8.8.8.8:53

8.8.8.8:53

216.58.211.110:443

GET /u/0/uc?id=1_OEhdgGvKkn1xaT3kJ2MQ3XBdyYnl1rJ&export=download HTTP/1.1
User-Agent: CODE
Host: drive.google.com
Cache-Control: no-cache

HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 07 Jul 2020 06:22:38 GMT
Location: https://doc-0o-34-docs.googleusercontent.com/docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/orkie751ae26l5vprm0fcsvk9ma1ga2k/1594102950000/13816947845972265350/*/1_OEhdgGvKkn1xaT3kJ2MQ3XBdyYnl1rJ?e=download
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Security-Policy: script-src 'report-sample' 'nonce-iKymcVy/ILhAoJegDDP8aw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/drive-explorer/
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: NID=204=o6hG2UqGZWwWtIszGN0gTsNV_sg0QWBS8qI1NYXA5BGgliduusom0JJIHOjHsM3AT3NIgE_hhXEQFAtkOzhTkFyMhKV8yr11v8VP2xioE2SMLQG6zCSVUYd09b9W-jjv6wd4D2EwHiSHsMLdHQFBPO9HUnFarODdED9zjAWe-6M; expires=Wed, 06-Jan-2021 06:22:38 GMT; path=/; domain=.google.com; HttpOnly
Alt-Svc: h3-29=":443"; ma=2592000,h3-27=":443"; ma=2592000,h3-25=":443"; ma=2592000,h3-T050=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
Accept-Ranges: none
Vary: Accept-Encoding
Transfer-Encoding: chunked

8.8.8.8:53

172.217.17.131:80

GET /gsr2/ME4wTDBKMEgwRjAJBgUrDgMCGgUABBTgXIsxbvr2lBkPpoIEVRE6gHlCnAQUm%2BIHV2ccHsBqBt5ZtJot39wZhi4CDQHjtJqhjYqpgSVpULg%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.pki.goog

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Jul 2020 21:26:01 GMT
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=86400
Age: 32196

172.217.17.131:80

GET /gts1o1core/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEH4Q2QH3rAPNCAAAAABH744%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.pki.goog

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Jul 2020 16:14:58 GMT
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=86400
Age: 50860

172.217.17.131:80

GET /gts1o1core/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRCRjDCJxnb3nDwj%2Fxz5aZfZjgXvAQUmNH4bhDrz5vsYJ8YkBug630J%2FSsCEQCaaj9s9KcahwMAAAAAkd0g HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: ocsp.pki.goog

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 06 Jul 2020 18:22:48 GMT
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=86400
Age: 43190

8.8.8.8:53

172.217.17.65:443

GET /docs/securesc/ha0ro937gcuc7l7deffksulhg5h7mbp1/orkie751ae26l5vprm0fcsvk9ma1ga2k/1594102950000/13816947845972265350/*/1_OEhdgGvKkn1xaT3kJ2MQ3XBdyYnl1rJ?e=download HTTP/1.1
User-Agent: CODE
Connection: Keep-Alive
Cache-Control: no-cache
Host: doc-0o-34-docs.googleusercontent.com

HTTP/1.1 200 OK
X-GUploader-UploadID: AAANsUmhsaR7gMz1pEEyGv9ZLhrm_2x5xiQMRqhGobKeuGIYHEorjVntzpgWGPC3tFvNEaqe0_to72NqU2S62LMviG1vNCeyrQ
Access-Control-Allow-Origin: *
Access-Control-Allow-Credentials: false
Access-Control-Allow-Headers: Accept, Accept-Language, Authorization, Cache-Control, Content-Disposition, Content-Encoding, Content-Language, Content-Length, Content-MD5, Content-Range, Content-Type, Date, GData-Version, google-cloud-resource-prefix, Host, If-Match, If-Modified-Since, If-None-Match, If-Unmodified-Since, Origin, OriginToken, Pragma, Range, Slug, Transfer-Encoding, Want-Digest, x-chrome-connected, X-ClientDetails, X-Client-Version, X-Firebase-Locale, X-Goog-Firebase-Installations-Auth, X-Firebase-Client, X-Firebase-Client-Log-Type, X-GData-Client, X-GData-Key, X-GoogApps-Allowed-Domains, X-Goog-AdX-Buyer-Impersonation, X-Goog-Api-Client, X-Goog-AuthUser, x-goog-ext-124712974-jspb, x-goog-ext-259736195-jspb, X-Goog-PageId, X-Goog-Encode-Response-If-Executable, X-Goog-Correlation-Id, X-Goog-Request-Info, X-Goog-Request-Reason, X-Goog-Experiments, x-goog-iam-authority-selector, x-goog-iam-authorization-token, X-Goog-Spatula, X-Goog-Travel-Bgr, X-Goog-Travel-Settings, X-Goog-Upload-Command, X-Goog-Upload-Content-Disposition, X-Goog-Upload-Content-Length, X-Goog-Upload-Content-Type, X-Goog-Upload-File-Name, X-Goog-Upload-Header-Content-Length, X-Goog-Upload-Offset, X-Goog-Upload-Protocol, x-goog-user-project, X-Goog-Visitor-Id, X-Goog-FieldMask, X-Google-Project-Override, X-Goog-Api-Key, X-HTTP-Method-Override, X-JavaScript-User-Agent, X-Pan-Versionid, X-Proxied-User-IP, X-Origin, X-Referer, X-Requested-With, X-Stadia-Client-Context, X-Upload-Content-Length, X-Upload-Content-Type, X-Use-HTTP-Status-Code-Override, X-Ios-Bundle-Identifier, X-Android-Package, X-Ariane-Xsrf-Token, X-YouTube-VVT, X-YouTube-Page-CL, X-YouTube-Page-Timestamp, X-Goog-Meeting-Botguardid, X-Goog-Meeting-ClientVersion, X-Goog-Meeting-Debugid, X-Goog-Meeting-RtcClient, X-Goog-Meeting-Token, X-Client-Data, X-Sfdc-Authorization, MIME-Version, Content-Transfer-Encoding, X-Earth-Engine-App-ID-Token, X-Earth-Engine-Computation-Profile, X-Earth-Engine-Computation-Profiling, X-Play-Console-Experiments-Override, X-Play-Console-Session-Id, x-alkali-account-key, x-alkali-application-key, x-alkali-auth-apps-namespace, x-alkali-auth-entities-namespace, x-alkali-auth-entity, x-alkali-client-locale, EES-S7E-MODE, cast-device-capabilities
Access-Control-Allow-Methods: GET,OPTIONS
Content-Type: application/octet-stream
Content-Disposition: attachment;filename="eSlip";filename*=UTF-8''eSlip
Date: Tue, 07 Jul 2020 06:22:39 GMT
Expires: Tue, 07 Jul 2020 06:22:39 GMT
Cache-Control: private, max-age=0
X-Goog-Hash: crc32c=HQ+xWg==
Content-Length: 941056
Server: UploadServer
Alt-Svc: h3-29=":443"; ma=2592000,h3-27=":443"; ma=2592000,h3-25=":443"; ma=2592000,h3-T050=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"