6184f476b004a2d391216b8074a2031c500d7a7cd338e10425683a45cc9f2136

Resubmissions

29/10/2022, 11:20 UTC

221029-nfvp3aeedk 1

29/10/2022, 11:09 UTC

221029-m9gjvsddf5 3

Analysis

max time kernel
455s
max time network
463s
platform
windows10-2004_x64
resource
win10v2004-20220901-en
resource tags

arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
submitted
29/10/2022, 11:09 UTC

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SaintsRow.exe
Size

52.5MB
MD5

9fd443016595532f1e1d25481b0e3b5a
SHA1

3badc4504c841451aebc575704ddf0ed4c058deb
SHA256

6184f476b004a2d391216b8074a2031c500d7a7cd338e10425683a45cc9f2136
SHA512

28236340a1919daeb393f964dddb2b54b5206fa2e5f32155e6258df133734e2f72a161e0d45ad8bd6f657446f15c5deb29691d058766ee255ef92e0b9acd9aad
SSDEEP

786432:8uIcv8ZGZ13Bh9Uyxo2x2GmGpoDwIJVXaMhHxA3+QZPL:8tHm13Bh9Uyxo2x2GmGp+VXaMhi

Score

3^/10

Malware Config

Signatures

Program crash 3 IoCs

pid	pid_target	Process	procid_target
1272	4784	WerFault.exe	20
4596	4444	WerFault.exe	155
2004	3876	WerFault.exe	162

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Opens file in notepad (likely ransom note) 1 IoCs

ransomware

pid	Process
3392	NOTEPAD.EXE

Suspicious behavior: EnumeratesProcesses 30 IoCs

pid	Process
808	chrome.exe
808	chrome.exe
796	chrome.exe
796	chrome.exe
3808	chrome.exe
3808	chrome.exe
4484	chrome.exe
4484	chrome.exe
1092	chrome.exe
1092	chrome.exe
2496	chrome.exe
2496	chrome.exe
1584	chrome.exe
1584	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
4388	chrome.exe
3152	chrome.exe
3152	chrome.exe
3776	chrome.exe
3776	chrome.exe
4196	chrome.exe
4196	chrome.exe
2952	chrome.exe
2952	chrome.exe
1116	chrome.exe
1116	chrome.exe
624	chrome.exe
624	chrome.exe

Suspicious behavior: LoadsDriver 14 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
644	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 20 IoCs

pid	Process
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
4196	chrome.exe
4196	chrome.exe
4196	chrome.exe
4196	chrome.exe
4196	chrome.exe
4196	chrome.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: 33	1420	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	1420	AUDIODG.EXE

Suspicious use of FindShellTrayWindow 29 IoCs

pid	Process
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
4196	chrome.exe
4196	chrome.exe

Suspicious use of SendNotifyMessage 24 IoCs

pid	Process
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe
796	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 796 wrote to memory of 960	796	chrome.exe	95
PID 796 wrote to memory of 960	796	chrome.exe	95
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 3712	796	chrome.exe	97
PID 796 wrote to memory of 808	796	chrome.exe	98
PID 796 wrote to memory of 808	796	chrome.exe	98
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99
PID 796 wrote to memory of 5092	796	chrome.exe	99

C:\Users\Admin\AppData\Local\Temp\SaintsRow.exe
"C:\Users\Admin\AppData\Local\Temp\SaintsRow.exe"
1⤵
PID:1780

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 428 -p 4784 -ip 4784
1⤵
PID:664

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4784 -s 840
1⤵
- Program crash
PID:1272

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:796
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa069d4f50,0x7ffa069d4f60,0x7ffa069d4f70
  2⤵
  PID:960
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1608 /prefetch:2
  2⤵
  PID:3712
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1972 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2264 /prefetch:8
  2⤵
  PID:5092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2904 /prefetch:1
  2⤵
  PID:4028
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3100 /prefetch:1
  2⤵
  PID:3624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3768 /prefetch:1
  2⤵
  PID:3032
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4408 /prefetch:8
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4464 /prefetch:8
  2⤵
  PID:4780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4592 /prefetch:8
  2⤵
  PID:2204
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3808
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4752 /prefetch:8
  2⤵
  PID:2412
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4744 /prefetch:1
  2⤵
  PID:4232
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4568 /prefetch:1
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3880 /prefetch:8
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4468 /prefetch:8
  2⤵
  PID:1296
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4856 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4564 /prefetch:8
  2⤵
  PID:4200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:2564
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5460 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5744 /prefetch:8
  2⤵
  PID:3124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5604 /prefetch:8
  2⤵
  PID:4792
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5916 /prefetch:8
  2⤵
  PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:2988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5468 /prefetch:8
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5816 /prefetch:8
  2⤵
  PID:4892
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=29 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5708 /prefetch:1
  2⤵
  PID:1444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5424 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3356 /prefetch:1
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4624 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2496
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2672 /prefetch:8
  2⤵
  PID:4888
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=35 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1540 /prefetch:1
  2⤵
  PID:1524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=36 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=6064 /prefetch:1
  2⤵
  PID:1484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5912 /prefetch:8
  2⤵
  PID:3240
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5880 /prefetch:8
  2⤵
  PID:3504
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5748 /prefetch:8
  2⤵
  PID:1740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2184 /prefetch:8
  2⤵
  PID:4040
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=4868 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4388
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1224 /prefetch:8
  2⤵
  PID:1936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5860 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5580 /prefetch:8
  2⤵
  PID:2816
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1528 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --extension-process --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=46 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2528 /prefetch:1
  2⤵
  PID:4584
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=47 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2384 /prefetch:1
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:2372
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --field-trial-handle=1584,3983314170881209512,12613846549983595625,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=3032 /prefetch:8
  2⤵
  PID:3296

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4188

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 440 -p 4444 -ip 4444
1⤵
PID:3944

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 4444 -s 2952
1⤵
- Program crash
PID:4596

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -pss -s 460 -p 3876 -ip 3876
1⤵
PID:4924

C:\Windows\system32\WerFault.exe
C:\Windows\system32\WerFault.exe -u -p 3876 -s 2896
1⤵
- Program crash
PID:2004

C:\Windows\system32\NOTEPAD.EXE
"C:\Windows\system32\NOTEPAD.EXE" C:\vcredist2022_x86_000_vcRuntimeMinimum_x86.log
1⤵
- Opens file in notepad (likely ransom note)
PID:3392

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:4608

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
PID:4196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=89.0.4389.114 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffa069d4f50,0x7ffa069d4f60,0x7ffa069d4f70
  2⤵
  PID:456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1616 /prefetch:2
  2⤵
  PID:1632
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=1904 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:3776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2584 /prefetch:8
  2⤵
  PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2888 /prefetch:1
  2⤵
  PID:4044
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2896 /prefetch:1
  2⤵
  PID:3248
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3724 /prefetch:1
  2⤵
  PID:3056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=4244 /prefetch:8
  2⤵
  PID:3484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=4976 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2952
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5072 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1116
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5108 /prefetch:8
  2⤵
  PID:4988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5092 /prefetch:8
  2⤵
  PID:4364
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5048 /prefetch:8
  2⤵
  PID:4444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4980 /prefetch:1
  2⤵
  PID:4464
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3088 /prefetch:1
  2⤵
  PID:3304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=3272 /prefetch:8
  2⤵
  PID:4380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=5552 /prefetch:8
  2⤵
  PID:4880
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --lang=en-US --service-sandbox-type=video_capture --mojo-platform-channel-handle=3544 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --field-trial-handle=1608,17553721244916365255,1826010788343092068,131072 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5400 /prefetch:1
  2⤵
  PID:4200

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4340

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x4a4 0x4a0
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:1420

Network

DNS

clients2.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

clients2.google.com

IN A

Response

clients2.google.com

IN CNAME

clients.l.google.com

clients.l.google.com

IN A

142.250.179.174
DNS

accounts.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

accounts.google.com

IN A

Response

accounts.google.com

IN A

172.217.168.237
POST

https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard

chrome.exe

Remote address:

172.217.168.237:443

Request

POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/2.0
host: accounts.google.com
content-length: 1
origin: https://www.google.com
content-type: application/x-www-form-urlencoded
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

edgedl.me.gvt1.com

chrome.exe

Remote address:

8.8.8.8:53

Request

edgedl.me.gvt1.com

IN A

Response

edgedl.me.gvt1.com

IN A

34.104.35.123
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

chrome.exe

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx HTTP/1.1
Host: edgedl.me.gvt1.com
Connection: keep-alive
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 248531
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "c994e6"
last-modified: Fri, 25 Feb 2022 22:08:36 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 22:15:32 GMT
x-request-id: 25688aff-6abb-4963-bdf2-037306240087
age: 46685
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
DNS

apis.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

apis.google.com

IN A

Response

apis.google.com

IN CNAME

plus.l.google.com

plus.l.google.com

IN A

142.250.179.142
GET

https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7I3T5S8x4Qg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SzNpm6HglASFo9cZ-GgP5E5f5WQ/cb=gapi.loaded_0

chrome.exe

Remote address:

142.250.179.142:443

Request

GET /_/scs/abc-static/_/js/k=gapi.gapi.en.7I3T5S8x4Qg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SzNpm6HglASFo9cZ-GgP5E5f5WQ/cb=gapi.loaded_0 HTTP/2.0
host: apis.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
DNS

dns.google

chrome.exe

Remote address:

8.8.8.8:53

Request

dns.google

IN A

Response

dns.google

IN A

8.8.8.8

dns.google

IN A

8.8.4.4
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABCXRyYW5zbGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEsADABHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABCXRyYW5zbGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEsADABHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSp6TRXFn7E98XinWQvRiKQOo0uehCBCD7MdNiihfM&s=10

chrome.exe

Remote address:

142.251.39.110:443

Request

GET /images?q=tbn:ANd9GcSp6TRXFn7E98XinWQvRiKQOo0uehCBCD7MdNiihfM&s=10 HTTP/2.0
host: encrypted-tbn0.gstatic.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

http://roblox.com/

chrome.exe

Remote address:

128.116.114.3:80

Request

GET / HTTP/1.1
Host: roblox.com
Connection: keep-alive
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9

Response

HTTP/1.1 308 Permanent Redirect

content-length: 0
location: https://www.roblox.com/
GET

https://www.roblox.com/

chrome.exe

Remote address:

128.116.116.3:443

Request

GET / HTTP/2.0
host: www.roblox.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: private, must-revalidate
content-type: text/html; charset=utf-8
content-encoding: gzip
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubdomains
set-cookie: rbx-ip2=; domain=roblox.com; expires=Sat, 29-Oct-2022 17:13:45 GMT; path=/
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' roblox.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com ; img-src 'self' data: *.cloudfront.net *.google-analytics.com *.kaptcha.com *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com
x-frame-options: SAMEORIGIN
set-cookie: rbx-ip2=; domain=roblox.com; expires=Sat, 29-Oct-2022 17:13:45 GMT; path=/
set-cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432; domain=roblox.com; expires=Wed, 16-Mar-2050 16:13:45 GMT; path=/
set-cookie: GuestData=UserID=-1719938181; domain=.roblox.com; expires=Wed, 16-Mar-2050 16:13:45 GMT; path=/
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:44 GMT
content-length: 16387
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1}
GET

https://www.roblox.com/timg/rbx

chrome.exe

Remote address:

128.116.116.3:443

Request

GET /timg/rbx HTTP/2.0
host: www.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-origin
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181

Response

HTTP/2.0 200

cache-control: private, must-revalidate
content-type: image/png
content-encoding: gzip
etag: TJpmYVh-YZ4V6ziUJ5jEke_1VLKURd1v8XRB9giZWqdQabMOoE-AbtUJIWdzZJqlq31hDipVU5f46MDWrmdoEqdWLGjAhGP_2C7ynU9q0GEWUh4pu7L8uu-HOWctnNtSJFhK1R5F8aOHfDBKQOV8X19zAJEQfW_2EAT-fnJPOnSLfJwh7__ghulXz5wnPHx0jhjVm8A7bn0q6c82qMiCOg
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubdomains
cross-origin-opener-policy: same-origin-allow-popups
content-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' roblox.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com ; img-src 'self' data: *.cloudfront.net *.google-analytics.com *.kaptcha.com *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com
x-frame-options: SAMEORIGIN
set-cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw; domain=.roblox.com; path=/; HttpOnly
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
access-control-expose-headers: X-CSRF-TOKEN
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 99
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1}
GET

https://metrics.roblox.com/v1/thumbnails/metadata

chrome.exe

Remote address:

128.116.116.3:443

Request

GET /v1/thumbnails/metadata HTTP/2.0
host: metrics.roblox.com
accept: */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=3600
roblox-machine-id: CHI1-WEB8080
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 55
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://locale.roblox.com/v1/locales

chrome.exe

Remote address:

128.116.116.3:443

Request

GET /v1/locales HTTP/2.0
host: locale.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=3600
roblox-machine-id: CHI1-WEB2461
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:47 GMT
content-length: 2171
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://accountinformation.roblox.com/v1/metadata

chrome.exe

Remote address:

128.116.116.3:443

Request

GET /v1/metadata HTTP/2.0
host: accountinformation.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=3600
roblox-machine-id: CHI1-WEB6931
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:47 GMT
content-length: 190
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://locale.roblox.com/v1/locales/user-localization-locus-supported-locales

chrome.exe

Remote address:

128.116.116.3:443

Request

GET /v1/locales/user-localization-locus-supported-locales HTTP/2.0
host: locale.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
cookie: _gcl_au=1.1.2034342391.1667042024

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=3600
roblox-machine-id: CHI1-WEB3525
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:48 GMT
content-length: 147
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
POST

https://www.roblox.com/game/report-stats?name=ResourcePerformance_Loaded_funcaptcha_Computer&value=10

chrome.exe

Remote address:

128.116.116.3:443

Request

POST /game/report-stats?name=ResourcePerformance_Loaded_funcaptcha_Computer&value=10 HTTP/2.0
host: www.roblox.com
content-length: 0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
origin: https://www.roblox.com
sec-fetch-site: same-origin
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
cookie: RBXcb=RBXViralAcquisition=true&RBXSource=true&GoogleAnalytics=true
cookie: _gcl_au=1.1.2034342391.1667042024

Response

HTTP/2.0 200

cache-control: private, must-revalidate
strict-transport-security: max-age=31536000; includeSubdomains
set-cookie: RBXSource=rbx_acquisition_time=10/29/2022 6:13:49 AM&rbx_acquisition_referrer=https://www.roblox.com/&rbx_medium=Direct&rbx_source=www.roblox.com&rbx_campaign=&rbx_adgroup=&rbx_keyword=&rbx_matchtype=&rbx_send_info=0; domain=roblox.com; expires=Mon, 28-Nov-2022 17:13:49 GMT; path=/
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
content-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; upgrade-insecure-requests; script-src 'self' 'unsafe-inline' roblox.com *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net adservice.google.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com js.rbxcdn.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com *.googletagmanager.com *.googleadservices.com googleads.g.doubleclick.net cdn.veriff.me *.lightstep.com ; img-src 'self' data: *.cloudfront.net *.google-analytics.com *.kaptcha.com *.rbxcdn.com *.roblox.com *.robloxlabs.com googleads.g.doubleclick.net i.ytimg.com www.googletagmanager.com
cross-origin-opener-policy: same-origin-allow-popups
x-frame-options: SAMEORIGIN
access-control-expose-headers: X-CSRF-TOKEN
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:48 GMT
content-length: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1}
GET

https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_6.pb

chrome.exe

Remote address:

142.250.179.131:443

Request

GET /safebrowsing/csd/client_model_v5_variation_6.pb HTTP/2.0
host: ssl.gstatic.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://css.rbxcdn.com/34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: kjAFlKDYuCdH2zOUm+aKnK4BSLKbaEVNdA0X5LSND46tomjWzVlw//EbDkWC/xIpiKDplQDE/xM=
x-amz-request-id: 6392FAF092CC3C1D
last-modified: Fri, 02 Oct 2020 16:51:49 GMT
etag: "676840de2a10ffe36c98ee39c4d817c6"
x-amz-version-id: 3Xha6aD9h85XyLGEAM8VtiAGZwE_f.BR
accept-ranges: bytes
content-type: text/css
content-length: 724
server: AmazonS3
unused62: 8096267
cache-control: public, max-age=3916123
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/9517d686dc47015c200496d77e2b18146ee37652d18e25ecf9e1ed230310ea13.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /9517d686dc47015c200496d77e2b18146ee37652d18e25ecf9e1ed230310ea13.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: IBzEie5dpZVjvXOZkH5yxaGfEt2kfwePhtW/LeMG03GsP9UN3w8WSQBMgofNi2InBHjazKvQ8ZU=
x-amz-request-id: 8506ETDRPW7KNP8D
last-modified: Tue, 25 Aug 2020 22:36:10 GMT
etag: "4822b35d6907be7deb782a70cd7d8ac2"
x-amz-version-id: flj8r3AYbh7vQkO0v_autCqeZaNbI0Sl
accept-ranges: bytes
content-type: text/css
server: AmazonS3
content-length: 249
unused62: 8096267
cache-control: public, max-age=22357153
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/b8f8f15a57a66e73469ae72eea7d8905346afa78b9f2397627cd099f7dcc779a.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /b8f8f15a57a66e73469ae72eea7d8905346afa78b9f2397627cd099f7dcc779a.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: /MA2ix1hfl0ERCgsZ/gAEGkjBnvDuwo2AtxMdCVLSZJKd5PrAMed/KLmUEQqvdU2GatakwTRiIY=
x-amz-request-id: QGN95P10QKNCSN3D
last-modified: Mon, 12 Sep 2022 15:57:56 GMT
etag: "b99c303f3ba644a8a6c5e5b69a96809f"
x-amz-version-id: MAvnXVdGcqcmmqljI019YNPsYWW1qrUl
accept-ranges: bytes
content-type: text/css
server: AmazonS3
content-length: 434
cache-control: public, max-age=27492599
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/fdf61dd1b42d00623ced6193c071d101f1c46cca26e91dbdce851998ba73b72b.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /fdf61dd1b42d00623ced6193c071d101f1c46cca26e91dbdce851998ba73b72b.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: tpKuHxQBsBoxCBWHt++oRKiCG6z63eUNfWN1jes6JuprX351RvPcM7H0JT2JHBeuNTyM+OK29jQ=
x-amz-request-id: KR0QWFN98Z4W79CV
last-modified: Sat, 05 Dec 2020 01:43:26 GMT
etag: "23e12161d0fe06e8be36968b15bd225b"
x-amz-version-id: ZcegypqZblIjUwi8gc7xZChwLb_it3qA
accept-ranges: bytes
content-type: text/css
content-length: 483
server: AmazonS3
unused62: 8096267
cache-control: public, max-age=9310501
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/3f5767588c352c1b6fd800e2d14466cfa7113a04fa5cf02f1e33f2f0e7dd204f.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /3f5767588c352c1b6fd800e2d14466cfa7113a04fa5cf02f1e33f2f0e7dd204f.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: 6fiZlrZBW49zTUI2TWRbFyzGelYiT4DX7TvqfKc44oFxmv95zpkCgTNJpKY7HE7ZPGRKt9PiVaI=
x-amz-request-id: 5B81ZY3VM595G34S
last-modified: Wed, 06 Apr 2022 06:29:24 GMT
etag: "70a6af37612b242c8d5080cc5cdfaeab"
x-amz-version-id: 5W6m2agPVLwb2NhZDDLCcTPTR_BVKqR4
accept-ranges: bytes
content-type: text/css
server: AmazonS3
content-length: 236
cache-control: public, max-age=13782739
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/da45920fef8b22d35ee6cce0702d290241252fbfd99695e2abc0934d20de0974.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /da45920fef8b22d35ee6cce0702d290241252fbfd99695e2abc0934d20de0974.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: 5FbGwlFcx+dK/XbAy/A8+Cj5b3NFMFE377b1nmirJcB0yQE5tJGZmDpiYoY5WeDfli7OuLbUcY4=
x-amz-request-id: TP4PPVGBAJWT07ZR
last-modified: Thu, 26 Aug 2021 18:22:29 GMT
etag: "9c33609893ba704e16ae19f563888e5a"
x-amz-version-id: vYN1RqUDQbstN68F885QQbiKO9UYQCen
accept-ranges: bytes
content-type: text/css
server: AmazonS3
content-length: 85
cache-control: public, max-age=19028947
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/ce106182a2e4414003dd60bcf4bbc80de6a2d316810f8675999e99a921933921.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /ce106182a2e4414003dd60bcf4bbc80de6a2d316810f8675999e99a921933921.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: KkzHKGgFBleS+rkkMdU3ws5LzSceisRIebVh4VmsmmoSI1nGhFIpMBJDH2NqtwOGJEy0RinB1+g=
x-amz-request-id: 6PAC7P6A95M78J8A
last-modified: Tue, 17 Aug 2021 18:53:19 GMT
etag: "e8f199f0cef481db4a12c2e1a3ef3fe3"
x-amz-version-id: UmlKytnK9rFtv8UhZzt1pip6UpEdmhRx
accept-ranges: bytes
content-type: text/css
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=21892892
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 639
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/6edb2191aa318f963253361b43d2657a04b3d16e9c28fe7b22d4a4d5686f1cb4.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /6edb2191aa318f963253361b43d2657a04b3d16e9c28fe7b22d4a4d5686f1cb4.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: 9HZaTlElbv1wPFbQlTgnnOwYXKcwa9cJsVz5G4j5uAcLb4c9B35rtw9OVELHDdCmF3d4vZ+5fgE=
x-amz-request-id: TAHSHP9B6VHH2PH9
last-modified: Tue, 15 Feb 2022 22:05:26 GMT
etag: "1fa2b76195265ddbe69d3fd5ed9a53b3"
x-amz-version-id: Aox0nIyxVT0THBQ4REG4lgZ51Wf0_ll0
accept-ranges: bytes
content-type: text/css
server: AmazonS3
unused62: 8096267
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=9463588
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 775
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/2c2a709240897ce382b7ff55be4347cd0994ab1e2d6ed3b56649e54b0e97e13a.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /2c2a709240897ce382b7ff55be4347cd0994ab1e2d6ed3b56649e54b0e97e13a.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: Ux0OQcwtn8E09APpnPq3U0tA2KljEtRCh0tde4eQR8baPlII4m+br/ev+bqz7lqkNj3bMGoV2l0=
x-amz-request-id: N97F7VNKPKEJBAPY
last-modified: Tue, 20 Sep 2022 17:32:04 GMT
etag: "7c43d9581809fc6e241275cab6d5175c"
x-amz-version-id: oBBIbnIKud79yIFFtsZ1gL4u6YJ1YoK7
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=28203584
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 1572
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/08def520152a575438e73a81aa9a310c2415c327df7b624a24aa6e794d24dba3.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /08def520152a575438e73a81aa9a310c2415c327df7b624a24aa6e794d24dba3.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: fd24peLBQAIGZLfUItqDNcpJc2iPy33CZOtNJC78/1+oza6bue+FcBlFaS3t5aa2bmaFU98wxQo=
x-amz-request-id: W891FS5W4E39BPPQ
last-modified: Tue, 04 Oct 2022 17:06:46 GMT
etag: "3306ce36a2916143de21338749091100"
x-amz-version-id: TGIlNo82kMgefY2XtNQisSiKgJ.XYpOj
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=29586306
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 514
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/cc0e1d21820c2614cbf118f5fbc90c66cce1f5440919479d223e2ddd2a0fc4e8.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /cc0e1d21820c2614cbf118f5fbc90c66cce1f5440919479d223e2ddd2a0fc4e8.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: rjqhh6L9sV5s62sgIzyV6SgVgRLTwnK1NsgwjCrcz2U7qasDyloGZXn1+b5mJz+7+LJFYNiWJ7g=
x-amz-request-id: 9B5ECC81WVWY9FG7
last-modified: Wed, 06 Apr 2022 06:31:01 GMT
etag: "f05d18ea85a3311ad160747b788268b2"
x-amz-version-id: xgnjKXAwaGHxtFG6s4JHhZDm5poYgVY0
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=22930802
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 1340
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/1a2084f9435458bf8c525b825c6ae4528eecf07ff41cb153c107b3c02e2a7cda.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /1a2084f9435458bf8c525b825c6ae4528eecf07ff41cb153c107b3c02e2a7cda.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: srNqFUhXjxLdUyqDHGGayKTMKA+MiyQzO+/2D7JW6a5I1BHMpN8sL0RzINr38HMh1HKIYjCa1aA=
x-amz-request-id: Q1535WJV61P5ZPTT
last-modified: Thu, 28 Jul 2022 16:48:55 GMT
etag: "e7aeb2ae4be8e6a696b3e1e38205b83c"
x-amz-version-id: VXzejEnbbWkCahFwouuNRs09Mi0RS4ao
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=24577098
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 1471
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/3c4bd9b17b9020d9ebc87d4542a68a949a9de6150a55a92f0e65514520ee777e.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /3c4bd9b17b9020d9ebc87d4542a68a949a9de6150a55a92f0e65514520ee777e.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: fL459KtuTdWCB9j6nDgGHDvNH0T+vhbgZFdx8aiDkl+q5gRdqhOyZJOSmnFz+zEvWOxfBIwOrb8=
x-amz-request-id: XXNQHSTK9CVABTQJ
last-modified: Thu, 22 Sep 2022 21:53:07 GMT
etag: "5489a9288d555528844ae18bbec67c02"
x-amz-version-id: 6Mt6CADNP2obP09QBw_MZwpVd48kmH6o
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=28457784
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 4033
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/6fe55c3438539daf776774645e39e121d991246d6a38972b81e3f9550a585b5b.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /6fe55c3438539daf776774645e39e121d991246d6a38972b81e3f9550a585b5b.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: b6Zu/Uz2SiefuhlVBnSPE+AKGTzWD12etfZDJaiCGB1X1xW6KRiEF23DOLFwJeaQjOQUz993RE0=
x-amz-request-id: RBWVTMVQ9ZJ3EXQ4
last-modified: Wed, 14 Sep 2022 17:01:05 GMT
etag: "a3f2249b03a0c93f21df7bf11e05e42d"
x-amz-version-id: eFw0ydCUG91huliLmBurR6quFBE7Hz7l
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=28209096
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 2944
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/68f976f4a3f8f3a6aae074879170e579451270e693d2361491b1c1bb9ac5e4c5.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /68f976f4a3f8f3a6aae074879170e579451270e693d2361491b1c1bb9ac5e4c5.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: 81uWCEOERC+X4qAnQZ/SilqNyKbmd6/REgHQSzlKSNao0kEOaEzi2MnCl3V+gIQDAtAVBXppv40=
x-amz-request-id: 4GGWCXJZS0R3ZD4A
last-modified: Thu, 01 Sep 2022 19:40:34 GMT
etag: "4636829212aba0ad7628f3685146094a"
x-amz-version-id: lGqHdZr9KWyttG1p0gEnnGOAoRuLdw4u
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=26558822
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 9816
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/5331669054807354a3a20a4717d18c566a7cbee984e7471ece3a2090cb70150c.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /5331669054807354a3a20a4717d18c566a7cbee984e7471ece3a2090cb70150c.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: 3GUX8pH7HIY7S2Z5U656yXdtnaA6GlxJGWpe5tUsnOPF3JwCZCLICP+8QNgJk6SWnFbeX9kudu0=
x-amz-request-id: MSK1MYEZSDVBSH9B
last-modified: Mon, 26 Sep 2022 23:58:38 GMT
etag: "64c04cd607b9de87e0f2ebc9929b4fb8"
x-amz-version-id: jXmJLOWmvfvYXN54U4rz5vF4O798h8wF
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=30190844
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 9142
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207.css

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207.css HTTP/2.0
host: css.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: DtfTLrtf39JJxN1BZrXvCea2qf10pke8jCX9sHQC2zYWGxq4pg9xDtZayHDLyUsG+ZM7WaUUOwA=
x-amz-request-id: 5M1X0J2778KN7A32
last-modified: Thu, 13 Oct 2022 17:04:50 GMT
etag: "3985878317580c5f74accaf6a2380605"
x-amz-version-id: r5ckfVAVJUq33uFQJ90tL.N9U7MA5E1M
accept-ranges: bytes
content-type: text/css
server: AmazonS3
vary: Accept-Encoding
content-encoding: gzip
cache-control: public, max-age=30174745
date: Sat, 29 Oct 2022 11:13:45 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://static.rbxcdn.com/css/page___29cb8654caf3eb2421376cf095132da7_m.css/fetch

chrome.exe

Remote address:

23.209.125.165:443

Request

GET /css/page___29cb8654caf3eb2421376cf095132da7_m.css/fetch HTTP/2.0
host: static.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/css,*/*;q=0.1
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: style
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: text/css
content-encoding: gzip
last-modified: Sun, 01 Jan 2006 06:00:00 GMT
strict-transport-security: max-age=31536000
content-security-policy: report-uri https://metrics.roblox.com/v1/csp/report?type=enforce; script-src 'self' 'unsafe-inline' 'unsafe-eval' *.evidon.com *.gigya.com *.google-analytics.com *.ns1p.net *.pingdom.net adservice.google.com ajax.aspnetcdn.com ajax.googleapis.com cdn.arkoselabs.com connect.facebook.net funcaptcha.com imasdk.googleapis.com js.rbxcdn.com long.open.weixin.qq.com midas.gtimg.cn radar.cedexis.com res.wx.qq.com roblox-api.arkoselabs.com roblox-load-generator-configuration.s3.us-east-2.amazonaws.com s.ytimg.com sb.scorecardresearch.com static.rbxcdn.com www.google.com www.gstatic.com www.youtube.com h.online-metrix.net request.eprotect.vantivcnp.com request.eprotect.vantivpostlive.com authsite.roblox.com *.googletagmanager.com *.googleadservices.com https://googleads.g.doubleclick.net cdn.veriff.me
cross-origin-opener-policy: same-origin-allow-popups
x-frame-options: SAMEORIGIN
access-control-allow-credentials: true
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
content-length: 112
unused62: 8096267
cache-control: public, must-revalidate, max-age=31535836
expires: Sun, 29 Oct 2023 11:11:01 GMT
date: Sat, 29 Oct 2022 11:13:45 GMT
vary: Accept-Encoding
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider
access-control-allow-origin: *
GET

https://roblox.com/js/hsts.js?v=3

chrome.exe

Remote address:

128.116.114.3:443

Request

GET /js/hsts.js?v=3 HTTP/2.0
host: roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181

Response

HTTP/2.0 200

cache-control: public,max-age=604800
content-type: application/x-javascript
content-encoding: gzip
last-modified: Fri, 28 Oct 2022 11:50:32 GMT
accept-ranges: bytes
etag: "034907bc3ead81:0"
vary: Accept-Encoding
server: Microsoft-IIS/8.5
strict-transport-security: max-age=31536000; includeSubdomains
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:45 GMT
content-length: 201
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.1,"failure_fraction":1}
GET

https://apis.rbxcdn.com/captcha/v1/metadata

chrome.exe

Remote address:

96.16.53.163:443

Request

GET /captcha/v1/metadata HTTP/2.0
host: apis.rbxcdn.com
accept: */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-type: application/json
server: envoy
strict-transport-security: max-age=3600
grpc-metadata-content-type: application/grpc
x-envoy-upstream-service-time: 1
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
content-encoding: gzip
content-length: 312
cache-control: max-age=11
expires: Sat, 29 Oct 2022 11:13:58 GMT
date: Sat, 29 Oct 2022 11:13:47 GMT
vary: Accept-Encoding
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
vary: Accept-Encoding, Origin
GET

https://apis.roblox.com/universal-app-configuration/v1/behaviors/cookie-policy/content

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /universal-app-configuration/v1/behaviors/cookie-policy/content HTTP/2.0
host: apis.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw

Response

HTTP/2.0 200

content-length: 166
content-type: application/json; charset=utf-8
date: Sat, 29 Oct 2022 11:13:48 GMT
server: envoy
access-control-allow-credentials: true
access-control-allow-origin: https://www.roblox.com
cache-control: public, max-age=120, stale-while-revalidate=30, stale-if-error=1200
etag: "e6dbd373"
vary: *
vary: Origin
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://ecsv2.roblox.com/www/e.png?evt=userInteractions&ctx=mouse&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A43.741Z&gid=-1719938181

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /www/e.png?evt=userInteractions&ctx=mouse&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A43.741Z&gid=-1719938181 HTTP/2.0
host: ecsv2.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw

Response

HTTP/2.0 200

content-length: 68
content-type: image/png
date: Sat, 29 Oct 2022 11:13:48 GMT
server: envoy
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://apis.roblox.com/universal-app-configuration/v1/behaviors/cookie-policy/content

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /universal-app-configuration/v1/behaviors/cookie-policy/content HTTP/2.0
host: apis.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
if-none-match: "e6dbd373"

Response

HTTP/2.0 200

content-length: 166
content-type: application/json; charset=utf-8
date: Sat, 29 Oct 2022 11:13:48 GMT
server: envoy
access-control-allow-credentials: true
access-control-allow-origin: https://www.roblox.com
cache-control: public, max-age=120, stale-while-revalidate=30, stale-if-error=1200
etag: "e6dbd373"
vary: *
vary: Origin
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat1&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A43.939Z&gid=-1719938181

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /www/e.png?evt=pageHeartbeat&ctx=heartbeat1&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A43.939Z&gid=-1719938181 HTTP/2.0
host: ecsv2.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw

Response

HTTP/2.0 200

content-length: 68
content-type: image/png
date: Sat, 29 Oct 2022 11:13:48 GMT
server: envoy
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
POST

https://apis.roblox.com/product-experimentation-platform/v1/projects/1/values

chrome.exe

Remote address:

128.116.116.4:443

Request

POST /product-experimentation-platform/v1/projects/1/values HTTP/2.0
host: apis.roblox.com
content-length: 37
accept: application/json, text/plain, */*
x-csrf-token: QJiHr1xiaqzn
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
content-type: application/json;charset=UTF-8
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
cookie: _gcl_au=1.1.2034342391.1667042024

Response

HTTP/2.0 200

content-length: 481
content-type: application/json; charset=utf-8
date: Sat, 29 Oct 2022 11:13:48 GMT
server: envoy
access-control-allow-credentials: true
access-control-allow-origin: https://www.roblox.com
vary: Origin
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 8
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat2&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A53.109Z&gid=-1719938181

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /www/e.png?evt=pageHeartbeat&ctx=heartbeat2&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A53.109Z&gid=-1719938181 HTTP/2.0
host: ecsv2.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
cookie: _gcl_au=1.1.2034342391.1667042024
cookie: RBXSource=rbx_acquisition_time=10/29/2022 6:13:49 AM&rbx_acquisition_referrer=https://www.roblox.com/&rbx_medium=Direct&rbx_source=www.roblox.com&rbx_campaign=&rbx_adgroup=&rbx_keyword=&rbx_matchtype=&rbx_send_info=0

Response

HTTP/2.0 200

content-length: 68
content-type: image/png
date: Sat, 29 Oct 2022 11:13:57 GMT
server: envoy
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 1
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://images.rbxcdn.com/782b7fc18a24ee997efd9a7f02fa4bf9-bg_08072019.jpg

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /782b7fc18a24ee997efd9a7f02fa4bf9-bg_08072019.jpg HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/jpeg
content-length: 445602
x-amz-id-2: U3S4WZtCUUDqBI9k+HXxhv0qSECAGn7P0UFCUfN/SNuyuq4KTt9os4ExJ+1zfuxMUe70zBcRSkg=
x-amz-request-id: 8X45EM3JN92VCEG3
last-modified: Fri, 23 Aug 2019 01:04:23 GMT
etag: "782b7fc18a24ee997efd9a7f02fa4bf9"
cache-control: public, max-age=31536000
x-amz-version-id: TdbpQdhtcEFlPB5uZ7cnbI7.cIZ.kWh3
x-cf-rand: 63.662
x-cf3: H
cf4age: 1714
x-cf-tsc: 1662509170
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 743b1785eaf66c12e15cd850de486eb6
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/78413c0d5e05d6c36720ecc0c3013cbc-vignette.png

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /78413c0d5e05d6c36720ecc0c3013cbc-vignette.png HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/png
content-length: 65388
x-amz-id-2: xpiZLMWFzGaX4IGhNbyEczrK+FFW+Zru9oQ80jyA/gQJsx20Meocg+4JbWjqtbPT0EUxs9IiTTU=
x-amz-request-id: 2YMWQM48BEZ169KA
last-modified: Fri, 23 Aug 2019 01:04:24 GMT
etag: "78413c0d5e05d6c36720ecc0c3013cbc"
cache-control: public, max-age=31536000
x-amz-version-id: 2s_5QTTJx0MnM76wly4Rkuni3lfVvJlc
x-cf-rand: 19.363
x-cf3: H
cf4age: 1838
x-cf-tsc: 1662509170
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 986ec0e4c6bcdfeb7029e523656c5517
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/d82801b936c26e174c4e782510a72d78-roblox_logo_dark_08292022.svg

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /d82801b936c26e174c4e782510a72d78-roblox_logo_dark_08292022.svg HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/svg+xml
content-length: 2183
x-amz-id-2: o9pnzIdEQE7iUGFeYAtU6UFoZbAwCaNCXRGr8nZUUf89Qdqe/dbfnPPuYbJ3Nk6ugn/Skj/bQV0=
x-amz-request-id: 41TEXG29W1BGWPRY
last-modified: Thu, 01 Sep 2022 16:27:51 GMT
etag: "d82801b936c26e174c4e782510a72d78"
cache-control: public, max-age=31536000
x-amz-version-id: XIBX1JsQ3cucuSxM3Jd_lIW2bXR1WWUq
x-cf-rand: 85.164
x-cf3: H
cf4age: 590
x-cf-tsc: 1662507749
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 9c48eb2b41242bbfde2dc70482d12058
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/535002190af0360c2aae7f204ed65ade-gender-female.png

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /535002190af0360c2aae7f204ed65ade-gender-female.png HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/png
content-length: 2062
x-amz-id-2: O8KQgrlR75N4pcidAaxzejuyflc8/cFoGa1ltvA0ujxGzQHY1HT7SsrUb+vAihrojYs9zyNiWJ4=
x-amz-request-id: 2Z5TFYWF6SY76D86
last-modified: Thu, 12 Sep 2019 17:55:19 GMT
etag: "0eea8fbf5b4e7206e5b99a0d0dc3f074"
cache-control: public, max-age=31536000
x-amz-version-id: lSaiezS1cXlKP39qjv4JWJvZlrdcZe.l
x-cf-rand: 44.689
x-cf3: H
cf4age: 934
x-cf-tsc: 1662508432
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 77167f32b6106fa6de93ce393753273a
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/0eea8fbf5b4e7206e5b99a0d0dc3f074-gender-male.png

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /0eea8fbf5b4e7206e5b99a0d0dc3f074-gender-male.png HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/png
content-length: 2375
x-amz-id-2: a5wjnkRlhUeXh7nM8z+WZM64y6FTpa/WeJ/c/qFXeitA/wYbB7IhMMrxmaiPZQjJvB7y0foLfEM=
x-amz-request-id: 8X46ZKDH26BT0AR0
last-modified: Thu, 12 Sep 2019 17:55:20 GMT
etag: "535002190af0360c2aae7f204ed65ade"
cache-control: public, max-age=31536000
x-amz-version-id: ENA0768SLCXAYCPBrCSuq0gkyIPojmCa
x-cf-rand: 1.531
x-cf3: H
cf4age: 441
x-cf-tsc: 1662507896
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 5ea3239481f8933d4a707ed0b8bf0d4c
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/1b65926236d951b2af57201b275f595b-apple-badge-en_us.svg

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /1b65926236d951b2af57201b275f595b-apple-badge-en_us.svg HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/svg+xml
content-length: 10850
x-amz-id-2: YCoRyOubVa3ixgVm0UYAS7MRq8tC7UQRLc6Vft+hICca1wqHXSUv3ucJzB90dj37nYpwb7SZawE=
x-amz-request-id: 9XKMC5KHGS2KAKSX
last-modified: Fri, 23 Aug 2019 01:04:22 GMT
etag: "1b65926236d951b2af57201b275f595b"
cache-control: public, max-age=31536000
x-amz-version-id: 4bvKYk1Wg4_xWrRtYaNd4yoWJGExa5c.
x-cf-rand: 65.639
x-cf3: H
cf4age: 736
x-cf-tsc: 1662507894
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: e6a60decf936b6b1d096f24470dc9b25
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/06908992cf0a27763b1c7bd4ab3941a4-google-badge-en_us.svg

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /06908992cf0a27763b1c7bd4ab3941a4-google-badge-en_us.svg HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/svg+xml
content-length: 9645
x-amz-id-2: 81oBGU1u9UyvRwEeMdOxvtnlMRg/TaGfoQKSoAuLgfT3/cSBJsz49Ab9rAVtStw5Zyn4JaSHHhE=
x-amz-request-id: EWJRRW7RADZQHG1B
last-modified: Fri, 23 Aug 2019 01:04:22 GMT
etag: "06908992cf0a27763b1c7bd4ab3941a4"
cache-control: public, max-age=31536000
x-amz-version-id: twKKigID.cBRayfGJTXs3Qz2J6vgxhwg
x-cf-rand: 6.688
x-cf3: H
cf4age: 1837
x-cf-tsc: 1662509170
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 31e3d1819ee7e7473c6eeab4d6f87305
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/484d5f5fbd1e763ce57ae6ad39d88a6a-amazon-badge-en_us.png

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /484d5f5fbd1e763ce57ae6ad39d88a6a-amazon-badge-en_us.png HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/png
content-length: 7968
x-amz-id-2: t95+fjyC9FGX0u0iESk3sYy6n5p5h23QtSsRt8UVzMldhwvn3rWGMnuanj/8O9cRQHtZYMHsuhs=
x-amz-request-id: 2Z5PYDTN6EVAD5VR
last-modified: Fri, 23 Aug 2019 01:04:23 GMT
etag: "484d5f5fbd1e763ce57ae6ad39d88a6a"
cache-control: public, max-age=31536000
x-amz-version-id: 1ZZckKkCEHrlt.Cx44RLzCKc5WEJCkVW
x-cf-rand: 2.935
x-cf3: H
cf4age: 1017
x-cf-tsc: 1662508515
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 6eb5e2cafcd78e3da108a751806eaab9
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/cfbff08ccdfe3e51898dfecf5635dc2a-xbox-badge-en_us.png

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /cfbff08ccdfe3e51898dfecf5635dc2a-xbox-badge-en_us.png HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/png
content-length: 5691
x-amz-id-2: BnDUURj8vDRmv714a4StPtCzR4YtdGOewR1oU4Os82Zs4XvhK0Mb/azTwtnLpUtXZLQGRPq7pnk=
x-amz-request-id: 2Z5Q2S7TV9GN8EDW
last-modified: Fri, 23 Aug 2019 01:04:25 GMT
etag: "cfbff08ccdfe3e51898dfecf5635dc2a"
cache-control: public, max-age=31536000
x-amz-version-id: axJ4lAjMiRsFKVUHEbRGG.zTmCLXjUsp
x-cf-rand: 55.669
x-cf3: H
cf4age: 1672
x-cf-tsc: 1662509170
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 5559430b1a8460f88260ccf5226bdef6
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/3f666dec88527004bbe05e9b45d0ada9-microsoft-badge-en_us.svg

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /3f666dec88527004bbe05e9b45d0ada9-microsoft-badge-en_us.svg HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/svg+xml
content-length: 7310
x-amz-id-2: p//63ESMdpWcPcMBxwjqi44CCiC8iGl/crCUq91gvuI4//nRlK0tfanP29snmgB0YIm+/UFupe0=
x-amz-request-id: KQ9ZFFPFM69B5R53
last-modified: Fri, 23 Aug 2019 01:04:23 GMT
etag: "3f666dec88527004bbe05e9b45d0ada9"
cache-control: public, max-age=31536000
x-amz-version-id: B2ymeDXuvIurlE2PvpTxxPIrPCXDhXbL
x-cf-rand: 87.825
x-cf3: H
cf4age: 172
x-cf-tsc: 1662507333
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: e3bb43762f5c9c557deb9303d7f7f5ad
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/fab3a9d08d254fef4aea4408d4db1dfe-loading_dark.gif

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /fab3a9d08d254fef4aea4408d4db1dfe-loading_dark.gif HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:48 GMT
content-type: image/gif
content-length: 10013
x-amz-id-2: Iyw92zPc0VYxYar/aG+yiCBbSliZKuw3/Ml9gXW1qDW9e6b+qXx7E9EDiAzGNVbBXz2UeLbvWF0=
x-amz-request-id: CXVF97JGN2D7SRRM
last-modified: Tue, 19 Mar 2019 20:13:02 GMT
etag: "fab3a9d08d254fef4aea4408d4db1dfe"
cache-control: public, max-age=31536000
x-amz-version-id: McY6XCuDSyRtDm.wmj8FPRI8jQhrdG6g
x-cf-rand: 92.300
x-cf3: M
cf4age: 0
x-cf-tsc: 1662507037
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: f5f15322c86f9e91e969530c17bf9a93
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/7bba321f4d8328683d6e59487ce514eb

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /7bba321f4d8328683d6e59487ce514eb HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:49 GMT
content-type: image/x-icon
content-length: 4414
x-amz-id-2: AKdRRDgHnZZ0QCoxkeVBcDfDTFYg7JBR1shEU6eFMomcKSyWGtk/z18rDT9pwih2VVGpgouQrx0=
x-amz-request-id: RH189G5CBSP2C7FK
last-modified: Tue, 06 Sep 2022 22:21:51 GMT
etag: "7bba321f4d8328683d6e59487ce514eb"
cache-control: public, max-age=31536000
x-amz-version-id: aPgoUuQuV6R.ptR45HukIEFVMsyAdOSo
x-cf-rand: 70.839
x-cf3: H
cf4age: 140195
x-cf-tsc: 1662669437
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 4f38d0ead7f3e4d3db350c255c270c8a
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://images.rbxcdn.com/a057a8bc94e7ab78517765ddb4e77384-generic_dark_11062018.svg

chrome.exe

Remote address:

205.234.175.102:443

Request

GET /a057a8bc94e7ab78517765ddb4e77384-generic_dark_11062018.svg HTTP/2.0
host: images.rbxcdn.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://css.rbxcdn.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

date: Sat, 29 Oct 2022 11:13:49 GMT
content-type: image/svg+xml
content-length: 56999
x-amz-id-2: wysCt2FuhGxCuacioKBlsYP+wC/DHUHSi4kgP8WBbaEpM4Y5OUrse78JNZH4D3PyO4p7qwkBa50=
x-amz-request-id: FKNYD7P01GDS1MRX
last-modified: Fri, 26 Jul 2019 00:06:25 GMT
etag: "a057a8bc94e7ab78517765ddb4e77384"
cache-control: public, max-age=31536000
x-amz-version-id: mXagDgW49CA5q7XHT9EDBLYdVA_tb4LR
x-cf-rand: 57.615
x-cf3: M
cf4age: 0
x-cf-tsc: 1662507040
cf4ttl: 31536000.000
x-cf2: H
accept-ranges: bytes
server: CFS 0215
x-cf1: 28294:dC.ams2:co:1662506685:cacheN.ams2-01:D
x-cf-reqid: 36882bda337d45594c99d10ec17fa90f
access-control-allow-origin: *
access-control-allow-methods: GET
vary: Accept-Encoding
timing-allow-origin: *
GET

https://css.rbxcdn.com/6eafc48312528e2515d622428b6b95cc-GothamSSm-Book.woff2

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /6eafc48312528e2515d622428b6b95cc-GothamSSm-Book.woff2 HTTP/2.0
host: css.rbxcdn.com
origin: https://www.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://css.rbxcdn.com/34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: 7XKXfGuHDRE1XhhY4Wte3Y9wbgPpsASdlYI2NiY0/tiVyxTnJodttTB/XQc+BkN1MYeqWejHW7Y=
x-amz-request-id: PTQ0QC53STPQX3ZD
last-modified: Fri, 07 Feb 2020 16:12:10 GMT
etag: "6eafc48312528e2515d622428b6b95cc"
x-amz-version-id: GOxM9ZMupyRaz7HJaEvW636_0TzsWSwf
accept-ranges: bytes
content-type: font/woff2
content-length: 43612
server: AmazonS3
unused62: 8096267
cache-control: public, max-age=15766734
date: Sat, 29 Oct 2022 11:13:48 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/66d562e3299ee732a53db150038c026e-GothamSSm-Medium.woff2

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /66d562e3299ee732a53db150038c026e-GothamSSm-Medium.woff2 HTTP/2.0
host: css.rbxcdn.com
origin: https://www.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://css.rbxcdn.com/34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: ZrKtMwqQzALPkRV1+WwsO6g3zSe6bLYdl7yDLzxtDYpYHt5aBGFEmtGJBupFJAQ2UBjiw3u/678=
x-amz-request-id: 0738CE2F086E9CAC
last-modified: Fri, 07 Feb 2020 16:12:10 GMT
etag: "66d562e3299ee732a53db150038c026e"
x-amz-version-id: ztm1GRobVghqnFfLQU6bx4suno1xui5W
accept-ranges: bytes
content-type: font/woff2
content-length: 44264
server: AmazonS3
unused62: 8096267
cache-control: public, max-age=16419237
date: Sat, 29 Oct 2022 11:13:48 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/3c102ace52ea35b16da4383819acfa38-GothamSSm-Bold.woff2

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /3c102ace52ea35b16da4383819acfa38-GothamSSm-Bold.woff2 HTTP/2.0
host: css.rbxcdn.com
origin: https://www.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://css.rbxcdn.com/34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: dz8jipb146QyztvHOoy/86tpEKBMwlMz5PXknZwVU/kuPKFw/7wtDuAwPCE0ASFjIyR3FzdJBLU=
x-amz-request-id: 991BC8F9CEBBAB40
last-modified: Fri, 07 Feb 2020 16:12:09 GMT
etag: "38e00f7de6f417aa3a458560a15e2b8a"
x-amz-version-id: x.faB3n4zz8gmssvtzZNidda0P6qZzdp
accept-ranges: bytes
content-type: font/woff2
content-length: 42964
server: AmazonS3
unused62: 8096267
cache-control: public, max-age=20128630
date: Sat, 29 Oct 2022 11:13:48 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
GET

https://css.rbxcdn.com/38e00f7de6f417aa3a458560a15e2b8a-GothamSSm-Light.woff2

chrome.exe

Remote address:

23.209.125.158:443

Request

GET /38e00f7de6f417aa3a458560a15e2b8a-GothamSSm-Light.woff2 HTTP/2.0
host: css.rbxcdn.com
origin: https://www.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: font
referer: https://css.rbxcdn.com/34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

x-amz-id-2: lsTm9JwmcOHoRU5OUe+F9Om6KKnjSwgBIhFn7HonUGR+FmwBeR4OcZC3sShCPdw5OfF46O9CPfM=
x-amz-request-id: 8ABD29C594184542
last-modified: Fri, 07 Feb 2020 16:12:10 GMT
etag: "3c102ace52ea35b16da4383819acfa38"
x-amz-version-id: XBMiglLKvk.F_R9FXxeV9VjsaDprWHJ0
accept-ranges: bytes
content-type: font/woff2
content-length: 43756
server: AmazonS3
unused62: 8096267
cache-control: public, max-age=20128448
date: Sat, 29 Oct 2022 11:13:48 GMT
rbx-cdn-provider: ak
access-control-expose-headers: Rbx-Cdn-Provider,Akamai-Request-BC
access-control-allow-origin: *
OPTIONS

https://apis.roblox.com/product-experimentation-platform/v1/projects/1/values

chrome.exe

Remote address:

128.116.116.4:443

Request

OPTIONS /product-experimentation-platform/v1/projects/1/values HTTP/2.0
host: apis.roblox.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type,x-csrf-token
origin: https://www.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: same-site
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 204

date: Sat, 29 Oct 2022 11:13:48 GMT
server: Kestrel
access-control-allow-credentials: true
access-control-allow-headers: X-CSRF-TOKEN, Content-Type, Pragma, Cache-Control, Expires, ot-tracer-sampled, ot-tracer-spanid, ot-tracer-traceid
access-control-allow-methods: OPTIONS, TRACE, GET, HEAD, POST, DELETE, PATCH
access-control-allow-origin: https://www.roblox.com
access-control-max-age: 600
vary: Origin
strict-transport-security: max-age=3600
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://apis.roblox.com/universal-app-configuration/v1/behaviors/content-rating-logo/content

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /universal-app-configuration/v1/behaviors/content-rating-logo/content HTTP/2.0
host: apis.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 64
content-type: application/json; charset=utf-8
date: Sat, 29 Oct 2022 11:13:48 GMT
server: envoy
access-control-allow-credentials: true
access-control-allow-origin: https://www.roblox.com
cache-control: public, max-age=120, stale-while-revalidate=30, stale-if-error=1200
etag: "388ad014"
vary: origin
vary: robloxctx-request-country-code
vary: robloxctx-account-country-code
vary: Origin
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 1
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://apis.roblox.com/user-agreements/v1/agreements-resolution/web

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /user-agreements/v1/agreements-resolution/web HTTP/2.0
host: apis.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

content-length: 448
content-type: application/json; charset=utf-8
date: Sat, 29 Oct 2022 11:13:49 GMT
server: envoy
access-control-allow-credentials: true
access-control-allow-origin: https://www.roblox.com
vary: Origin
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://auth.roblox.com/v2/metadata

chrome.exe

Remote address:

128.116.116.3:443

Request

GET /v2/metadata HTTP/2.0
host: auth.roblox.com
accept: application/json, text/plain, */*
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
origin: https://www.roblox.com
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

Response

HTTP/2.0 200

cache-control: no-cache
pragma: no-cache
content-type: application/json; charset=utf-8
content-encoding: gzip
expires: -1
vary: Accept-Encoding
access-control-allow-origin: https://www.roblox.com
access-control-allow-credentials: true
x-frame-options: SAMEORIGIN
strict-transport-security: max-age=3600
roblox-machine-id: CHI1-WEB299
set-cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:49 AM&rbxid=&browserid=150369018524; domain=roblox.com; expires=Wed, 16-Mar-2050 16:13:49 GMT; path=/
set-cookie: GuestData=UserID=-1967400762; domain=.roblox.com; expires=Wed, 16-Mar-2050 16:13:49 GMT; path=/
p3p: CP="CAO DSP COR CURa ADMa DEVa OUR IND PHY ONL UNI COM NAV INT DEM PRE"
date: Sat, 29 Oct 2022 11:13:48 GMT
content-length: 1313
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://translate.googleapis.com/translate_a/l?client=chrome&hl=en&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw

chrome.exe

Remote address:

172.217.168.202:443

Request

GET /translate_a/l?client=chrome&hl=en&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/2.0
host: translate.googleapis.com
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
GET

https://translate.googleapis.com/translate_static/js/element/main.js

chrome.exe

Remote address:

142.250.179.202:443

Request

GET /translate_static/js/element/main.js HTTP/2.0
host: translate.googleapis.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
origin: https://www.google.com
x-client-data: CJiBywE=
sec-fetch-site: cross-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://translate.google.com/gen204?nca=te_li&client=te_lib&logld=vTE_20220815_00

chrome.exe

Remote address:

142.251.36.14:443

Request

GET /gen204?nca=te_li&client=te_lib&logld=vTE_20220815_00 HTTP/2.0
host: translate.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
x-client-data: CJiBywE=
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AEC=AakniGOHP-uSd2s8Unv8pKTxJBxVo_DEBBNRkPWrsHpxApWc1tmFlJLl6og
cookie: __Secure-ENID=7.SE=GysCDhu-rhN2VHUVJzFhSTLyuxXgx8m7WqhnXaxZFvgrj9qgwxtZTBlWGKCNS67QUvHrkQbV4QHjKxTpdY8khg6vpWt0DTgPW4P0igJFt0SmN0L_UURoyQyr4EGCCQ4DAfzMmCGOir3XO8SEUFy7Liboj2PjHhgBXK3seQmOtDQ
cookie: CONSENT=PENDING+524
GET

https://chrome.google.com/webstore?hl=en

chrome.exe

Remote address:

142.251.36.14:443

Request

GET /webstore?hl=en HTTP/2.0
host: chrome.google.com
upgrade-insecure-requests: 1
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
x-client-data: CJiBywE=
sec-fetch-site: none
sec-fetch-mode: navigate
sec-fetch-user: ?1
sec-fetch-dest: document
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AEC=AakniGOHP-uSd2s8Unv8pKTxJBxVo_DEBBNRkPWrsHpxApWc1tmFlJLl6og
cookie: CONSENT=PENDING+524
cookie: SOCS=CAISHAgCEhJnd3NfMjAyMjEwMjQtMF9SQzIaAm5sIAEaBgiA2vGaBg
cookie: NID=511=ILz6-1ZPDU2CXErdjl97COi1-3oB-NfHsoFmV-gs48diR7fYvEMRlUJK2nUTcpvOVw44ba2YJG_u4NR6O6strXPBJC5HmQ-LkBOzfDlAhzM2Sa8DxLktkleyAqbq2zw_vYzr6a4shIEJT0iXIDcRaHlt_mpeFj7KJox00lFnnSY
cookie: 1P_JAR=2022-10-29-11
POST

https://consent.google.com/save?continue=https://www.google.com/search?q%3Dporn%26oq%3Dporn%26aqs%3Dchrome..69i57.3248j0j7%26sourceid%3Dchrome%26ie%3DUTF-8&gl=NL&m=0&pc=srp&x=5&src=2&hl=nl&bl=gws_20221024-0_RC2&uxe=none&set_eom=false&set_aps=true&set_sc=true

chrome.exe

Remote address:

142.250.179.142:443

Request

POST /save?continue=https://www.google.com/search?q%3Dporn%26oq%3Dporn%26aqs%3Dchrome..69i57.3248j0j7%26sourceid%3Dchrome%26ie%3DUTF-8&gl=NL&m=0&pc=srp&x=5&src=2&hl=nl&bl=gws_20221024-0_RC2&uxe=none&set_eom=false&set_aps=true&set_sc=true HTTP/2.0
host: consent.google.com
content-length: 0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
origin: https://www.google.com
x-client-data: CJiBywE=
sec-fetch-site: same-site
sec-fetch-mode: cors
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: AEC=AakniGOHP-uSd2s8Unv8pKTxJBxVo_DEBBNRkPWrsHpxApWc1tmFlJLl6og
cookie: __Secure-ENID=7.SE=GysCDhu-rhN2VHUVJzFhSTLyuxXgx8m7WqhnXaxZFvgrj9qgwxtZTBlWGKCNS67QUvHrkQbV4QHjKxTpdY8khg6vpWt0DTgPW4P0igJFt0SmN0L_UURoyQyr4EGCCQ4DAfzMmCGOir3XO8SEUFy7Liboj2PjHhgBXK3seQmOtDQ
cookie: CONSENT=PENDING+524
cookie: SOCS=CAISHAgCEhJnd3NfMjAyMjEwMjQtMF9SQzIaAm5sIAEaBgiA2vGaBg
OPTIONS

https://play.google.com/log?format=json&hasfast=true&authuser=0

chrome.exe

Remote address:

142.251.39.110:443

Request

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/2.0
host: play.google.com
accept: */*
access-control-request-method: POST
access-control-request-headers: x-goog-authuser
origin: https://www.google.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: same-site
sec-fetch-dest: empty
referer: https://www.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat3&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A14%3A13.567Z&gid=-1719938181

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /www/e.png?evt=pageHeartbeat&ctx=heartbeat3&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A14%3A13.567Z&gid=-1719938181 HTTP/2.0
host: ecsv2.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
cookie: _gcl_au=1.1.2034342391.1667042024
cookie: RBXSource=rbx_acquisition_time=10/29/2022 6:13:49 AM&rbx_acquisition_referrer=https://www.roblox.com/&rbx_medium=Direct&rbx_source=www.roblox.com&rbx_campaign=&rbx_adgroup=&rbx_keyword=&rbx_matchtype=&rbx_send_info=0

Response

HTTP/2.0 200

content-length: 68
content-type: image/png
date: Sat, 29 Oct 2022 11:14:18 GMT
server: envoy
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
POST

https://update.googleapis.com/service/update2/json?cup2key=10:2631848794&cup2hreq=192c88d0b954823d1cfef68c18fd6a0d562dfee77b9710c0cc08a72e00cdd517

chrome.exe

Remote address:

142.250.179.195:443

Request

POST /service/update2/json?cup2key=10:2631848794&cup2hreq=192c88d0b954823d1cfef68c18fd6a0d562dfee77b9710c0cc08a72e00cdd517 HTTP/2.0
host: update.googleapis.com
content-length: 3017
x-goog-update-appid: obedbbhbpmojnkanicioggnmelmoomoc,giekcmmlnklenlaomppkphknjmnnpneh,khaoiebndkojlmppeemjhbpbandiljpe,llkgjffcdpffmhiakmfcdcblohccpfmo,aemomkdncapdnfajjbbcbdebjljbpmpj,ehgidpndbllacpjalkiimkbadgjfnnmc,jamhcnnkihinmdlkakkaopbjbbcngflc,eeigpngbgcognadeebkilcpcaedhellh,hfnkpimlhhgieaddgfemjhofmfblmnib,bklopemakmnopmghhmccadeonafabnal,gcmjkmgdlgnkkcocmoeiminaijmmjnii,gkmgaooipdjhmangpemjhigmamcehddo,ggkkehgbnfjpeggfpleeakpidbkibbmn,ojhpjlocmbogdgmfpkhlaaeamibhnphh,jflookgnkcckhobaglndicnbbgbonegd,hnimpnehoodheedghdeeijklkeaacbdc,ihnlcenocehgdaegdmhbidjhnhdchfmm,cmahhnpholdijhjokonmfdjbfmklppij,oimompecagnajdejgnnjijobebaeigek
x-goog-update-interactivity: bg
x-goog-update-updater: chrome-89.0.4389.114
content-type: application/json
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
DNS

edgedl.me.gvt1.com

chrome.exe

Remote address:

8.8.8.8:53

Request

edgedl.me.gvt1.com

IN A

Response

edgedl.me.gvt1.com

IN A

34.104.35.123
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 1006226
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60822
x-request-id: b15b12e4-2f68-4882-8802-00ff3e351cd0
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=0-1119
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 1120
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60823
x-request-id: cc03f588-51a3-481b-85f1-2c00aea1c51e
content-range: bytes 0-1119/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=1120-1227
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 108
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60826
x-request-id: 6a7f2930-930f-4f4a-9945-7c6ee6c6022a
content-range: bytes 1120-1227/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=1228-2244
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 1017
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60828
x-request-id: d90d2af7-dd00-4e31-9002-ebb53443c03b
content-range: bytes 1228-2244/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=2245-5528
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 3284
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60829
x-request-id: 132d8f29-bf94-4321-b97c-54782a2aa748
content-range: bytes 2245-5528/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=5529-13854
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 8326
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60830
x-request-id: 35538de1-8804-4681-9cb8-1eef8943eaf1
content-range: bytes 5529-13854/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=13855-31593
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 17739
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60832
x-request-id: 8695158e-fd76-4ba9-8316-2356804c25d7
content-range: bytes 13855-31593/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=31594-47029
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 15436
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60833
x-request-id: 11b923fe-8082-4177-974a-f4ed9f6cc7e2
content-range: bytes 31594-47029/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=47030-122128
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 75099
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60834
x-request-id: 4d1ea5ec-46cf-47d8-80d1-8007b1352cd6
content-range: bytes 47030-122128/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=122129-275688
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 153560
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60835
x-request-id: 0b9b7390-5b4c-439f-8e5f-93955d045d60
content-range: bytes 122129-275688/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=275689-320853
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 45165
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60836
x-request-id: 01ef9c00-fe2f-4ae1-8960-7111c606634f
content-range: bytes 275689-320853/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=320854-961208
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 640355
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60837
x-request-id: 4de46844-f99f-42d3-8d9d-0753f76e7b0e
content-range: bytes 320854-961208/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Thu, 27 Oct 2022 10:22:33 GMT
Range: bytes=961209-1006225
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 206 Partial Content

accept-ranges: bytes
content-disposition: attachment
content-length: 45017
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:20:55 GMT
last-modified: Thu, 27 Oct 2022 10:22:33 GMT
etag: "fea81e"
content-type: application/octet-stream
age: 60838
x-request-id: 84944157-a756-4c7b-8838-fe218c55aa2e
content-range: bytes 961209-1006225/1006226
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 14:50:45 GMT
age: 73472
last-modified: Wed, 17 Jul 2019 00:41:02 GMT
etag: "413d8a"
content-type: application/octet-stream
content-length: 5406
x-request-id: 5675c88a-ac43-4ba9-97e3-f06a5934a733
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 17 Jul 2019 00:41:02 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 14:50:45 GMT
age: 73472
last-modified: Wed, 17 Jul 2019 00:41:02 GMT
etag: "413d8a"
content-type: application/octet-stream
content-length: 5406
x-request-id: 69ebcaae-c3b1-4087-878f-6d4722aeeea1
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/accnrqvk2u32p5vftufawsvnlpkq_54/khaoiebndkojlmppeemjhbpbandiljpe_54_win_dmln4upudhgz6z3pcihf7cmpr4.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/accnrqvk2u32p5vftufawsvnlpkq_54/khaoiebndkojlmppeemjhbpbandiljpe_54_win_dmln4upudhgz6z3pcihf7cmpr4.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:57:25 GMT
last-modified: Wed, 12 Oct 2022 00:19:04 GMT
etag: "fb7397"
content-type: application/octet-stream
content-length: 5564
age: 58701
x-request-id: 1d10edf2-e656-4629-9f72-d945c7b16718
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/accnrqvk2u32p5vftufawsvnlpkq_54/khaoiebndkojlmppeemjhbpbandiljpe_54_win_dmln4upudhgz6z3pcihf7cmpr4.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/accnrqvk2u32p5vftufawsvnlpkq_54/khaoiebndkojlmppeemjhbpbandiljpe_54_win_dmln4upudhgz6z3pcihf7cmpr4.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 12 Oct 2022 00:19:04 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:57:25 GMT
last-modified: Wed, 12 Oct 2022 00:19:04 GMT
etag: "fb7397"
content-type: application/octet-stream
content-length: 5564
age: 58701
x-request-id: 26444e40-cc80-4e07-a4a8-4b7033dfc12e
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvODJiQUFYYVJaZ0k5di1hUFlXS1prX2xDZw/1.0.0.13_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvODJiQUFYYVJaZ0k5di1hUFlXS1prX2xDZw/1.0.0.13_llkgjffcdpffmhiakmfcdcblohccpfmo.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 17:35:27 GMT
age: 63652
last-modified: Wed, 23 Mar 2022 16:40:40 GMT
etag: "d1bcdc"
content-type: application/x-chrome-extension
content-length: 2876
x-request-id: 40b65e91-d7c9-48e0-b997-7912ece3af88
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvODJiQUFYYVJaZ0k5di1hUFlXS1prX2xDZw/1.0.0.13_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvODJiQUFYYVJaZ0k5di1hUFlXS1prX2xDZw/1.0.0.13_llkgjffcdpffmhiakmfcdcblohccpfmo.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 23 Mar 2022 16:40:40 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 17:35:27 GMT
age: 63652
last-modified: Wed, 23 Mar 2022 16:40:40 GMT
etag: "d1bcdc"
content-type: application/x-chrome-extension
content-length: 2876
x-request-id: f8e5dba3-f03b-45a3-a4d3-52b438bc49d4
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
HEAD

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9505
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "a93f27"
last-modified: Mon, 16 Aug 2021 20:43:55 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:19:46 GMT
x-request-id: f495cda2-3ae2-4b2d-beca-badb6f7d82ed
age: 61030
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

Remote address:

34.104.35.123:80

Request

GET /edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Mon, 16 Aug 2021 20:43:55 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-length: 9505
content-security-policy: default-src 'none'
content-type: application/x-chrome-extension
etag: "a93f27"
last-modified: Mon, 16 Aug 2021 20:43:55 GMT
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 18:19:46 GMT
x-request-id: b601b27b-5338-4ad6-a97d-7ea740d6f8c6
age: 61030
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
coprocessor-response: download-server
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 20:49:43 GMT
last-modified: Wed, 08 Aug 2018 11:12:10 GMT
etag: "29c66a"
content-type: application/octet-stream
content-length: 5700
age: 52074
x-request-id: 8024aa26-7889-4ccf-90ce-c9ffbbf88035
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Wed, 08 Aug 2018 11:12:10 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Fri, 28 Oct 2022 20:49:43 GMT
last-modified: Wed, 08 Aug 2018 11:12:10 GMT
etag: "29c66a"
content-type: application/octet-stream
content-length: 5700
age: 52074
x-request-id: c66b4003-0fe4-4906-ab03-4a0c77c32a69
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
HEAD

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3

Remote address:

34.104.35.123:80

Request

HEAD /edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 29 Oct 2022 05:55:14 GMT
last-modified: Sat, 29 Oct 2022 05:52:59 GMT
etag: "ff191c"
content-type: application/octet-stream
content-length: 818336
age: 19389
x-request-id: b50a9001-7e4c-48b8-908e-a7e15e7e2ad3
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
GET

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3

Remote address:

34.104.35.123:80

Request

GET /edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3 HTTP/1.1
Connection: Keep-Alive
Accept: */*
Accept-Encoding: identity
If-Unmodified-Since: Sat, 29 Oct 2022 05:52:59 GMT
User-Agent: Microsoft BITS/7.8
Host: edgedl.me.gvt1.com

Response

HTTP/1.1 200 OK

accept-ranges: bytes
content-disposition: attachment
content-security-policy: default-src 'none'
server: Google-Edge-Cache
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 0
date: Sat, 29 Oct 2022 05:55:14 GMT
last-modified: Sat, 29 Oct 2022 05:52:59 GMT
etag: "ff191c"
content-type: application/octet-stream
content-length: 818336
age: 19389
x-request-id: 5eb5b4c1-7c45-4171-b7e0-20adb07fb44a
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000
cache-control: public,max-age=86400
DNS

teams-ring.msedge.net

Remote address:

8.8.8.8:53

Request

teams-ring.msedge.net

IN A

Response

teams-ring.msedge.net

IN CNAME

teams-ring.teams-9999.teams-msedge.net

teams-ring.teams-9999.teams-msedge.net

IN CNAME

teams-9999.teams-msedge.net

teams-9999.teams-msedge.net

IN A

52.113.196.254
POST

https://beacons.gcp.gvt2.com/domainreliability/upload

chrome.exe

Remote address:

142.250.187.195:443

Request

POST /domainreliability/upload HTTP/2.0
host: beacons.gcp.gvt2.com
content-length: 5082
content-type: application/json; charset=utf-8
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABDHNhZmVicm93c2luZwpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEgADABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABDHNhZmVicm93c2luZwpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEgADABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw

chrome.exe

Remote address:

142.250.179.202:443

Request

GET /v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw HTTP/2.0
host: safebrowsing.googleapis.com
x-http-method-override: POST
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
GET

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat4&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A15%3A14.555Z&gid=-1719938181

chrome.exe

Remote address:

128.116.116.4:443

Request

GET /www/e.png?evt=pageHeartbeat&ctx=heartbeat4&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A15%3A14.555Z&gid=-1719938181 HTTP/2.0
host: ecsv2.roblox.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: same-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://www.roblox.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
cookie: rbx-ip2=
cookie: RBXEventTrackerV2=CreateDate=10/29/2022 6:13:45 AM&rbxid=&browserid=150369013432
cookie: GuestData=UserID=-1719938181
cookie: RBXImageCache=timg=jrmpM_a37AmivDcOtFMylDXAgjRQWkqThoZUaR9cDxuDdwKm32iNK14nlVhGn_NaQgt82cAhpkQYYKi5ncI4xyaR0iIDNpuCAjGcdQMfqOH1sF7wzwQMYGvn1x84XWS686BbdHoCO_iU7GUrEM_lC5l9xH-yKKDrB-xlewHE4DTM1m4PWx9bVGab90e_-M1mMxwMGPwsVvXF8LRPYHl1Aw
cookie: _gcl_au=1.1.2034342391.1667042024
cookie: RBXSource=rbx_acquisition_time=10/29/2022 6:13:49 AM&rbx_acquisition_referrer=https://www.roblox.com/&rbx_medium=Direct&rbx_source=www.roblox.com&rbx_campaign=&rbx_adgroup=&rbx_keyword=&rbx_matchtype=&rbx_send_info=0

Response

HTTP/2.0 200

content-length: 68
content-type: image/png
date: Sat, 29 Oct 2022 11:15:19 GMT
server: envoy
strict-transport-security: max-age=3600
x-envoy-upstream-service-time: 0
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://ncs.roblox.com/upload"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1}
GET

https://ssl.google-analytics.com/ga.js

chrome.exe

Remote address:

142.251.36.40:443

Request

GET /ga.js HTTP/2.0
host: ssl.google-analytics.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: */*
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: script
referer: https://chrome.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4436568-7&cid=984177026.1667042246&jid=1793493128&_v=5.7.2&z=2015265096

chrome.exe

Remote address:

142.250.102.154:443

Request

GET /r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4436568-7&cid=984177026.1667042246&jid=1793493128&_v=5.7.2&z=2015265096 HTTP/2.0
host: stats.g.doubleclick.net
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept: image/avif,image/webp,image/apng,image/svg+xml,image/*,*/*;q=0.8
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: image
referer: https://chrome.google.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://www.bing.com/manifest/threshold.appcache

Remote address:

131.253.33.200:443

Request

GET /manifest/threshold.appcache HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
origin: https://www.bing.com
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
cookie: SRCHUID=V=2&GUID=62A48DD312AD484D91B1D1024F2EF9F2&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220901; SRCHHPGUSR=SRCHLANG=nl&LUT=1662030574412&IPMH=6e4b9155&IPMID=1662034683159&HV=1667042065; CortanaAppUID=0D24A3AD8E43F88742DCC3979E04FED0; MUID=93CF258530DD4DEBA42F8325219D92F2; _SS=SID=2AC72A2A0119663F329238380060672F&CBV=30714078&CPID=1667042063947&AC=1&CPH=af086021; _EDGE_S=SID=2AC72A2A0119663F329238380060672F; MUIDB=93CF258530DD4DEBA42F8325219D92F2

Response

HTTP/2.0 200

cache-control: private
content-length: 1227
content-type: text/cache-manifest; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=93CF258530DD4DEBA42F8325219D92F2; expires=Thu, 23-Nov-2023 11:17:45 GMT; path=/; HttpOnly
set-cookie: SRCHHPGUSR=SRCHLANG=nl&LUT=1662030574412&IPMH=6e4b9155&IPMID=1667042063947&HV=1667042065; domain=.bing.com; expires=Thu, 23-Nov-2023 11:17:45 GMT; path=/; secure; SameSite=None
x-xss-protection: 0
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: BF679B6B1DDC44BDBEF6EF82AF9EE5CC Ref B: LON212050703049 Ref C: 2022-10-29T11:17:45Z
date: Sat, 29 Oct 2022 11:17:44 GMT
GET

https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init

Remote address:

131.253.33.200:443

Request

GET /AS/API/WindowsCortanaPane/V2/Init HTTP/2.0
host: www.bing.com
accept: */*
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
cookie: SRCHUID=V=2&GUID=62A48DD312AD484D91B1D1024F2EF9F2&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220901; SRCHHPGUSR=SRCHLANG=nl&LUT=1662030574412&IPMH=6e4b9155&IPMID=1667042063947&HV=1667042065; CortanaAppUID=0D24A3AD8E43F88742DCC3979E04FED0; MUID=93CF258530DD4DEBA42F8325219D92F2; _SS=SID=2AC72A2A0119663F329238380060672F&CBV=30714078&CPID=1667042063947&AC=1&CPH=af086021; _EDGE_S=SID=2AC72A2A0119663F329238380060672F; MUIDB=93CF258530DD4DEBA42F8325219D92F2

Response

HTTP/2.0 404

cache-control: private
content-length: 59275
content-type: text/html; charset=utf-8
content-encoding: br
vary: Accept-Encoding
p3p: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND"
set-cookie: MUIDB=93CF258530DD4DEBA42F8325219D92F2; expires=Thu, 23-Nov-2023 11:17:45 GMT; path=/; HttpOnly
x-xss-protection: 0
x-ua-compatible: IE=edge
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 48FEF8D32B4D4FEF877993C2F0339235 Ref B: LON212050703049 Ref C: 2022-10-29T11:17:45Z
date: Sat, 29 Oct 2022 11:17:44 GMT
POST

https://www.bing.com/threshold/xls.aspx

Remote address:

131.253.33.200:443

Request

POST /threshold/xls.aspx HTTP/2.0
host: www.bing.com
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept: */*
accept-language: en-US
content-type: text/xml
x-msedge-externalexp: d-thshld39,d-thshld42,d-thshld77,dsbbddetect,mru10nb
x-msedge-externalexptype: JointCoord
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
content-length: 4827
cache-control: no-cache
cookie: SRCHUID=V=2&GUID=62A48DD312AD484D91B1D1024F2EF9F2&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220901; SRCHHPGUSR=SRCHLANG=nl&LUT=1662030574412&IPMH=6e4b9155&IPMID=1667042063947&HV=1667042264; CortanaAppUID=0D24A3AD8E43F88742DCC3979E04FED0; MUID=93CF258530DD4DEBA42F8325219D92F2; _SS=SID=2AC72A2A0119663F329238380060672F&CBV=30714078&CPID=1667042260782&AC=1&CPH=af086021; _EDGE_S=SID=2AC72A2A0119663F329238380060672F; MUIDB=93CF258530DD4DEBA42F8325219D92F2

Response

HTTP/2.0 204

access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CD7EE2101B35418BAB98F5C3BC7CFF67 Ref B: LON212050703049 Ref C: 2022-10-29T11:17:50Z
date: Sat, 29 Oct 2022 11:17:49 GMT
POST

https://www.bing.com/threshold/xls.aspx

Remote address:

131.253.33.200:443

Request

POST /threshold/xls.aspx HTTP/2.0
host: www.bing.com
origin: https://www.bing.com
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept: */*
accept-language: en-US
content-type: text/xml
x-msedge-externalexp: d-thshld39,d-thshld42,d-thshld77,dsbbddetect,mru10nb
x-msedge-externalexptype: JointCoord
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041
content-length: 10266
cache-control: no-cache
cookie: SRCHUID=V=2&GUID=62A48DD312AD484D91B1D1024F2EF9F2&dmnchg=1; SRCHD=AF=NOFORM; SUID=M; SRCHUSR=DOB=20220901; SRCHHPGUSR=SRCHLANG=nl&LUT=1662030574412&IPMH=6e4b9155&IPMID=1667042063947&HV=1667042264; CortanaAppUID=0D24A3AD8E43F88742DCC3979E04FED0; MUID=93CF258530DD4DEBA42F8325219D92F2; _SS=SID=2AC72A2A0119663F329238380060672F&CBV=30714078&CPID=1667042260782&AC=1&CPH=af086021; _EDGE_S=SID=2AC72A2A0119663F329238380060672F; MUIDB=93CF258530DD4DEBA42F8325219D92F2

Response

HTTP/2.0 204

access-control-allow-origin: *
x-cache: CONFIG_NOCACHE
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6429AA9794EE44589146832F0C9DA6E3 Ref B: LON212050703049 Ref C: 2022-10-29T11:17:55Z
date: Sat, 29 Oct 2022 11:17:55 GMT
DNS

l-ring-fallback.msedge.net

Remote address:

8.8.8.8:53

Request

l-ring-fallback.msedge.net

IN A

Response

l-ring-fallback.msedge.net

IN CNAME

l-9999.l-dc-msedge.net

l-9999.l-dc-msedge.net

IN A

13.107.43.254
GET

https://l-ring-fallback.msedge.net/apc/trans.gif?d50c079a9db623b03ea19d83c194911a

Remote address:

13.107.43.254:443

Request

GET /apc/trans.gif?d50c079a9db623b03ea19d83c194911a HTTP/2.0
host: l-ring-fallback.msedge.net
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept: image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
accept-language: en-US
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-length: 43
content-type: image/gif
last-modified: Thu, 18 Aug 2022 20:40:34 GMT
accept-ranges: bytes
etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D
access-control-allow-origin: *
access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName
timing-allow-origin: *
x-content-type-options: nosniff
x-endpoint: LON21r8a
x-frontend: AFD
x-machinename: LON212050702047
x-userhostaddress: 154.61.71.0
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 9806D8FAAD5043E78D4371E73FB4E2A0 Ref B: LON212050702047 Ref C: 2022-10-29T11:17:54Z
date: Sat, 29 Oct 2022 11:17:53 GMT
GET

https://l-ring-fallback.msedge.net/apc/trans.gif?a6b9a70142a524feaa1bd1a19aa3cdfe

Remote address:

13.107.43.254:443

Request

GET /apc/trans.gif?a6b9a70142a524feaa1bd1a19aa3cdfe HTTP/2.0
host: l-ring-fallback.msedge.net
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept: image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
accept-language: en-US
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-length: 43
content-type: image/gif
last-modified: Thu, 18 Aug 2022 20:40:34 GMT
accept-ranges: bytes
etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D
access-control-allow-origin: *
access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName
timing-allow-origin: *
x-content-type-options: nosniff
x-endpoint: LON21r8a
x-frontend: AFD
x-machinename: LON212050702047
x-userhostaddress: 154.61.71.0
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: F1E8029AE392424C89B070A6F53B7D0A Ref B: LON212050702047 Ref C: 2022-10-29T11:17:54Z
date: Sat, 29 Oct 2022 11:17:53 GMT
DNS

a-ring-fallback.msedge.net

Remote address:

8.8.8.8:53

Request

a-ring-fallback.msedge.net

IN A

Response

a-ring-fallback.msedge.net

IN CNAME

a-9999.a-dc-msedge.net

a-9999.a-dc-msedge.net

IN A

131.253.33.254
GET

https://a-ring-fallback.msedge.net/apc/trans.gif?d8580215dcc11cbc7fe5f055a9fbbdc2

Remote address:

131.253.33.254:443

Request

GET /apc/trans.gif?d8580215dcc11cbc7fe5f055a9fbbdc2 HTTP/2.0
host: a-ring-fallback.msedge.net
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept: image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
accept-language: en-US
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-length: 43
content-type: image/gif
last-modified: Thu, 18 Aug 2022 20:40:34 GMT
accept-ranges: bytes
etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D
access-control-allow-origin: *
access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName
timing-allow-origin: *
x-content-type-options: nosniff
x-endpoint: LON21r8b
x-frontend: AFD
x-machinename: LON212050704031
x-userhostaddress: 154.61.71.0
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 2125F65B100C4314953EC67F57732CC2 Ref B: LON212050704031 Ref C: 2022-10-29T11:17:54Z
date: Sat, 29 Oct 2022 11:17:53 GMT
GET

https://a-ring-fallback.msedge.net/apc/trans.gif?0632d0570db78e07299a10c3dcb456cf

Remote address:

131.253.33.254:443

Request

GET /apc/trans.gif?0632d0570db78e07299a10c3dcb456cf HTTP/2.0
host: a-ring-fallback.msedge.net
referer: https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init
accept: image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5
accept-language: en-US
accept-encoding: gzip, deflate, br
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.2.19041; 10.0.0.0.19041.1288) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19041

Response

HTTP/2.0 200

cache-control: no-cache, no-store, must-revalidate
content-length: 43
content-type: image/gif
last-modified: Thu, 18 Aug 2022 20:40:34 GMT
accept-ranges: bytes
etag: 0x0DA2C2C0C44B11E89E6C66FF4F731D7D
access-control-allow-origin: *
access-control-expose-headers: X-EndPoint, X-FrontEnd, X-UserHostAddress, X-MSEdge-Ref, X-MachineName
timing-allow-origin: *
x-content-type-options: nosniff
x-endpoint: LON21r8b
x-frontend: AFD
x-machinename: LON212050704031
x-userhostaddress: 154.61.71.0
x-cache: CONFIG_NOCACHE
x-msedge-ref: Ref A: 5E94DFC069F14A39B488BBCFB8B95B0C Ref B: LON212050704031 Ref C: 2022-10-29T11:17:54Z
date: Sat, 29 Oct 2022 11:17:53 GMT
DNS

clients2.google.com

chrome.exe

Remote address:

8.8.8.8:53

Request

clients2.google.com

IN A

Response

clients2.google.com

IN CNAME

clients.l.google.com

clients.l.google.com

IN A

142.250.179.174
DNS

update.googleapis.com

chrome.exe

Remote address:

8.8.8.8:53

Request

update.googleapis.com

IN A

Response

update.googleapis.com

IN A

142.250.179.195
POST

https://update.googleapis.com/service/update2/json?cup2key=10:2119507594&cup2hreq=45029e23106e2989f379d8eb35c4447ed9e3c64fb353ece2d9485b3296d87abb

chrome.exe

Remote address:

142.250.179.195:443

Request

POST /service/update2/json?cup2key=10:2119507594&cup2hreq=45029e23106e2989f379d8eb35c4447ed9e3c64fb353ece2d9485b3296d87abb HTTP/2.0
host: update.googleapis.com
content-length: 754
x-goog-update-appid: nmmhkkegccagdldgiimedpiccmgmieda
x-goog-update-interactivity: bg
x-goog-update-updater: chromecrx-89.0.4389.114
content-type: application/json
sec-fetch-site: none
sec-fetch-mode: no-cors
sec-fetch-dest: empty
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
GET

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

chrome.exe

Remote address:

8.8.8.8:443

Request

GET /dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/2.0
host: dns.google
accept: application/dns-message
accept-language: *
user-agent: Chrome
accept-encoding: identity
GET

https://i.ytimg.com/generate_204

chrome.exe

Remote address:

172.217.168.246:443

Request

GET /generate_204 HTTP/2.0
host: i.ytimg.com
sec-ch-ua: "Google Chrome";v="89", "Chromium";v="89", ";Not A Brand";v="99"
sec-ch-ua-mobile: ?0
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
sec-ch-ua-arch: "x86"
sec-ch-ua-full-version: "89.0.4389.114"
sec-ch-ua-platform-version: "10.0"
sec-ch-ua-model:
sec-ch-ua-platform: "Windows"
accept: */*
x-client-data: CI+2yQEIprbJAQjBtskBCKmdygEI+MfKAQiYgcsBCNCaywE=
sec-fetch-site: cross-site
sec-fetch-mode: no-cors
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9
OPTIONS

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

chrome.exe

Remote address:

142.250.179.202:443

Request

OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/2.0
host: jnn-pa.googleapis.com
accept: */*
access-control-request-method: POST
access-control-request-headers: content-type,x-goog-api-key,x-user-agent
origin: https://www.youtube.com
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/89.0.4389.114 Safari/537.36
sec-fetch-mode: cors
sec-fetch-site: cross-site
sec-fetch-dest: empty
referer: https://www.youtube.com/
accept-encoding: gzip, deflate, br
accept-language: en-US,en;q=0.9

172.217.168.237:443

https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard

tls, http2

chrome.exe

2.0kB
7.8kB
21
23

HTTP Request

POST https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

http

chrome.exe

5.2kB
256.9kB
104
194

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvNzI0QUFXNV9zT2RvdUwyMERESEZGVmJnQQ/1.0.0.6_nmmhkkegccagdldgiimedpiccmgmieda.crx

HTTP Response

200
8.238.110.126:80

322 B
7
142.250.179.142:443

https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7I3T5S8x4Qg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SzNpm6HglASFo9cZ-GgP5E5f5WQ/cb=gapi.loaded_0

tls, http2

chrome.exe

2.5kB
44.8kB
31
44

HTTP Request

GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.gapi.en.7I3T5S8x4Qg.O/m=gapi_iframes,googleapis_client/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9SzNpm6HglASFo9cZ-GgP5E5f5WQ/cb=gapi.loaded_0
8.8.8.8:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABCXRyYW5zbGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEsADABHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

2.3kB
8.4kB
25
29

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABCXRyYW5zbGF0ZQpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEsADABHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
8.8.8.8:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

1.9kB
7.4kB
20
21

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
142.251.39.110:443

https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSp6TRXFn7E98XinWQvRiKQOo0uehCBCD7MdNiihfM&s=10

tls, http2

chrome.exe

1.9kB
7.4kB
19
20

HTTP Request

GET https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSp6TRXFn7E98XinWQvRiKQOo0uehCBCD7MdNiihfM&s=10
128.116.114.3:80

http://roblox.com/

http

chrome.exe

705 B
261 B
6
4

HTTP Request

GET http://roblox.com/

HTTP Response

308
128.116.114.3:80

chrome.exe

190 B
132 B
4
3
128.116.116.3:443

https://www.roblox.com/game/report-stats?name=ResourcePerformance_Loaded_funcaptcha_Computer&value=10

tls, http2

chrome.exe

3.5kB
36.1kB
33
46

HTTP Request

GET https://www.roblox.com/

HTTP Response

200

HTTP Request

GET https://www.roblox.com/timg/rbx

HTTP Response

200

HTTP Request

GET https://metrics.roblox.com/v1/thumbnails/metadata

HTTP Response

200

HTTP Request

GET https://locale.roblox.com/v1/locales

HTTP Response

200

HTTP Request

GET https://accountinformation.roblox.com/v1/metadata

HTTP Response

200

HTTP Request

GET https://locale.roblox.com/v1/locales/user-localization-locus-supported-locales

HTTP Request

POST https://www.roblox.com/game/report-stats?name=ResourcePerformance_Loaded_funcaptcha_Computer&value=10

HTTP Response

200

HTTP Response

200
142.250.179.131:443

https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_6.pb

tls, http2

chrome.exe

3.2kB
92.4kB
49
80

HTTP Request

GET https://ssl.gstatic.com/safebrowsing/csd/client_model_v5_variation_6.pb
23.209.125.158:443

css.rbxcdn.com

tls, https

chrome.exe

1.1kB
4.2kB
11
11
23.209.125.158:443

css.rbxcdn.com

tls

chrome.exe

1.0kB
4.0kB
9
8
23.209.125.158:443

css.rbxcdn.com

tls

chrome.exe

1.0kB
4.0kB
9
8
23.209.125.158:443

https://css.rbxcdn.com/d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207.css

tls, http2

chrome.exe

6.3kB
146.8kB
84
133

HTTP Request

GET https://css.rbxcdn.com/34b4df2feb1cac7201892b667c8185409f3d6271e650a5f313976062e3ca1ce5.css

HTTP Request

GET https://css.rbxcdn.com/9517d686dc47015c200496d77e2b18146ee37652d18e25ecf9e1ed230310ea13.css

HTTP Request

GET https://css.rbxcdn.com/b8f8f15a57a66e73469ae72eea7d8905346afa78b9f2397627cd099f7dcc779a.css

HTTP Request

GET https://css.rbxcdn.com/fdf61dd1b42d00623ced6193c071d101f1c46cca26e91dbdce851998ba73b72b.css

HTTP Request

GET https://css.rbxcdn.com/3f5767588c352c1b6fd800e2d14466cfa7113a04fa5cf02f1e33f2f0e7dd204f.css

HTTP Request

GET https://css.rbxcdn.com/da45920fef8b22d35ee6cce0702d290241252fbfd99695e2abc0934d20de0974.css

HTTP Request

GET https://css.rbxcdn.com/ce106182a2e4414003dd60bcf4bbc80de6a2d316810f8675999e99a921933921.css

HTTP Request

GET https://css.rbxcdn.com/6edb2191aa318f963253361b43d2657a04b3d16e9c28fe7b22d4a4d5686f1cb4.css

HTTP Request

GET https://css.rbxcdn.com/2c2a709240897ce382b7ff55be4347cd0994ab1e2d6ed3b56649e54b0e97e13a.css

HTTP Request

GET https://css.rbxcdn.com/08def520152a575438e73a81aa9a310c2415c327df7b624a24aa6e794d24dba3.css

HTTP Request

GET https://css.rbxcdn.com/cc0e1d21820c2614cbf118f5fbc90c66cce1f5440919479d223e2ddd2a0fc4e8.css

HTTP Request

GET https://css.rbxcdn.com/1a2084f9435458bf8c525b825c6ae4528eecf07ff41cb153c107b3c02e2a7cda.css

HTTP Request

GET https://css.rbxcdn.com/3c4bd9b17b9020d9ebc87d4542a68a949a9de6150a55a92f0e65514520ee777e.css

HTTP Request

GET https://css.rbxcdn.com/6fe55c3438539daf776774645e39e121d991246d6a38972b81e3f9550a585b5b.css

HTTP Request

GET https://css.rbxcdn.com/68f976f4a3f8f3a6aae074879170e579451270e693d2361491b1c1bb9ac5e4c5.css

HTTP Request

GET https://css.rbxcdn.com/5331669054807354a3a20a4717d18c566a7cbee984e7471ece3a2090cb70150c.css

HTTP Request

GET https://css.rbxcdn.com/d5a3728b78be729b693aadf79a1f45f0fa49c15fe863a0d7dd631b75f9e82207.css

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200
23.209.125.158:443

css.rbxcdn.com

tls, https

chrome.exe

1.1kB
4.2kB
10
11
23.209.125.158:443

css.rbxcdn.com

tls, https

chrome.exe

1.1kB
4.2kB
10
11
205.185.216.10:443

js.rbxcdn.com

tls, https

chrome.exe

1.2kB
8.7kB
13
15
205.185.216.10:443

js.rbxcdn.com

tls, https

chrome.exe

1.1kB
8.7kB
12
16
205.185.216.10:443

js.rbxcdn.com

tls, https

chrome.exe

1.1kB
8.7kB
12
16
205.185.216.10:443

js.rbxcdn.com

tls, https

chrome.exe

1.2kB
8.7kB
13
16
205.185.216.10:443

js.rbxcdn.com

tls, https

chrome.exe

1.0kB
8.5kB
10
13
205.185.216.10:443

js.rbxcdn.com

tls, https

chrome.exe

31.9kB
970.9kB
472
795
23.209.125.165:443

https://static.rbxcdn.com/css/page___29cb8654caf3eb2421376cf095132da7_m.css/fetch

tls, http2

chrome.exe

1.6kB
5.6kB
13
16

HTTP Request

GET https://static.rbxcdn.com/css/page___29cb8654caf3eb2421376cf095132da7_m.css/fetch

HTTP Response

200
128.116.114.3:443

https://roblox.com/js/hsts.js?v=3

tls, http2

chrome.exe

1.7kB
8.4kB
14
15

HTTP Request

GET https://roblox.com/js/hsts.js?v=3

HTTP Response

200
104.18.42.229:443

roblox-api.arkoselabs.com

tls

chrome.exe

3.3kB
55.8kB
48
73
96.16.53.163:443

https://apis.rbxcdn.com/captcha/v1/metadata

tls, http2

chrome.exe

1.5kB
5.2kB
12
16

HTTP Request

GET https://apis.rbxcdn.com/captcha/v1/metadata

HTTP Response

200
128.116.116.4:443

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat2&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A53.109Z&gid=-1719938181

tls, http2

chrome.exe

3.4kB
11.7kB
24
27

HTTP Request

GET https://apis.roblox.com/universal-app-configuration/v1/behaviors/cookie-policy/content

HTTP Request

GET https://ecsv2.roblox.com/www/e.png?evt=userInteractions&ctx=mouse&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A43.741Z&gid=-1719938181

HTTP Response

200

HTTP Request

GET https://apis.roblox.com/universal-app-configuration/v1/behaviors/cookie-policy/content

HTTP Request

GET https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat1&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A43.939Z&gid=-1719938181

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

POST https://apis.roblox.com/product-experimentation-platform/v1/projects/1/values

HTTP Response

200

HTTP Request

GET https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat2&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A13%3A53.109Z&gid=-1719938181

HTTP Response

200
142.250.179.170:443

content-autofill.googleapis.com

tls, https

chrome.exe

2.0kB
6.9kB
19
21
205.234.175.102:443

images.rbxcdn.com

tls

chrome.exe

943 B
2.8kB
8
6
205.234.175.102:443

https://images.rbxcdn.com/a057a8bc94e7ab78517765ddb4e77384-generic_dark_11062018.svg

tls, http2

chrome.exe

15.4kB
662.8kB
287
499

HTTP Request

GET https://images.rbxcdn.com/782b7fc18a24ee997efd9a7f02fa4bf9-bg_08072019.jpg

HTTP Request

GET https://images.rbxcdn.com/78413c0d5e05d6c36720ecc0c3013cbc-vignette.png

HTTP Request

GET https://images.rbxcdn.com/d82801b936c26e174c4e782510a72d78-roblox_logo_dark_08292022.svg

HTTP Request

GET https://images.rbxcdn.com/535002190af0360c2aae7f204ed65ade-gender-female.png

HTTP Request

GET https://images.rbxcdn.com/0eea8fbf5b4e7206e5b99a0d0dc3f074-gender-male.png

HTTP Request

GET https://images.rbxcdn.com/1b65926236d951b2af57201b275f595b-apple-badge-en_us.svg

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://images.rbxcdn.com/06908992cf0a27763b1c7bd4ab3941a4-google-badge-en_us.svg

HTTP Request

GET https://images.rbxcdn.com/484d5f5fbd1e763ce57ae6ad39d88a6a-amazon-badge-en_us.png

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://images.rbxcdn.com/cfbff08ccdfe3e51898dfecf5635dc2a-xbox-badge-en_us.png

HTTP Request

GET https://images.rbxcdn.com/3f666dec88527004bbe05e9b45d0ada9-microsoft-badge-en_us.svg

HTTP Response

200

HTTP Response

200

HTTP Request

GET https://images.rbxcdn.com/fab3a9d08d254fef4aea4408d4db1dfe-loading_dark.gif

HTTP Response

200

HTTP Request

GET https://images.rbxcdn.com/7bba321f4d8328683d6e59487ce514eb

HTTP Response

200

HTTP Request

GET https://images.rbxcdn.com/a057a8bc94e7ab78517765ddb4e77384-generic_dark_11062018.svg

HTTP Response

200
205.234.175.102:443

images.rbxcdn.com

tls

chrome.exe

943 B
2.8kB
8
6
205.234.175.102:443

images.rbxcdn.com

tls

chrome.exe

943 B
2.8kB
8
6
205.234.175.102:443

images.rbxcdn.com

tls

chrome.exe

943 B
2.8kB
8
6
205.234.175.102:443

images.rbxcdn.com

tls

chrome.exe

943 B
2.8kB
8
6
23.209.125.158:443

https://css.rbxcdn.com/38e00f7de6f417aa3a458560a15e2b8a-GothamSSm-Light.woff2

tls, http2

chrome.exe

5.8kB
186.6kB
97
148

HTTP Request

GET https://css.rbxcdn.com/6eafc48312528e2515d622428b6b95cc-GothamSSm-Book.woff2

HTTP Response

200

HTTP Request

GET https://css.rbxcdn.com/66d562e3299ee732a53db150038c026e-GothamSSm-Medium.woff2

HTTP Request

GET https://css.rbxcdn.com/3c102ace52ea35b16da4383819acfa38-GothamSSm-Bold.woff2

HTTP Request

GET https://css.rbxcdn.com/38e00f7de6f417aa3a458560a15e2b8a-GothamSSm-Light.woff2

HTTP Response

200

HTTP Response

200

HTTP Response

200
128.116.116.4:443

https://apis.roblox.com/user-agreements/v1/agreements-resolution/web

tls, http2

chrome.exe

2.0kB
10.0kB
17
19

HTTP Request

OPTIONS https://apis.roblox.com/product-experimentation-platform/v1/projects/1/values

HTTP Request

GET https://apis.roblox.com/universal-app-configuration/v1/behaviors/content-rating-logo/content

HTTP Response

204

HTTP Response

200

HTTP Request

GET https://apis.roblox.com/user-agreements/v1/agreements-resolution/web

HTTP Response

200
128.116.116.3:443

https://auth.roblox.com/v2/metadata

tls, http2

chrome.exe

1.7kB
9.9kB
15
17

HTTP Request

GET https://auth.roblox.com/v2/metadata

HTTP Response

200
8.8.8.8:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

1.9kB
7.4kB
20
21

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
172.217.168.202:443

https://translate.googleapis.com/translate_a/l?client=chrome&hl=en&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw

tls, http2

chrome.exe

1.9kB
9.1kB
20
22

HTTP Request

GET https://translate.googleapis.com/translate_a/l?client=chrome&hl=en&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
142.250.179.202:443

translate.googleapis.com

tls, https

chrome.exe

2.0kB
10.7kB
22
22
142.250.179.202:443

https://translate.googleapis.com/translate_static/js/element/main.js

tls, http2

chrome.exe

2.0kB
9.7kB
20
21

HTTP Request

GET https://translate.googleapis.com/translate_static/js/element/main.js
142.251.36.14:443

https://chrome.google.com/webstore?hl=en

tls, http2

chrome.exe

3.6kB
44.2kB
38
52

HTTP Request

GET https://translate.google.com/gen204?nca=te_li&client=te_lib&logld=vTE_20220815_00

HTTP Request

GET https://chrome.google.com/webstore?hl=en
142.250.179.142:443

https://consent.google.com/save?continue=https://www.google.com/search?q%3Dporn%26oq%3Dporn%26aqs%3Dchrome..69i57.3248j0j7%26sourceid%3Dchrome%26ie%3DUTF-8&gl=NL&m=0&pc=srp&x=5&src=2&hl=nl&bl=gws_20221024-0_RC2&uxe=none&set_eom=false&set_aps=true&set_sc=true

tls, http2

chrome.exe

2.4kB
10.0kB
21
22

HTTP Request

POST https://consent.google.com/save?continue=https://www.google.com/search?q%3Dporn%26oq%3Dporn%26aqs%3Dchrome..69i57.3248j0j7%26sourceid%3Dchrome%26ie%3DUTF-8&gl=NL&m=0&pc=srp&x=5&src=2&hl=nl&bl=gws_20221024-0_RC2&uxe=none&set_eom=false&set_aps=true&set_sc=true
142.251.39.110:443

https://play.google.com/log?format=json&hasfast=true&authuser=0

tls, http2

chrome.exe

2.0kB
9.0kB
20
21

HTTP Request

OPTIONS https://play.google.com/log?format=json&hasfast=true&authuser=0
128.116.116.4:443

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat3&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A14%3A13.567Z&gid=-1719938181

tls, http2

chrome.exe

2.2kB
8.1kB
14
16

HTTP Request

GET https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat3&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A14%3A13.567Z&gid=-1719938181

HTTP Response

200
131.253.33.200:443

www.bing.com

tls, https

27.0kB
73.9kB
97
97
142.250.179.195:443

https://update.googleapis.com/service/update2/json?cup2key=10:2631848794&cup2hreq=192c88d0b954823d1cfef68c18fd6a0d562dfee77b9710c0cc08a72e00cdd517

tls, http2

chrome.exe

5.7kB
11.9kB
24
26

HTTP Request

POST https://update.googleapis.com/service/update2/json?cup2key=10:2631848794&cup2hreq=192c88d0b954823d1cfef68c18fd6a0d562dfee77b9710c0cc08a72e00cdd517
34.104.35.123:80

http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3

http

41.9kB
1.9MB
729
1404

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/f7cnbkknsd2rn3synuwuv45wfm_20221017.483521407/obedbbhbpmojnkanicioggnmelmoomoc_20221017.483521407_all_ENUS_ad4s55i5zjyvk3cam6gv4xnyz6nq.crx3

HTTP Response

206

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AIZk8O7Cv2UUbxc_aaUykKI_7/ALzUVHP-vRgKCzqwbtGugSE

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/accnrqvk2u32p5vftufawsvnlpkq_54/khaoiebndkojlmppeemjhbpbandiljpe_54_win_dmln4upudhgz6z3pcihf7cmpr4.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/accnrqvk2u32p5vftufawsvnlpkq_54/khaoiebndkojlmppeemjhbpbandiljpe_54_win_dmln4upudhgz6z3pcihf7cmpr4.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvODJiQUFYYVJaZ0k5di1hUFlXS1prX2xDZw/1.0.0.13_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvODJiQUFYYVJaZ0k5di1hUFlXS1prX2xDZw/1.0.0.13_llkgjffcdpffmhiakmfcdcblohccpfmo.crx

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/chromewebstore/L2Nocm9tZV9leHRlbnNpb24vYmxvYnMvMjg0QUFYSnN4MFUtaEQwNDZqVGRkVkFmZw/1.0.6.0_aemomkdncapdnfajjbbcbdebjljbpmpj.crx

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/AMpg5-cnrANo_2018.8.8.0/2018.8.8.0_win64_win_third_party_module_list.crx3

HTTP Response

200

HTTP Request

HEAD http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3

HTTP Response

200

HTTP Request

GET http://edgedl.me.gvt1.com/edgedl/release2/chrome_component/epoo2jrij3cbdmx5frotmevz34_109.0.5388.0/jamhcnnkihinmdlkakkaopbjbbcngflc_109.0.5388.0_all_gtopkzynzt65ryzqzolv7b2gzu.crx3

HTTP Response

200
52.113.196.254:443

teams-ring.msedge.net

tls, https

1.8kB
8.3kB
20
20
142.250.187.195:443

https://beacons.gcp.gvt2.com/domainreliability/upload

tls, http2

chrome.exe

7.2kB
7.0kB
24
21

HTTP Request

POST https://beacons.gcp.gvt2.com/domainreliability/upload
8.8.8.8:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABDHNhZmVicm93c2luZwpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEgADABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

2.3kB
8.2kB
24
26

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABDHNhZmVicm93c2luZwpnb29nbGVhcGlzA2NvbQAAAQABAAApEAAAAAAAAEgADABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
142.250.179.202:443

https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw

tls, http2

chrome.exe

261.8kB
12.5MB
5417
8934

HTTP Request

GET https://safebrowsing.googleapis.com/v4/threatListUpdates:fetch?$req=Ch0KDGdvb2dsZWNocm9tZRINODkuMC40Mzg5LjExNBoMCAUQASIEIAEgAigBGgwIARABIgQgASACKAEaDAgDEAEiBCABIAIoARoMCAcQASIEIAEgAigBGgwIARABIgQgASACKAMaDAgBEAgiBCABIAIoBBoMCAkQASIEIAEgAigGGgwIDxABIgQgASACKAEaDAgKEAgiBCABIAIoARoMCAkQASIEIAEgAigBGgwICBABIgQgASACKAEaDAgNEAEiBCABIAIoARoMCA4QASIEIAEgAigBGgwIEBABIgQgASACKAEiAggB&$ct=application/x-protobuf&key=AIzaSyBOti4mM-6x9WDnZIjIeyEU21OpBXqWBgw
128.116.116.4:443

https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat4&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A15%3A14.555Z&gid=-1719938181

tls, http2

chrome.exe

2.0kB
1.2kB
10
10

HTTP Request

GET https://ecsv2.roblox.com/www/e.png?evt=pageHeartbeat&ctx=heartbeat4&url=https%3A%2F%2Fwww.roblox.com%2F&lt=2022-10-29T11%3A15%3A14.555Z&gid=-1719938181

HTTP Response

200
142.251.36.40:443

https://ssl.google-analytics.com/ga.js

tls, http2

chrome.exe

2.0kB
24.3kB
22
27

HTTP Request

GET https://ssl.google-analytics.com/ga.js
142.250.102.154:443

https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4436568-7&cid=984177026.1667042246&jid=1793493128&_v=5.7.2&z=2015265096

tls, http2

chrome.exe

1.9kB
6.4kB
17
17

HTTP Request

GET https://stats.g.doubleclick.net/r/collect?v=1&aip=1&t=dc&_r=3&tid=UA-4436568-7&cid=984177026.1667042246&jid=1793493128&_v=5.7.2&z=2015265096
142.251.39.97:443

lh3.googleusercontent.com

tls, https

chrome.exe

7.2kB
238.4kB
108
186
142.251.39.97:443

lh3.googleusercontent.com

tls, https

chrome.exe

989 B
8.7kB
9
10
142.251.39.97:443

lh3.googleusercontent.com

tls, https

chrome.exe

989 B
8.7kB
9
10
142.251.39.97:443

lh3.googleusercontent.com

tls, https

chrome.exe

989 B
8.7kB
9
10
142.251.39.97:443

lh3.googleusercontent.com

tls, https

chrome.exe

1.0kB
8.7kB
10
10
142.251.39.97:443

lh3.googleusercontent.com

tls, https

chrome.exe

1.0kB
8.7kB
10
10
131.253.33.200:443

https://www.bing.com/threshold/xls.aspx

tls, http2

21.7kB
73.2kB
90
86

HTTP Request

GET https://www.bing.com/manifest/threshold.appcache

HTTP Response

200

HTTP Request

GET https://www.bing.com/AS/API/WindowsCortanaPane/V2/Init

HTTP Response

404

HTTP Request

POST https://www.bing.com/threshold/xls.aspx

HTTP Response

204

HTTP Request

POST https://www.bing.com/threshold/xls.aspx

HTTP Response

204
13.107.43.254:443

https://l-ring-fallback.msedge.net/apc/trans.gif?a6b9a70142a524feaa1bd1a19aa3cdfe

tls, http2

1.8kB
8.3kB
20
19

HTTP Request

GET https://l-ring-fallback.msedge.net/apc/trans.gif?d50c079a9db623b03ea19d83c194911a

HTTP Response

200

HTTP Request

GET https://l-ring-fallback.msedge.net/apc/trans.gif?a6b9a70142a524feaa1bd1a19aa3cdfe

HTTP Response

200
131.253.33.254:443

https://a-ring-fallback.msedge.net/apc/trans.gif?0632d0570db78e07299a10c3dcb456cf

tls, http2

1.8kB
8.3kB
19
19

HTTP Request

GET https://a-ring-fallback.msedge.net/apc/trans.gif?d8580215dcc11cbc7fe5f055a9fbbdc2

HTTP Response

200

HTTP Request

GET https://a-ring-fallback.msedge.net/apc/trans.gif?0632d0570db78e07299a10c3dcb456cf

HTTP Response

200
142.251.36.46:443

google.com

tls

chrome.exe

839 B
7.0kB
7
8
142.250.179.195:443

https://update.googleapis.com/service/update2/json?cup2key=10:2119507594&cup2hreq=45029e23106e2989f379d8eb35c4447ed9e3c64fb353ece2d9485b3296d87abb

tls, http2

chrome.exe

2.6kB
7.3kB
14
15

HTTP Request

POST https://update.googleapis.com/service/update2/json?cup2key=10:2119507594&cup2hreq=45029e23106e2989f379d8eb35c4447ed9e3c64fb353ece2d9485b3296d87abb
8.8.8.8:443

https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

tls, http2

chrome.exe

1.5kB
7.0kB
13
14

HTTP Request

GET https://dns.google/dns-query?dns=AAABAAABAAAAAAABA3d3dwdnc3RhdGljA2NvbQAAAQABAAApEAAAAAAAAFQADABQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
8.8.8.8:443

dns.google

tls, https

chrome.exe

897 B
5.7kB
7
7
142.251.39.110:443

encrypted-tbn0.gstatic.com

tls, https

chrome.exe

897 B
5.2kB
7
7
142.250.179.131:443

ssl.gstatic.com

tls, https

chrome.exe

897 B
5.2kB
7
7
172.217.168.246:443

https://i.ytimg.com/generate_204

tls, http2

chrome.exe

1.8kB
6.8kB
12
11

HTTP Request

GET https://i.ytimg.com/generate_204
142.251.39.97:443

yt3.ggpht.com

tls, https

chrome.exe

989 B
8.7kB
9
10
142.251.39.97:443

yt3.ggpht.com

tls, https

chrome.exe

2.5kB
21.0kB
20
27
142.251.39.97:443

yt3.ggpht.com

tls, https

chrome.exe

989 B
8.7kB
9
10
172.217.168.202:443

content-autofill.googleapis.com

tls, https

chrome.exe

897 B
5.6kB
7
7
142.250.179.202:443

https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

tls, http2

chrome.exe

1.7kB
7.0kB
12
14

HTTP Request

OPTIONS https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.251.39.98:443

googleads.g.doubleclick.net

tls

chrome.exe

1.8kB
6.4kB
11
13

224.0.0.251:5353

chrome.exe

4.5kB
77
8.8.8.8:53

clients2.google.com

dns

chrome.exe

65 B
105 B
1
1

DNS Request

clients2.google.com

DNS Response

142.250.179.174
8.8.8.8:53

accounts.google.com

dns

chrome.exe

65 B
81 B
1
1

DNS Request

accounts.google.com

DNS Response

172.217.168.237
8.8.8.8:53

edgedl.me.gvt1.com

dns

chrome.exe

64 B
80 B
1
1

DNS Request

edgedl.me.gvt1.com

DNS Response

34.104.35.123
8.8.8.8:53

apis.google.com

dns

chrome.exe

61 B
98 B
1
1

DNS Request

apis.google.com

DNS Response

142.250.179.142
8.8.8.8:53

dns.google

dns

chrome.exe

56 B
88 B
1
1

DNS Request

dns.google

DNS Response

8.8.8.8

8.8.4.4
8.8.8.8:443

dns.google

https

chrome.exe

10.4kB
22.2kB
56
59
142.251.39.110:443

https

chrome.exe

7.2kB
85.7kB
52
73
8.8.8.8:443

dns.google

https

chrome.exe

2.9kB
5.5kB
4
4
172.217.168.202:443

https

chrome.exe

4.0kB
33.7kB
16
27
142.250.179.202:443

https

chrome.exe

18.2kB
108.5kB
62
98
142.251.36.14:443

https

chrome.exe

5.0kB
9.2kB
7
8
142.250.179.142:443

apis.google.com

https

chrome.exe

6.0kB
48.4kB
23
37
142.251.39.110:443

https

chrome.exe

6.4kB
9.3kB
9
10
142.250.179.131:443

https

chrome.exe

3.3kB
6.3kB
6
5
8.8.8.8:443

dns.google

https

chrome.exe

2.1kB
2.9kB
6
5
8.8.8.8:53

edgedl.me.gvt1.com

dns

chrome.exe

64 B
80 B
1
1

DNS Request

edgedl.me.gvt1.com

DNS Response

34.104.35.123
8.8.8.8:53

teams-ring.msedge.net

dns

67 B
146 B
1
1

DNS Request

teams-ring.msedge.net

DNS Response

52.113.196.254
142.250.179.195:443

https

chrome.exe

8.1kB
7.8kB
14
14
8.8.8.8:443

dns.google

https

chrome.exe

2.9kB
5.5kB
4
4
142.250.187.195:443

https

chrome.exe

4.2kB
6.6kB
6
6
8.8.8.8:443

dns.google

https

chrome.exe

1.8kB
2.3kB
4
3
142.250.187.195:443

https

chrome.exe

2.4kB
2.5kB
4
3
142.250.179.195:443

https

chrome.exe

2.8kB
2.5kB
5
4
142.250.179.195:443

https

chrome.exe

2.8kB
2.5kB
5
4
8.8.8.8:443

dns.google

https

chrome.exe

3.2kB
5.4kB
14
13
142.251.36.14:443

https

chrome.exe

33.9kB
413.0kB
106
332
142.250.179.170:443

https

chrome.exe

3.6kB
6.4kB
8
8
142.251.36.40:443

https

chrome.exe

10.2kB
8.3kB
28
28
142.250.179.131:443

https

chrome.exe

4.2kB
30.4kB
15
24
142.250.179.202:443

https

chrome.exe

3.8kB
6.0kB
6
5
142.250.179.142:443

apis.google.com

https

chrome.exe

7.8kB
155.9kB
60
119
142.251.39.97:443

https

chrome.exe

33.6kB
846.3kB
242
664
142.250.179.195:443

https

chrome.exe

2.8kB
2.5kB
5
4
8.8.8.8:53

l-ring-fallback.msedge.net

dns

72 B
121 B
1
1

DNS Request

l-ring-fallback.msedge.net

DNS Response

13.107.43.254
8.8.8.8:53

a-ring-fallback.msedge.net

dns

72 B
121 B
1
1

DNS Request

a-ring-fallback.msedge.net

DNS Response

131.253.33.254
142.250.179.195:443

https

chrome.exe

2.8kB
2.4kB
4
3
142.251.36.14:443

https

chrome.exe

2.9kB
2.4kB
6
4
8.8.8.8:443

dns.google

https

chrome.exe

2.1kB
3.0kB
7
6
142.250.187.195:443

https

chrome.exe

1.5kB
1.4kB
3
1
8.8.8.8:53

clients2.google.com

dns

chrome.exe

65 B
105 B
1
1

DNS Request

clients2.google.com

DNS Response

142.250.179.174
8.8.8.8:53

update.googleapis.com

dns

chrome.exe

67 B
83 B
1
1

DNS Request

update.googleapis.com

DNS Response

142.250.179.195
8.8.8.8:443

dns.google

https

chrome.exe

8.4kB
16.2kB
34
34
172.217.168.237:443

accounts.google.com

https

chrome.exe

7.3kB
15.9kB
19
24
142.251.39.110:443

https

chrome.exe

3.5kB
10.5kB
9
9
142.250.179.131:443

https

chrome.exe

5.8kB
118.0kB
47
88
172.217.168.246:443

https

chrome.exe

12.3kB
695.8kB
117
519
172.217.168.202:443

https

chrome.exe

6.2kB
40.8kB
26
38
142.251.39.97:443

https

chrome.exe

5.5kB
17.9kB
12
15

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad\settings.dat

Filesize
40B

MD5
2141e916c95cfa9ad154136321e16bab

SHA1
e5eca565f7d6e04aacb92e2d334f0dbf39c799b0

SHA256
dadff5e5eaa502c91cf8cc77b20dbd3b166efcf1f4f39536d98e73121895d275

SHA512
0b59ccda76d76ab5142273153d4a57bbd8eb112b3d2c46d08448113fb0fb178c5927d5855d33e43dc3376c9196dde6c924bbf021b914363c2d7e2f931b2c07a7

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Favicons

Filesize
28KB

MD5
719da90ffe42197de4606c06c5398b36

SHA1
0eca24f0379bd4a5e146b4cc1af87a9b59512664

SHA256
83082f80bbc0218972f9e57252a6026cf9ab2f741f5814fbe71d7f4975c5fb1b

SHA512
f148e7699197b9ae77727ddc9925da55609bd643077804e7d180fbc82bef55d42e42cd0a4599f06f9bf83a20c6933fa432a0a3d466b0deb74d0bba9cfce7869e

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\History

Filesize
116KB

MD5
cd5682b9c271c7d81fb3d4a0626aeed7

SHA1
27ecead2e6d561f14c5c8c395f9b41b19dc6d194

SHA256
6306fa9e2a4545831d1e5b26d0e762889f7456ea9416d40bfd6797e3bb8bb5fa

SHA512
86c9dc8ce6b1d04b2d27bbafa5143ac9d55ae9fc9517934df9f1d90c4eddc579c8757d13cb0ffdb8b92bf92b88de82dec53e6252d0a7f8a30dc97758f3bde68c

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences

Filesize
6KB

MD5
149318edb24d039da0d8a41d106cdd39

SHA1
b2958bce1b3a703105e3a16b5dc323d9b83a9478

SHA256
eae6426fb945fbd769dbc94e4f27178136863d65938b1a3e04468418d0826436

SHA512
cf23d906a659ee82ac4b9e68e8472d9a2eec9ff3a51fd7ed7e79aac0d88dd1ee06a0ed316d63aec0fb1078c8aa1edb94eacea7c5d471f00761d07daf4242b1ec

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences

Filesize
17KB

MD5
d3ae79e44ef0e56a4c2840c56eaf5e69

SHA1
c5f57870bb62c7b45291f7b03182c34c6cb433ac

SHA256
2ec38cae49b6c897cd825e586c71e84d72f2224ed4a1976a2ea8aefdaf94c3df

SHA512
d65360678554c9c997841635605a36ff510d6c50bcc058fe4c6a817954d6c758dfc79f370d3516acd2fce7a630031d89186aaa89cd28d8f873e2facaf2d9f4b2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\000003.log

Filesize
300B

MD5
ea245bf1f68341f89b7a8c603385e7d3

SHA1
66ad84a9237870a65ed632eaad9af2c9af013fa4

SHA256
f32e9cc795ca743fde31c5415207294268b4779c8878684c40132fc8678c24d3

SHA512
5114bffaa277e97f7b26cf79af65394b847c5f74ed896b5d0a2b0c2570dec9df68af67f8415dfe7bf151351ef0ba87d607ffaad4cb899f5d1309fe83bdc4e758

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Site Characteristics Database\LOG

Filesize
348B

MD5
d16120e6ea7b279fe49b632b2a05aba8

SHA1
d520bfaf1a3d39bebbee415ed2fb2ab6babdc039

SHA256
1138812854296513156b24eb751d779cd8f753b251d7a3e8c8bf0ede0657564f

SHA512
7dc3356c11d9aa2097e5a328d57b31efb4ae0e4323840f46da88934c2d7744225192567eaa499bf118175a3aa657e93fb9121965a9271a7d3ab5c8f7635494e2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000003.log

Filesize
160B

MD5
de92ad90be6d3364745b2f73f4c3cf73

SHA1
9158681463bd30e5af4dda4baac81f93cedbda77

SHA256
0025a3e0d3b834401b3b5f820e1991ef7e810d9a4b8b6b579e6301c94e7031a0

SHA512
9e81cefc195439439f4b23ee7696309d7bc3c08e5b444d2abde26d2f12b2d3bcfd124fb9a2d40c6389e9f787741676fad366a2e9982674e7b931028c014d8a79

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\LOG

Filesize
321B

MD5
4e762645620f5f14bfd9644724fd859d

SHA1
798a49a6519a0d6821cc42824da976a3052442af

SHA256
581241670b69221535104eeff30a44784010352d1db6dd3061425b4723045c1a

SHA512
d3525da8238f5f0dcbbb2d32d4dd419a2e386c796e6878dcacb0498d340097d33793211851920d8ae41f01e48399a0a49e13a6a5230a448954a761fec0f9bce2

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Visited Links

Filesize
128KB

MD5
0eca5340a1c4d97a26ffc69d6073b46f

SHA1
c454a90d3c56bd1e0e4f70e0940eb48eced1922e

SHA256
cb06b18867c2bcda73ca0a420e1dc9837ba9fa2140a050e7c19d6c741ccbf7d5

SHA512
a85437495ac1b329ba851061baa30e7d9dc33fdf197827c95a082d8d24e6b25eeb10480879d567cdc234fce5acc0894f5d0fe54ea499fdd241c868661118568d

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Last Version

Filesize
13B

MD5
b63048c4e7e52c52053d25da30d9c5ab

SHA1
679a44d402f5ec24605719e06459f5a707989187

SHA256
389caa40ea458e84bc624a9af1e0dec60fa652b2db2b81c09b1dfe22822cc3d1

SHA512
e86c58c5a25e24f21ad79ed526a90c120a09c115f4820663bd2ebbc59e7bb1c4c418267eb77645522aa20b2c1b53fba8e31690db7bae9b21e4eff3db06316359

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State

Filesize
107KB

MD5
73bcc6b7f4f2e77ad0b8609b2c7c7220

SHA1
64727449cb754af58aa6dd168876c1750f9f1655

SHA256
ffcc7e4655b27c6561532bc90161e7cc45243f64be43e4dbb8920fd315c6eff3

SHA512
9b436134db61ff1a49b96b24971fdc71e27cc5915c9220ba5fb069f921fd5505fd4f728ab201c5819217e3a2d92e1e2adad0a4c390b0d20927f959d969bb6a19

Download Submit
C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\GPUCache\data_1

Filesize
264KB

MD5
785dcff211f47194a37b2e1504765686

SHA1
4382cfd2f0a96b7deec646ed1f8e64dea1548fbe

SHA256
3c39c317ebc537691e8d2307dfeff5c0dc0adf205e39ad9e561349c300c30cb3

SHA512
11fe05a1e5ff5201186812b67fc5a7634d83fde201590e1ceb46633b2c05d6892a4253e0af8e0c3c548c06b9c9f8830458bb8e07b56fb4e703ac9fa5490cd8bc

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Request

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Request

HTTP Request

HTTP Response

HTTP Response