Author: Shashank D
Flag: CTF{2022-03-03-22}
Foxfire is currently chilling out in Mbabane. She did an awesome google search to find out something special. We've got hold of the search url. Now at what time did she search?
Flag format: CTF{yyyy-mm-dd-HH}
Many of the google search url query parameters store various encoded timestamps that are believed to tell page load time, previous page load time etc...
Sites like https://dfir.blog/unfurl/ parse the url & decode the parameters as well. Since FoxFire was in Mbabane, convert the utc time to Africa/Mbabane timezone.