyi,nabPbb,syyf,syyd,syki,syo1,CnSW2d,syy9,syy6,syy8,nRwWne,syyc,fXO0xe?xjs=s3 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\nvary: Accept-Encoding, Origin\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 10586\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nexpires: Sat, 22 Aug 2026 23:00:34 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28974,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (925)","md5":"c137b5ae5e2c398da0e55283e641388c","sha1":"779b97b414902d9f6d64457b56f41ed721a8e849","sha256":"c65f7dc57cf471b59e3d16b2470039f64f5d342b2cab9db18710af6ada624a98","sha512":"88109e14da8d61404e0de464e2744128ecfa1e2b0b40b431c9690d44492b242729057d8511c3721ad1198895345af8b2d635a57c2c3b90f407c5f1edd3e53cbc","ssdeep":"768:ArnX8MpPINRfueHh5FMdSxF/rFVYnMAR5xBp8U4xuSTY2nvtPrPeto2gJCOp/uSl:kpP0fueNpY6etQp/QtTs","tlshash":"c8d2f9a872a170235674f4e9803f034ab33eb599b949515cbd5c8de27cf088a4973fb9","first_seen":"2025-08-22T23:00:54.247037Z","last_seen":"2025-08-23T04:02:25.855434Z","times_seen":5,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?atyp=i\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026dt19=2\u0026prm23=0\u0026zx=1755903634145\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /gen_204?atyp=i\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026dt19=2\u0026prm23=0\u0026zx=1755903634145\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-ivR6fd5is8gZxBcj3e62rQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/async/hpba?vet=10ahUKEwiJprviwp-PAxU0JhAIHSRKEaoQj-0KCBQ..i\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026opi=89978449\u0026yv=3\u0026sp_imghp=false\u0026sp_hpte=1\u0026sp_hpep=1\u0026stick=\u0026cs=0\u0026async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.pgsyJA1W5p4.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.6SI0hMC_LQM.L.F4.O%2Fam%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgAAABgAAQCCAAAAIADAIAUAAAAACAAAAAAAIAAAIAAAAAAAAAACCCAABBEAAKLAgACECIAAAgAAAAEAAgQJAAAEgAZAACQBBAFAABggEmgAQAICEYAAABAAyAAAAgAAAAAAAAAAAAAAAAAAAAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAAQACAgAAAABAAEgAABwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIARADAAAAmAIYoGAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAEBAgAAiABAAAAAAAAAAAAAAAAAAAAAAAAAAIAAACA%2Fbr%3D1%2Frs%3DACT90oEDNhvu-63hvrQG8OJgjv69LaWEBg,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.pgsyJA1W5p4.2018.O%2Fck%3Dxjs.hd.6SI0hMC_LQM.L.F4.O%2Fam%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg,_fmt:prog,_id:_kfaoaMmZA7TMwPAPpJTF0Ao_8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.174Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /async/hpba?vet=10ahUKEwiJprviwp-PAxU0JhAIHSRKEaoQj-0KCBQ..i\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026opi=89978449\u0026yv=3\u0026sp_imghp=false\u0026sp_hpte=1\u0026sp_hpep=1\u0026stick=\u0026cs=0\u0026async=_basejs:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.pgsyJA1W5p4.2018.O%2Fam%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk%2Fdg%3D0%2Fbr%3D1%2Frs%3DACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ,_basecss:%2Fxjs%2F_%2Fss%2Fk%3Dxjs.hd.6SI0hMC_LQM.L.F4.O%2Fam%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgAAABgAAQCCAAAAIADAIAUAAAAACAAAAAAAIAAAIAAAAAAAAAACCCAABBEAAKLAgACECIAAAgAAAAEAAgQJAAAEgAZAACQBBAFAABggEmgAQAICEYAAABAAyAAAAgAAAAAAAAAAAAAAAAAAAAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAAQACAgAAAABAAEgAABwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIARADAAAAmAIYoGAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAEBAgAAiABAAAAAAAAAAAAAAAAAAAAAAAAAAIAAACA%2Fbr%3D1%2Frs%3DACT90oEDNhvu-63hvrQG8OJgjv69LaWEBg,_basecomb:%2Fxjs%2F_%2Fjs%2Fk%3Dxjs.hd.no.pgsyJA1W5p4.2018.O%2Fck%3Dxjs.hd.6SI0hMC_LQM.L.F4.O%2Fam%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk%2Fd%3D1%2Fed%3D1%2Fdg%3D0%2Fbr%3D1%2Fujg%3D1%2Frs%3DACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg,_fmt:prog,_id:_kfaoaMmZA7TMwPAPpJTF0Ao_8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nversion: 796745448\r\nx-content-type-options: nosniff\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/none\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\ncontent-encoding: br\r\ndate: Fri, 22 Aug 2025 23:00:34 GMT\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"e387bfc70118c7b35a4112ba511a0087","sha1":"5d54090bc59ae9ab0818ab4a807966c30f9b58a6","sha256":"66d1f8a54ef10e282439293dbc059c801da6bf8d0bba2a05c5e96243d3499566","sha512":"3fb93b4570d42678de8e6b54b9e974adbd8672befb0cf9a7724703e964ccc327e62f1c3a882a69e23b33417ca803e962abc7245e537e6c88a71a41efb182db9f","ssdeep":"","tlshash":"f2b0122511e04c084c06004067deff5e942f611b5021a5e63fe62adb35eec412cf6029","first_seen":"2025-08-22T23:00:54.401447Z","last_seen":"2025-08-22T23:00:54.401447Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":28,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARIAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=1/ed=1/dg=3/br=1/rs=ACT90oFqc50VnsuhXrso8qczw1W6W9ktkA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,xD8Kp;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:M8uRWb;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;iySzae:a6xXfd;jJj2G:kF2o2b;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mWzs9c:fz5ukf;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:hjoqoe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tbg2ob:nMC03e;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zB3wie:WtgrP;zOsCQe:Ko78Df;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.389Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARIAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=1/ed=1/dg=3/br=1/rs=ACT90oFqc50VnsuhXrso8qczw1W6W9ktkA/ee=ALeJib:B8gLwd;AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CIZTGb:Kqhykb;CxXAWb:YyRLvc;DQEued:Fevhcf;DULqB:RKfG5c;Dkk6ge:JZmW9e;DpcR3d:zL72xf;Du7NI:C6zLgf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EjXHpb:pSHqh;EmZ2Bf:zr1jrb;EnlcNd:WeHg4;F9mqte:UoRcbe;FSxmUe:fiZR8b;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;GEkGdd:e1RzQd;GleZL:J1A7Od;HMDDWe:G8QUdb;HqeXPd:cmbnH;IBADCc:RYquRb;IoGlCf:b5lhvb;JXJSm:ii1RGf;JXS8fb:Qj0suc;JqSq7d:y9ePhe;JsbNhc:Xd8iUd;K5nYTd:ZDZcre;KOxcK:OZqGte;KQzWid:ZMKkN;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:SdcwHb,XVMNvd;LEikZe:byfTOb,lsjVmc;LXA8b:q7OdKd;LsNahb:ucGLNb;NJ1rfe:qTnoBf;NPKaK:SdcwHb;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;OgagBe:cNTe0;OiqE2c:TFpEK;OoK5v:Sp69O;OohIYe:mpEAQb;Pjplud:PoEs9b;PpTLXd:pJYjx;Q1Ow7b:x5CSu;Q6C5kf:pfdZCe;QGR0gd:Mlhmy;QYLF2b:pAQYUd;Qw8Feb:jpavUe;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;RCF5Sd:X1kBmd;SLtqO:Kh1xYe;SMDL4c:fTfGO,fTfGO;SNUn3:ZwDk9d,xD8Kp;ScI3Yc:e7Hzgb,e7Hzgb;ShpF6e:N0pvGc;SwCqAd:fXbCZc;SzQQ3e:dNhofb;TIUVQd:M8uRWb;TroZ1d:vVVzjb;U96pRd:FsR04;UBKJZ:LGDJGb;UDrY1c:eps46d;UVmjEd:EesRsb;UVzb9c:IvPZ6d;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VOcgDe:YquhTb;VhA7bd:vAmQFf;VsAqSb:PGf2Re;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;Y3c5sd:FGbfLe;YIZmRd:A1yn5d;YV5bee:IvPZ6d;ZSH6tc:QAvyLe;ZWEUA:afR4Cf;ZlOOMb:P0I0Ec;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aCJ9tf:qKftvc;aVZq3e:EMeVIb;aZ61od:arTwJ;bDXwRe:UsyOtc;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;coJ8e:KvoW8;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;dowIGb:ebZ3mb,ebZ3mb;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eBZ5Nd:audvde;eHDfl:ofjVkb;eJKchc:ATg1be;eO3lse:UefOmb;euOXY:OZjbQ;g8nkx:U4MzKc;gaub4:TN6bMe;gtVSi:ekUOYd;h3MYod:ws9Tlc;hK67qb:QWEO5b;hVic1b:Kqhykb;heHB1:sFczq;hjRo6e:F62sG;hlqGX:FWz1ic;hsLsYc:Vl118;hwoVHd:zw4U8c;iFQyKf:QIhFr;iySzae:a6xXfd;jJj2G:kF2o2b;k2Qxcb:XY51pe;kbAm9d:MkHyGd;lOO0Vd:OTA3Ae;lbfkyf:MqGdUd;liAz7d:kF2o2b;mWzs9c:fz5ukf;nJw4Gd:dPFZH;nrDcw:SuEoDe;oGtAuc:sOXFj;oSUNyd:fTfGO,fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pKJiXd:VCenhc;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:ww04Df;qZx2Fc:j0xrE;qaS3gd:yiLg6e;qafBPd:sgY6Zb;qavrXe:zQzcXe;qddgKe:d7YSfd,x4FYXe;rQSrae:C6D5Fc;rdexKf:FEkKD;rmWaj:PMS6Sd;ropkZ:hjoqoe;sTsDMc:kHVSUb;sZmdvc:rdGEfc;slIQ5d:pnOULd;tH4IIe:Ymry6;tbg2ob:nMC03e;teSRSb:BMLai;tosKvd:ZCqP3;trZL0b:qY8PFe;uuQkY:u2V3ud;vEYCNb:FaqsVd;vRlMvf:Iw9Xo;vfVwPd:lcrkwe;w3bZCb:ZPGaIb;w4rSdf:XKiZ9;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:O1Gjze,TtcOte;wV5Pjc:L8KGxe;xBbsrc:NEW1Qc;ysNiMc:CpIBjd;yxTchf:KUM7Z;z97YGf:oug9te;zB3wie:WtgrP;zOsCQe:Ko78Df;zaIgPb:Sl0pxd/m=cdos,hsm,jsa,mb4ZUb,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl,YV5bee,d,csi HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 338480\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 21:58:34 GMT\r\nexpires: Sat, 22 Aug 2026 21:58:34 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3719\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":954218,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (621)","md5":"4f9fc6039765fae318a03519dcfdb164","sha1":"b10bc8c1ca908ff4343911372c0bd6dded0d7d9b","sha256":"c35d2daf0454bc055567b12783a91f0c9e40d5a284482b3e9e9044102e194d4a","sha512":"cf39c2d6ce3f875109cf134caa162dcdaad8ee4402bd5ba44ec083e4089ddcf1122354658ba4fbcffa321f5b71894b1095dd31ef0a2f515c45624374ce1607c2","ssdeep":"24576:bk+cJDozzH0uCQK+FTHW/HbNdc7kHjXeezabYz0ySWAkEwDyMsJwoyjSyxQSNR+F:bk+cJDozzH0uCQK+FTHW/HbNdc7kHjX2","tlshash":"fc15fa993393b59392a2f5d4503f114af3bab891f44d48acf9a8ddd27db088540f6b38","first_seen":"2025-08-22T23:00:54.402444Z","last_seen":"2025-08-22T23:07:30.098348Z","times_seen":3,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?s=webhp\u0026t=aft\u0026atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026rt=wsrt.356,hst.263,prt.385,aft.385\u0026folr=_kfaoaMmZA7TMwPAPpJTF0Ao_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026opi=89978449","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"POST /gen_204?s=webhp\u0026t=aft\u0026atyp=csi\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026rt=wsrt.356,hst.263,prt.385,aft.385\u0026folr=_kfaoaMmZA7TMwPAPpJTF0Ao_7\u0026imn=11\u0026dtc=140\u0026stc=26\u0026ima=0\u0026imad=0\u0026imac=1\u0026wh=1024\u0026nt=navigate\u0026ts=0\u0026opi=89978449 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nContent-Type: text/plain;charset=UTF-8\r\nContent-Length: 0\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-MA13VTbWBgcWUURxUwHIFw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/md=2/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARIAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/rs=ACT90oFqc50VnsuhXrso8qczw1W6W9ktkA","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.934Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/md=2/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARIAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/rs=ACT90oFqc50VnsuhXrso8qczw1W6W9ktkA HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 1229\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 21:58:35 GMT\r\nexpires: Sat, 22 Aug 2026 21:58:35 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3718\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11094,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JSON text data","md5":"11cdcfee4aab9828e97e35fe77efb2ec","sha1":"81b810913f033f8b10707c586e5696028f2ce00a","sha256":"e3f94aa0f79644c91dcf4fde5c756f58c080a5f0316e01abb2076f334f0a2cb6","sha512":"091f4122a213f14f031ab6b8ffb8339256b4183a95b8628528c8c9782ae5ec255f9ec550215ff36814b33ec6f0600461f01d50ad55f92547e4b5107ccbe087fe","ssdeep":"48:Ye/vB7LHYbZEwx78bqY9fzQYE+xNhCKmGI2PgCByQqJH7z9AyfQhlb544iAD:fN+Wl","tlshash":"54321bdc93c2b864d7c9e1704a44fddc32623aba70f388731b6845823f02f79a568c4a","first_seen":"2025-08-22T22:07:19.358407Z","last_seen":"2025-08-23T05:48:45.876389Z","times_seen":28,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/rs=ACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ/m=lOO0Vd,sy8o,P6sQOc?xjs=s4","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:34.201Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /xjs/_/js/k=xjs.hd.no.pgsyJA1W5p4.2018.O/am=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d=0/dg=0/br=1/rs=ACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ/m=lOO0Vd,sy8o,P6sQOc?xjs=s4 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=EnGF17SLCUWrIfAvJEfGXziZ5m5cIS6mCvUQZF7vhOYElIWbB6UXre_D4gOAVfTTE24VU2kp4p-sh180pjNuc9BmpZzJVuVHh6AO7YHNu4OHUp5UxELhIoh5MFcKQQYNY7DSmt1TV8iG9vwYxcTiwTNfaeHWBtPv6O2H5_-qNWFcX0yzlMzEBY1dACOkV6NEvsO9hH4abGmevK_ew2bAcneWeV5QdfjVAIF5LlKoaTdrC87Zd-ZgP7_5Jb72w39Mjv_FBpcjH9L9Qh8tnMh0WdIRjws\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"gws-team\"\r\nreport-to: {\"group\":\"gws-team\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws-team\"}]}\r\ncontent-length: 708\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 22 Aug 2025 21:58:37 GMT\r\nexpires: Sat, 22 Aug 2026 21:58:37 GMT\r\ncache-control: public, immutable, max-age=31536000\r\nlast-modified: Fri, 22 Aug 2025 20:57:24 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding, Origin\r\nage: 3717\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1394,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (467)","md5":"a150406362136ad47f44ed1eab932837","sha1":"47f38da0b400fc51046f1d8ec895374ad20466fb","sha256":"22748943812ffbbbfed2fb976f4705f4d3377937b3f23e80bb352efe89f80f72","sha512":"ad7c29438340657127b11e12ba7ae6e45b47edb4834bfaccf88966c4fe29d399d5567a7aa0c3ac947721b1105c964b9af2549453bd6fc326e5d9a3c6b5402567","ssdeep":"","tlshash":"0021461c21a6e4921971f2f044661106b27fb85eb489452cb1592dd3fef60e2c59773e","first_seen":"2025-08-22T04:44:41.54449Z","last_seen":"2025-08-23T04:02:25.852773Z","times_seen":129,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/async/hpba?yv=3\u0026cs=0\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026async=_basejs:/xjs/_/js/k%3Dxjs.hd.no.pgsyJA1W5p4.2018.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/dg%3D0/br%3D1/rs%3DACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.6SI0hMC_LQM.L.F4.O/am%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgAAABgAAQCCAAAAIADAIAUAAAAACAAAAAAAIAAAIAAAAAAAAAACCCAABBEAAKLAgACECIAAAgAAAAEAAgQJAAAEgAZAACQBBAFAABggEmgAQAICEYAAABAAyAAAAgAAAAAAAAAAAAAAAAAAAAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAAQACAgAAAABAAEgAABwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIARADAAAAmAIYoGAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAEBAgAAiABAAAAAAAAAAAAAAAAAAAAAAAAAAIAAACA/br%3D1/rs%3DACT90oEDNhvu-63hvrQG8OJgjv69LaWEBg,_basecomb:/xjs/_/js/k%3Dxjs.hd.no.pgsyJA1W5p4.2018.O/ck%3Dxjs.hd.6SI0hMC_LQM.L.F4.O/am%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg,_fmt:prog,_id:_kfaoaMmZA7TMwPAPpJTF0Ao_7\u0026sp_imghp=false\u0026sp_hpep=2\u0026sp_hpte=0\u0026vet=10ahUKEwiJprviwp-PAxU0JhAIHSRKEaoQj-0KCBM..i","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /async/hpba?yv=3\u0026cs=0\u0026ei=kfaoaMmZA7TMwPAPpJTF0Ao\u0026async=_basejs:/xjs/_/js/k%3Dxjs.hd.no.pgsyJA1W5p4.2018.O/am%3DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAAgACAAAAAEBAAAAAACCAIAAAAAAAAAAAAAARAAAAIAAAAAAAAAAAAAIAAAEAIABAgACECIAAAwAAAAAAAAAAAAAgAAIAAAAABgC_Bl4AQAgIAEAAAYAAAAAAC4AAAkAAAgAAAAAAAAAAAAAACAAAAAAAEAAAAIgAACAAgAAAAAAAAAAAAACAAAAAAAAAAgAgAAIAAAAAAAAAAAAAAAAAABADwAAAAAAwAAAAAAAAAAAAIADABACAACAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/dg%3D0/br%3D1/rs%3DACT90oF4u6CiMtAhg5w7l9Zc5yRhznuPYQ,_basecss:/xjs/_/ss/k%3Dxjs.hd.6SI0hMC_LQM.L.F4.O/am%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgAAABgAAQCCAAAAIADAIAUAAAAACAAAAAAAIAAAIAAAAAAAAAACCCAABBEAAKLAgACECIAAAgAAAAEAAgQJAAAEgAZAACQBBAFAABggEmgAQAICEYAAABAAyAAAAgAAAAAAAAAAAAAAAAAAAAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAAQACAgAAAABAAEgAABwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIARADAAAAmAIYoGAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAEBAgAAiABAAAAAAAAAAAAAAAAAAAAAAAAAAIAAACA/br%3D1/rs%3DACT90oEDNhvu-63hvrQG8OJgjv69LaWEBg,_basecomb:/xjs/_/js/k%3Dxjs.hd.no.pgsyJA1W5p4.2018.O/ck%3Dxjs.hd.6SI0hMC_LQM.L.F4.O/am%3DEAKUCgQAAAAAAAAAgAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAQAAAAACAAAgACABgAAUDCAAAAICDAIAUAAAAACAAAAAARIAAAIAAAAAAAAAACCCIABBEAIKLAgACECIAAAwAAAAEAAgQJAAAkgAZAACQBBgH_Bl4gUmgIQEICEYAAABAAy4AAAkAAAgAAAAAAAAAAAAAACAAACAAAEAAAeIiCAGhAiDpAKAgAAAAAAASACAgAAAABAgEgAAJwCAA8AYIPAAAAEAQAABIDwAoAIAAwEAgAAAAAAAAIIATADACAAmAIYoGAAAAAAAAQAeAwAOGFBQAAAAAAAAAAAAAAAAAAEDAgmAuJBAQIAAAAAAAAAAAAAAAAAAAAAAAIFQTCwk/d%3D1/ed%3D1/dg%3D0/br%3D1/ujg%3D1/rs%3DACT90oHbuk_MhuL6KA9hP3fI8mRwU4eobg,_fmt:prog,_id:_kfaoaMmZA7TMwPAPpJTF0Ao_7\u0026sp_imghp=false\u0026sp_hpep=2\u0026sp_hpte=0\u0026vet=10ahUKEwiJprviwp-PAxU0JhAIHSRKEaoQj-0KCBM..i HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nversion: 796745448\r\nx-content-type-options: nosniff\r\ncontent-type: text/plain; charset=UTF-8\r\ncontent-disposition: attachment; filename=\"f.txt\"\r\nstrict-transport-security: max-age=31536000\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/none\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nexpires: Fri, 22 Aug 2025 23:00:33 GMT\r\ncache-control: private\r\nset-cookie: __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF; expires=Tue, 22-Sep-2026 15:18:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":102,"size_decoded":0,"mime_type":"text/plain; charset=UTF-8","magic":"ASCII text","md5":"57ee0c38ced149fba9b71ff1089e7584","sha1":"3c56f99330b0625bbf2d53222597e4ad6229f22f","sha256":"5d0b1117b0785ad13bc4dbc753220821ed83e23b04e1cebaced5d13afbaa7d01","sha512":"2cd06765acf17a03dec3e2793c2505c13e7270f59d837c73870541a255b3785bf5ca6b5b2a3a429688914016c059f0b7b1d4f58f972878005e1e11575364d4a5","ssdeep":"","tlshash":"2cb0122513e61c0c14055050279dff9d942e510b6431aa2aa7e0274711ecc4528f2026","first_seen":"2025-08-22T23:00:54.404551Z","last_seen":"2025-08-22T23:00:54.404551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:11 GMT","end":"Mon, 29 Sep 2025 08:35:10 GMT"},"fingerprint":{"sha1":"43:A0:95:35:FB:C7:02:15:92:9E:20:20:0D:0A:E7:8F:93:61:52:CD","sha256":"F1:59:AE:4E:F0:84:C7:D9:0F:67:4F:CB:FE:A6:ED:7D:47:17:4F:83:AA:B4:ED:FE:F5:F2:69:A8:AB:43:0E:0B"}}},"request":{"raw":"GET /s/googlesans/v29/4UaGrENHsxJlGDuGo1OIlL3Owp4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://www.google.com/\r\nOrigin: https://www.google.com\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39516\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 21 Aug 2025 10:37:45 GMT\r\nexpires: Fri, 21 Aug 2026 10:37:45 GMT\r\ncache-control: public, max-age=31536000\r\nage: 130968\r\nlast-modified: Tue, 23 Feb 2021 01:47:39 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":39516,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39516, version 1.0","md5":"9436affc97843765a966b3568fa7e5ec","sha1":"7bfda74bb30589c75d718fbc997f18c6d5cc4a0b","sha256":"7165713d3e1a610399471a5e93d5677508f62ef072c1151e72273bf4bd54f916","sha512":"473ec3a843c33e18d6d194651fe11353fcd03a7959225faeabf8c77484155ea6a7bccb72dbaf2093ed53c408faa3be9f6fc907f7a5ddf8223375f9d09b504456","ssdeep":"768:eUEh2+iKBVQbBhu8vjenqz2Ez6Y/AxHLEaP72sV9qKYbDblXqhP8qwFSE3uk:eUEEoBVQDjeQaLnP2pfZTqgSEB","tlshash":"1703f112148f7fa1c244f224a4efe416acc3f565aba15e6980b8b7c7010e3c657a46fa","first_seen":"2023-04-17T12:01:39Z","last_seen":"2026-07-25T04:47:51.250246Z","times_seen":82438,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":118,"dns":0,"connect":21,"send":0,"wait":22,"receive":24,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.467Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\naccept-ranges: bytes\r\ncontent-type: image/webp\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"static-on-bigtable\"\r\nreport-to: {\"group\":\"static-on-bigtable\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/static-on-bigtable\"}]}\r\ncontent-length: 660\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nexpires: Fri, 22 Aug 2025 23:00:33 GMT\r\ncache-control: private, max-age=31536000\r\nlast-modified: Wed, 06 Aug 2025 15:00:00 GMT\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":660,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c3dff0d9f30ec0bcf4dec9524505916b","sha1":"4b378403acbebc3747e08c69b5fd7770a850c9eb","sha256":"73d788f86be22112bb53762545989c0f1bbdb7343161130952c9ba3834ff81e3","sha512":"677ea304d00d176acf61ff68bf23bd5f77ad2928d7de9f4b842292bc9d3fb7029fe9f578b62f142dce689230f392e828098eed3484fe2dbee6e1a7aa5378e2c6","ssdeep":"","tlshash":"030183c943aa601828f33e062a3d85143e9e25024301f56c8694c8f9eb76c11220eb20","first_seen":"2023-04-07T11:58:26Z","last_seen":"2026-04-23T00:57:54.447717Z","times_seen":114176,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/gen_204?s=async\u0026astyp=hpba\u0026t=all\u0026atyp=csi\u0026ei=kfaoaKLxIbKmwPAPj9KT0AI\u0026rt=ipf.27,ipfr.156,ttfb.156,st.157,acrt.168,ipfrl.168,aaft.168,art.168,ns.-705\u0026twt=2\u0026mwt=2\u0026imn=0\u0026ima=0\u0026folid=_kfaoaMmZA7TMwPAPpJTF0Ao_7","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/","date":"2025-08-22T23:00:33.643Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:34:03 GMT","end":"Mon, 29 Sep 2025 08:34:02 GMT"},"fingerprint":{"sha1":"CC:B6:27:D3:02:ED:CD:98:15:4D:FA:8E:6E:11:2C:57:EF:3D:FF:DF","sha256":"F7:00:C9:74:34:57:5E:BE:70:A7:0E:D2:9B:A8:2D:44:F1:CE:14:55:C3:D9:06:3F:83:68:95:A1:C6:B5:7F:26"}}},"request":{"raw":"GET /gen_204?s=async\u0026astyp=hpba\u0026t=all\u0026atyp=csi\u0026ei=kfaoaKLxIbKmwPAPj9KT0AI\u0026rt=ipf.27,ipfr.156,ttfb.156,st.157,acrt.168,ipfrl.168,aaft.168,art.168,ns.-705\u0026twt=2\u0026mwt=2\u0026imn=0\u0026ima=0\u0026folid=_kfaoaMmZA7TMwPAPpJTF0Ao_7 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://www.google.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; __Secure-ENID=28.SE=WCnLnpu0RoER2PRIlf27Axs9yphRMevGdzt-k051XjrzsNZU2cPeRCLBKEEJEDSblwjwW0Kza_sRizPW-L_s3U0oSKgDjmy8VM7to0xGWofV7DfXb9LBsb3EutEfcWkjlRGgcE5r671kMtIEo-iEEqKklEw4d4YuframH7DWdv4bqvOvwWrjZl__CtOQqifleIG7iuQsVsAxH_yeFC5-RtU5lQXSnV5HYKR0f8EXPfwxJNkIO3NFKuYT-UDrr5bEGfyCEkbXc41oPfuF\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 204 No Content\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-veCJWpfqPQ9M3cXLBAnxGA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nserver: gws\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-25T04:51:46.086242Z","times_seen":17521484,"resource_available":true,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.250.74.68","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-08-22T23:00:32.966Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"www.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 07 Jul 2025 08:35:54 GMT","end":"Mon, 29 Sep 2025 08:35:53 GMT"},"fingerprint":{"sha1":"F3:96:6E:68:01:34:12:AD:6A:03:D8:EF:BD:47:E1:FD:A4:AA:FB:C5","sha256":"BF:6D:12:A9:D7:AB:31:65:56:63:8F:97:4E:12:51:58:55:9A:75:81:94:F8:34:D1:46:46:48:4B:34:CB:8A:9E"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 22 Aug 2025 23:00:33 GMT\r\nexpires: -1\r\ncache-control: private, max-age=0\r\ncontent-type: text/html; charset=UTF-8\r\nstrict-transport-security: max-age=31536000\r\ncontent-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-LPYqjteNpUACqJYJI5OW8w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"gws\"\r\nreport-to: {\"group\":\"gws\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gws/other\"}]}\r\naccept-ch: Sec-CH-Prefers-Color-Scheme\r\np3p: CP=\"This is not a P3P policy! See g.co/p3phelp for more info.\"\r\ncontent-encoding: br\r\nserver: gws\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nset-cookie: AEC=AVh_V2hvJccjMjIzXC5jB_zvJljPx1NGhdMJcWyMpZrchn53RrDmhFVPOg; expires=Wed, 18-Feb-2026 23:00:33 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\n__Secure-ENID=28.SE=Xo-URybv0z5I3PmgHa6pM1OHgxIr0kNiiuWdIUFK6yqwHux95lSie7pPq00RSwEiJSFAi79lJO79AbE5KSZj1EW2aMS5KX7KGihAuGNuNwS5RqOjdscBfWTsqQhEcbfJohyOVxL3_70gVT8XK3bc7p-jHyfzoZOt1pTpBbHWw4uWdgqaqOyPa6HhrQNqYIZsc5Ex-Ss2l5xo1ZLNz0aVrRTrwWcTRjQKpTC-hQ9FmZcXLt8Z31R6sPHCN0pdUJT24msVo5wT9Vewj95w; expires=Tue, 22-Sep-2026 15:18:51 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Google Web Server","description":"","website":"https://en.wikipedia.org/wiki/Google_Web_Server","common_platform_enumeration":"cpe:2.3:a:google:web_server:*:*:*:*:*:*:*:*","icon":"Google.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":158080,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (31665)","md5":"0f190af061d1782989c8e49d8c7c7922","sha1":"f29ad4643b99c7ce755800d1370cf3c660fb1efd","sha256":"b29e3eeb50b83322f28bea2f2e7b77f32816f0898c85529d3d6c2a599b41dc82","sha512":"95d7ca7ce55e9138ed3a521fdcc35ba879fa80fcff99117f36a98b962175cd939809d3e699e3d73fde5e0ad8d0236f27c06388c1d3bd0c19712c2b4759446552","ssdeep":"3072:ED65K1YWnZAIlJYQfWbqaIDAwtNK6Yc1HM:EB1YWnZAIlJwIBHM","tlshash":"11f35c326300bc3bb9178e51a17abf4e3c79d16be90a46b8f5e5e9709ed1cf30516248","first_seen":"2025-08-22T23:00:54.406554Z","last_seen":"2025-08-22T23:00:54.406554Z","times_seen":1,"resource_available":false,"data":null}},"time_used":203,"timings":{"blocked":64,"dns":1,"connect":7,"send":0,"wait":75,"receive":0,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}