Report - 216.58.200.234

Report Overview

URL

216.58.200.234
IP

216.58.200.234

ASN

#15169 GOOGLE
Submitted

2023-05-26T15:58:20Z

Access

public
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

1

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
apis.google.com (1)	105	2013-05-06 22:20:21	2023-05-26 05:10:45	895	39587	142.250.74.78
play.google.com (1)	34	2013-05-31 01:24:35	2023-05-26 08:02:16	893	599	142.250.74.78
216.58.200.234 (1)	unknown	2017-05-04 17:01:51	2018-06-07 23:30:08	387	963	216.58.200.234
ocsp.pki.goog (9)	175	2018-07-01 08:43:07	2023-05-26 05:09:27	2997	6297	142.250.74.131
www.google.com (21)	7	2015-05-10 13:11:19	2023-05-26 09:14:50	21904	549682	216.58.211.4
www.gstatic.com (3)	unknown	2016-07-26 11:37:06	2023-05-26 07:01:06	1587	70390	142.250.74.35

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2023-05-26	medium	216.58.200.234

ThreatFox

No alerts detected

HTTP Transactions (36)

URL IP Response Size

216.58.200.234/

216.58.200.234

301 Moved Permanently

219

URL User Request GET HTTP/1.1

216.58.200.234/
IP

216.58.200.234:80
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators

Size

219
Hash

d4b691cd9d99117b2ea34586d3e7eeb8

c79f5572f672361bc097676cb5da9d4aa956c8b9

2178eedd5723a6ac22e94ec59bdcd99229c87f3623753f5e199678242f0e90de

Detections

Analyzer	Verdict	Alert
quad9	Sinkholed

HTTP Headers

                                        GET / HTTP/1.1
Host: 216.58.200.234
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 301 Moved Permanently
Location: http://www.google.com/
Content-Type: text/html; charset=UTF-8
Content-Security-Policy-Report-Only: object-src 'none';base-uri 'self';script-src 'nonce-jvBtkqd3fm3ZLa1p3F1BRw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws"
Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
Date: Fri, 26 May 2023 15:58:03 GMT
Expires: Sun, 25 Jun 2023 15:58:03 GMT
Cache-Control: public, max-age=2592000
Server: gws
Content-Length: 219
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

8796f803977abb7a530f42b340c27aa4

a2ee05a2152661894f6abaed4cf23ecf51dd6b7f

e99b23817c80730463e4a9d35dcb0627e9c702ef575e0592313db9d648db7a5e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/

216.58.211.4

200 OK

40770

URL User Request GET HTTP/2

www.google.com/
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Certificate

IssuerGoogle Trust Services LLC

Subjectwww.google.com

Fingerprint48:E3:15:66:FC:EA:15:BF:D2:34:C1:DD:60:D4:23:A3:63:57:89:8D

ValidityMon, 08 May 2023 08:25:18 GMT - Mon, 31 Jul 2023 08:25:17 GMT

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19825)

Size

40770
Hash

2d4fa36b7d2565ef86219d62e992c8c9

00f2f5f646ba3ba2128449aabe8ceb67deddd853

6e8d896ff7e636d9ac4393c231b41781b06d4826f65200b03dfaf629c6be1218

HTTP Headers

                                        GET / HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
date: Fri, 26 May 2023 15:58:04 GMT
expires: -1
cache-control: private, max-age=0
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy-report-only: object-src 'none';base-uri 'self';script-src 'nonce-oc4SR5sw0UG-muA5aW5lBQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other-hp
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-encoding: br
server: gws
content-length: 40770
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; expires=Wed, 22-Nov-2023 15:58:04 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
__Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; expires=Tue, 25-Jun-2024 08:16:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+898; expires=Sun, 25-May-2025 15:58:04 GMT; path=/; domain=.google.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

9f00aac479dac582db2e3e2b61ecc619

4c99cd434e986d7bc5b67fde18796a0edc837bac

d05db643636b28263bd4f0093f1c2aa135473db1065a280a7d9764c32177952d

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/tia/tia.png

216.58.211.4

200 OK

258

URL GET HTTP/3

www.google.com/tia/tia.png
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

PNG image data, 27 x 23, 8-bit/color RGB, non-interlaced\012- data

Size

258
Hash

201e50d8dd7a30c0a918213686ca43b7

6678592120e899f0d2245c8afeaf9d4a3043c41b

c532312eea8020a0370685b222a02b11becd58cd394b509029dff5956127dd81

HTTP Headers

                                        GET /tia/tia.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 258
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 24 May 2023 00:25:31 GMT
expires: Thu, 23 May 2024 00:25:31 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 27 Sep 2019 01:00:00 GMT
content-type: image/png
age: 228753
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png

216.58.211.4

200 OK

5969

URL GET HTTP/3

www.google.com/images/branding/googlelogo/1x/googlelogo_color_272x92dp.png
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

PNG image data, 272 x 92, 8-bit/color RGBA, non-interlaced\012- data

Size

5969
Hash

8f9327db2597fa57d2f42b4a6c5a9855

1737d3dfb411c07b86ed8bd30f5987a4dc397cc1

5776cd87617eacec3bc00ebcf530d1924026033eda852f706c1a675a98915826

HTTP Headers

                                        GET /images/branding/googlelogo/1x/googlelogo_color_272x92dp.png HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
content-type: image/png
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 5969
date: Fri, 26 May 2023 15:58:04 GMT
expires: Fri, 26 May 2023 15:58:04 GMT
cache-control: private, max-age=31536000
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp

216.58.211.4

200 OK

660

URL GET HTTP/3

www.google.com/images/searchbox/desktop_searchbox_sprites318_hr.webp
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

RIFF (little-endian) data, Web/P image\012- data

Size

660
Hash

c3dff0d9f30ec0bcf4dec9524505916b

4b378403acbebc3747e08c69b5fd7770a850c9eb

73d788f86be22112bb53762545989c0f1bbdb7343161130952c9ba3834ff81e3

HTTP Headers

                                        GET /images/searchbox/desktop_searchbox_sprites318_hr.webp HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
content-type: image/webp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 660
date: Fri, 26 May 2023 15:58:04 GMT
expires: Fri, 26 May 2023 15:58:04 GMT
cache-control: private, max-age=31536000
last-modified: Wed, 22 Apr 2020 22:00:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&rt=wsrt.742,aft.393,afti.393,prt.230&wh=1024&imn=6&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=1024&opi=89978449&bl=d2zJ

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&rt=wsrt.742,aft.393,afti.393,prt.230&wh=1024&imn=6&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=1024&opi=89978449&bl=d2zJ
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?s=webhp&t=aft&atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&rt=wsrt.742,aft.393,afti.393,prt.230&wh=1024&imn=6&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=1024&opi=89978449&bl=d2zJ HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-MsbpCLF5aQ-HadO9gsNK3A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:04 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

fc757271ec057273ef886c129a7bffd0

2e6c8df3cbe82d4dde32cdf7f71a6668dd536287

72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

fc757271ec057273ef886c129a7bffd0

2e6c8df3cbe82d4dde32cdf7f71a6668dd536287

72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.gstatic.com/inputtools/images/tia.png

142.250.74.35

200 OK

151

URL GET HTTP/2

www.gstatic.com/inputtools/images/tia.png
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6

ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

Magic

PNG image data, 19 x 11, 8-bit/color RGBA, non-interlaced\012- data

Size

151
Hash

0667c2bf932c77b80ef533c5dc1bd7ff

18015c76d9b6861d576841652e6963dad26a3e35

4ebecfbb2c9cff1741b805876370db38d862a037f652d6f647ce51995e03df2c

HTTP Headers

                                        GET /inputtools/images/tia.png HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/inputtools
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="inputtools"
report-to: {"group":"inputtools","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/inputtools"}]}
content-length: 151
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 May 2023 06:15:56 GMT
expires: Sat, 25 May 2024 06:15:56 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 03 Mar 2020 20:15:00 GMT
content-type: image/png
vary: Origin
age: 34928
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

d4e2d954927aa1532ece1f3aad871a48

64080e5552252600638702178c90cd946984d117

7dc0934c025e5057e7011bc9b1d43c7dad69fd03c2398f15baab0385a96b230d

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.gstatic.com/og/_/js/k=og.qtm.en_US.-QJ0wzngI5w.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qald/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTvWsOfJ2hY7SYcWL595KdVibQGLUQ

142.250.74.35

200 OK

67464

URL GET HTTP/2

www.gstatic.com/og/_/js/k=og.qtm.en_US.-QJ0wzngI5w.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qald/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTvWsOfJ2hY7SYcWL595KdVibQGLUQ
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6

ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

Magic

ASCII text, with very long lines (2120)

Size

67464
Hash

bbcb5d43f5c3e43f839937a4cc6453d8

5672055e8cdafeefbaf26cd7e099111b4c7fcc04

328ed790c5661ef4aa7c6445045c3e15ca8893dd8721363e6d35ca438f6a5d45

HTTP Headers

                                        GET /og/_/js/k=og.qtm.en_US.-QJ0wzngI5w.2019.O/rt=j/m=qabr,q_dnp,qcwid,qapid,qald/exm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/rs=AA2YrTvWsOfJ2hY7SYcWL595KdVibQGLUQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 67464
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 07:00:29 GMT
expires: Wed, 22 May 2024 07:00:29 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 20 May 2023 01:42:33 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding, Origin
age: 291455
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.gstatic.com/og/_/ss/k=og.qtm.-TMA1MCUteY.L.F4.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTsWkIPN9JUbzED1QhVFNBzK1RI2kQ

142.250.74.35

200 OK

273

URL GET HTTP/2

www.gstatic.com/og/_/ss/k=og.qtm.-TMA1MCUteY.L.F4.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTsWkIPN9JUbzED1QhVFNBzK1RI2kQ
IP

142.250.74.35:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.gstatic.com

FingerprintA3:09:CB:6C:64:76:4B:58:32:D1:21:3E:F4:65:1F:DE:58:22:8F:D6

ValidityMon, 08 May 2023 08:24:48 GMT - Mon, 31 Jul 2023 08:24:47 GMT

Magic

ASCII text, with very long lines (385), with no line terminators

Size

273
Hash

aac345f5a1adda98a77a3b2af38cffda

30aac21ba23a52ed339ea361f8f408cac89bed86

d4c7e5111e5092ebfbec1dd6ee7a03956d847f7bc8494803f8e872ec572e4c6d

HTTP Headers

                                        GET /og/_/ss/k=og.qtm.-TMA1MCUteY.L.F4.O/m=qcwid/excm=qaaw,qadd,qaid,qein,qhaw,qhba,qhbr,qhch,qhga,qhid,qhin/d=1/ed=1/ct=zgms/rs=AA2YrTsWkIPN9JUbzED1QhVFNBzK1RI2kQ HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/one-google-eng
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="one-google-eng"
report-to: {"group":"one-google-eng","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/one-google-eng"}]}
content-length: 273
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 07:00:29 GMT
expires: Wed, 22 May 2024 07:00:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 22 May 2023 01:44:01 GMT
content-type: text/css; charset=UTF-8
vary: Accept-Encoding, Origin
age: 291455
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

www.google.com/xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/ed=1/dg=2/rs=ACT90oFJ-QEThV532jxM1Jc9-LAUvykBPA/m=cdos,cr,dpf,hsm,jsa,d,csi

216.58.211.4

200 OK

327699

URL GET HTTP/3

www.google.com/xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/ed=1/dg=2/rs=ACT90oFJ-QEThV532jxM1Jc9-LAUvykBPA/m=cdos,cr,dpf,hsm,jsa,d,csi
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

ASCII text, with very long lines (529)

Size

327699
Hash

7ac572f25482c621462873417a9d10ca

6979858b6b81006e939a49f5e2e13f3ee9d0b6ad

b452ae2eb7f4afaf8bc1218d3d21305b914934549a71b3f1bf5173d980c47711

HTTP Headers

                                        GET /xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/ed=1/dg=2/rs=ACT90oFJ-QEThV532jxM1Jc9-LAUvykBPA/m=cdos,cr,dpf,hsm,jsa,d,csi HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gws-team"
report-to: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]}
content-length: 327699
date: Fri, 26 May 2023 15:58:04 GMT
expires: Sat, 25 May 2024 15:58:04 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 25 May 2023 21:05:37 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

fc757271ec057273ef886c129a7bffd0

2e6c8df3cbe82d4dde32cdf7f71a6668dd536287

72cd2bbd96698941fa58cb6a7dfa4340187c0eb2499bd5a0e6cf4d7240c3a225

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/favicon.ico

216.58.211.4

200 OK

1494

URL GET HTTP/3

www.google.com/favicon.ico
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel\012- data

Size

1494
Hash

f3418a443e7d841097c714d69ec4bcb8

49263695f6b0cdd72f45cf1b775e660fdc36c606

6da5620880159634213e197fafca1dde0272153be3e4590818533fab8d040770

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 1494
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 23 May 2023 15:58:40 GMT
expires: Wed, 31 May 2023 15:58:40 GMT
cache-control: public, max-age=691200
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
content-type: image/x-icon
vary: Accept-Encoding
age: 259164
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ocsp.pki.goog/gts1c3

142.250.74.131

472

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

fdba9eaaa121d332ea796d2da6df897b

b822229c310b8021b61c1bd77c1db7dbdd8e5c42

180e2853e844ada7ffb7be5ef7f7fd9da01829cd8e90a7d8a5531bd9571dbd83

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.UjJbvPIecP0.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_flbzE3yQmWQ7n7N3yCQZtJt8-oA/cb=gapi.loaded_0

142.250.74.78

200 OK

38652

URL GET HTTP/2

apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.UjJbvPIecP0.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_flbzE3yQmWQ7n7N3yCQZtJt8-oA/cb=gapi.loaded_0
IP

142.250.74.78:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.apis.google.com

Fingerprint38:AD:9B:78:25:47:DB:2C:02:F2:58:1E:C4:C2:C9:94:0D:4E:F7:E3

ValidityMon, 24 Apr 2023 12:01:21 GMT - Mon, 17 Jul 2023 12:01:20 GMT

Magic

ASCII text, with very long lines (1530)

Size

38652
Hash

74c0c2dcc8511894f3fca6f0f98bfda5

c3364a29b9380734073cec8551f517c1bb173cea

5862ab09d5db3d464eb0341ab9011da490352223b6a02fb5f23216e15c092230

HTTP Headers

                                        GET /_/scs/abc-static/_/js/k=gapi.gapi.en.UjJbvPIecP0.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_flbzE3yQmWQ7n7N3yCQZtJt8-oA/cb=gapi.loaded_0 HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 38652
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 26 May 2023 06:18:38 GMT
expires: Sat, 25 May 2024 06:18:38 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 01 Apr 2023 15:21:10 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 34766
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

61d13c286970b667c506166085b27432

e17257068ae421f755f2c671371b2fdfc3ea7fe1

68a17d38798d905ccc0ea237654927ec0a6c66c5164909e9a21e3344a576fd62

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/gen_204?atyp=i&ei=DNdwZPTIB9aRxc8PsuSbwAU&ct=usp:t&zx=1685116684863&opi=89978449

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?atyp=i&ei=DNdwZPTIB9aRxc8PsuSbwAU&ct=usp:t&zx=1685116684863&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?atyp=i&ei=DNdwZPTIB9aRxc8PsuSbwAU&ct=usp:t&zx=1685116684863&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-Pwm21SBBOC6MFDIYLk1pHg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/ck=xjs.s.BgWeAz1q5DM.L.F4.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/exm=cdos,cr,csi,d,dpf,hsm,jsa/ed=1/dg=2/rs=ACT90oEqc-7v3InTvlYNxN1qUJZ_tPMtJg/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,loL8vb,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf?xjs=s1

216.58.211.4

200 OK

71253

URL GET HTTP/3

www.google.com/xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/ck=xjs.s.BgWeAz1q5DM.L.F4.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/exm=cdos,cr,csi,d,dpf,hsm,jsa/ed=1/dg=2/rs=ACT90oEqc-7v3InTvlYNxN1qUJZ_tPMtJg/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,loL8vb,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf?xjs=s1
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

ASCII text, with very long lines (5910)

Size

71253
Hash

ea88177ebd94250022e4f4d4ef22683b

36f06b590efd9d17d3f620351f40ecd0f8b1a2fa

3596b25f174b965551401532c81b423899784859194af6b9e7f4791ec1c81f18

HTTP Headers

                                        GET /xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/ck=xjs.s.BgWeAz1q5DM.L.F4.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/exm=cdos,cr,csi,d,dpf,hsm,jsa/ed=1/dg=2/rs=ACT90oEqc-7v3InTvlYNxN1qUJZ_tPMtJg/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,epYOx,loL8vb,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf?xjs=s1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gws-team"
report-to: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]}
content-length: 71253
date: Fri, 26 May 2023 15:58:05 GMT
expires: Sat, 25 May 2024 15:58:05 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 25 May 2023 20:41:54 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/client_204?atyp=i&biw=1280&bih=1024&ei=DNdwZPTIB9aRxc8PsuSbwAU&opi=89978449

216.58.211.4

204 No Content

URL GET HTTP/3

www.google.com/client_204?atyp=i&biw=1280&bih=1024&ei=DNdwZPTIB9aRxc8PsuSbwAU&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /client_204?atyp=i&biw=1280&bih=1024&ei=DNdwZPTIB9aRxc8PsuSbwAU&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-3MJHtzlxDBdM-Ybc4bVPdQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?atyp=i&ei=DNdwZPTIB9aRxc8PsuSbwAU&dt19=2&zx=1685116684990&opi=89978449

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?atyp=i&ei=DNdwZPTIB9aRxc8PsuSbwAU&dt19=2&zx=1685116684990&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?atyp=i&ei=DNdwZPTIB9aRxc8PsuSbwAU&dt19=2&zx=1685116684990&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-YjBkbHLH4mLoyKSy-LR00A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/ck=xjs.s.BgWeAz1q5DM.L.F4.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/exm=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,cdos,cr,csi,d,dpf,epYOx,hsm,jsa,loL8vb,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf/ed=1/dg=2/rs=ACT90oEqc-7v3InTvlYNxN1qUJZ_tPMtJg/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=CnSW2d,DPreE,WlNQGd,fXO0xe,kQvlef,nabPbb?xjs=s2

216.58.211.4

200 OK

7037

URL GET HTTP/3

www.google.com/xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/ck=xjs.s.BgWeAz1q5DM.L.F4.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/exm=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,cdos,cr,csi,d,dpf,epYOx,hsm,jsa,loL8vb,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf/ed=1/dg=2/rs=ACT90oEqc-7v3InTvlYNxN1qUJZ_tPMtJg/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=CnSW2d,DPreE,WlNQGd,fXO0xe,kQvlef,nabPbb?xjs=s2
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

ASCII text, with very long lines (522)

Size

7037
Hash

7d4f3c6581ef4891b01813ef1166f0b4

1f5df462fa8ca4f6ce66f2b684abe5b84c4ac7a6

a1998a8e146a11541a188ea6efc28b67d09e7b62618b974bdbe299abcf2e14ab

HTTP Headers

                                        GET /xjs/_/js/k=xjs.s.no.ZN7_UclaO_U.O/ck=xjs.s.BgWeAz1q5DM.L.F4.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/d=1/exm=DhPYme,EkevXb,GU4Gab,MpJwZc,NzU6V,UUJqVe,aa,abd,async,cdos,cr,csi,d,dpf,epYOx,hsm,jsa,loL8vb,ms4mZb,pHXghd,q0xTif,s39S4,sOXFj,sb_wiz,sf/ed=1/dg=2/rs=ACT90oEqc-7v3InTvlYNxN1qUJZ_tPMtJg/ee=AfeaP:TkrAjf;BMxAGc:E5bFse;BgS6mb:fidj5d;BjwMce:cXX2Wb;CxXAWb:YyRLvc;DULqB:RKfG5c;DpcR3d:zL72xf;EABSZ:MXZt9d;ESrPQc:mNTJvc;EVNhjf:pw70Gc;EmZ2Bf:zr1jrb;Erl4fe:FloWmf;F9mqte:UoRcbe;Fmv9Nc:O1Tzwc;G0KhTb:LIaoZ;G6wU6e:hezEbd;GleZL:J1A7Od;IoGlCf:b5lhvb;JXS8fb:Qj0suc;JsbNhc:Xd8iUd;KQzWid:mB4wNe;KcokUb:KiuZBf;KpRAue:Tia57b;LBgRLc:XVMNvd;LEikZe:byfTOb,lsjVmc;LsNahb:ucGLNb;NPKaK:PVlQOd;NSEoX:lazG7b;Np8Qkd:Dpx6qc;Nyt6ic:jn2sGd;Oj465e:KG2eXe;Pjplud:PoEs9b;QGR0gd:Mlhmy;R2kc8b:ALJqWb;R4IIIb:QWfeKf;R9Ulx:CR7Ufe;SJsSc:H1GVub;SLtqO:Kh1xYe;SMDL4c:fTfGO;SNUn3:x8cHvb;TijjCd:SSmhPd;TxfV6d:YORN0b;UDrY1c:eps46d;UVmjEd:EesRsb;UyG7Kb:wQd0G;V2HTTe:RolTY;VGRfx:VFqbr;VN6jIc:ddQyuf;VxQ32b:k0XsBb;WCEKNd:I46Hvd;WDGyFe:jcVOxd;Wfmdue:g3MJlb;YV5bee:IvPZ6d;a56pNe:JEfCwb;aAJE9c:WHW6Ef;aZ61od:arTwJ;bcPXSc:gSZLJb;cEt90b:ws9Tlc;cFTWae:gT8qnd;dIoSBb:ZgGg9b;dLlj2:Qqt3Gf;daB6be:lMxGPd;dtl0hd:lLQWFe;eBAeSb:Ck63tb;eHDfl:ofjVkb;g8nkx:U4MzKc;gaub4:TN6bMe;hK67qb:QWEO5b;hjRo6e:F62sG;iFQyKf:QIhFr;imqimf:jKGL2e;io8t5d:sgY6Zb;kCQyJ:ueyPK;kMFpHd:OTA3Ae;kY7VAf:d91TEb;kbAm9d:MkHyGd;lkq0A:Z0MWEf;lzgfYb:PI40bd;nAFL3:s39S4;oGtAuc:sOXFj;oSUNyd:fTfGO;oUlnpc:RagDlc;okUaUd:wItadb;pNsl2d:j9Yuyc;pXdRYb:JKoKVe;pj82le:mg5CW;qaS3gd:yiLg6e;qavrXe:zQzcXe;qddgKe:x4FYXe;rQSrae:C6D5Fc;sP4Vbe:VwDzFe;sTsDMc:kHVSUb;tosKvd:ZCqP3;uY49fb:COQbmf;uuQkY:u2V3ud;vfVwPd:OXTqFb;w3bZCb:ZPGaIb;w9w86d:dt4g2b;wQlYve:aLUfP;wR5FRb:TtcOte;wV5Pjc:L8KGxe;whEZac:F4AmNb;xBbsrc:NEW1Qc;xbe2wc:wbTLEd;xqZiqf:wmnU7d;yGxLoc:FmAr0c;yxTchf:KUM7Z;z97YGf:oug9te;zOsCQe:Ko78Df;zxnPse:GkRiKb/m=CnSW2d,DPreE,WlNQGd,fXO0xe,kQvlef,nabPbb?xjs=s2 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gws-team"
report-to: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]}
content-length: 7037
date: Fri, 26 May 2023 15:58:05 GMT
expires: Sat, 25 May 2024 15:58:05 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 25 May 2023 20:41:54 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=promo&rt=hpbas.1077&zx=1685116684998&opi=89978449

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=promo&rt=hpbas.1077&zx=1685116684998&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=promo&rt=hpbas.1077&zx=1685116684998&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-6Do7cViLtCqOEHpKKe6VDA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=no&authuser=0&psi=DNdwZPTIB9aRxc8PsuSbwAU.1685116684860&dpr=1&nolsbt=1

216.58.211.4

200 OK

URL GET HTTP/3

www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=no&authuser=0&psi=DNdwZPTIB9aRxc8PsuSbwAU.1685116684860&dpr=1&nolsbt=1
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

ASCII text

Size

49
Hash

03ed582023e919794f32535adb4634be

ed33e9fb8905c18e398b0dff6af20156df25d4ac

f42be90d0df9e2949d95d19903d4497bbce9995f9e286f5acca02946f145876b

HTTP Headers

                                        GET /complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=no&authuser=0&psi=DNdwZPTIB9aRxc8PsuSbwAU.1685116684860&dpr=1&nolsbt=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
x-content-type-options: nosniff
date: Fri, 26 May 2023 15:58:05 GMT
expires: Fri, 26 May 2023 15:58:05 GMT
cache-control: private, max-age=3600
content-type: application/json; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-oWFcNXPCmknuX6H8tFekNQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: gws
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=webhp&t=all&bl=d2zJ&wh=1024&imn=6&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=1024&adh=&ime=2&imex=2&imeh=4&imea=0&imeb=0&imel=0&scp=0&sys=hc.48&rt=aft.393,prt.230,afti.393,dcl.257,xjsls.276,aftqf.394,xjses.815,xjsee.901,xjs.901,ol.1116,fcp.258,wsrt.742,cst.58,dnst.1,rqst.103,rspt.24,sslt.48,rqstt.663,unt.603,cstt.605,dit.992&zx=1685116685042&opi=89978449

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=webhp&t=all&bl=d2zJ&wh=1024&imn=6&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=1024&adh=&ime=2&imex=2&imeh=4&imea=0&imeb=0&imel=0&scp=0&sys=hc.48&rt=aft.393,prt.230,afti.393,dcl.257,xjsls.276,aftqf.394,xjses.815,xjsee.901,xjs.901,ol.1116,fcp.258,wsrt.742,cst.58,dnst.1,rqst.103,rspt.24,sslt.48,rqstt.663,unt.603,cstt.605,dit.992&zx=1685116685042&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=webhp&t=all&bl=d2zJ&wh=1024&imn=6&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=1024&adh=&ime=2&imex=2&imeh=4&imea=0&imeb=0&imel=0&scp=0&sys=hc.48&rt=aft.393,prt.230,afti.393,dcl.257,xjsls.276,aftqf.394,xjses.815,xjsee.901,xjs.901,ol.1116,fcp.258,wsrt.742,cst.58,dnst.1,rqst.103,rspt.24,sslt.48,rqstt.663,unt.603,cstt.605,dit.992&zx=1685116685042&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=Ala2-NdgfXUqH4wqIx8lluCpYPUqtSMLCznVwFm94obTjuFCMwwfQdQNRi5oF3cOMPYmJxqIiOPQEJQny-wM2zVojR9VkRtgMF2bNdQxkbjlPTEkt6ce8xWI0PGFW8l4TSdv_SL1Rdjy_3Z2lkoo_d80cbp8tLvboSMV-Fa7bBw; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-8oc7oOPoOU3jVD4ZfmbgLQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=DNdwZPTIB9aRxc8PsuSbwAU&zx=1685116685045&opi=89978449

216.58.211.4

204 No Content

URL GET HTTP/3

www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=DNdwZPTIB9aRxc8PsuSbwAU&zx=1685116685045&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=DNdwZPTIB9aRxc8PsuSbwAU&zx=1685116685045&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=Ala2-NdgfXUqH4wqIx8lluCpYPUqtSMLCznVwFm94obTjuFCMwwfQdQNRi5oF3cOMPYmJxqIiOPQEJQny-wM2zVojR9VkRtgMF2bNdQxkbjlPTEkt6ce8xWI0PGFW8l4TSdv_SL1Rdjy_3Z2lkoo_d80cbp8tLvboSMV-Fa7bBw; CONSENT=PENDING+898
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-QshwFIQ0l44vzciE_9ue8Q' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?atyp=csi&ei=DddwZLjgEa-GwPAP4d2B4AE&s=async&astyp=hpba&ima=0&imn=0&rt=ttfb.52,st.53,bs.0,aaft.75,acrt.75,art.75&zx=1685116685073&opi=89978449

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?atyp=csi&ei=DddwZLjgEa-GwPAP4d2B4AE&s=async&astyp=hpba&ima=0&imn=0&rt=ttfb.52,st.53,bs.0,aaft.75,acrt.75,art.75&zx=1685116685073&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?atyp=csi&ei=DddwZLjgEa-GwPAP4d2B4AE&s=async&astyp=hpba&ima=0&imn=0&rt=ttfb.52,st.53,bs.0,aaft.75,acrt.75,art.75&zx=1685116685073&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=Ala2-NdgfXUqH4wqIx8lluCpYPUqtSMLCznVwFm94obTjuFCMwwfQdQNRi5oF3cOMPYmJxqIiOPQEJQny-wM2zVojR9VkRtgMF2bNdQxkbjlPTEkt6ce8xWI0PGFW8l4TSdv_SL1Rdjy_3Z2lkoo_d80cbp8tLvboSMV-Fa7bBw; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-fnPZ2A2S2ho5aiBPHACrDg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=promo&rt=hpbas.1077,hpbarr.78&zx=1685116685075&opi=89978449

216.58.211.4

204 No Content

URL POST HTTP/3

www.google.com/gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=promo&rt=hpbas.1077,hpbarr.78&zx=1685116685075&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        POST /gen_204?atyp=csi&ei=DNdwZPTIB9aRxc8PsuSbwAU&s=promo&rt=hpbas.1077,hpbarr.78&zx=1685116685075&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=Ala2-NdgfXUqH4wqIx8lluCpYPUqtSMLCznVwFm94obTjuFCMwwfQdQNRi5oF3cOMPYmJxqIiOPQEJQny-wM2zVojR9VkRtgMF2bNdQxkbjlPTEkt6ce8xWI0PGFW8l4TSdv_SL1Rdjy_3Z2lkoo_d80cbp8tLvboSMV-Fa7bBw; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Content-Length: 0
TE: trailers

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-RET_FClSRocQ5olDMEuF3w' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/xjs/_/js/md=1/k=xjs.s.no.ZN7_UclaO_U.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/rs=ACT90oFJ-QEThV532jxM1Jc9-LAUvykBPA

216.58.211.4

200 OK

78554

URL GET HTTP/3

www.google.com/xjs/_/js/md=1/k=xjs.s.no.ZN7_UclaO_U.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/rs=ACT90oFJ-QEThV532jxM1Jc9-LAUvykBPA
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

JSON data\012- , ASCII text, with very long lines (65536), with no line terminators

Size

78554
Hash

b4d73bccdacf90631c6767010921f12f

502d8e80791744124b74444c1fde032f376d4b18

97466dfa97f2a6ec03e58b4e5e1c54784b18b02142fe7e9f0d648c2f6f8b8141

HTTP Headers

                                        GET /xjs/_/js/md=1/k=xjs.s.no.ZN7_UclaO_U.O/am=CAAAIAAgGoRTABtAAAIABAAAEFAAAAAAAAADwABA8CgbAAAAkIgYBDHYAEBCCQAAAACA0A8AAAAAAIgBAAAAogiAgYZAFUAAAAAA5A8AAC8AYDBhAQAAAAAAAACAgJUgGNwggYAAEAAAAAAAAAAAVMnkxQEg/rs=ACT90oFJ-QEThV532jxM1Jc9-LAUvykBPA HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gws-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gws-team"
report-to: {"group":"gws-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws-team"}]}
content-length: 78554
date: Fri, 26 May 2023 15:58:05 GMT
expires: Sat, 25 May 2024 15:58:05 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Thu, 25 May 2023 21:05:37 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

play.google.com/log?format=json&hasfast=true

142.250.74.78

200 OK

131

URL POST HTTP/3

play.google.com/log?format=json&hasfast=true
IP

142.250.74.78:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint08:73:2C:18:30:14:52:C3:CA:3E:02:79:65:B4:FE:90:AC:3F:3E:33

ValidityMon, 24 Apr 2023 11:56:06 GMT - Mon, 17 Jul 2023 11:56:05 GMT

Magic

JSON data\012- , ASCII text, with no line terminators

Size

131
Hash

ca0b7e866005f6774d284b9f438ebfd2

53644f5ee3640189bdb223473ba6a2d46606c556

502e9680cfa78fa8be779cbf4f1947c8eaa3d43bf8c7464800ec772b2ddea358

HTTP Headers

                                        POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 680
Origin: https://www.google.com
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=Ala2-NdgfXUqH4wqIx8lluCpYPUqtSMLCznVwFm94obTjuFCMwwfQdQNRi5oF3cOMPYmJxqIiOPQEJQny-wM2zVojR9VkRtgMF2bNdQxkbjlPTEkt6ce8xWI0PGFW8l4TSdv_SL1Rdjy_3Z2lkoo_d80cbp8tLvboSMV-Fa7bBw; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

                                        HTTP/3 200 OK
access-control-allow-origin: https://www.google.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Fri, 26 May 2023 15:58:05 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

ocsp.pki.goog/gts1c3

142.250.74.131

471

URL

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

9f00aac479dac582db2e3e2b61ecc619

4c99cd434e986d7bc5b67fde18796a0edc837bac

d05db643636b28263bd4f0093f1c2aa135473db1065a280a7d9764c32177952d

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 26 May 2023 15:58:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/client_204?cs=1&opi=89978449

216.58.211.4

204 No Content

URL GET HTTP/3

www.google.com/client_204?cs=1&opi=89978449
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /client_204?cs=1&opi=89978449 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-pHZ650YjSXo1TuBoS2msUQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/fff
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/fff"}]}
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: __Secure-ENID=12.SE=Ala2-NdgfXUqH4wqIx8lluCpYPUqtSMLCznVwFm94obTjuFCMwwfQdQNRi5oF3cOMPYmJxqIiOPQEJQny-wM2zVojR9VkRtgMF2bNdQxkbjlPTEkt6ce8xWI0PGFW8l4TSdv_SL1Rdjy_3Z2lkoo_d80cbp8tLvboSMV-Fa7bBw; expires=Tue, 25-Jun-2024 08:16:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=lax
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

www.google.com/async/hpba?vet=10ahUKEwj0_vLqrJP_AhXWSPEDHTLyBlgQj-0KCBo..i&ei=DNdwZPTIB9aRxc8PsuSbwAU&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.BgWeAz1q5DM.L.F4.O,_fmt:prog,_id:a3JU5b

216.58.211.4

200 OK

URL GET HTTP/3

www.google.com/async/hpba?vet=10ahUKEwj0_vLqrJP_AhXWSPEDHTLyBlgQj-0KCBo..i&ei=DNdwZPTIB9aRxc8PsuSbwAU&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.BgWeAz1q5DM.L.F4.O,_fmt:prog,_id:a3JU5b
IP

216.58.211.4:443
ASN

#15169 GOOGLE

Requested by

https://www.google.com/
Certificate

IssuerGoogle Trust Services LLC

Subject*.google.com

Fingerprint5D:BA:19:A5:81:25:05:32:72:13:A7:18:CF:67:8C:D6:6F:13:B3:EF

ValidityMon, 08 May 2023 08:20:09 GMT - Mon, 31 Jul 2023 08:20:08 GMT

Magic

ASCII text, with no line terminators

Size

56
Hash

8cae98e85119139c2837ce8588904229

21acbbfe38b231527cdf2f0ddef05a17dcd81def

11154958de3ec0848dfc2695ce9adde6e3b39893a113014f68c8e37c2b4d26d9

HTTP Headers

                                        GET /async/hpba?vet=10ahUKEwj0_vLqrJP_AhXWSPEDHTLyBlgQj-0KCBo..i&ei=DNdwZPTIB9aRxc8PsuSbwAU&opi=89978449&yv=3&cs=0&async=_ck:xjs.s.BgWeAz1q5DM.L.F4.O,_fmt:prog,_id:a3JU5b HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
DNT: 1
Connection: keep-alive
Cookie: SOCS=CAESHAgBEhJnd3NfMjAyMjA5MjktMF9SQzEaAnJvIAEaBgiAkvOZBg; AEC=AUEFqZfCr4KfUCFP4KIyw3RrWWx6uV12PBCqkp2SHZqqYLJ4Sk-v-cZOXas; __Secure-ENID=12.SE=MHGW1Ew1NRZKHkTBNa7RvoNfL8QLriYJA945nZy_6oiWgDZeU3ouQpB8S_CERApvC7K6xVtP2kaWyH06opk2WJZZVY4SxH3oaWz5ppjzCcaKseRJ3uAxfmxDpcin4G6olUxDwzIXJSAmJImPN5FZgbBX-vGA6tvFJUDHb7ZdQuc; CONSENT=PENDING+898
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/3 200 OK
version: 534324811
x-content-type-options: nosniff
content-type: text/plain; charset=UTF-8
content-disposition: attachment; filename="f.txt"
strict-transport-security: max-age=31536000
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/none"}]}
content-encoding: br
date: Fri, 26 May 2023 15:58:05 GMT
server: gws
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

Report Overview

URL

IP

ASN

Submitted

Access

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (10)

#1 JS:Script (size: 189047)

#2 JS:Script (size: 220689)

#3 JS:Script (size: 45405)

#4 JS:Script (size: 4730)

#5 JS:Script (size: 21912)

#6 JS:Script (size: 163)

#7 JS:Script (size: 5823)

#8 JS:Script (size: 114695)

#9 JS:Script (size: 928038)

#10 JS:Script (size: 20981)

HTTP Transactions (36)

URL User Request GET HTTP/1.1

IP

ASN

Magic

Size

Hash

Detections

HTTP Headers

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL User Request GET HTTP/2

IP

ASN

Certificate

Magic

Size

Hash

HTTP Headers

URL

IP

ASN

Magic

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

Magic

Size

Hash

HTTP Headers

URL GET HTTP/3

IP

ASN

Requested by

Certificate

Magic