Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

6

249b4bc156...5a.apk

android-9-x86

10

249b4bc156...5a.apk

android-10-x64

10

249b4bc156...5a.apk

android-11-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    07/11/2024, 22:08 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    249b4bc1569f1790ced84ddf654af1e59b61abeb18ce3b854667d887159ef55a.apk

  • Size

    446KB

  • MD5

    bafef7a3dc29b6bfa72e648169a364a0

  • SHA1

    bd773931b11fd885e6fa6cfc58c2dd1f320a80b9

  • SHA256

    249b4bc1569f1790ced84ddf654af1e59b61abeb18ce3b854667d887159ef55a

  • SHA512

    3f0520e106002190aaa6c7175c95867904eb8024d7c79472feecd5f78ba0339eaa4b77a87bfdba0d10a2c527e3f78086676031b5c84b6613a8eee85098b3cf5e

  • SSDEEP

    12288:1Zjy0QPkbDOL7pFtUKcWJo1FfBsS+b4dMoYh:1tEgCL7pFt6gS+cdM9

Score
10/10
xloader_apkbankercollectiondiscoveryevasionimpactinfostealerpersistencestealthtrojan

Malware Config

Signatures

Processes

  • com.dkel.dxcd
    1⤵
    • Checks if the Android device is rooted.
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Reads the content of the MMS message.
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about active data network
    • Requests changing the default SMS application.
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4242
    • ping -c 4
      2⤵
        PID:4445

    Network

    • flag-us
      DNS
      docs.google.com
      Remote address:
      1.1.1.1:53
      Request
      docs.google.com
      IN A
      Response
      docs.google.com
      IN A
      142.250.187.206
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:41 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-A0TBzSuOrm6GXnVvtS2wDQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0XtYzekWB_DX7_euH9XuSiHdqBBlSIaRSu32nmqUxqX3J2JK6XE4NRIOxiXjGBMdT7nklr27p23jMB23cZvcNYNhGJlxO65dOMpOMlPnO398nuddz3qftdb7LuvtLk4dCWyDIlhsD8EMsMRGsK_ADIc1guXZChbuIFgpeDgJNshZMC2cg2QXwU73Fsy_j2CVEOsqWJ9-giW4CVbmIdhcT8E-DBAs1VswzUDB3OEUfBgimK2_YI5QBUMDBCsYJti6EYLpRwmWC1uh62PBJo4W7OYYwZ5AWKhgn0_FDKpgo-F6omAPwTBTsDvJgj0Hq1TB-sIvaYIFzRMsEhoXoSf8ulqwF1CVI9hR-GmNYPch8mvBpsCYPMGiIHebYDvBt1CwUdC5XTC7HYKt2Y054U4ResEaA2LwNwo2DnaVCWaCK2bB6qHXQcF84FiNYJfh95OCNUP_C4KNgBWQB9GXBJsG4VfxPtDX4Q9hB-yFIdcFGws1twU7D60g3xHsX3cF2wPl9cjBMbgMP9wX7GfweCTYMCh8gv2A_VPBPOEQ_AAX4DY8fyHYO0hpESwLnkEbpNir7AxcB42DytzgeW-VxbiqLBEcglTmBbM-VtkiOAFXYecnKquG2_AMrGJVFhqvsjjYAusmq2wbHFFV9ihRZTlJKsuH8GSVfQ5nU1R2AxwWoj5MyVbZ5pUq2wXP4BX0W6Uyb6iFq_ArPIRmsMAD5xsscUijlAIbZ7yRtkB9-hvpMfyz9o2UB-mPW6RM6PtRq9Qf4hNaJRUODLNIR-DscIuUP8Ii7QCPKIs0EKausEhJ4LbaIvlA7zUWyRPajlukTth93iKVweV576QbsHRcu5QDaki79AUkzmmXUuBEbrtUC3VT30u3YPTy91IYOF15L7mC1fX3kiMEO3VIWuj7dYfUH3I3dEgFfzF2SDshfecfUiasndQpbYS2rk6pE75365LOwZR5XdIMGL60SxoD0rIuyRrKspi8D-ofMvkxbC3pJkeVdZPjwTNPkgfBRaMkX4ML53CWZfkaePnJ8mA4MUmWa2HWVFlOh5p1snwGMs_J8hJoeSrLHbDImsvnvbj8IzS9GsvfgtO7sdwV8huC-Q749lUwz4eWt8G8A-5NHMddto_jHvBo3zj-EtJdQ3gm1PmFcK8xIXww5BaG8K1g7xPKe8PikaF8JZxKDeUXYFVGKP8GblMYvw-xm8L4VOi8FMaVy2F8740w_m_oFzSeewNTx_Me4OQezl3hQ1Q4V6LDeXFMON8L15rC-QM43RzOL4ISEcHt4PXyCH6gKoKfhjpTBL8FzuYI7g6jNFoeAvfBp7eW-0NDvJa3wMkvtfw8vF6s5e_g_Vda3m2FlrvnaLkv1B_Q8sfw9JCWN8Pym1q-AZIatTwN3N_gHuj7R_I4sAyI5OQdyf-hRvL1sG1XJK-ApspI_haC2yK5FnQQC4fhBNx01_F78NtAHW-CkYN0XAvT_XV8NtyaixwULdDxchi_WMejwDpfx51gtlnH157S8Y2w56KOh_-s49Gw75mOfwfTbPU8GU566fl5mD9Kz7Ph6Wg9t0DrLD3_AB3Jem6doucjN-l5MIS3f8qjweAcxS9BhnsUXwlroACGJkTxkVCQHsW9b0fx6T2j-Wy43Cua34UTfaL5Bei-LJrbQ2r3GD4fcq1jeAGYJhqo52QD9YNzRwxUB6-OGagNetYZyBvKfzdQDXxkZaQw8Eo00mDom2ak_n9ZbaQR8GizkZaUGqnouJHKIeOEkRZDyGkj6cD2rZGcIbvNSGuhut1Ih2DV9GLaBINmFtNPRcV0H7KOFtMyGPJjMQVCXFcxJcDDGSX0AjS7S6gX-BaVUABUlZXQQbjRUkKbs0ppFxjyS-kAdDSWktRUSnNfl9IC4FIZ9YLE-WWUAnUe5XQL_DLKqXxtOZnhdkwFdX1WQd0nVNC3myvoyuEKqoejJyuoFvb_UkH_ATtDJbnANHMlJcPZ_1bSDcj3rCKXcVU0EK7lVFE9KDVVZAeTCqspCUIbqkkPLn9UkwcU_1lNe-FYPxOdhT0BJtoLtTEmugrucSbyBRZvoh5glWYiR_BbaaIg8N1mogAoqDFRCSzN3UdrYfD5fRTiZyYdeA8101AoHGWmSjj0NzMdhwlLzTQFLlWa6TrYHjWTMyw8Zqbl4PXBTMPBFLufDsOA2ftpCFgy91N5aAOZYXdaA5WBc2YD-UJlXgMdgPTnDbQEtI6N5DOxkYIgM6mRlkCvy43kCW13G6kT1N8a6QtwC2siH_ifaKJ20B9vojhYcKaJlsK7s03UBeP9mikerD5rJkfwndZMARC4s5nGQvOZZvoT7P3ekCdMWtVCAswxNsohSJ1ko2RDh7BRJNVGuZJvo9TDoyc2ykuY8t5Gmdxho6jg5qpRfODTERpFQFWGRjkIcYUaJQGStmuUNLi5Q6Pcg9ZdGqUdunZrFPsijXLqgUa5AIYsW6USompslXhoOGKrtEDC97aKzxw7xR96bLJTHMD-NOJzdkoQ1AfaK4_hzzn2StFTeyW41V7RwsEJDsqCeQ7KzAYHZQ6s_uCgrIdvHB2VQnjt56i8gxdjHJV22JLnqJRBzktHZaaDk2IMdlLKITjFSZkIaZB0s6fiZNPj5dvvjikO6_c_8HW1ic1MmTs_LSJ54dzZA_zSUudmZ2YtHJaaOXvR39MyshcGzMnKzMhOy0idFTg8MGjE8MBPhg0PnPVl0P8BhAsWmQ&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=CNuulISey4kDFTWIXQMdOsI1Pw&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=cGRa4twE09NkFOC6lmCQLIUWf_pFjLHFUAk74DCxeM1hxtIma2j-5606UIwwdj3sdPvBPbafQeNne7IE_dkuuSC-HuCZguUD4NEDFm3tAVtGV4lmeq2pofmcAI3FchwlY555XlTlU_km4zRglznF7fG9YnbCsyo3NbAsPJEXdnD2GKI; expires=Fri, 09-May-2025 22:08:40 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:41 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      x-chromium-appcache-fallback-override: disallow-fallback
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-PbZi8lacKPXGel2jFJAmpg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=lBZg0lrMaexiZPzUCsGhnEHPdpRV_-UUZ_B3P127WYG9p9DVH_h3V9PaLJ6xGzTrFJUxEwuEFJWJ21WUYY_5C2eumhxN5zSpKZp2UmLPRNmmAE-069uko8ng1gLVZrY9wEVEHaPFj1nGSjw4zBA6yUdy-AsuR1DE8YCy8eWAN9hyovg; expires=Fri, 09-May-2025 22:08:41 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:43 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-LuVeeinuBKOuVtCReMu0hg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0XtUzVkbB_Dt99vPRp3qFGWkGwohk2QYqdTpnClE49L-iZhSWl7eGgmDcckY70wYK8b90umejoNhWi6N25BrBsNrRmbcxrULrzhKZur9-uOz9t7r2Wvv7362XZmbS0s8Wy0ki-0gWR4stpfsS7DCQZ1kFyBCL1kheLlI1ttVMgOcgSQ3yU50kaz_B5KVQqy7ZG7dJIv3kKzIS7KZ3pK96yFZSk_JdL0k84Tj8K6vZA79JXOGMugXINn6AZKtGiiZabBkObAR2j6SbOwQya4PlewhhIdJ9ulEZNAkGwJXEyS7B3lTJfstSbIn0DFFsq7w31TJgmdJFgV183AnBHyB7PD7csmeQlm2ZIfhlxWS3YGorySbAEPXShYNOZsk2wZ-myUbDK1bJHPcKtmKHcgLK_IwQn-zZMNhe5FkFrholawGOu-XzBeOVKCP8OcxyRqg-1nJBsISWAsx5yWbBBGX8D4wVaOHsBV2Q9-rkg2DipuSVcErUH-T7Ltbku2C4hrU4AhcgJ_vSPYreN2XbABsfoj_AadHknnDAfgZzsJNePJUsiZIbpQsEx7DG0h20thJuAo6vcY84EkXjY1011gC6IM15gPTPtLYPKiES7DtY42Vw014DB1jNRYWp7Ex8D2sGq-xTXBI09j9BI1lJ2osFyKSNPYpnErW2DXQz8X5MCFLYxuWamw7PIbn4LdMYwFwGi7B73APGsAGd12vsYS-dUoyrJnyUvkeatJeKg_g69MvlbWQ9qBRyYCuH75SukNc_CtFg30DbMohOBVoU3IH2pSt4BVtU3rBxCU2JRE8ltsUX-iywqZ4w5ujNqUVdlTZlCK4MKtJuQYLhzcr2aCFNiufQcKMZiUZKnOaldNQPfGtcgOGLH6rhIPLxbeKO3S8-lZxhhCXFsUAXb9qUbpDzuoWZf175hZlG6Rt-1vJgJXjWpU18KatVWmFnzzalDMwYVabMgUCF7YpQ0FZ1KbYQVEmU_dAzT2mPoCNBe3U6KJ2ahx4r1XU3nDOrKhX4OwZzFVVvQI-_qraByrHqeppmDZRVdOgYpWqnoSMM6q6ABofqWoLzLPjapUPVy9D_fNh_DW4NA3j7pBbG8K3wrfPQ3guNL4O4S1we-xw7rZlOPeC-3uG82eQ5h7KM6DaP5T7DA3lfSBncyjfCE6-YbwLzB8UxpfC8ZQwfhaWpYfx_8BNCud3IHZdOJ8IrefDubgQzndfC-c_QLfgEbwnMG0E7wAenhHcF95FR3ARE8HzR0bw3XClPoLfhRMNEfwciMhI7ggvFkfyfWWR_ARUWyL5DXC1RnJPGKwz8FC4A75dDLw_1MYZeCMc-9zAq-DFfANvgrdfGni7JQbumW3gflCzz8AfwKMDBt4Ai68b-GpIrDPwVPB8iX1g6h7Fx4CtRxSnnlH8Cy2KfwObtkfxEqgvjeKvIeRNFDeAEWLhIFTCdU8jvw1_9DLyehjU28gNMLm_kU-HGzNRg51zjLwYRsw38miwyzVyF5huNfKVx418Dew6Z-QRvxp5DOx5bOQ_wiQHE0-CYz4mXgWzB5t4FjwaYuI2eDXNxN9BS5KJ2yWb-KB1Jh4Co5o_4eMhzzWan4d0z2i-FFbAeugXH80Hwfq0aN7zZjSf3CmGT4cLnWP4Laj8IIafhfaLYrgTpLQfyWdDjt1Ivh4sY_Oo0_g86gZnDuVRNXSqzqOeUPxnHlXAhx3NFA4-CWbqA11TzdT9veVmGgj3N5hpQaGZdh41UzGkV5ppPoSeMJMRHF6byRWy3phpJZQ3m-kALJucT-ug99R8-mVnPt2BzMP5tAj6Xs6nIBjTlk_xcG9KAT0F3Y4C6gx-OwsoAMqKCmg_XGssoA2ZhbQdzLmFtB9a6gpJqS-kmS8KaQ5wpYg6Q8LsIkqGaq9iugH-6cVUvLKYrHBzZAm1jSqh9qNL6NsNJXTxYAnVwOFjJXQaHPNKyQ0mWUspCU79VUrXINe7jNyGl1EvuJJdRjUgKsrIEcZtLqdEuP64nG5DWG05mcDt73Lygvx_ymk3HOlmoVOwK8BCu8FzjIX8gMVZqAN0TLWQM_gvtVAw-G2yUAAk7rZQKqyvsFABLMzZQyuhT9UeCvW3khF69rNSP9g82EqlcOBfVjoKoxdaaQKcL7XSVXA4bCVXmHvESovB552VAsESu5cOQo_pe6kv2DL2UnFYLVlhR2otFYFrRi35QenaWtoHaU9qaQEYnOvId2wdBUNGYh0tgM4X6sgb3tyqo1bQ_qijz8AjvJ584X-ynprBdLSexsCck_W0EJpO1VMbjPBvoDjoOKqBnMFvUgMFQNC2BhoGDScb6B9w8n9J3jBuWSNJsI60FwcgZZy9yIIWaS8UzV5czLUXNXD_ob14BhPe2ovxLfZCAw93nfCFTwbqhIRd6TpRAmM260Q8JG7RiVS4vlUnbsOr7TrRDG07dMJpp04cv6sTZyEv00GUQnSFg4iD2kMOohHif3IQvjMcRX_osM5R6MHpBNZnHEUw1AQ5iQfwzwwnsfORkwh55SQMEOGuFzGwf7RezJmlF1Nr9WIGWJv04gAsf6cX37zn7Cy2wAt_Z9EET4c6i2bIj3AWP8CGtc6iELKfOYupehdREuIiLBCS7CLGQiokXu8kXHQd6l7_eETom7_767Lqbh-bkTxzdmpk0tyZ03v4p6bMzMrInDsgJWP6vH-npmfNDZiRmZGelZqeMi0oMCh4YGDQxwMCg6Z9Hvx_E1YYsw&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=CK-AxoWey4kDFdiKXQMdm3s0-Q&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=QpLIQNmFeB6ogejo_mpa8bZCyj4j2L6XfwvcCNj9QAush9VV5s23bb0h-iEXOmG328GalT8_v9qf0WjFuf4r5nXr18wNSg2JgOmtcQjkYO2EawHBGqOCSqbWry-6Mp4gmX8nVIHF65oJV3FtCF0Y7-7OrXBzU-WEqRceq1pHHx54Vtg; expires=Fri, 09-May-2025 22:08:43 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:44 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      x-chromium-appcache-fallback-override: disallow-fallback
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-Ys6gRk2-ma19qCzr_os84Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=yfWWYqJELG2EzucQQ2Dwcl6JAcrTWC2VbU89SzHBF_T8cr5ZqY1tzHUk3UCCE7-CuxYz1oxz6l3P4RXC1w5XaPzC6PxKWmj7BTx5YtujJj8lr6_979XQ_rdXdvo_NgZCXzfdXGCZbsFyWfPN4jAbEesb0cZUcA7Cx8OuAhTE8LbohHs; expires=Fri, 09-May-2025 22:08:44 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:48 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-FIcxxZKTfm3SMBSajj04Zg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0HdU1FcWB_Dn7_fuz8JQVYwIiIIFBSOIsdCEYWaBCBIL7yeKBgQ5ri5ERF01Gtu6EXU9YMGGDB0cR10NR5HYImDDKNGQiMa2VkqM4Egxwn7zx-e8d899593Sx2Bv1xnNtimCRfQSLAeWWwj2NZjglEawaxBkI1g-ONsJNqK_YFqohDh7wS4MEMzjE8FKIcJBMLtBgkU7ClbgLNiiwYJ9GCpYgqtgmuGCOcF5-DBKMEsPwWyhBEZ7CpY5RrAtXoLpxwuWDnug-zPBpk0Q7M5EwZ5BYIBgX8xCD6pgE-B2jGCPIWeeYL_ECfYSeicINhB-ThTMZ7FgIdC4HDXh1_WCvYKSDYKdgR83CvYQQjYJNhMm7hAsFNL3CnYAhmUJNh669glmtV-wjYfQJ2zMwQkeBsH84GCBYEa4bhKsHvqdEMwNysuwP_jtnGDNMKRaMC9YCzsg7KpgsyHoBuYCfQ12B_uhFEbdFmwynLsr2E0oqxOsClpB_kWw_9wT7DAU1iMH5XANfngo2E_g_ESwMZD1TLBisH4u2GA4CT9ANdTBy1eCtUF8i2Cp8ALeQ7y1yi7CbdDYqMwRXg5QWbiDymLAxkdlLjD_M5Uthwq4AQcmqewI1MEL6B2hsoAolUXCbtgyQ2V74bSqsicxKtsQq7IMCIpT2RdwKV5ltWCzDP_DzDSV7VqnsoPwAJ7BoG9U5gqX4QY8hQZoBjM86l_LYkY1SvGwfe5baTfUJ72VnsK_Lr-VdkDS0xYpBQZ-2ioNgajoVkmF42PM0mm4NNYsZXiZpf3gHGqWhsOstWYpFhzXmyU3GLDRLA2G92fNUhccqjJLBXBtcZtUC6v82qUNoPq3S19CzMJ2KR4q0tuly1Azq0O6CxPWdEiBYHe9Q3KA3rc7JFvwteuUtDBwU6c0BNK3dUqZfzF0Sgcg6cCfUgpsnt4lbYf33V1SF3zv2C1VwszF3dJcGLuqW5oI0upuqQ8UpDL5KNQ_ZvJT2JPXQw4t6CFHweAdkjwCrhgk-RZUV-Iuy_ItcHGX5ZFQMV2WL8P8WbKcBGVbZPkipFTK8kpoeS7LnbC8D5erXLh8E5p-n8zfgV3bZO4AGQ2-fD9s_d2XZ0DLO1_eCfen-XH7fX7cGZ4c9eOvIcnBn6dAjbs_d5noz0dCepY_3wPWbgF8AKwYF8DXwfmEAF4NW5MDeAbUUSB_CBE7A_ks6LoayJVrgby0NpD_Fwb5TOGuwNQpvBc4OgVxN_gQGsSVsCCeGx7ES-FWUxB_BBeag_gVUIKDuRW8WRPMj5cE8wtQYwzmd6G_KZg7wXiNlvvDQ3AboOUe0BCl5S1w7istr4I3K7S8DTq-1vIea7XcaYOWD4P641r-FJ6f1PJmWHNHy7dBbKOWJ4LTW7wD_ZAQHgnmoSGcXEP4P9UQ_i3sPRjCi6CpOIS_A6_3IXwS6CACTkEF3HHS8fvwYLiON8G4ETquhTkeOr4A7i5CDrKX6nghTFmh46HQJ0PH7WCBScc3n9fx7XD4io4H_aTjYXD0hY5_B7Mt9TwOzrnoeRUsGa_nafB8gp6boXW-nn-Azjg97xOv5-N26rkv5PQP5Vch2SmUr4ONkAmjo0P5OMhMCuWudaF8Tt8wvgCu9Qvj96DikzBeDT1Xh3FrSOgZzpdAep9wngnGaTnUd0YODYLK0zlUA8_Kc6gJ-tbkkCsU_pZDZfBpbwMFgkuMgUbCwEQDDfnLegN5wZNdBlqZb6DsswYqhOQKA60A_wsG0oHlOwP1h7T3BtoMR9oNdBK-mZNLO2HEvFz6MTuXHkLqmVxaDaNu5pI3RHbnUjQ8nptHr0BzKI_6wbDsPPKEkoI8OgG1LXm0KzWfDoIhI59OQGdjPklN-bToTT4tBS4VUD-IWVJA8VDjXEh3wT25kAo3F5IJ6sKLqPvzIuo5tYi27iqi66eKqB7OnCuiy1DwcxEdBZ5TTBqYbSqmOLj0v2KqhYzBJWTvV0LD4daGEqoHpayErGB61hGKhYCGI6QH-z-PkDPkfjxCpVA-yEiX4LCnkUrBKdJIw4BFGakX9E40ki24rzOSDwzbayRPmFFqpDmQWWakPFiVfpQ2w8iqo-TvbiIduI420WjIGm-iYjj5dxOdhamrTDQTrhab6DZYnjFRf1hWbqI14PLBRGPBfuQxcgZjxDE6BUMXHKNRYE45RoUBDWSCQ4kNVAD2KQ00HIp3NNBxSHrZQCtBa9tIbtMayQdSYhtpJQy51kgesOR6I6XB-3uN1AXqg0b6EhwDm8gN_hBN1A76s00UCUsvNtEqaLvURN0wxb2ZoqD3581kC8NmN5MneB9opsnQfLGZPoKN-1tygenftJAAU7iFchISplsoadApLBRJtVCuZ1go9fDkmYXyGmZ2WCizOy2UeeDooFHc4G9eGkVASbJGOQGRWRolGmL3aZREuLNfo9yH1oMapR26D2kU62yNcv6RRqmGnFRLpRhCyyyVKGg4bam0QPT3lorbQivFA3rttFJswPoC4korxQfqva2Vp_BxobWS_dxa8W21VrRwYqqNsnSxjTKvwUZZCOs_2Cjfwr9tbZUseONuq7TBq4m2Sjvs3mGrFMCG17bKPBs7xeBrpxSCb7ydMg0SIfZOX8VO0-uPd9-VKza_brpQITtYRKTEL1qSGBy3bNGCoe6JCYvSUlKXjUlIWbD8H4nJacs8F6amJKclJifM9x7r7eM11nvSmLHe87_y-T83RxrG&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=CKrf84eey4kDFXicXQMdZYESWA&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=hqjlvyga9ujEIb2Tz3TXeYOss2Ss63IrygBxjEGrn8qbAVdV989X8jHFoO3X24TbVqnptpKeNIQ74J5VP8C3nd3yisl2AZj47jqXx52zKMR4HzRbnEVVK6yuiPDUcCUEpH5eAK01gxRdCsaNgkAu15wVO1BDtgjDPe3w2vw6sOscZNk; expires=Fri, 09-May-2025 22:08:48 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:49 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      x-chromium-appcache-fallback-override: disallow-fallback
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-52k18rKYkiYrNZkyQ0_Flw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=h_QVHti0f3BjRPnxBhuVgbKAVuzpHMcrCbRVQ6f0o1a7VB4ysz2MPvfBcgSalPcbkjL-vOY2MBvFcXtSBzywkbMkC92wlIJTjlBDJqDzu1mAZsokOYzHv4ZktH39cOZpG4LnAqQEkX5BnjZP8nGjqf_KjwqLVhZOwDw5OT0iL8oOiLFD; expires=Fri, 09-May-2025 22:08:49 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.200.46
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:57 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-uAdejY5GBuahrQ61iTt3zg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0XdU1UcWB_Dx95s7Fh7ywBaRpoCKHcRYEBAe7y0QUWJhfqJoQJDj6kJE1FWjUWPciBoPGrvIoyPPpy6GtcUWu2LUWLKia1srRVf0USPs1z8-Z-aeO2fuvTMdirs6NcWwdUKyqHaSZcM3dpJZ4ZBOshC9ZHng5iRZny6SGeAcxHeV7FQ3yQZ8JlkRRDlLpu8hWYyLZPluks12l6y5l2SJnpLpekvmCiehuZ9k9gMkc4Ri6D9Qsk2DJFvjK5lpmGQZsAVaP5ds_HDJbo2Q7BkEB0n25WT0oEk2HG7ESvYYsqdL9ke8ZC-hfaJk3eFOkmT-cyQLg6oFqAn_XiHZKyheKdkR-G2VZA8h7DvJJsGIDZKFQ8ZWyXaC9zbJhkHLdsk67pBs1W70CauyscIAs2SjYVe-ZBa4YpWsAjoflMwLjpZJdhkenpDsDfS8IJkvLIMNEHFJsikQchVzgakcbwc7YC_0uyHZKCi7K9l5eA_qH5L9eE-yPVBQgRwchcvw60PJfge3J5INgm3P8C_g8FwydyiFX-EC3IWXrySrh4RaydLgBdRBgoPGTsMN0Ok15gIvu2ks0lljsaD315gHzPhcYwvgOFyFnSM1VgJ34QW0j9JYULTGxsFPsGaixrbCYU1jT2I1tjJOY5kQEq-xL-FMgsZugn4-7odJ6RrbvFxju-ABPINmUL_VWA_whB9hK5yFq_AUKqEGbPCoy00W269KSYD1094pP0FF8jvlKXx_9p2yAZKf1iqp0H3we6UnRMe8VzQ4MMimHIYzQ2zKP3xtykZwC7cpvWHyMpsSBy4rbIoXdFtlU9yh7phNaYHd521KPlyeU6_chMWjG5SVoAU2KF9B7KwGJQGOZzQoZ6F8cqNyG4YvbVSCwelKo-IM7W80Ko4Q4NSkGKD7d01KT8hY16Rs-sTcpOyE5J1_KqmwekKLsh7qWluUFvjFpVU5B5PmtCrTYMjiVmUEKEtalQ6Qn8bUfVDxmKlPYUtuGzU8v40aDe4bFLUPXDQr6nW4cA57VVWvg4ePqvaF4xNU9SzMmKyqyVC2RlVPQ-o5VV0Etc9VtQkWdODqeQ-uXoPqN6P4B3CqH8WdIbMygO-AtW8CeCbUfgjgTXB__Gjedfto7gZP9o3mryHZOZCnQrlPIPcYEcj7Qsa2QL4FHLyCeDdYODSIL4eTiUH8AqxNCeKZcJeC-UOI2hjMJ0PLpWAuLgfzvTeD-T-hh_8Y7glMG8PbgYtrCPeC5vAQLiJCeE5kCN8L16tD-CM4VRPCL4IIDeUd4e3SUH6gOJSfgnJLKL8NXayh3BWG6Qw8EB6CVzcDHwCV0QZeCye-NvDz8HahgddD4zcG3maZgbuuNHBvqDhg4E_heamB18DSWwa-DuKqDDwJXN_hHJh6hvFxYOsVxskzjP9dC-M_wNZdYbwQqovC-AfwrQvjI8EIUXAIjsMtVyO_Dw96G3k1DO1j5AaYOsDIZ8Lt2chB1jwjL4AxC408HDpkGrkTzLQa-eqTRr4e9lw08pDfjTwC9r0w8p9hir2Jx8MJDxM_D3OHmXg6PB9u4jZ4P8PEm6Ep3sQ7JJj40I0mHgDZXcL5JUhxDefLYRVsgv4x4XwobEoO5553w_nUThF8JlzuHMHvwfHPIvgFaLskgjtAYttIPhcyOkTyTWAZn02dJmZTDzh3OJvK4c3RbKqDTuXZ5AkF_8mmMhjc3kzB4BFrpr7QPclMPT9ZYSZfeLLZTIvyzJR1zEwFkHLcTAsh8JSZjGD_wUxdIL3OTKuhpMFMpfDt1BzaCH2m59BvWTn0ENKO5NAS6Hcth_xgXGsOxcDjabn0CnS7c6kzeGfl0kAozs-lg3CzNpc2p-XRLjBn5tFBaKrKI6U6j2a_zaN5wJV86gyxc_MpAcrdCug2-KQUUEl6AZVCweoCssLdyEJq_aKQ2o4tpLWbC-nKoUKqgCMnCuks7L9TSP-CKdYiiocz_y2im5DpXkxdRxdTb7i-spgqQJQVU0eYsK2E4uDWixK6D0GVJWSCrn-WkBvkfCyhvXC0h4XOwJ6BFtoL1yItdAdcx1nIG1i0hdpBa6KF2iZZyGe5hfzBe6uFBsKmMgvlwuKMfbQa-p7fR4E-VjKCZ38r9Ydtw6xUBKV_tdIxGLvYSpPgUpGVboD9ESt1gflHrbQUPJqtNAQsUfvpEPSauZ_6gS11PxUEVZIVdidVUj50Ta2k3lC0oZIOQPLLSloEBscq8hpfRf6QGldFi6Dz5Spyh7p7VdQC2oMq-gpcgqvJC_4nq6kBTMeqaRzMO11Ni6H-TDW1whifGoqG9l_UkCN4T6mhgeC3s4ZGQc3pGvoIDj7vyB0mfFtLEqyRdqIUEifYiXRoknZC0ezElUw7UQFPntmJ1zCp0U5MbLITGrg464QX_MVXJyQUp-jEQRi3TSdiIG67TiTBrR06cR_e79KJBmBZOqGHk4904gJkp9mLIggvsxfRUHnYXtRCzC_2wmtWRzEA2m3sKPTgcArxuY7CHyr8HMRT-DjLQWQ9dxAB7x2EAQ6O1Yt5c_RieqVezAJrvV6UwopmvfjhE0dHsR3e-jiKeng1wlE0wOYNjiIPVr52FNP1TqIwwElYICDBSYyHJOgzvJMYDHG3OgknXbvGDz8fFfob-ZXNirNdVGrC7LlJofHzZ8_s5ZOUODs9NW3-oMTUmQv-lpSSPn_grLTUlPSklMQZfkP8_H2H-I0cNMRvxtf-_wdFXh8J&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=CPjvkIyey4kDFXicXQMdZYESWA&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=foxPlo6-AamZfegBf4ep8kqfFuBJg5Sk0RRnzQVUj-0j_O_CQrOAa5aozIYdJt2OK14KKA4H5pcAzw_9qkrLDJVvKzLrt3RkfiIPPGycwGPLBJgkkeNwxYOguAuwqvJLbK-t3TLcVuN5KuId-9K8mlRnumrQ2FBjC1f7ahvsdGxFaTE; expires=Fri, 09-May-2025 22:08:57 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:08:58 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      x-chromium-appcache-fallback-override: disallow-fallback
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-eL7ZtUvrx2skOinhNAwbNg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=1q_O-f-gZJ_2oah_IgiA8TgI8wsWVbnks_t30c-KR0pQFhvBFP-SUn1P3nMGnIHQwhaBtP__cvBqm7x1TKfRs06DH3uvJb0BY6iyDwv5EFIJXq4d66uZ4QQ4TysTZ3AlyJZhpARxwuVg7JgKWf_Er_oaTB-JIXZadx7ZjXXUYnSB9TI; expires=Fri, 09-May-2025 22:08:58 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:09:14 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-N9OW5Bu2sOqvjvs33qk6wg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0HtYzekWB_DX7_euH9XuShlRQiHKKBmXbmq391SjNIben4gppcfh1EgYDCNjnBGOJ7fcsnf32DYO0yG5DrlmMC4zMsel49qFo2xSo87XH5_nedez1rPetZb1cRentni2VhEspptgBvjORjAzHNYIdgnCHAQrAncnwQY5C6aFc5DkItipnoL5fII8xLgK5tRbsPg-ghW7Cza7r2Dt_QVLGSCYZqBgbnAS2ocIZusjmCOUw1BfwTYOE2y1n2D6kYLlwBbo_EywCaMEuzlasMcQGiLYl5MxgyrYKLieINhDMEwX7PckwZ6BVYpgveB2qmABcwSLgIYF-BOGfYsY_lgh2HMozxbsKPy6UrD7EPGDYJNg9HrBIiFnq2A7wCtPsJHQsU0wu-2CrdyFeeGPfPSBlQbE4GMULAh2FgtmgstmwWqhx0HBPKGyAveE-ycEewn9zgvmB8tgPURdFGwKhF3BnqCvwS1hO-yBodcFC4QTtwS7ChV3BKuGFpB_F-yfdwXbDSW1yEElXIJf7gv2G7g_wg0g77FgZWD_RLC-cAh-gfNwB549F-wdJDcLlglP4S0k26vsNFwHjYPK-sCzniqLdlVZAjgEqMwDZnymsgVQBVdgxxiV7YU78BSsYlQWEqeyWNgMq79S2VY4oqrsUYLKshNVlgthSSr7Es4kq-wGOMxHf5iUpbJNy1W2E57CS2gH-XuVnYUrUAf10AQWeOB8gyUMaZCSYd2019JmqE17LdXBj2dfS-shra5ZyoBen7ZI_SAuvkVS4cAwi3QEzgy3SP_ws0gbwD3SIg2EycssUiL0WWGRPKHnSovUF94es0gdsKvaIhXDpTnvpBuwOKhVygY1uFX6GhJmtUrJUJXTKp2FmsnvpVswaul7KRScLr-XXMHq-nvJEQKd2iQt9PqhTeoHOWvbpI0fGdukHZC24y8pA1ZN7JDWwdvODqkDjvfplM7BpDmd0jQYvrhTGg3Skk7JGoozmbwPah8yuQ62FHaRI4u7yHHQd70kD4ILRkm-BufP4S3L8jXw8JblwVA1UZbPwozJspwGFatl-TRknJPlRdD8RJbbYIE1l6s9uHwVGl-O5W_A6d1Y7gq59YF8O6x5GchzoflNIG-DexOCuMu2IO4Oj_YF8ReQ5hrMM6DGO5h7jA7mgyEnL5hvAXvPEN4TFo4I4cvhZEoIPw9r0kN4LtyhUH4fYjaE8snQcTGUK5dC-Z4bofxf0DtgHB8ATB3Hu4GTWxh3hfbIMK5EhfGC6DC-B641hvEHcKopjF8AJTyc28GrpeH8QHk4PwU1pnB-C5zN4dwNRmq0PBjug2dPLfeB-jgtb4YT32h5NbxaqOXv4P13Wt5lmZa7ZWu5F9Qe0PI6eHJIy5tg6U0tXwuJDVqeCm6vUQf6fhE8Fiz9IzgNiODfqhH8J9i6M4KXQmNZBH8Dbm8juBf4wRjQQQwchiq46abj9-DPgTreCCMG6bgW5CE63h2m-uj4TLg1GzWQP0_HS2DcQh2PBOtcHXeCmWYdX3VSx9fB7gs6HvabjkfBvqc6_jNMsdXzJDjhoefVMHeknmfBk1F6boGWGXreDm1Jem6drOcjNuh5IIS1fs6jwOAcyS9CulskXw4rYSMMjY_kI2BjWiQfcCeST-0exWfCpR5R_C5UfRLFz0PXJVHcHlK6RvO5kGMdzTeCaYKBun9loN5w7oiBauBxpYEaoXuNgQZAyX8MVAGfWhkpFDwSjDQYeqUaqd9HK4zkB482GWlRkZHyjxmpBNKrjLQQgk8ZSQe2b4zkDFlvjbQK9rYa6RB8P7WANsCg6QX0a34B3YfMowW0BIZcLSB_iO0soHh4OK2QnoNmVyH1AK_8QvKF8uJCOgg3mgtpU2YR7QRDbhEdgLaGIpIai2j2qyKaB1wqph6QMLeYkqHGvYRugXd6CZWsKiEz3Ikupc4vSqnr-FJas6mULh8upVo4eqKUzsL-26X0b7AzlJELTDGXURKc-W8Z3YDcvuXkElROA-FadjnVglJRTnagy9tLcRBSv5f04PLXXnKHgg97aQ9U9jbRGdjta6I9cDXaRLfBLdZEXsDiTNQNrFJN5Ajey00UAF5bTeQLiXtMlAobK0xUCItz9tEqGFy9j4K9zaSDAUPNNBTyRpqpDA79zUzHYPxiM02Ci2Vmug62R83kDPMrzbQUPNrNNBxMMfvpMPSfuZ-GgCVjP5WE1JMZdqXWUzG4ZNTTQChbX08HIO1ZPS0CrWMDeU5ooADISGygRdDjUgP1hbd3G6gD1D8b6GvoE9pInvA_0UitoD_WSLEw73QjLYZ3ZxqpE8Z5N1EcWH3RRI7gNaWJfMF_RxONhabTTfQBHLxfkwdM_L6ZBJijbZRDkDLRRsmCNmGjSKqNcjnXRqmFR49tlBcw6b2NMqXNRpkOfVw1iid87qdRBOxO1yilEJunUeIhbZtGyYCb2zXKPWjZqVFaoXOXRrHP1ygnH2iU82DItFXKILLCVomD-iO2SjPEH7dVPGfZKT7QbYOd4gD2pxCfs1MCoNbfXqmDD7Pslfwn9kpgi72ihYPjHZR5cxyU6fUOyixY0e6g_PSRo6OyDV55Oyrv4PloR6UVNq93VIoh-4WjMt3BSSkNdFJMEJjspEyAVEi82V1x0nTLsfxcqTgYd5dck1xtYjKSZ89NDU-aP3tmf-_UlNlZGZnzh6VkzFzw99T0rPm-szIz0rNS01Nm-A_3D_Ab7j9m2HD_Gd8E_B9hySQZ&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=CKO-mZSey4kDFRKVXQMdbkE5qQ&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=wDe9QqPyzl3SlSRxDtRDSx9_7_iz1k2Zg7ytMoCc_5h3JQgdk0GvWRxemnEzwaOo0A-3aWZ3Wh7lC0UmmXJL15cVpftC030JzOzLNPB4sQpBhjbLV8KARZr7f8njR-n3691t5QoCIPyxlkQ5FeHTSxTypU8-8LcTOK_v__YLVsomRRk; expires=Fri, 09-May-2025 22:09:14 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:09:15 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      x-chromium-appcache-fallback-override: disallow-fallback
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-KwYegvL3eTFxz4WHQurXQQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=wMrglgYPvDJfuv1WkMgQUsja-28KQI15D1Geau-XjbKUnJfr4PWuilByeSsTmNzk5K5Mu9cRzj9FEksPlUnLVTgFVgb_z4_pD-fs8XJVw6S0nkmUYmym1frTcN6nw3O4LdZPsyRXUifcfztOZfmxJm2wu8SDqjfzw6y72KXxaFySsyY; expires=Fri, 09-May-2025 22:09:15 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:09:47 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-VQTxL0CdmYpdt7rNpm8Inw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0HtYzdkaB_Dl91vvcmmnXcRIJRQiRsm4pFK7vU81SuPS-omYbno6nBoJB-OSMWYmHE8Zd2l3j23jMD1u4zaukaFhmhHH7bh24YhNMlPnO398nrXWs77Pet_1dqno4dQay8K4ZGuFZFGdJCuAL-0ks8IhnWRVEKKXrBjcnSQb6CyZAc5BQg_JTvWUzOcjyUohygWZ3pLFukpW4i5ZWh_JPvSTLLm_ZLoBkrnBSfgwWDJ7H8kcoQKGDJUsb5hka3wlM42ULAc2Qfsnkk0cJdmN0ZI9guAgyT6bih40yUbB9TjJ7kPBTMl-S5DsKXROlqwX_Joimf8cycKgYQFqwu8rJXsGFdmSHYGfV0l2F8K-kmwKjF4vWTjkbJZsO3htkWwktG2VrOs2yVbtRJ-wqgAr-JglGwc7SiSzwGWrZHXQ_YBknnC0EvODuyckewF9L0jmC8tgPURckmwahFzBv8BUjdnBNtgNQ65LFgAnbkp2FSprJTsPr0H9TbJ_3ZJsF5TW4Q6OQhX8dFeyX8D9gWTDYMsjycrB4bFkfeAg_AQXoBaePpPsHSQ2S5YJT-AtJDpo7DRcB51eY67wtKfGIl00Fgd6f415wKxPNLYAjsMV2D5GY3ugFp5A5yiNBcVoLBq-hzWTNbYZDmsaexCnsex4jeVCSILGPoMziRqrAf18vA9TsjS2cbnGdsAdeARnV6AW_A73oQlscM-5hsUNblASYd2MV8r3UJf6SnkIX599payH1IfNSgb0-vi10hdiYl8rGuwfZlMOw5nhNiXX16ZsA_dwmzIApi6zKfHgutKmeELPVTalD7w9ZlPaYOd5m1ICVXPeKTWweFyLkg1aYIvyOcTNblES4XhOi3IWqqe-V27CqKXvlWBwuvxecYHO198rjhDg1KoYoNdXrUpfyFnbquT9xdyqbIfU7X8oGbB6UpuyDt62tylt8KNru3IOpsxpV2bA8MXtymhQlrQrXaAkk6l7oe4-Ux_CpqIOanhJBzUG-qxX1IFw0ayo1-DCOexVVb0GHt6qOgiOT1LVszBrqqqmQuUaVT0NGedUdRE0P1bVVljQhavnPbh6FRpfjOVvwOndWO4CufUBfBt89yKA50LzmwDeCrcnjuM9to7j7vBg7zj-HFJdAnkGVHsHco_RgXwQ5GwJ5JvAwTOI94SFI4L4cjiZHMQvwIr0IP4N1FIwvwtRG4L5VGi7FMxFVTDfXRPM_w29_cfz_sC08bwTuLqFcE_4EB7CRUQIL4wM4bvhWmMIvwenmkL4RRChobwrvFwayvdXhPJTUG0J5TfB2RrK3WCkzsAD4S549jRwH6iPMfBmOPGFgZ-HlwsN_B28_9LAOywzcLdsA_eCuv0G_hAeHzTwJlh6w8DXQnyDgaeA2yvkwNQ3jEeDrV8Yp_5h_J9aGP8WNu8I42XQWB7G34Dv2zA-BowQBYfgONxwM_LbcGeAkTfCiIFGbgB1sJF3g-k-Rp4EN9OQgfx5Rl4K4xcaeTh0yTVyJ0iyGvnqk0a-DnZdNPKQX4w8AvY-MfIfYJq9iSfACQ8TPw9zR5p4FjweZeI2eD3LxD9Aa4KJd0k08REbTDwACpzD-SVIdwvny2EV5MGQ2HA-AvJSw3n_2nA-vVsET4Kq7hH8Fhz_KIJfgI5LIrgDJHeM5HMhp0skzwPLxALqNrmAesO5wwVUDd2qC6g_lP6ngCrh485mCgaPODMNgl4pZur7l5Vm8oUHG820qNhM-cfMVArpx820EAJPmckI9m_M5AxZb820Gva0mOkgrJheSBtg4MxC-jm_kO5C5pFCWgKDrxaSH0S3F1Is3J9RRM9At7OIuoNXfhENhYqSIjoANc1FtDGzmHaAObeYDkBrQzEpjcWU9rKY5gFXSqg7xM0toUSodi-lm-CdXkqlq0vJCrWRZdT-aRl1nFBG320so8uHyqgOjpwoo7NQ8msZ7QVeUE46mGYtpwQ4899yqoHcPhXUY1wFDYBr2RVUB6KygrrCpC17KB6C6veQCXr8sYfcofDPPbQbjva20BnYNdRCu-FspIWugFu0hbyAxVioE7QnW6hjioW8l1vIH7w2W2goTN5toemQV2mhIlics5dWw6DzeynQ20pG6D_ESkNgy0grlcPBv1vpGExYbKUpcKncStfB_oiVnGH-USstBY8PVhoOPQbtI3ewRO2jQ9AvaR8NBlvGPioNqicr7EyppxJwzqgnLyhfX0_7IfVpPS0Cg2MDeU5sIH_IiG-gRdC3qoF84O2tBmoD7U4DfQ6uwY3kCf-TjdQCpmONFA3zTjfSYnh3ppHaYbx3E8VA50-byBG8pjXRUPDb3kRjoel0E_0Jeu9X5AGTVjSTBGuknTgIyZPsRBa0SjuhaHbicq6dqIMHj-zEc5jy3k5Ma7UTM8HVRSc84W--OiGhIl0nDkD0Fp2IhfitOpECN7bpxG14vUMnWqB9p0445OvEyXs6cQEKMu1FOYRX2osYqD9sL5oh9kd74Tm7q_CBThu6Cj04nML5XFfhD3V-DuIh_DnbQeQ_dhABrx2EAUJc9CICDkzQi3lz9GJmvV7MhpwPepEH3zo6iq3w0ttRvINnox1FC0xLdRRpsHG9oyiG7OeOYqbeSZgDnEQpBCQ6iYmQAvE3ugknXSeL7YejQr_11L1vVBe7qIzEtLkpoQnz05L6eackp2VlZM4flpyRtOAfKelZ84fOzsxIz0pJT57lN9zP33e435hhw_1mfeH_fxteF3c&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=COu3_qOey4kDFQJHKwMdcnY5Rg&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=adNRRunFoHqmnY2eFIpXSrXO8o3UtoO9ER2iECuarD2H7Oz505ewGbhY1NfNmWWX4dSAEfkfFQCk-6VF0JgBDqB2g3eOZS5oUq84eNTT2rT7T5-WljGCiKHNyNUzD1XfyPdVxoUkRzw038z6w2dN0r7QTvXeJv8ZgBY1Pe_8fcwbn2o; expires=Fri, 09-May-2025 22:09:47 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:09:48 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      x-chromium-appcache-fallback-override: disallow-fallback
      Report-To: {"group":"docs_coop_coep_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/docs/prod"}]}
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-HPQV8GZ1NEQyCCh8ib6SkA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="docs_coop_coep_reporting"
      Cross-Origin-Embedder-Policy-Report-Only: require-corp; report-to="docs_coop_coep_reporting"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=op3GXBVGq2I9htOnGIUENHeTSPmMAJ6J82UH7WY846q2JjXftHTTHC4oVB0J503eo_IejoTboaLV1qRrPhTFt2Iwrl3wwfzRuEw6y-2U3RK3kSas2MIvxldlKYmpoLnj34gUpLd--5-2h4u80S3PJG_NEK57kSpQE4PVlme2bAjoas7B; expires=Fri, 09-May-2025 22:09:48 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-us
      DNS
      smtp-mail.outlook.com
      Remote address:
      1.1.1.1:53
      Request
      smtp-mail.outlook.com
      IN A
      Response
      smtp-mail.outlook.com
      IN CNAME
      mira-slc.tm-4.office.com
      mira-slc.tm-4.office.com
      IN A
      52.97.211.198
      mira-slc.tm-4.office.com
      IN A
      52.97.241.166
      mira-slc.tm-4.office.com
      IN A
      52.97.202.102
      mira-slc.tm-4.office.com
      IN A
      52.97.179.246
      mira-slc.tm-4.office.com
      IN A
      40.99.218.86
      mira-slc.tm-4.office.com
      IN A
      40.99.218.102
      mira-slc.tm-4.office.com
      IN A
      40.99.202.86
      mira-slc.tm-4.office.com
      IN A
      52.97.133.166
    • flag-us
      DNS
      smtp-mail.outlook.com
      Remote address:
      1.1.1.1:53
      Request
      smtp-mail.outlook.com
      IN A
      Response
      smtp-mail.outlook.com
      IN CNAME
      mira-slc.tm-4.office.com
      mira-slc.tm-4.office.com
      IN A
      52.97.146.22
      mira-slc.tm-4.office.com
      IN A
      52.97.166.166
      mira-slc.tm-4.office.com
      IN A
      52.98.204.150
      mira-slc.tm-4.office.com
      IN A
      52.97.146.118
      mira-slc.tm-4.office.com
      IN A
      52.98.198.246
      mira-slc.tm-4.office.com
      IN A
      52.98.205.70
      mira-slc.tm-4.office.com
      IN A
      52.97.146.70
      mira-slc.tm-4.office.com
      IN A
      52.98.196.6
    • flag-gb
      GET
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 200 OK
      Content-Type: text/html; charset=utf-8
      X-Robots-Tag: noarchive
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:10:52 GMT
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-ceiHPaFTsDMXpj5SFW9x0A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Reporting-Endpoints: default="/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/web-reports?bl=editors.documents-frontend_20241029.02_p4&context=eJwV0HtYzdkaB_Dl91vvcmlXu5CRSihEjJJxSaV2e5-K0ri0fnKbbno6nBoJB8NgjGeE48n93u5eto3DdNzGbZTbZGgYc8RxO65dOGIrGXW-_vg8a63nXc963_XttM7FuSWOrRWSRXeQLBe-sZPMCkd0kl2GUL1kBeDhLFm_rpIZoAISXCQ7000y388kK4NoV8n0PSSLc5Os0EOytJ6SfegtWXIfyXR9JXOH0_BhgGT2vpI5QSkMHCTZxsGSrfaTzDRMsmzYAm1fSDZ-uGQ3Rkj2GEKCJUscK1kmfDkZs2iSDYfr8ZI9gNwZkv2RINkz6JgsWXf4PUWygNmShUPdfPSGfy-X7DmUrpDsGPy6UrJ7EP6dZJNgxHrJIiB7q2Q7wXubZMOgdbtkDjskW7kb88LKXKzga5ZsNOwqlMwCV6yS1UCXQ5J5wfFy5Aj3Tkn2EnpdkMwPlsJ6iLwk2RQI_QX_AlMVMoQdUAYDr0sWCKduSnYVym9JVglvQP1Dsn_clmwvFNWgBsfhMvx8T7LfwOOhZINh22PJSsDxiWQ94TD8DBfgFjx7LlkTJDYiY3gK7yDRUWNn4Tro9Bpzg2fdNBblqrF40AdozBNmfqGx-XASfoGdIzW2D27BU-gYrbHgWI3FwGZYPVFjW-GoprGH8RpbMV1jORCaoLEv4VyixqpBPw_vw6QsjW1aprFdcBcew_lv0QseQS00gA3ud61m8QPqlERYN-21shlqUl8rj-D786-V9ZD6qFHJgO6fv1F6QWzcG0WDg4NtylE4N8Sm5PjZlB3gEWFT-sLkpTZlOrgttyle0G2lTekJ707YlFbYXWlTCuHy7CalGhaNblZWgBbUrHwF8bOalUQ4md2snIeqye-VmzB8yXslBJyvvFdcoeP194oTBDq3KAbo_l2L0guy17YoGz8xtyg7IXXnn0oGrJrQqqyDd22tSiv85NamVMCk2W3KNBiyqE0ZAcriNqUTFGYydT_UPGDqI9iS306NKGynxkLP9YraDy6aFfUaXKjAXlXVa-Dpo6r94eQEVT0PMyeraiqUr1bVs5BRoaoLofGJqrbA_E5crfTk6lWofzmKvwXnplHcFXJqA_kOWPMykOdA49tA3gJ3xo_mLttHcw94uH80fwGprkE8A6p8grjniCDeH7K3BfEt4OgVzLvBgqHBfBmcTg7mF2BNejDPgVsUwu9B9IYQPhlaL4VwcTmEl1WH8H9Cj4AxvA8wbQzvAG7uodwLPkSEchEZyvOiQnkZXKsP5ffhTEMovwgiLIw7wKslYfxgaRg_A1WWMH4TulrDuDsM0xl4ENwDr24G7gu1sQbeCKe-NvBKeLXAwJvg_TcG3m6pgbuvMHBvqDlo4I_gyWEDb4AlNwx8LUyvM_AUcH-Ne2DqFc5jwNY7nFOfcP53LZz_AFt3hfNiqC8J52_B7104HwlGiIYjcBJuuBv5Hbjb18jrYWg_IzfAVF8jT4KbaajBnrlGXgRjFhh5BHTKMXJnSLIa-arTRr4O9l408tDfjDwS9j818h9hir2JJ8ApTxOvhDnDTDwLngw3cRu8mWniH6AlwcQ7JZr40A0mHgi5XSP4JUh3j-DLYCVshIFxEXwobEyN4H1uRfCpnSN5ElzuEslvw8nPIvkFaL84kjtCcvsoPgeyO0XxjWAZn0udJ-ZSD6g4mktV8Ph4LtVD56pc6gNF_8mlcvi8o5lCwDPeTP2he4qZen2y3Ex-8HCTmRYWmGnPCTMVQfpJMy2AoDNmMoL9WzN1hax3ZloF-5rNdBi-nZpHG6DfjDz6dU8e3YPMY3m0GAZczSN_iGnLozh4MC2fnoNudz51Ae89-TQISgvz6RBUN-bTpswC2gXmnAI6BC11BaTUF1DaqwKaC1wppC4QP6eQEqHKo4hugk96ERWtKiIr3IoqpraxxdR-XDGt2VRMV44UUw0cO1VM58Eht4RcYIq1hBLg3H9LqBpyepaSy-hS6gvXVpRSDYjyUnKACdv20XQIrt1HJnD5cx95QN7HfVQGx3tY6BzsHWShMrgaZaHfwT3GQt7AYi3UATqmWMgJfJZZKAC8t1poEGwst1A-LMreT6ugf-V-CvKxkhH6DLTSQNg2zEolcPivVjoB4xZZaRJcKrHSdbA_ZqWuMO-4lZaA5wcrDQFL9AE6Ar2TDtAAsGUcoKLgWrLC7pRaKgSXjFrqCyXra-kgpD6rpYVgcKojr_F1FAAZ0-toIfS6XEe-8O52HbWCdreOvgK3kHrygv_JemoG04l6ioG5Z-tpETSdq6c2GOPTQLHQcWwDOYH3lAYaBP47G2gUNJxtoI-g93lNnjDh20aSYI2yE4cheYKdyIIWaScUzU5cybETNfDwsZ14AZPe24mJLXZCAzdXnfCCv_jphITSdJ04BDHbdCIOUrfrRAbc2KETd-DNLp1ohrbdOuG4RydO39eJC5CbaS9KIKLcXsRC7VF70QhxP9kLr1kOwhc6bHAQenA8g3OFgwiAGn9H8Qg-znIUe544isA3jsIAh8bpxdzZejGjVi9mwfIPevHDJ05OYju88nESTfB8hJNohs3rnUQhrHjhJGbonUVxoLOwQGCisxgPKeA-vLPwhuk3OgtnXYd624_Hhf7sv45aVFe76IzEtDkpYQnz0pJ6-6Qkp2VlZM4bnJyRNP9vKelZ8wbNysxIz0pJT57pP8Q_wG-I_8jBQ_xnfh3wf5AJEL0&build-label=editors.documents-frontend_20241029.02_p4&imp-sid=CIKIgsOey4kDFRKVXQMdbkE5qQ&is-cached-offline=false"
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=vRXR0Dk2y45ghaUg4yIoCOfZnEGR_uZuouwdb3b3zXmn7IBDCYZV83nYO5FBdT9ozAw8ICBWIsGnXXq7qjBYSICv3hhqLWWmSudokrQ9cr0gkOhvzW2aIuf_wifoN490w6g3XOvRIfPadMh0LAMG6nd7HfXkMYGHDum7S0O9S_TK-Ktx; expires=Fri, 09-May-2025 22:10:52 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • flag-gb
      GET
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      Remote address:
      142.250.187.206:443
      Request
      GET /document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic HTTP/1.1
      User-Agent: Mozilla/5.0 (Linux; Android 6.0; Nexus 5 Build/MRA58N) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.121 Mobile Safari/537.36
      Accept: text/html,*/*;q=0.8
      Accept-Encoding: gzip
      Accept-Language: zh-CN,zh;q=0.8,en;q=0.6
      Cache-Control: no-cache
      Host: docs.google.com
      Connection: Keep-Alive
      Response
      HTTP/1.1 403 Forbidden
      Cache-Control: no-cache, no-store, max-age=0, must-revalidate
      Pragma: no-cache
      Expires: Mon, 01 Jan 1990 00:00:00 GMT
      Date: Thu, 07 Nov 2024 22:10:53 GMT
      Content-Type: text/html; charset=utf-8
      Content-Encoding: gzip
      P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
      x-chromium-appcache-fallback-override: disallow-fallback
      Content-Security-Policy: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/docs-tt
      Content-Security-Policy: base-uri 'self';object-src 'none';report-uri https://docs.google.com/document/cspreport;script-src 'report-sample' 'nonce-pByZA2GkhMeLXLE3HbzclQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';worker-src 'self' blob:
      Referrer-Policy: strict-origin-when-cross-origin
      X-Content-Type-Options: nosniff
      X-XSS-Protection: 1; mode=block
      Server: GSE
      Set-Cookie: NID=518=uJmuRDIL1mDjaWDK3HsRufaaYUvbxHLFpLIerecpBjmCjWOD2q1Wt3w6hLymmalJTZAncQvxfbvRrFHVg8yEcFGa5HfmVcXjpMk6JofThUZTeBAvlSYQSbW9dqltG9X2wAhEWhi8IOiZBOibo2eo1-gaacLHzBCCsySr_efMIKrvf9rs; expires=Fri, 09-May-2025 22:10:53 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none
      Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
      x-l2-request-path: l2-managed-5
      Transfer-Encoding: chunked
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.6kB
       20.0kB
       17
      24

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.5kB
       10.7kB
       15
      16

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.6kB
       20.1kB
       17
      23

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.4kB
       10.7kB
       13
      15

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.4kB
       19.9kB
       14
      20

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.4kB
       10.7kB
       13
      13

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 216.58.201.110:443
      tls, https
      858 B
       40 B
       1
      1
    • 142.250.200.46:443
      android.apis.google.com
      tls
      4.7kB
       8.5kB
       14
      22
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.4kB
       19.8kB
       14
      18

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.4kB
       10.8kB
       14
      16

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.5kB
       19.7kB
       15
      20

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.4kB
       10.6kB
       13
      13

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.4kB
       19.9kB
       14
      22

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.5kB
       11.2kB
       15
      17

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 52.97.211.198:587
      smtp-mail.outlook.com
      smtp
      1.5kB
       6.2kB
       15
      16
    • 142.250.187.206:443
      https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic
      tls, http
      1.5kB
       20.1kB
       15
      22

      HTTP Request

      GET https://docs.google.com/document/d/1s0n64k12_r9MglT5m9lr63M5F3e-xRyaMeYP7rdOTrA/mobilebasic

      HTTP Response

      200
    • 142.250.187.206:443
      https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic
      tls, http
      1.2kB
       10.5kB
       10
      12

      HTTP Request

      GET https://docs.google.com/document/d/1IIB6hhf_BB1DaxzC1aNfLEG1K97LsPsN55AT5pFWYKo/mobilebasic

      HTTP Response

      403
    • 1.1.1.1:53
      docs.google.com
      dns
      61 B
       77 B
       1
      1

      DNS Request

      docs.google.com

      DNS Response

      142.250.187.206

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
       109 B
       1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.200.46

    • 1.1.1.1:53
      smtp-mail.outlook.com
      dns
      67 B
       230 B
       1
      1

      DNS Request

      smtp-mail.outlook.com

      DNS Response

      52.97.211.198
      52.97.241.166
      52.97.202.102
      52.97.179.246
      40.99.218.86
      40.99.218.102
      40.99.202.86
      52.97.133.166

    • 1.1.1.1:53
      smtp-mail.outlook.com
      dns
      67 B
       230 B
       1
      1

      DNS Request

      smtp-mail.outlook.com

      DNS Response

      52.97.146.22
      52.97.166.166
      52.98.204.150
      52.97.146.118
      52.98.198.246
      52.98.205.70
      52.97.146.70
      52.98.196.6

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.dkel.dxcd/files/dex
      Filesize

      766KB

      MD5

      7962ea579bddfb2d56deaeb75556d33a

      SHA1

      292c29c70d73caff3148eb993fc389c58b966cde

      SHA256

      ff87cb92852a7d77c93494f73a3876fb3c3570115ffe73c2fcd08ae3ac1e3551

      SHA512

      bad435e79acad4d6c25ea5a580a12dde0e065a85677744c6428bf20ee03a55972d20416ca719f9254be886f20a00c2cd3e4816911e05ebab199e398bc4c6a0f4

      Download Submit

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.