Edit tour

Windows Analysis Report
https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Overview

General Information

Sample URL:	https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Analysis ID:	1346517
Infos:

Detection

Score:	2
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

HTML page contains hidden URLs or javascript code

HTML body with high number of embedded images detected

Creates files inside the system directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3876 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1396 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5836 cmdline: C:\Program Files\Google\Chrome\Application\chrome.exe" "https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4

Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.5:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.54.46.90:443 -> 192.168.2.5:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.12.23.50:443 -> 192.168.2.5:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.5:49819 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_3876_418516894

Jump to behavior

Source: classification engine

Classification label: clean2.win@23/154@58/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe C:\Program Files\Google\Chrome\Application\chrome.exe" "https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2084 --field-trial-handle=2032,i,3473682876261523238,13484657790905124998,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: chromecache_144.2.dr	Binary or memory string: Cbp=function(a,b){_.zbp(a);var c=b.title,d=b.content,e=b.expanded,f=b.Wcc,g=b.KTb,h=b.Nfc,l=b.bLb,m=b.fLb,q=b.HJb,t=b.NZb,w=b.CIb,A=b.DIb,B=b.EIb,I=b.FIb,O=b.aria_label,Q=b.GJb,Z=b.ej,X=b.rJb,ha=b.visibility,Aa=b.dYb,Ba=b.Dec;b="";var Ka=a.oa.ka("gws.common.api.jslayout.services.UniqueIdService");null==Z&&new _.Zo;null==X&&_.RB(80676);Ka.Id();Ka.Id();b+="<g-accordion-expander"+_.V(_.vbp(a,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z,X,ha,Aa,Ba)+"")+_.W(_.wbp(a,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z,X,ha,Aa,Ba)+"")+
Source: chromecache_144.2.dr	Binary or memory string: "<g-accordion-expander"+_.V(_.vbp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)+"")+_.W(_.wbp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)+"")+_.U(_.ubp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)+_.tbp())+">"+_.Abp(a,c,b,!1,!0,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1)+"</g-accordion-expander>";d+=_.ybp(a,c,b,!1,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",e,null,null,!1,!1)?"":f}return d},Z8p=function(a){a.ka(c9p)\|\|(a.Na(c9p,{q8:0,qd:1,
Source: chromecache_144.2.dr	Binary or memory string: 3)})?"<div"+_.V("k5pEne qPvOK ")+_.W("")+_.U("")+">"+_.R(e)+"</div>":"")+(_.T(a,function(g){return g.A5()})?"<div"+_.V("k5pEne qPvOK ")+_.W("")+_.U("")+">"+_.R(f)+"</div>":""):"")},DLp=function(a){a.ka(HLp)\|\|a.Na(HLp,{rsd:0},FLp,GLp)},HLp="t-6uIy7OZ-De4";var ILp=function(){return""},JLp=function(){return""},KLp=function(){return""},LLp=function(){return!0},MLp=function(){return!1},PLp=function(a,b){NLp(a);return OLp(a,b.zVa,b.Zl,b.iCa)},QLp=function(a,b){NLp(a);a=OLp(a,b.zVa,b.Zl,b.iCa);return _.u(a)},OLp=function(a,b,c,d){return(0==c?_.S(d,[],function(e){return _.Ue(e,_.VBp,1)}).reduce(function(e,f,g){if(2>g&&BLp()){var h="<div"+_.V("E4WJib "+zLp())+_.W(ALp()+"")+_.U(yLp()+"")+">"+ELp(f)+"</div>";e+=CLp()?"":h}2==g&&BLp()&&(f="<div"+_.V("yC6fEd "+
Source: chromecache_144.2.dr	Binary or memory string: _.U("")+"></div>";b="<div"+_.V("qaxymf ")+_.W("")+_.U("")+">"+xnq(a,b,!1)+"</div>";m+=b;_.xbp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)&&(b="<g-accordion-expander"+_.V(_.vbp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)+"")+_.W(_.wbp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)+"")+_.U(_.ubp(a,l,h,c,!0,d,!1,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1,!1)+_.tbp())+">"+_.Abp(a,l,h,c,d,!1,!1,"",d,!0,0,-1,0,g,"",e,f,null,!1)+"</g-accordion-expander>",m+=_.ybp(a,l,h,
Source: chromecache_144.2.dr	Binary or memory string: _.R(X)+'" id="'+_.R(O)+'" jsslot="" jsaction="'+_.R("CQwlrf")+'"')+">";_.YB(a,c)&&(b="<div"+_.V(_.WB(a,c)+_.TB(a,c))+_.W(_.XB(a,c)+_.UB(a,c))+_.U(_.VB(a,c)+_.SB(a,c))+">"+_.$B(a,c)+"</div>",A+=_.ZB(a,c)?"":b);return A+=_.MB(a)+"</div>"+_.MB(a)};_.zbp=function(a){a.ka(Dbp)\|\|(a.Na(Dbp,{title:0,content:1,expanded:2,Wcc:3,KTb:4,Nfc:5,bLb:6,fLb:7,HJb:8,NZb:9,CIb:10,DIb:11,EIb:12,FIb:13,aria_label:14,GJb:15,ej:16,rJb:17,visibility:18,dYb:19,Dec:20},Bbp,Cbp,_.xbp,_.ybp,_.tbp(),_.ubp,"",_.vbp,"",_.wbp),_.f7c(a))};
Source: chromecache_144.2.dr	Binary or memory string: _.S(Q,-1,function(Ba){return _.QB(Ba)}):-1,Ll:2,track:[3]}).attributes};_.vbp=function(a,b,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z){a=a.oa.ka("gws.common.api.jslayout.services.UniqueIdService");null==Q&&new _.Zo;null==Z&&_.RB(80676);a.Id();a.Id();return""};_.wbp=function(a,b,c,d,e,f,g,h,l,m,q,t,w,A,B,I,O,Q,Z){a=a.oa.ka("gws.common.api.jslayout.services.UniqueIdService");null==Q&&new _.Zo;null==Z&&_.RB(80676);a.Id();a.Id();return""};
Source: chromecache_144.2.dr	Binary or memory string: FIb:0,aria_label:null,GJb:"",ej:null,rJb:null}))}).attributes+_.V(_.vbp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)+"")+_.W(_.wbp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)+"")+_.U(_.ubp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)+_.tbp())+">"+_.Abp(a,A,m,e,!0,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1)+_.MB(a)+"</g-accordion-expander>",B+=_.ybp(a,A,m,e,!0,!0,!1,!1,!1,"",!0,!0,0,-1,0,null,"",null,null,null,!1,!1)?"":
Source: chromecache_144.2.dr	Binary or memory string: _.RBp=function(a){return _.ch(a,_.uV,6)};_.SBp=function(a){this.Ia=_.n(a)};_.E(_.SBp,_.p);_.SBp.Ab=[1];_.TBp=function(a){return _.eh(a,_.SBp,17,_.WJ)};UBp=function(a){this.Ia=_.n(a)};_.E(UBp,_.p);_.k=UBp.prototype;_.k.getValue=function(){return _.C(this,1)};_.k.setValue=function(a){return _.He(this,1,a)};_.k.clearValue=function(){return _.Of(this,1)};_.k.Eg=function(){return _.Hi(this,1)};_.k.pR=function(){return _.F(this,2)};_.VBp=function(a){this.Ia=_.n(a)};_.E(_.VBp,_.p);_.k=_.VBp.prototype;
Source: chromecache_144.2.dr	Binary or memory string: _.k.getName=function(){return _.C(this,1)};_.k.wg=function(a){return _.He(this,1,a)};_.k.Nh=function(){return _.Ve(this,1)};_.k.getFormattedValue=function(){return _.C(this,2)};_.k.A5=function(){return _.Ve(this,2)};_.k.vt=function(){return _.Ue(this,UBp,4)};_.VBp.Ab=[4];_.WBp=function(a){this.Ia=_.n(a)};_.E(_.WBp,_.p);_.WBp.prototype.getLayout=function(){return _.ri(this,3,0)};_.WBp.Ab=[1];var XBp=function(a){this.Ia=_.n(a)};_.E(XBp,_.p);_.k=XBp.prototype;_.k.Zb=function(){return _.C(this,1)};
Source: chromecache_144.2.dr	Binary or memory string: 3)})?"<span"+_.V("DDBmU ")+_.W("")+_.U("")+"> \u00b7 </span>":"")+"<span"+_.V("")+_.W("")+_.U("")+">"+_.R(f)+"</span></div>"+(_.T(b,function(m){return m.Kd()})?"<div"+_.V("f9cKje zDbu9e ")+_.W("")+_.U("")+">"+_.R(h)+"</div>":"")+_.MB(a)+(_.T(b,function(m){return m.Oc()})?"</a>":"")},wGq=function(a){a.ka(AGq)\|\|(a.Na(AGq,{video:0},yGq,zGq),_.QT(a),_.QCl(a),_.LBl(a),pGq(a),ZFq(a))},AGq="t-QZHmvp1tKJg";var BGq=function(){return""},CGq=function(){return""},DGq=function(){return""},EGq=function(){return!0},FGq=function(){return!1},IGq=function(a){GGq(a);return HGq()},JGq=function(a){GGq(a);return _.u(HGq())},HGq=function(){return"Product attributes"},GGq=function(a){a.ka(KGq)\|\|a.Na(KGq,{},IGq,JGq,EGq,FGq,"",BGq,"",CGq,"",DGq)},KGq="t-FoLSUk2aKPM";var LGq=function(){return""},MGq=function(){return""},NGq=function(){return""},OGq=function(){return!0},PGq=function(){return!1},SGq=function(a,b){QGq(a);return RGq(b.iCa)},TGq=function(a,b){QGq(a);a=RGq(b.iCa);return _.u(a)},RGq=function(a){var b="";var c="<div"+_.V("AEaX3e ")+_.W("")+_.U("")+">"+HGq()+"</div>";return b=b+c+("<div"+_.V("kq3Dm ")+_.W("")+_.U("")+">"+_.S(a,[],function(d){return _.Ue(d,_.VBp,1)}).reduce(function(d,e){var f=_.S(e,"",function(l){return _.C(l,3)}),g=_.S(e,"",function(l){return l.getFormattedValue()}),
Source: chromecache_144.2.dr	Binary or memory string: zLp())+_.W(ALp()+"")+_.U(yLp()+"")+">"+ELp(f)+"</div>",e+=CLp()?"":f);return e},""):"")+(1==c?"<div"+_.V("EEd3Vd UEyKF ")+_.W("")+_.U("")+">"+_.S(d,[],function(e){return _.Ue(e,_.VBp,1)}).reduce(function(e,f,g){var h=0<_.Nw(f,function(t){return t.vt()}),l=_.S(f,"",function(t){return _.C(t,3)}),m=_.S(f,"",function(t){return t.getFormattedValue()}),q=_.S(f,"",function(t){return t.getName()});return e+((0<g?" \u00b7 ":"")+(1==h?_.S(f,[],function(t){return t.vt()}).reduce(function(t,w,A){var B=_.S(w,

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source:	Binary string: _.k.yc=function(){var a;if(null==(a=this.ka)?0:a.wa()){var b;null==(b=this.ka)\|\|b.yc()}this.oa&&kFb(this,!1);(new _.Un(this.element)).removeClass("LvqzR")};var kFb=function(a,b,c){b&&(c=new _.PDb(a.index,a.Vm,void 0===c?1:c,_.fg("suggestion"+a.index+"audioBlock")),_.xe(a.el,_.FCb,c));a.oa=b;var d;(null==(d=a.wa)?void 0:_.Vn(d,".z76Rnb")).toggleClass("LvqzR",b)}; source: chromecache_193.2.dr
Source:	Binary string: _.J(_.BL.prototype,"EBoHac",function(){return this.BVb});_.J(_.BL.prototype,"uYT2Vb",function(){return this.VYd});_.J(_.BL.prototype,"bADxi",function(){return this.Jp});_.J(_.BL.prototype,"iFHZnf",function(){return this.onMouseLeave});_.J(_.BL.prototype,"MJEKMe",function(){return this.onMouseEnter});_.J(_.BL.prototype,"md2ume",function(){return this.skb});_.J(_.BL.prototype,"sN7olc",function(){return this.Fnc});_.J(_.BL.prototype,"h5M12e",function(){return this.Rc});_.J(_.BL.prototype,"jI3wzf",function(){return this.pDb}); source: chromecache_193.2.dr
Source:	Binary string: a.Aa.length&&(b=-1),-1!==b&&_.SHb(a.oa[b])&&(b+=0<b-a.ka?1:-1),a.Ja=b,fDg(a,b),-1===a.ka&&(b=a.getRoot().parent().el())&&_.xe(b,_.FCb,new _.PDb(-1)),-1!==a.ka&&a.Ba[a.ka].ka.wc(c))},fDg=function(a,b){iDg(a,b);-1!==a.ka&&a.Ba[a.ka].ka.yc();jDg(a,a.ka,!1);a.ka=b;-1!==b&&a.wa&&(_.ZAb(a.wa,a.oa[b])?(a.Ua=1,a.Ea=b):(a.Ua=0,a.Xa=b),jDg(a,b,!0))},jDg=function(a,b,c){0>b\|\|b>=a.Aa.length\|\|(new _.Un(a.Aa[b])).toggleClass("sbhl",c)};_.FL.prototype.wza=function(){return this.wa\|\|new _.Tu}; source: chromecache_193.2.dr
Source:	Binary string: _.FL.Fa=function(){return{controller:{LSe:"JUypV"},service:{Le:_.hv,Nc:_.Zv},model:{Uf:_.hDb,events:_.Kzb,qC:_.pDb,logging:_.lCb,Tp:_.dv}}};_.FL.prototype.Sc=function(){}; source: chromecache_193.2.dr
Source:	Binary string: _.pDb=function(a){_.kg.call(this,a.Ka);var b=this;this.ka=this.oa=null;this.Ja=new Map;this.Ba=new Map;this.wa=new Map;this.Aa=new Map;this.La=new Set;this.Le=a.service.Le;a.model.Tp.pS(_.lBb,this);var c=a.model.uB;this.Uf=c.Uf;_.fCb(c,function(){b.Uf=c.Uf;if(_.F(b.Uf,82)){var d=[[null,!0,_.Yh(b.Uf,83)],[1,_.F(b.Uf,84),_.Yh(b.Uf,85)],[2,_.F(b.Uf,86),_.Yh(b.Uf,87)],[3,_.F(b.Uf,88),_.Yh(b.Uf,89)],[4,_.F(b.Uf,90),_.Yh(b.Uf,91)],[5,_.F(b.Uf,92),_.Yh(b.Uf,93)],[7,_.F(b.Uf,110),_.Yh(b.Uf,111)],[8,_.F(b.Uf, source: chromecache_193.2.dr
Source:	Binary string: _.J(_.ev.prototype,"u3bW4e",function(){return this.wm});_.J(_.ev.prototype,"cXpfj",function(){return this.Cpa});_.J(_.ev.prototype,"jTC2vd",function(){return this.MPa});_.J(_.ev.prototype,"bADxi",function(){return this.Jp});_.J(_.ev.prototype,"WBMCG",function(){return this.rk});_.J(_.ev.prototype,"d3sQLd",function(){return this.vFa});_.J(_.ev.prototype,"jI3wzf",function(){return this.pDb});_.J(_.ev.prototype,"dFyQEf",function(){return this.ePa});_.J(_.ev.prototype,"puy29d",function(){return this.ERd}); source: chromecache_193.2.dr
Source:	Binary string: var hdb=function(a){this.Ia=_.n(a)};_.E(hdb,_.p);hdb.prototype.Zb=function(){return _.Me(this,1)};hdb.prototype.Yb=function(a){return _.He(this,1,a)};hdb.prototype.Df=function(){return _.Ve(this,1)};hdb.prototype.getLanguage=function(){return _.Me(this,2)};_.idb=[0,_.G,-2];var jdb=[0,_.Sj,-2];var kdb=function(a){this.Ia=_.n(a)};_.E(kdb,_.p);_.k=kdb.prototype;_.k.getName=function(){return _.r(this,hdb,1)};_.k.wg=function(a){return _.Mb(this,hdb,1,a)};_.k.Nh=function(){return _.ch(this,hdb,1)};_.k.getUrl=function(){return _.C(this,2)};_.k.Oc=function(){return _.Ve(this,2)};_.k.we=function(){return _.Hi(this,2)};_.k.Ir=function(){return _.C(this,3)};_.k.vN=function(){return _.ri(this,4,0)};_.k.hca=function(){return _.Hi(this,6)};var ldb=[0,_.xr,_.G,-1,_.tk,_.bk,_.G,jdb,_.G];_.mdb=function(a){this.Ia=_.n(a)};_.E(_.mdb,_.p);_.mdb.prototype.Dl=function(a,b){return _.ih(this,5,kdb,a,b)};_.mdb.Ab=[1,2,3,4,5];_.ndb=[0,_.mk,ldb,-4];_.odb=[0,_.Sj,_.pk,-3,1,_.pk,_.Dj,_.xr];_.pdb=function(a){this.Ia=_.n(a)};_.E(_.pdb,_.p);_.pdb.prototype.getTitle=function(){return _.r(this,hdb,1)};_.pdb.prototype.setTitle=function(a){return _.Mb(this,hdb,1,a)};_.pdb.prototype.Kd=function(){return _.ch(this,hdb,1)};_.pdb.Ab=[3];_.qdb=[0,_.xr,1,_.mk,_.xr,_.xr,-4];var rdb=[0,2,_.G,_.uk,_.xr,_.Sj];_.sdb=function(a){this.Ia=_.n(a)};_.E(_.sdb,_.p);_.sdb.prototype.zJa=function(){return _.Li(this,3)};_.sdb.Ab=[4];_.tdb=[0,_.tk,-2,_.uk,_.tk,rdb,_.tk,_.odb,-1];_.udb=[0,_.Dj,-2];_.vdb=[0,2,_.Bj,-1,_.tk];_.wdb=[0,_.Dj,-2];_.xdb=[0,_.vdb,_.udb,_.wdb,[0,_.fdb,_.Dj,_.xr,-1],_.G];_.ydb=[0,_.edb,_.wr,[0,_.G],_.fdb,2,_.idb];_.zdb=[0,_.G,_.tk];_.Adb=[0,_.G,_.gdb,_.G,_.Dj];_.Bdb=[0,_.Dj,-3,[0,_.tk],_.tk]; source: chromecache_199.2.dr
Source:	Binary string: _.GL.Fa=function(){return{preload:{UH:_.rzg,Nj:_.BL,Mx:_.FL},service:{Cyb:_.nDg,Le:_.hv},controller:{Nj:"gLFyf",Mx:"UUbT9"},controllers:{UH:"RP0xob"},model:{Tp:_.dv,qC:_.pDb,logging:_.lCb,p7:_.IDb,events:_.Kzb,Uf:_.hDb},Ee:{Etc:"R5mgy",g8f:"F7uqIe",hNf:"RoMYmb"}}};_.ZDg=function(){};_.GL.prototype.Sa=function(){var a=this;_.F(this.Uf,54)&&_.sf(this,{model:{wwb:_.FWa}}).then(function(b){a.wwb=b.model.wwb;a.wwb.register(a)})}; source: chromecache_193.2.dr
Source:	Binary string: _.$6b=function(a){this.Ka=_.t(a)};_.D(_.$6b,_.u);_.$6b.prototype.getValue=function(){return _.F(this,2)};_.$6b.prototype.setValue=function(a){return _.Hg(this,2,a)};_.pDb=function(a){this.Ka=_.t(a)};_.D(_.pDb,_.u);_.pDb.ob=[1]; source: chromecache_161.2.dr
Source:	Binary string: GNc:a[2661],uqa:a[2662],FGb:a[2663],MGb:a[2664],cOc:a[2665],rOc:a[2666],C6:a[2667],wHa:a[2668],BDd:a[2669],CDd:a[2670],ZOc:a[2671],LDd:a[2672],oPc:a[2673],pPc:a[2674],qPc:a[2675],eHb:a[2676],fHb:a[2677],EPc:a[2678],vC:function(){return new _.Gzb(a[2679])},fQc:a[2680],gQc:a[2681],hQc:a[2682],sHb:function(){return new _.pDb(a[2683])},jw:a[2684],En:function(){return new _.qDb(a[2685])},KQc:a[2686],lEd:a[2687],Lx:function(){return new _.rDb(a[2688])},HHb:a[2689],qEd:function(){return new _.axa(a[2690])}, source: chromecache_233.2.dr
Source:	Binary string: _.rzg=function(a){_.D.call(this,a.Ka);var b=this;this.MIb=_.to(this,"pkjasb");this.separator=_.to(this,"s1VaRe");this.ka=_.kzg.delegate(function(c){return new c(b)});this.PP=null;this.qC=a.model.qC;a=a.model.Uf;_.iDb(a);this.Uf=a.ka;this.ka?this.ka.LRb():this.LRb();_.Bv.W0(this)};_.E(_.rzg,_.D);_.rzg.Fa=function(){return{model:{qC:_.pDb,Uf:_.hDb}}};_.k=_.rzg.prototype;_.k.So=function(a){this.PP=a.get(_.mBb)}; source: chromecache_193.2.dr
Source:	Binary string: _.k.zSa=function(){return this.oa?(YHb(this),!0):!this.ka.Ja()\|\|this.ka.wa()?(XHb(this),!1):this.ka.zSa()};_.k.next=function(){return this.ka.next()};_.k.previous=function(){return this.ka.previous()};_.k.wc=function(a){38===a?XHb(this):this.ka.wc(a)};_.k.yc=function(){YHb(this);this.ka.yc()};var XHb=function(a,b){b=void 0===b?1:b;a.oa=!0;a.button.addClass("sOmPcf");b=new _.PDb(a.index,a.Vm,b,_.fg("suggestion"+a.index+"seeMoreBtn"));_.xe(a.el,_.FCb,b)},YHb=function(a){a.oa=!1;a.button.removeClass("sOmPcf")}; source: chromecache_193.2.dr
Source:	Binary string: var JLb=function(a,b){return 0===a.button&&!b.mouseButtons.PDb\|\|2===a.button&&!b.mouseButtons.oKc\|\|1===a.button&&!b.mouseButtons.Xob\|\|3===a.button&&!b.mouseButtons.back\|\|4===a.button&&!b.mouseButtons.forward\|\|a.altKey&&!b.Hna.alt\|\|a.ctrlKey&&!b.Hna.ctrl\|\|a.metaKey&&!b.Hna.q_a\|\|a.shiftKey&&!b.Hna.shift?!1:!0};_.Jh(_.ERa);_.ax=function(a){_.Uh.call(this,a.Oa);this.Ia=a.service.qUc;this.isSupported=!!document.addEventListener;this.Ha=[];this.listen();this.getWindow().ly11Pc=!0};_.D(_.ax,_.Uh);_.ax.Ja=function(){return{service:{qUc:_.TKb}}};_.ax.prototype.listen=function(){var a=this;if(this.isSupported){var b=this.getWindow().document.documentElement;_.Ww(this).listen(b,["click","auxclick"],this.hb.bind(this));(0,_.xh.listen)(this.getWindow().document.body,_.PKb,function(c){var d=a.Ia.Ak();d&&d.o2b(c.data)})}}; source: chromecache_205.2.dr
Source:	Binary string: 114),_.Yh(b.Uf,115)],[9,_.F(b.Uf,102),_.Yh(b.Uf,103)],[10,_.F(b.Uf,104),_.Yh(b.Uf,105)],[11,_.F(b.Uf,106),_.Yh(b.Uf,107)],[13,_.F(b.Uf,94),_.Yh(b.Uf,95)]];d=_.Ra(d);for(var e=d.next();!e.done;e=d.next()){var f=_.Ra(e.value);e=f.next().value;var g=f.next().value;f=f.next().value;if(g&&3===f.length){var h=_.Ra(f);g=h.next().value;f=h.next().value;h=h.next().value;b.Ja.set(e,g);b.Ba.set(e,f);b.wa.set(e,h)}}_.oDb(b)}})};_.E(_.pDb,_.kg);_.pDb.Fa=function(){return{service:{Le:_.hv},model:{Tp:_.dv,uB:_.eCb}}}; source: chromecache_193.2.dr
Source:	Binary string: _.k.previous=function(){return this.Aa?this.Ea?(SDb(this),_.xe(this.el,_.FCb,new _.PDb(this.index,this.Vm)),!1):!0:!0};var SDb=function(a){a.Ea=!1;var b;null==(b=a.Aa)\|\|b.classList.remove("LvqzR")};_.jv.prototype.up=function(){return!0};_.jv.prototype.zSa=function(){return!0};_.jv.prototype.fPa=function(){_.xe(this.el,_.FCb,new _.PDb(this.index,this.Vm,0))};_.jv.prototype.Rc=function(a){this.Ea&&13===a.event.keyCode?(RDb(this),_.xe(this.el,_.FCb,new _.PDb(-1))):_.NDb.prototype.Rc.call(this,a)}; source: chromecache_193.2.dr
Source:	Binary string: _.Zw(_.Pdb,pWc);var qWc=function(a){this.Ka=_.t(a)};_.D(qWc,_.u);var rWc=_.Cd(35,qWc);_.i9a[35]=[0,_.I,_.k9a];if(nWc.has("20"))throw Error("Ue`20");nWc.set("20",function(a){if(a=a.get("docid")){var b=new qWc;a=_.Hg(b,1,a);b=new _.kt;b=_.qEb(b,1,_.Sca,[1,2]);a=_.Pg(b,rWc,a);a=_.ZVc(_.ot(20),a);return _.Pt(_.Rt(new _.Ot,_.Gw(null,!0,2)),a)}}); source: chromecache_229.2.dr
Source:	Binary string: vdb=["jscontroller","jsmodel","jsowner"];sdb=vdb.map(function(a){return"["+a+"]"}).join(",")+(',[jsaction="'+_.xh.util.ixa+'."]');tdb=vdb.map(function(a){return"[jsname=coFSxe] ["+a+"]"}).join(",")+(',[jsname=coFSxe] [jsaction="'+_.xh.util.ixa+'."]');_.ldb=!0;_.Ddb=_.Vd("Vnmyoe","zOsCQe",void 0,void 0,"koUAcc");Pd("Kg1rBc","dc9Qtf");_.Edb=_.Mb("Kg1rBc",[_.Ddb]);_.Fdb=_.Vd("SHQT0","KcokUb",void 0,void 0,"vrLUF");Pd("NoECLb","abO1zb");_.Gdb=_.Mb("NoECLb",[_.Fdb]);_.Hdb=_.Vd("BngmTd","WCEKNd",void 0,void 0,"kKlbgd");Pd("nQze3d","P4fQWd");_.Idb=_.Mb("nQze3d",[_.Hdb]);_.Jdb=_.Mb("fkGYQb",[_.Hdb]);_.Kdb=_.Mb("SRsBqc",[_.Pj,_.Jdb,_.Bs]);_.Ldb=_.Mb("X8lTKe",[_.po,_.Dq,_.A5a,_.Tq,_.Qq,_.Bs,_.Pj]);var Mdb=_.Eq("fM7wyf",[_.Ldb,_.A5a,_.abb,_.sab,_.Kdb,_.Gcb,_.Bs]);_.Ndb=_.Mb("ClUoee",[_.qo,_.ro,Mdb]);Pd("oSegn","AZiwVe");_.Odb=_.Mb("oSegn",[_.Pj,_.qo,_.Dq,_.Tq,_.xab]);_.Pdb=_.Mb("iaRXBb",[_.Odb,_.abb,_.xab,_.Gcb,_.Bs]);_.Qdb=_.Mb("RAw16",[_.Gq]);_.Rdb=_.Mb("gJjRYc",[_.Gq]);_.Sdb=_.Mb("HSVCpe",[_.zs,_.h5a,_.W$a,_.Ef,_.go,_.Bs,_.Ts,_.f$a]);_.Tdb=_.Mb("Gi5Toe",[_.po,_.Ldb]);_.Udb=_.Mb("gpa7Te",[_.Tq,_.Ldb,_.Tdb]);var Vdb=_.Eq("PeYuVe",[_.Pj,_.Hcb,_.Ts,_.Dq,_.iab,_.A5a,_.no,_.oab,_.Tq,_.Udb,_.Gcb,_.Bs]);Pd("J29Kkd","bsStqd");_.Wdb=_.Mb("J29Kkd",[_.L$a,_.Ef,_.go,_.d5a,_.Vs,_.Ms,_.cbb,_.Pq,_.W$a,_.abb,_.oo,_.sab,Vdb]);_.Xdb=_.Mb("bypWo",[]);_.Ydb=function(a){this.oa=a};_.Ydb.prototype.dispatch=function(a,b,c,d,e,f){this.oa.dispatch({eventType:a,event:b,targetElement:c,action:d,actionElement:e,timeStamp:f})};var Ela,Dla;Eh("ONHNnf",{gjc:"gyo8od",Yxc:"CKvWib"});Eh("lIqdwc",{dispatch:"iONzxf"});Eh("xlXPXe",{getId:"pTuYge",xlc:"ruaFce",getUrl:"tTTJvc",getUserData:"tGu5yc"});Eh("XkpXDc",{Fi:"WZr6gf",pop:"gFWrEf",getState:"XiN8De",Lf:"a5waKe",Oi:"OS1QUb"});Eh("XisVq",{Dvd:"RkV9gc",q8b:"uBPX3d",X1a:"OHqFfb",zmc:"vn8ild",bic:"t9c2C",qrb:"qKiQLc"}); source: chromecache_233.2.dr
Source:	Binary string: _.k.MOb=function(a){return _.Zu(a)?1:0};_.k.wc=function(){this.el.scrollIntoView(!1);_.xe(this.el,_.FCb,new _.PDb(this.index,this.Vm))};_.k.yc=function(){SDb(this)};_.k.next=function(){if(!this.Aa)return!0;if(this.Ea)return SDb(this),!0;this.Ea=!0;var a;null==(a=this.Aa)\|\|a.classList.add("LvqzR");a=new _.PDb(this.index,this.Vm,1,_.fg("suggestion"+this.index+"actionBtn"));_.xe(this.el,_.FCb,a);return!1}; source: chromecache_193.2.dr
Source:	Binary string: _.PDb=function(a,b,c,d,e){this.index=a;this.Vm=b;this.ka=void 0===c?1:c;this.oa=void 0===d?"":d;this.wa=void 0===e?"":e};_.PDb.prototype.getIndex=function(){return this.index};_.PDb.prototype.Aa=function(){return this.oa?this.oa:-1!==this.index?_.aBb(this.index):""}; source: chromecache_193.2.dr
Source:	Binary string: _.pDb.prototype.I5e=function(){var a=this.ka;return null===a?"":a.toString()}; source: chromecache_193.2.dr
Source:	Binary string: _.k.yc=function(){var a;null==(a=this.ka[this.oa])\|\|a.view.classList.remove("LvqzR");_.jv.prototype.yc.call(this)};_.k.fPa=function(a){this.wa()\|\|_.jv.prototype.fPa.call(this,a)};var eFb=function(a,b,c,d){d=void 0===d?1:d;b.view.classList.add("LvqzR");b=new _.PDb(a.index,a.Vm,d,_.fg("suggestion"+a.index+"chip"+c),1===d?b.Cmb.getQuery():"");_.xe(a.el,_.FCb,b)};var gFb;_.Ev=function(){_.yv.call(this);this.ka=_.Pk(function(){return document.getElementById("bgeLZd")})};_.E(_.Ev,_.zv);_.Ev.prototype.render=function(a,b,c){var d=this;_.zv.prototype.render.call(this,a,b,c);a=_.fFb(this,a,b,this.v6a(b),this.logging,c);return new _.iv(a,a,function(){d.clear()})}; source: chromecache_193.2.dr
Source:	Binary string: _.oDb=function(a){a.oa=null;var b=new URLSearchParams(a.Le.location.search);if(_.F(a.Uf,109)&&b.has("tbm")){var c=b.get("tbm")\|\|"";c=nDb.get(c);void 0!==c&&(a.oa=qDb(a,c))}b.has("udm")&&(b=Number(b.get("udm")),b in mDb&&(a.oa=qDb(a,b)));_.rDb(a,a.oa)};_.rDb=function(a,b){a.ka=b;a=_.Ra(a.La);for(b=a.next();!b.done;b=a.next())b.value.BVb()};_.pDb.prototype.Sa=function(){return _.F(this.Uf,82)?this.Ja.get(this.ka)\|\|(0,_.Ub.Oe)(this.Ja.get(null)):""}; source: chromecache_193.2.dr
Source:	Binary string: _.k.pDb=function(){this.trigger(_.sCb)};_.k.vFa=function(a,b,c){a=void 0===a?!0:a;b=void 0===b?!0:b;c=void 0===c?!1:c;this.Qa.jxb();if(this.Ct!==this.rk()\|\|c)this.wa.Mja(1),a&&this.wa.V0b(),b&&(this.Ct=this.rk()),this.trigger(_.qCb)};_.k.rk=function(){return this.Jp().value};_.k.Jp=function(){return this.getRoot().find("[name=q]").el()};_.k.MPa=function(){return this.Jp().selectionEnd};_.k.Cpa=function(){return this.Ct};_.k.wm=function(){return this.Jp()===this.Ta.activeElement};_.k.focus=function(){this.Jp().focus()}; source: chromecache_193.2.dr
Source:	Binary string: _.FL.prototype.Sa=function(){var a=this;if(-1!==this.ka){var b;null==(b=this.Ba[this.ka].ka)\|\|b.yc();this.Ta.get(this.ka)&&((0,_.yn)(this.Ta.get(this.ka)),this.Ta.delete(this.ka));(0,_.xn)(function(){var c=a.wza();c.Tm().length&&-1===a.ka&&!kDg(a.oa,c.Tm())&&(a.oa=c.Tm(),cDg(a,a.Eb,c,a.oa))},300,this)}jDg(this,this.ka,!1);this.ka=-1;(b=this.getRoot().parent().el())&&_.lo(b,_.FCb,new _.PDb(-1,void 0,2))}; source: chromecache_193.2.dr
Source:	Binary string: c.next();!d.done;d=c.next()){d=d.value;var e=Azg.get(d);if(e=_.Vn(b.getRoot(),"."+e).Cd()){e=e.cloneNode(!0);(0,_.Ub.assert)(e,_.$la("span"));var f=b.qC;f.Aa.has(d);f.Aa.set(d,e)}}b.qC.La.add(b);Bzg(b)})};_.E(_.BL,_.ev);_.BL.Fa=function(){return{preload:{aVg:_.uzg},controllers:{cLa:"aJyGR"},model:{qC:_.pDb,Uf:_.hDb}}};_.k=_.BL.prototype; source: chromecache_193.2.dr
Source:	Binary string: _.pDb.prototype.Qa=function(){return _.F(this.Uf,82)?this.wa.get(this.ka)\|\|(0,_.Ub.Oe)(this.wa.get(null)):""};_.sDb=function(a){var b=null;null!==a.ka&&(a=a.Aa.get(a.ka),void 0!==a&&(b=a.cloneNode(!0)));return b};_.Oq(_.kDb,_.pDb); source: chromecache_193.2.dr
Source:	Binary string: _.k.IMa=function(){var a=this.Jp();a.style.height="0";var b=Math.min(Math.floor(a.scrollHeight/this.lineHeight),this.maxLines);a.rows!==b&&(a.rows=b,this.trigger(_.KCb,1<b));a.style.height="";this.Aa&&this.trigger(_.MCb,a.getBoundingClientRect().height)};_.k.ePa=function(){};_.k.pDb=function(a){_.Mk(window,"attn_resume",null);this.Jp().scrollTop=0;_.ev.prototype.pDb.call(this,a)};_.k.Rc=function(a){this.Jp()&&_.Lu(this.Jp());_.Mk(window,"attn_pause",null);_.ev.prototype.ePa.call(this,a)}; source: chromecache_193.2.dr

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	1 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://www.google.com"	0%	Avira URL Cloud	safe
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502	0%	Avira URL Cloud	safe
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502&ved=2ahUKEw	0%	Avira URL Cloud	safe
https://www.goodmorningamerica.com	0%	Avira URL Cloud	safe
https://report-doc.org/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808	0%	Avira URL Cloud	safe
https://report-doc.org/cdn-cgi/styles/challenges.css	0%	Avira URL Cloud	safe
https://report-doc.org/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
accounts.google.com	172.253.122.84	true	false	high
plus.l.google.com	172.253.115.102	true	false	high
i.ytimg.com	142.250.31.119	true	false	high
adservice.google.com	142.251.167.156	true	false	high
static.doubleclick.net	142.251.163.149	true	false	high
report-doc.org	172.67.173.18	true	false	unknown
youtube-ui.l.google.com	172.253.63.136	true	false	high
www3.l.google.com	172.253.63.101	true	false	high
play.google.com	142.250.31.101	true	false	high
googleads.g.doubleclick.net	172.253.62.157	true	false	high
challenges.cloudflare.com	104.17.2.184	true	false	high
id.google.com	142.250.219.195	true	false	high
www.google.com	172.253.115.106	true	false	high
clients.l.google.com	142.251.163.101	true	false	high
ogs.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
apis.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.google.com/images/shopping/deals/mens_apparel.png	false		high
https://www.youtube.com/s/player/63e90c30/www-embed-player.vflset/www-embed-player.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false		high
https://www.google.com/gen_204?atyp=csi&ei=1CpeZcWlGoegiLMP6sm8yA0&s=async&astyp=vpkg&ima=0&imn=0&mem=ujhs.9,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.014b0ae0-94e1-4a32-a6a5-e74fe35dadc3&hp=&rt=ttfb.689,st.1047,bs.83352,aaft.1050,acrt.1050,art.1050&zx=1700670164425&opi=89978449	false		high
https://i.ytimg.com/vi/WyL-v--M_BI/mqdefault.jpg?sqp=-oaymwEFCJQBEFM&rs=AMzJL3kxxj4wLr4MUw1312xJqtgxGYib6A	false		high
https://report-doc.org/cdn-cgi/styles/challenges.css	false	Avira URL Cloud: safe	unknown
https://www.google.com/xjs/_/js/md=1/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw	false		high
https://www.google.com/complete/search?q&cp=0&client=gws-wiz&xssi=t&gs_pcrt=2&hl=en&authuser=0&psi=rCpeZdXlGruf5NoPj9ax6A4.1700670128242&dpr=1&nolsbt=1	false		high
https://www.google.com/xjs/_/js/md=1/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A	false		high
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false		high
https://www.google.com/gen_204?atyp=i&ei=xSpeZdzvEPyy5NoPhfSymAc&dt19=2&zx=1700670161851&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ct=&cad=udla=1&ei=xSpeZdzvEPyy5NoPhfSymAc&act=p&ps=1&zx=1700670161935&opi=89978449	false		high
https://www.youtube.com/s/player/63e90c30/player_ias.vflset/en_US/remote.js	false		high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://www.google.com/images/shopping/deals/pet_supplies.png	false		high
https://www.google.com/gen_204?atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&s=web&t=all&wh=907&frtp=594&imn=104&ima=26&imad=17&imac=0&imf=0&aft=1&aftp=907&adh=tv.6&ime=8&imex=11&imeh=13&imea=0&imeb=32&imel=0&imed=0&scp=0&fld=1431&mem=ujhs.9,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.080e36ac-210a-4412-a61d-63cb8f2dea90&net=dl.1350,ect.3g,rtt.400&hp=&p=bs.false&sys=hc.4&rt=hst.196,cbs.196,cbt.426,sct.579,aft.2391,afti.2391,frvt.2391,frts.794,afts.862,prt.1327,xjsls.1536,dcl.1543,aftqf.2393,xjses.5814,xjsee.5853,xjs.5853,lcp.942,fcp.399,wsrt.1575,cst.321,dnst.0,rdxt.876,rqst.1875,rspt.1509,sslt.320,rqstt.1209,unt.879,cstt.887,dit.3118&zx=1700670154732&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=promo&rt=hpbas.6345&zx=1700670130425&opi=89978449	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM	false		high
https://report-doc.org/favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.google.com/favicon.ico	false		high
https://www.google.com/gen_204?atyp=i&ei=rCpeZdXlGruf5NoPj9ax6A4&ct=slh&v=t1&im=M&m=HV&pv=0.4371916384417085&me=1:1700670124640,V,0,0,1280,907:0,B,907:0,N,1,rCpeZdXlGruf5NoPj9ax6A4:0,R,1,1,0,0,1280,907:5794,x:16915,e,B&zx=1700670147350&opi=89978449	false		high
https://www.youtube.com/s/player/63e90c30/www-player.css	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=1/ed=1/dg=2/br=1/rs=ACT90oFaYErXXA3hRaO-qDqG-y2SopXzQg/ee=cEt90b:ws9Tlc;qddgKe:x4FYXe,d7YSfd;yxTchf:KUM7Z;dtl0hd:lLQWFe;eHDfl:ofjVkb;qaS3gd:yiLg6e;nAFL3:NTMZac,s39S4;oGtAuc:sOXFj;iFQyKf:vfuNJf,QIhFr;SNUn3:ZwDk9d,x8cHvb;io8t5d:sgY6Zb;Oj465e:KG2eXe,KG2eXe;Erl4fe:FloWmf,FloWmf;JsbNhc:Xd8iUd;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;uY49fb:COQbmf;Pjplud:PoEs9b,EEDORb;QGR0gd:Mlhmy;a56pNe:JEfCwb;Me32dd:MEeYgc;wR5FRb:TtcOte,O1Gjze;pXdRYb:JKoKVe;dIoSBb:ZgGg9b;EmZ2Bf:zr1jrb;NSEoX:lazG7b;eBAeSb:Ck63tb;WCEKNd:I46Hvd;wV5Pjc:L8KGxe;EVNhjf:pw70Gc;sTsDMc:kHVSUb;wQlYve:aLUfP;zOsCQe:Ko78Df;KcokUb:KiuZBf;YV5bee:IvPZ6d;kbAm9d:MkHyGd;ZWEUA:afR4Cf;g8nkx:U4MzKc;qZx2Fc:j0xrE;lzgfYb:PI40bd;w9w86d:dt4g2b;GleZL:J1A7Od;bcPXSc:gSZLJb;JXS8fb:Qj0suc;IoGlCf:b5lhvb;VN6jIc:ddQyuf;vfVwPd:lcrkwe;xBbsrc:NEW1Qc;pNsl2d:j9Yuyc;VGRfx:VFqbr;BjwMce:cXX2Wb;ESrPQc:mNTJvc;R9Ulx:CR7Ufe;kY7VAf:d91TEb;NPKaK:SdcwHb;LBgRLc:XVMNvd,SdcwHb;UyG7Kb:wQd0G;LsNahb:ucGLNb;KpRAue:Tia57b;jY0zg:Q6tNgc;coJ8e:KvoW8;oSUNyd:fTfGO,fTfGO,pnvXVc;SMDL4c:fTfGO,pnvXVc;aZ61od:arTwJ;w4rSdf:XKiZ9;h3MYod:cEt90b;eO3lse:nFClrf;zaIgPb:Qtpxbd;HMDDWe:G8QUdb;ShpF6e:N0pvGc;k2Qxcb:XY51pe;IBADCc:RYquRb;pKJiXd:VCenhc;rQSrae:C6D5Fc;kCQyJ:ueyPK;EABSZ:MXZt9d;qavrXe:zQzcXe,mYbt1d;TxfV6d:YORN0b;UDrY1c:eps46d;F9mqte:UoRcbe;Nyt6ic:jn2sGd;w3bZCb:ZPGaIb;G0KhTb:LIaoZ;XUezZ:sa7lqb;aAJE9c:WHW6Ef;V2HTTe:RolTY;Wfmdue:g3MJlb;imqimf:jKGL2e;BgS6mb:fidj5d;gtVSi:ekUOYd;KQzWid:ZMKkN;UVmjEd:EesRsb;z97YGf:oug9te;AfeaP:TkrAjf;eBZ5Nd:audvde;CxXAWb:YyRLvc;OgagBe:cNTe0;SLtqO:Kh1xYe;tosKvd:ZCqP3;VOcgDe:YquhTb;uuQkY:u2V3ud;WDGyFe:jcVOxd;trZL0b:qY8PFe;VxQ32b:k0XsBb;DULqB:RKfG5c;Np8Qkd:Dpx6qc;cFTWae:gT8qnd;gaub4:TN6bMe;DpcR3d:zL72xf;hjRo6e:F62sG;yGxLoc:FmAr0c;pj82le:mg5CW;dLlj2:Qqt3Gf;qGV2uc:HHi04c;oUlnpc:RagDlc;R2kc8b:ALJqWb;Q1Ow7b:x5CSu;bFZ6gf:RsDQqe;okUaUd:wItadb;xbe2wc:uRMPBc;KOxcK:bFOvTc;G6wU6e:hezEbd;uknmt:GkPrzb;U96pRd:FsR04;PqHfGe:im2cZe;heHB1:sFczq;Fmv9Nc:O1Tzwc;hK67qb:QWEO5b;BMxAGc:E5bFse;R4IIIb:QWfeKf;whEZac:F4AmNb;tH4IIe:Ymry6;lkq0A:JyBE3e;daB6be:lMxGPd;LEikZe:byfTOb,lsjVmc/m=attn,cdos,gwc,hsm,jsa,mb4ZUb,d,csi,cEt90b,SNUn3,qddgKe,sTsDMc,dtl0hd,eHDfl	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955	false		high
https://www.google.com/client_204?atyp=i&biw=1280&bih=907&dpr=1&ei=rCpeZdXlGruf5NoPj9ax6A4&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=sypeZYSFM6ye5NoPrKyzoAs&s=async&astyp=hpba&ima=0&imn=0&mem=ujhs.8,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.738e3fad-c883-4f4e-b7d5-6e9e194e7087&hp=&rt=ttfb.1549,st.1550,bs.27,aaft.1556,acrt.1556,art.1557&zx=1700670131986&opi=89978449	false		high
https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA&source=hpp&id=19039542&ct=7&usg=AOvVaw2tqojU1GkQ0_4pk5RspTmS	false		high
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=xSpeZdzvEPyy5NoPhfSymAc&zx=1700670175855&opi=89978449	false		high
https://www.google.com/gen_204?atyp=i&ei=rCpeZdXlGruf5NoPj9ax6A4&dt19=2&zx=1700670130422&opi=89978449	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D	false		high
https://www.google.com/xjs/_/js/k=xjs.hd.en.j7vH50XSWl8.O/ck=xjs.hd.3mhtCf28lXo.L.W.O/am=BAAAAAAAAAAAAAAAAAAAAAQAAAAAEPUTDgFsgACBABBggAAgAICAFKQQBAMAEPBQJgAAACZAYAhYCogKvOcBAJBAFQAAAAAAEAwiAAAACAAAoAMAACCgEdAAhIBKQAAAAADyACA4ABhEEAAAAAAAAAAAAAABTBAMLkgAFAQQAAAAAAAAAAAAAKSkycVAAg/d=0/dg=2/br=1/ujg=1/rs=ACT90oEQOKoPcm_mXy_VnoCFj9ts7y2bDw/m=sy7c,syre,syrg,syrh,WlNQGd,syxa,syxc,nabPbb,symw,symx,symy,symz,syn0,syn2,DPreE,syl0,syrd,syrf,CnSW2d,syxb,fXO0xe?xjs=s3	false		high
https://www.google.com/gen_204?atyp=i&ct=&cad=udla=3&ei=xSpeZdzvEPyy5NoPhfSymAc&pd=25&e=1&zx=1700670161934&opi=89978449	false		high
https://www.google.com/gen_204?s=web&t=aft&atyp=csi&ei=xSpeZdzvEPyy5NoPhfSymAc&rt=wsrt.1575,aft.2391,afti.2391,afts.862,cbs.196,cbt.426,frts.794,frvt.2391,hst.196,prt.1327,sct.579&wh=907&frtp=594&imn=104&ima=26&imad=17&imac=0&imf=0&aft=1&aftp=907&opi=89978449	false		high
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://www.google.com/async/bgasy?ei=xSpeZdzvEPyy5NoPhfSymAc&opi=89978449&yv=3&cs=0&async=_fmt:jspb	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sywz,CnSW2d,sy12i,sy12j,sy12k,sy12l,sy12n,sy12o,sy34r,sy632,VD4Qme,sy1hj,sy1hl,sy1hm,sy1hn,NVlnE,sy1hk,Dq2Yjb,sy1gz,sy1h0,qmdEUe,sy1ho,sy1hp,UqGwg,sy46w,ND0kmf,pjDTFb,sy3ob,sy648,sy68h,KgxeNb,sy3o7,khkNpe,sy2ks,EfPGub?xjs=s3	false		high
https://play.google.com/log?format=json&hasfast=true&authuser=0	false		high
https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA	false		high
https://www.google.com/client_204?cs=1&opi=89978449	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	false		high
https://play.google.com/log?hasfast=true&authuser=0&format=json	false		high
https://www.google.com/xjs/_/js/k=xjs.s.en_US.r7Ut2Mhd2yU.O/ck=xjs.s.qnyE1sBG7t8.L.W.O/am=ChAAAAIEAAAAAAIAAAABAAgAAAAAIKonHALYAAH4yzwAQAAQBAABKYpCEAwAQIDnPyEEMkAAAEyAwACwFBAVfs8DAEACVQB2AAAAgGE_iAAAACAAAAADgPAhQEMRHUAIqAQEAAAAkAcAzwMYDiIsAAAAAAAAAAAAABDABMHggPRHQQAEAAAAAAAAAAAAAKSkycuBBADA/d=0/dg=2/br=1/ujg=1/rs=ACT90oHcucrQyO9YSqILREv5O8UmPKo96A/m=sy134,sy135,dt4g2b?xjs=s3	false		high
https://report-doc.org/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808	false	Avira URL Cloud: safe	unknown
https://www.google.com/gen_204?atyp=i&ct=psnt&cad=&nt=navigate&ei=rCpeZdXlGruf5NoPj9ax6A4&zx=1700670132568&opi=89978449	false		high
https://www.google.com/gen_204?atyp=csi&ei=rCpeZdXlGruf5NoPj9ax6A4&s=webhp&t=all&wh=907&imn=5&ima=2&imad=0&imac=0&imf=0&aft=1&aftp=907&adh=&ime=2&imex=2&imeh=3&imea=0&imeb=0&imel=0&imed=0&scp=0&mem=ujhs.8,tjhs.12,jhsl.2173,dm.8&nv=ne.1,feid.738e3fad-c883-4f4e-b7d5-6e9e194e7087&net=dl.1400,ect.3g,rtt.400&hp=&p=bs.true&sys=hc.4&rt=hst.162,aft.969,afti.969,prt.561,aftqf.970,xjses.4090,xjsee.4136,xjs.4136,lcp.983,fcp.465,wsrt.618,cst.0,dnst.0,rqst.944,rspt.559,rqstt.233,unt.6,cstt.6,dit.1181&zx=1700670128254&opi=89978449	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://ogs.google.com/	chromecache_128.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAA	chromecache_128.2.dr	false		high
https://www.google.com/shopping/ratings/merchant/immersivedetails?q=coachoutlet.com&c=US&v=1	chromecache_237.2.dr	false		high
https://ogs.google.com/widget/callout?prid=19039542	chromecache_182.2.dr	false		high
https://ogs.google.com/widget/callout	chromecache_128.2.dr	false		high
https://www.self.com	chromecache_237.2.dr	false		high
https://slickdeals.net/computer-deals/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIoAXoECCcQAg	chromecache_237.2.dr	false		high
https://www.youtube.com	chromecache_198.2.dr, chromecache_160.2.dr	false		high
https://www.forever21.com/	chromecache_237.2.dr	false		high
https://admin.youtube.com	chromecache_189.2.dr	false		high
https://slickdeals.net/video-game-deals/	chromecache_237.2.dr	false		high
https://api.whatsapp.com/send	chromecache_161.2.dr	false		high
https://www.usatoday.com/story/money/shopping/2023/11/19/black-friday-holiday-shopping-deals-hours/7	chromecache_237.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_189.2.dr	false	URL Reputation: safe	unknown
https://www.dealnews.com/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQFnoECCIQAQ	chromecache_237.2.dr	false		high
https://yurt.corp.google.com	chromecache_189.2.dr	false		high
https://www.google.com/tools/feedback	chromecache_144.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_189.2.dr	false		high
https://apis.google.com/js/api.js	chromecache_130.2.dr	false		high
https://www.forever21.com/&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIHRAB	chromecache_237.2.dr	false		high
https://plus.google.com	chromecache_266.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_234.2.dr, chromecache_160.2.dr, chromecache_189.2.dr	false		high
https://www.dealnews.com/	chromecache_237.2.dr	false		high
https://support.google.com/websearch/?p=language_search_results	chromecache_158.2.dr	false		high
https://goto.google.com/oshop_gws_buffer_size	chromecache_144.2.dr	false		high
https://support.google.com/websearch/?p=m_ws_serp_gethelp	chromecache_161.2.dr	false		high
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDe	chromecache_182.2.dr, chromecache_128.2.dr	false		high
https://ogs.google.com/widget/app/so?awwd=1	chromecache_182.2.dr	false		high
https://www.coachoutlet.com/shop/deals/view-all&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-bAJegQIHBA	chromecache_237.2.dr	false		high
https://www.google.com/log?format=json&hasfast=true	chromecache_193.2.dr, chromecache_189.2.dr, chromecache_231.2.dr	false		high
https://lens.google.com	chromecache_221.2.dr, chromecache_193.2.dr	false		high
https://support.google.com/youtube/?p=report_playback	chromecache_189.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_160.2.dr	false		high
https://slickdeals.net/forums/forumdisplay.php?f=9	chromecache_237.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_189.2.dr	false		high
https://lens.google.com/gen204	chromecache_144.2.dr, chromecache_137.2.dr	false		high
https://myactivity.google.com/privacyadvisor/search	chromecache_158.2.dr	false		high
https://youtu.be/	chromecache_189.2.dr	false		high
https://slickdeals.net/forums/forumdisplay.php%3Ff%3D9&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ0gIo	chromecache_237.2.dr	false		high
https://apis.google.com	chromecache_252.2.dr, chromecache_257.2.dr, chromecache_182.2.dr, chromecache_266.2.dr	false		high
https://domains.google.com/suggest/flow	chromecache_266.2.dr	false		high
https://www.google.com/intl/en_US/googlefinance/disclaimer/	chromecache_158.2.dr	false		high
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_189.2.dr	false		high
https://www.goodmorningamerica.com/shop/story/black-friday-2023-tech-deals-105072502&ved=2ahUKEw	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/get_video_info	chromecache_189.2.dr	false		high
https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=	chromecache_130.2.dr, chromecache_233.2.dr, chromecache_221.2.dr, chromecache_193.2.dr	false		high
https://www.goodmorningamerica.com	chromecache_237.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com"	chromecache_128.2.dr	false	Avira URL Cloud: safe	low
https://www.youtube.com/watch?v=BGgisoPG7vw	chromecache_237.2.dr	false		high
https://www.google.com/shopping/ratings/merchant/immersivedetails%3Fq%3Dcoachoutlet.com%26c%3DUS%26v	chromecache_237.2.dr	false		high
https://support.google.com/websearch/troubleshooter/9685456#ts=2889054%2C2889099%2C9166584%2C9171202	chromecache_158.2.dr	false		high
http://youtube.com/drm/2012/10/10	chromecache_189.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.253.63.119	unknown	United States	15169	GOOGLEUS	false
142.250.31.101	play.google.com	United States	15169	GOOGLEUS	false
104.21.80.18	unknown	United States	13335	CLOUDFLARENETUS	false
142.251.163.101	clients.l.google.com	United States	15169	GOOGLEUS	false
142.251.16.157	unknown	United States	15169	GOOGLEUS	false
142.251.16.119	unknown	United States	15169	GOOGLEUS	false
172.253.122.84	accounts.google.com	United States	15169	GOOGLEUS	false
142.251.163.149	static.doubleclick.net	United States	15169	GOOGLEUS	false
104.17.3.184	unknown	United States	13335	CLOUDFLARENETUS	false
172.253.63.136	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.253.115.106	www.google.com	United States	15169	GOOGLEUS	false
172.67.173.18	report-doc.org	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.219.195	id.google.com	United States	15169	GOOGLEUS	false
142.251.167.156	adservice.google.com	United States	15169	GOOGLEUS	false
142.251.111.93	unknown	United States	15169	GOOGLEUS	false
172.253.63.91	unknown	United States	15169	GOOGLEUS	false
142.250.31.119	i.ytimg.com	United States	15169	GOOGLEUS	false
142.251.16.105	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
104.17.2.184	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.253.62.157	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1346517
Start date and time:	2023-11-22 17:20:49 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 3m 24s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean2.win@23/154@58/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.google.com/url?q=https://www.google.com/search%3Fq%3Dshop%2Bdeals%26source%3Dsmp.23q4SDealsHPP.22%26stick%3DH4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA&source=hpp&id=19039542&ct=7&usg=AOvVaw2tqojU1GkQ0_4pk5RspTmS

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.167.94, 34.104.35.123, 69.164.0.128, 72.21.81.240, 192.229.211.108, 142.251.111.94, 172.253.122.94, 142.251.16.94, 172.253.63.95, 142.251.16.95, 142.251.111.95, 172.253.62.95, 172.253.115.95, 172.253.122.95, 142.251.179.95, 142.251.167.95, 142.251.163.95, 142.250.31.95, 172.253.63.94, 172.253.122.138, 172.253.122.101, 172.253.122.139, 172.253.122.102, 172.253.122.113, 172.253.122.100, 172.253.115.113, 172.253.115.101, 172.253.115.102, 172.253.115.100, 172.253.115.139, 172.253.115.138, 142.251.163.147, 142.251.163.104, 142.251.163.99, 142.251.163.105, 142.251.163.106, 142.251.163.103, 172.253.63.101, 172.253.63.102, 172.253.63.100, 172.253.63.139, 172.253.63.138, 172.253.63.113, 142.251.167.101, 142.251.167.138, 142.251.167.100, 142.251.167.113, 142.251.167.139, 142.251.167.102, 172.253.63.103, 172.253.63.99, 172.253.63.106, 172.253.63.147, 172.253.63.104, 172.253.63.105, 172.253.62.100, 172.253.62.139, 172.253.62.101, 172.253.62.113, 172.253.62.138, 172.253.62
Excluded domains from analysis (whitelisted): ssl.gstatic.com, fs.microsoft.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, encrypted-tbn0.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, encrypted-tbn3.gstatic.com, encrypted-tbn2.gstatic.com, jnn-pa.googleapis.com, t0.gstatic.com, encrypted-tbn1.gstatic.com, fe3cr.delivery.mp.microsoft.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, www.gstatic.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
VT rate limit hit for: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Nov 22 15:21:39 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9782797550098095
Encrypted:	false
SSDEEP:	48:8SdKjTuWGfHhidAKZdA19ehwiZUklqehiy+3:8Hj/Grpy
MD5:	553225BDD0C51542F94CDAB8712844A1
SHA1:	F026C1D606C976018C27A4CA5E1BDD35BA1DD6BD
SHA-256:	4B928B741C4213F0D25FACF61003395D9727BEB56E05CA158AEFC2A229C0FF4B
SHA-512:	462BE5DEE5B3578082C0606CD663E9FBB4A2D9A3B6879CB45697C1EEC26FDF5F5954EFD95E727C0742C875A09048E65B5F07E015AE9496596D663C1F98D64BFE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....E..._...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IvW......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VvW......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VvW......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VvW............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VvW.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............j......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e..C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Source: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js	HTTP Parser: No favicon
Source: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://www.google.com/	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19039542&pgid=19039541&puid=f8d7e651c1b87f2c&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://ogs.google.com/widget/callout?prid=19039542&pgid=19039541&puid=f8d7e651c1b87f2c&cce=1&dc=1&origin=https%3A%2F%2Fwww.google.com&cn=callout&pid=1&spid=538&hl=en	HTTP Parser: No favicon
Source: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA	HTTP Parser: No favicon
Source: https://www.google.com/search?q=shop+deals&source=smp.23q4SDealsHPP.22&stick=H4sIAAAAAAAA_7t17sBZTiYOBgBZcuXYCAAAAA	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=1	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.54.46.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 20.12.23.50
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26

Source: chromecache_189.2.dr	String found in binary or memory: !1:h;this.To=PJ(QJ(d,pPa),d,h,"Trusted Ad Domain URL");this.hd=mC(!1,a.privembed);this.protocol=0===this.Ef.indexOf("http:")?"http":"https";this.Ka=Mza((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|Mza(this.Ef)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.K?d=nC(d,h,qPa):h&&(d="embedded");this.Va=d;Jsa();h=null;d=b?b.playerStyle:a.ps;f=g.Cb(rPa,d);!d\|\|f&&!this.K\|\|(h=d);this.playerStyle=h;this.Aa=(this.N= equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: (g.oo(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.oo(c,"www.youtube.com"),d=c.toString()):(c=Vza(d),RJ(c)&&(d=c));c=new g.OP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_237.2.dr	String found in binary or memory: </span> TODAY.com</span></span><div class="OwbDmd"><span>1 hour ago</span></div></div></div></div></a></div></div></div></div><div jsname="TFTr6" class="RzdJxc"><div><div jsname="pKB8Bc" class="X4T0U" data-hveid="CB4QAA"><div><div jscontroller="rTuANe" data-ar="1.7778" data-cid="38eb3b02" data-eiv="1" data-esrvl="1" data-preloadapi="1" data-surl="https://www.youtube.com/watch?v=BGgisoPG7vw" data-tpvid="" data-vid="BGgisoPG7vw" data-vurl="" jsaction="h5M12e;rcuQ6b:npT2md;"><div><div jscontroller="yfZcPd" jsshadow="" jsaction="rcuQ6b:npT2md"><div jsname="tX7jT" class="KYaZsb"><a class="xMqpbd NFjGBc" aria-label="How to save big on holiday shopping deals by News 19 WLTX on YouTube. Play on Google. 4 minutes, 44 seconds. 1 day ago" href="#" data-vll="" role="button" tabindex="0" data-ved="2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQ-JQHegQIHhAB"><div class="AZJdrc t7VAxe zGXzeb"><div jsname="zccVWc" class="uhHOwf BYbUcd" style="height:83px;width:148px"><img alt="" id="dimg_49" src="data:image/gif;base64,R0lGODlhAQABAIAAAP///////yH5BAEKAAEALAAAAAABAAEAAAICTAEAOw==" data-deferred="1"></div><div jsname="DwcXhb" class="LIna9b" aria-hidden="true"><div class="VYkpsb" jscontroller="Fy1Pv" data-stfc="1" data-url="https://encrypted-vtbn0.gstatic.com/video?q=tbn:ANd9GcQbbRl65HiK_TDOAnbWfFiovB0ho0hWqcjdIA" id="_xSpeZdzvEPyy5NoPhfSymAc_30" jsaction="rtcVre:NziyQe;hAjFqb:QKiGd;rcuQ6b:npT2md"></div></div><div class="kSFuOd rkqHyd" aria-hidden="true"><div class="Ylm8Fc YmeD8e"><span class="hDVnsf z1asCe" aria-hidden="true" style="height:35px;line-height:35px;width:35px"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm-2 14.5v-9l6 4.5-6 4.5z"></path></svg></span></div><div class="c8rnLc flgn0c zCaigb" aria-label="4 minutes, 44 seconds" role="presentation"><span class="JIv15d">4:44</span></div><div class="Vtx8Xc jrwKTb ovklQ"><span style="height:14px;line-height:14px;width:14px" class="z1asCe"><svg focusable="false" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"><path d="M12 5.83L15.17 9l1.41-1.41L12 3 7.41 7.59 8.83 9 12 5.83zm0 12.34L8.83 15l-1.41 1.41L12 21l4.59-4.59L15.17 15 12 18.17z"></path></svg></span></div></div></div></a><a class="xMqpbd" aria-label="How to save big on holiday shopping deals by News 19 WLTX. Play on YouTube. 4 minutes, 44 seconds. 1 day ago" href="https://www.youtube.com/watch?v=BGgisoPG7vw" data-ved="2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQwqsBegQIHhAG" ping="/url?sa=t&source=web&rct=j&opi=89978449&url=https://www.youtube.com/watch%3Fv%3DBGgisoPG7vw&ved=2ahUKEwic5oKBgtiCAxV8GVkFHQW6DHMQwqsBegQIHhAG"><div class="V5XKdd" aria-level="3" role="heading"><div class="ZxS7Db"><div class="y05Tsc tNxQIb ynAwRc OSrXXb"><span class="cHaqb">How to save big on holiday shopping deals</span></div></div><div class="ZtihLe"><span class="Sg4azc"><cite>YouTube</cite><span><span aria-hidden="true"> equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: H7d=function(a,b){var c=_.Dl("IFRAME");c.setAttribute("allowfullscreen",a?"1":"0");c.setAttribute("allow",a?"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope":"autoplay; clipboard-write; encrypted-media");c.setAttribute("frameborder","0");c.setAttribute("width","100%");c.setAttribute("height","100%");c.setAttribute("referrerpolicy","unsafe-url");c.setAttribute("style",b);try{var d=_.rwa(_.Sk("https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=%{enable_full_screen}"), equals www.youtube.com (Youtube)
Source: chromecache_161.2.dr	String found in binary or memory: _.k.RZ=function(a,b){this.trigger(_.yx,{button:""});_.qq(a,{target:b?"_blank":"_self"});c_d(this,"fwibVc")};_.k.mEc=function(){var a={url:this.url};this.oa&&this.oa.length&&(a.text=this.oa);a=_.d_d("https://www.twitter.com/share",a);this.RZ(a,!0)};_.k.vEc=function(){var a=_.d_d("https://api.whatsapp.com/send",{text:(this.oa&&this.oa.length?this.oa+" ":"")+this.url});this.RZ(a,!0)};_.k.ACc=function(){var a=_.d_d("https://www.facebook.com/sharer/sharer.php",{u:this.url});this.RZ(a,!0)}; equals www.facebook.com (Facebook)
Source: chromecache_161.2.dr	String found in binary or memory: _.k.RZ=function(a,b){this.trigger(_.yx,{button:""});_.qq(a,{target:b?"_blank":"_self"});c_d(this,"fwibVc")};_.k.mEc=function(){var a={url:this.url};this.oa&&this.oa.length&&(a.text=this.oa);a=_.d_d("https://www.twitter.com/share",a);this.RZ(a,!0)};_.k.vEc=function(){var a=_.d_d("https://api.whatsapp.com/send",{text:(this.oa&&this.oa.length?this.oa+" ":"")+this.url});this.RZ(a,!0)};_.k.ACc=function(){var a=_.d_d("https://www.facebook.com/sharer/sharer.php",{u:this.url});this.RZ(a,!0)}; equals www.twitter.com (Twitter)
Source: chromecache_189.2.dr	String found in binary or memory: a))):this.Yd(g.RV(a.errorMessage)):this.Yd(TV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ml(c,{hl:a})),this.Yd(TV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.Fc&&!d.D&&$Va(this,function(e){if(g.EU(e,b.api,!kS(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.Qa("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: a.severity,e,CK(a.details),f)}else this.qa.ra("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.oe(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.rD)(),rU(a,"manifest",function(h){b.G=!0;b.va("pathprobe",h)},function(h){b.oe(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_160.2.dr	String found in binary or memory: function Gr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Oa(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?bc(a.src):"https://www.youtube.com"),this.h=new Ar(b),c\|\|(b=Hr(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Oa(this.g)),ur[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.Sa("Goog_AdSense_Lidar_getUrlSignalsList",Tfb);var HKa={Q0a:0,N0a:1,K0a:2,L0a:3,M0a:4,P0a:5,O0a:6};var joa=(new Date).getTime();var Qka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Rka=/\bocr\b/;var Tka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;"undefined"!==typeof TextDecoder&&new TextDecoder;var Ufb="undefined"!==typeof TextEncoder?new TextEncoder:null,Hra=Ufb?function(a){return Ufb.encode(a)}:function(a){a=g.qg(a); equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.hS=function(a){a=vPa(a.Ka);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.iS(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.bS(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),GD&&(a=Nna())&&(b.ebc=a));return g.Ml(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: g.tS=function(a){var b=g.iS(a);HPa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: rOa=function(a,b){if(!a.j["0"]){var c=new MK("0","fakesb",{video:new JK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new SQ(new g.OP("http://www.youtube.com/videoplayback"),c,"fake"):new cR(new g.OP("http://www.youtube.com/videoplayback"),c,new BQ(0,0),new BQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: this.Lo=!this.hd&&Math.random()<g.pJ(this.experiments,"web_player_api_logging_fraction");this.gb=!this.hd;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.fd=oC(this.fd,a.ismb);this.So?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=vPa(this.Ka)\|\|"www.youtube.com")):r="video.google.com";this.Rm=r;wPa(this,a,!0);this.Na=new DR;g.L(this,this.Na);q=b?b.innertubeApiKey:pC("",a.innertube_api_key);p=b?b.innertubeApiVersion:pC("",a.innertube_api_version); equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: this.W.oa&&(a.authuser=this.W.oa);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ma=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(BR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.ma=!1);b="";g.uR(this.B)?tR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: var C7d,D7d,B7d;_.E7d=function(){B7d\|\|(B7d=new _.$l(function(a,b){_.Rra(_.ba,"onYouTubeIframeAPIReady",function(){C7d();a(!0)});_.AE(D7d,{timeout:0}).then(null,function(c){C7d();b(c);B7d=null})}));return new _.$l(function(a,b){B7d.then(a,b)})};C7d=function(){delete _.ba.onYouTubeIframeAPIReady};D7d=_.Uk(_.Sk("//www.youtube.com/iframe_api?version=3"));B7d=null; equals www.youtube.com (Youtube)
Source: chromecache_189.2.dr	String found in binary or memory: var O3={};var Xbb=/[&\?]action_proxy=1/,Wbb=/[&\?]token=([\w-])/,Ybb=/[&\?]video_id=([\w-])/,Zbb=/[&\?]index=([\d-])/,$bb=/[&\?]m_pos_ms=([\d-])/,ccb=/[&\?]vvt=([\w-]*)/,Qbb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),acb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),Tbb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_198.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/63e90c30\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_224.2.dr	String found in binary or memory: {enable_full_screen:a?"1":"0"});_.Dd(c,d)}catch(e){a=_.Gc(J7d),_.Dd(c,a)}return c};J7d=_.rg(["https://www.youtube.com/embed/?enablejsapi=1&rel=0&autoplay=0&playsinline=1&expflag=embeds_enable_muted_autoplay%3Atrue&fs=0"]);_.K7d=function(a){_.Kn.call(this,a.Ka);this.ka=new Map};_.E(_.K7d,_.Kn);_.K7d.qb=_.Kn.qb;_.K7d.Fa=_.Kn.Fa;_.L7d=function(a,b,c,d,e,f,g){c=I7d(b,c,d,void 0===e?!0:e,void 0===f?!1:f,g);a.ka.set(b,c);return c}; equals www.youtube.com (Youtube)

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Nov 22, 2023 17:21:37.736596107 CET	192.168.2.5	1.1.1.1	0xc954	Standard query (0)	clients2.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.736778021 CET	192.168.2.5	1.1.1.1	0xb583	Standard query (0)	clients2.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:37.737143040 CET	192.168.2.5	1.1.1.1	0xb9bf	Standard query (0)	accounts.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:37.737409115 CET	192.168.2.5	1.1.1.1	0x376	Standard query (0)	accounts.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:38.760102987 CET	192.168.2.5	1.1.1.1	0x8d54	Standard query (0)	report-doc.org	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:38.763427019 CET	192.168.2.5	1.1.1.1	0xc829	Standard query (0)	report-doc.org	65	IN (0x0001)	false
Nov 22, 2023 17:21:39.821238041 CET	192.168.2.5	1.1.1.1	0xfa6d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:39.821670055 CET	192.168.2.5	1.1.1.1	0x8b3a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:42.164189100 CET	192.168.2.5	1.1.1.1	0xf942	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.164505959 CET	192.168.2.5	1.1.1.1	0x6cfc	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:42.272238970 CET	192.168.2.5	1.1.1.1	0x4b3a	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:42.275685072 CET	192.168.2.5	1.1.1.1	0xc41	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:43.150752068 CET	192.168.2.5	1.1.1.1	0x628e	Standard query (0)	report-doc.org	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.151292086 CET	192.168.2.5	1.1.1.1	0x853b	Standard query (0)	report-doc.org	65	IN (0x0001)	false
Nov 22, 2023 17:21:43.749669075 CET	192.168.2.5	1.1.1.1	0x64c9	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:43.750020981 CET	192.168.2.5	1.1.1.1	0x347f	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:21:45.837831974 CET	192.168.2.5	1.1.1.1	0xa304	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:21:45.838119030 CET	192.168.2.5	1.1.1.1	0xcab1	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:05.629168034 CET	192.168.2.5	1.1.1.1	0x48e0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:05.629513979 CET	192.168.2.5	1.1.1.1	0xfa8	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:06.516514063 CET	192.168.2.5	1.1.1.1	0x8fa0	Standard query (0)	ogs.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.516916990 CET	192.168.2.5	1.1.1.1	0x99f6	Standard query (0)	ogs.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:06.524050951 CET	192.168.2.5	1.1.1.1	0x7b9e	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.524898052 CET	192.168.2.5	1.1.1.1	0xfff	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:06.649000883 CET	192.168.2.5	1.1.1.1	0x7cc7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:06.649194002 CET	192.168.2.5	1.1.1.1	0x6277	Standard query (0)	www.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:07.510504961 CET	192.168.2.5	1.1.1.1	0xbf65	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:07.510730028 CET	192.168.2.5	1.1.1.1	0xedad	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:08.375937939 CET	192.168.2.5	1.1.1.1	0xecd5	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:08.376372099 CET	192.168.2.5	1.1.1.1	0xe57e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:09.398029089 CET	192.168.2.5	1.1.1.1	0xa5a7	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.157254934 CET	192.168.2.5	1.1.1.1	0x86ac	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:13.157917023 CET	192.168.2.5	1.1.1.1	0x9483	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:31.471256971 CET	192.168.2.5	1.1.1.1	0xf246	Standard query (0)	id.google.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:31.471554041 CET	192.168.2.5	1.1.1.1	0xa8de	Standard query (0)	id.google.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:36.824417114 CET	192.168.2.5	1.1.1.1	0x6534	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:36.824731112 CET	192.168.2.5	1.1.1.1	0x343c	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:37.629697084 CET	192.168.2.5	1.1.1.1	0xc09f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:37.630000114 CET	192.168.2.5	1.1.1.1	0x5dc5	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:39.802615881 CET	192.168.2.5	1.1.1.1	0xbfed	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:39.802865028 CET	192.168.2.5	1.1.1.1	0x240e	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:45.580403090 CET	192.168.2.5	1.1.1.1	0x8789	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:45.580869913 CET	192.168.2.5	1.1.1.1	0x7f4d	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:46.601418972 CET	192.168.2.5	1.1.1.1	0x20fb	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.624181986 CET	192.168.2.5	1.1.1.1	0xb21	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:48.624586105 CET	192.168.2.5	1.1.1.1	0xdd15	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:49.882882118 CET	192.168.2.5	1.1.1.1	0xdbdf	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:49.883316040 CET	192.168.2.5	1.1.1.1	0xd9e8	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Nov 22, 2023 17:22:52.797961950 CET	192.168.2.5	1.1.1.1	0x54dd	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:52.798146009 CET	192.168.2.5	1.1.1.1	0x401a	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:52.807100058 CET	192.168.2.5	1.1.1.1	0xf766	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:52.807303905 CET	192.168.2.5	1.1.1.1	0x580f	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:53.811126947 CET	192.168.2.5	1.1.1.1	0x5ce4	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:53.811408043 CET	192.168.2.5	1.1.1.1	0x2cad	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:55.268156052 CET	192.168.2.5	1.1.1.1	0x3506	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:55.268392086 CET	192.168.2.5	1.1.1.1	0xf22f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Nov 22, 2023 17:22:56.671343088 CET	192.168.2.5	1.1.1.1	0x3a98	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Nov 22, 2023 17:22:56.671689034 CET	192.168.2.5	1.1.1.1	0xfe05	Standard query (0)	www.youtube.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:38 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:38 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 3a 20 73 63 72 69 70 74 2d 73 72 63 20 27 72 65 70 6f 72 74 2d 73 61 6d 70 6c 65 27 20 27 6e 6f 6e 63 65 2d 59 32 41 74 62 6e 71 78 4f 58 32 36 6f 59 71 33 66 61 54 78 50 41 27 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 20 27 73 74 72 69 63 74 2d 64 79 6e 61 6d 69 63 27 20 68 74 74 70 73 3a 20 68 74 74 70 3a 3b 6f 62 6a 65 63 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 62 61 73 65 2d 75 72 69 20 27 73 65 6c 66 27 3b 72 65 70 6f 72 74 2d 75 72 69 20 68 74 74 70 73 3a 2f 2f 63 73 70 2e 77 69 74 68 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 63 73 70 2f 63 6c 69 65 6e 74 75 70 64 61 74 65 2d 61 75 73 2f 31 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c Data Ascii: HTTP/1.1 200 OKContent-Security-Policy: script-src 'report-sample' 'nonce-Y2AtbnqxOX26oYq3faTxPA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1Cache-Control
2023-11-22 16:21:38 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 31 36 39 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 30 30 39 38 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6169" elapsed_seconds="30098"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2023-11-22 16:21:38 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2023-11-22 16:21:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:38 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=Ef5vPFGw-MZYo5hwe-0ThAVslbxbmvdVZwcHnqVzWHAU14v53MN1VvwvQq8baYfg2-IAtqZBV5NOL5rvj2NWIqrz377UhLdHtOgE-tJaBlUBYJEhuGsQdqni3oTJg0brqv1djdiLJyvTSUhdK-c5JWadCSsULPLzhSx-F-6wOg4
2023-11-22 16:21:38 UTC	1	OUT	Data Raw: 20 Data Ascii:
2023-11-22 16:21:38 UTC	1627	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 43 72 65 64 65 6e 74 69 61 6c 73 3a 20 74 72 75 65 0d 0a 58 2d 43 6f 6e 74 65 6e 74 2d 54 79 70 65 2d 4f 70 74 69 6f 6e 73 3a 20 6e 6f 73 6e 69 66 66 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 Data Ascii: HTTP/1.1 200 OKContent-Type: application/json; charset=utf-8Access-Control-Allow-Origin: https://www.google.comAccess-Control-Allow-Credentials: trueX-Content-Type-Options: nosniffCache-Control: no-cache, no-store, max-age=0, must-revalidatePr
2023-11-22 16:21:38 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2023-11-22 16:21:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:39 UTC	699	OUT	GET /w/files/doc_order_11.22.2023_0368201058.js HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:39 UTC	1223	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 33 20 46 6f 72 62 69 64 64 65 6e 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 33 39 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 35 32 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 45 6d 62 65 64 64 65 72 2d 50 6f 6c 69 63 79 3a 20 72 65 71 75 69 72 65 2d 63 6f 72 70 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 4f 70 65 6e 65 72 2d 50 6f 6c 69 63 79 3a 20 73 61 6d 65 2d 6f 72 69 67 69 6e 0d 0a 43 72 6f 73 73 2d 4f 72 69 67 69 6e 2d 52 65 73 6f 75 72 63 65 2d 50 6f 6c 69 63 79 Data Ascii: HTTP/1.1 403 ForbiddenDate: Wed, 22 Nov 2023 16:21:39 GMTContent-Type: text/html; charset=UTF-8Content-Length: 6524Connection: closeCross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy
2023-11-22 16:21:39 UTC	146	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta ht
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: tp-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewport" content="width=device-width,initial-scale=1"><link href="/cdn-cgi/styles/challenges.css" rel="stylesheet"><meta http-equiv="refresh" content=
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 6e 32 70 39 52 48 36 6c 73 78 53 47 65 66 37 62 61 70 4e 4a 79 6d 35 30 71 74 45 51 73 68 36 30 64 78 5f 6f 57 66 6f 52 44 4e 52 78 75 35 6a 72 55 53 55 50 75 30 50 4f 6e 59 5a 35 34 79 6d 65 73 46 54 5a 47 50 35 5f 55 66 72 4f 6a 33 45 34 4d 53 57 4a 64 76 77 4a 54 57 35 32 33 62 73 65 6f 2d 35 4b 34 35 56 76 66 61 52 58 53 62 33 72 6a 35 71 6c 56 68 59 78 41 63 33 6f 64 55 66 33 4f 39 64 4e 4a 62 6b 69 50 38 76 6a 47 4a 75 66 64 51 44 78 6d 68 32 54 46 62 74 39 36 48 35 77 6c 34 53 77 33 59 52 66 78 47 64 44 63 5a 6b 4a 33 57 69 68 58 64 63 56 55 2d 41 6b 73 72 58 4a 73 32 32 41 77 6c 61 68 41 68 36 79 55 55 52 56 67 51 50 5a 62 4d 45 6f 7a 63 75 66 4a 7a 73 53 4a 6f 6e 6f 65 71 2d 59 77 52 52 78 55 61 5f 2d 71 78 59 46 39 63 35 4c 68 58 50 41 51 6c 34 Data Ascii: n2p9RH6lsxSGef7bapNJym50qtEQsh60dx_oWfoRDNRxu5jrUSUPu0POnYZ54ymesFTZGP5_UfrOj3E4MSWJdvwJTW523bseo-5K45VvfaRXSb3rj5qlVhYxAc3odUf3O9dNJbkiP8vjGJufdQDxmh2TFbt96H5wl4Sw3YRfxGdDcZkJ3WihXdcVU-AksrXJs22AwlahAh6yUURVgQPZbMEozcufJzsSJonoeq-YwRRxUa_-qxYF9c5LhXPAQl4
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 51 4e 65 72 30 50 36 34 4a 67 41 33 39 31 44 6b 4e 55 66 32 6d 53 34 38 73 44 43 6f 66 59 77 41 62 62 37 79 6b 6d 5f 74 71 79 6d 63 34 76 75 35 4b 52 64 5a 42 5a 75 49 65 7a 67 4e 76 6c 37 37 77 76 76 5a 79 43 2d 42 46 4f 2d 49 69 63 4a 58 31 78 4f 38 45 4f 45 65 52 70 6c 36 39 36 6a 55 4a 6c 4c 5a 42 66 67 49 55 51 55 32 6c 51 73 79 5f 73 79 70 34 5f 78 4e 6f 33 5a 68 63 44 64 36 41 57 49 62 6d 38 4d 67 32 49 5f 38 49 57 31 66 33 4e 7a 36 5a 56 4b 73 4d 36 2d 7a 46 49 54 5f 79 45 54 6e 33 49 51 6c 36 74 51 4c 47 4f 7a 7a 4e 49 33 73 51 66 32 7a 42 44 6e 31 5f 4d 51 2d 36 57 42 71 57 4c 6d 42 5f 4e 47 4f 38 63 61 34 70 70 46 6d 61 5a 6b 31 51 65 4e 78 51 44 36 46 7a 50 71 2d 55 50 2d 31 76 63 70 4e 58 64 62 33 70 44 47 53 67 49 6b 67 36 4c 4b 59 76 6e 32 Data Ascii: QNer0P64JgA391DkNUf2mS48sDCofYwAbb7ykm_tqymc4vu5KRdZBZuIezgNvl77wvvZyC-BFO-IicJX1xO8EOEeRpl696jUJlLZBfgIUQU2lQsy_syp4_xNo3ZhcDd6AWIbm8Mg2I_8IW1f3Nz6ZVKsM6-zFIT_yETn3IQl6tQLGOzzNI3sQf2zBDn1_MQ-6WBqWLmB_NGO8ca4ppFmaZk1QeNxQD6FzPq-UP-1vcpNXdb3pDGSgIkg6LKYvn2
2023-11-22 16:21:39 UTC	1369	IN	Data Raw: 4c 59 30 37 36 4a 34 44 69 4b 57 62 43 6b 78 59 34 41 6d 44 63 53 4f 75 71 42 4d 62 57 2d 71 62 78 2d 2d 6d 59 74 73 71 46 6c 69 51 58 61 62 55 58 36 71 38 32 59 57 6a 72 30 69 32 33 2d 48 6e 2d 6d 42 46 41 58 42 7a 4c 68 74 43 76 4c 30 6a 66 48 72 45 67 52 75 51 57 67 58 49 6b 7a 4a 41 37 53 34 4f 69 78 78 2d 4e 62 65 6e 41 7a 77 5a 53 71 6c 47 50 6b 51 62 4e 6e 72 58 72 50 53 64 6f 54 50 5f 4a 69 51 41 2d 63 54 54 34 4d 4e 6b 53 78 78 77 36 4b 71 72 4e 5a 74 4b 71 39 33 63 4f 6c 6b 6c 41 53 67 55 43 39 70 52 6f 30 73 67 77 73 51 33 61 54 58 39 6c 35 6f 70 32 46 5a 36 45 79 61 55 2d 68 73 6e 65 51 53 5f 6c 6a 64 67 53 6b 79 55 52 69 34 75 4f 30 39 46 4a 56 64 66 6a 44 67 78 4b 37 76 69 35 62 44 52 61 38 22 2c 63 52 71 3a 20 7b 72 75 3a 20 27 61 48 52 30 Data Ascii: LY076J4DiKWbCkxY4AmDcSOuqBMbW-qbx--mYtsqFliQXabUX6q82YWjr0i23-Hn-mBFAXBzLhtCvL0jfHrEgRuQWgXIkzJA7S4Oixx-NbenAzwZSqlGPkQbNnrXrPSdoTP_JiQA-cTT4MNkSxxw6KqrNZtKq93cOlklASgUC9pRo0sgwsQ3aTX9l5op2FZ6EyaU-hsneQS_ljdgSkyURi4uO09FJVdfjDgxK7vi5bDRa8",cRq: {ru: 'aHR0
2023-11-22 16:21:39 UTC	902	IN	Data Raw: 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 38 32 61 32 38 31 62 61 63 38 38 39 30 38 30 38 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 51 75 Data Ascii: cument.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window._cf_chl_opt.cOgUQu

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:40 UTC	543	OUT	OPTIONS /report/v3?s=sHE3%2F5fh5%2Fx2rUD27PEld7L2NWuihxittppZNThVXzeM1DEr%2FP1CZw3V1NkKXGSjcrC8Rz%2BLLk3%2F14mOyt5U2t6mSG0kZi%2BgrMHH8XGKckcR2BC1sXpFU1HBuFm4cheUAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://report-doc.org Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:40 UTC	336	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 6d 61 78 2d 61 67 65 3a 20 38 36 34 30 30 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6d 65 74 68 6f 64 73 3a 20 50 4f 53 54 2c 20 4f 50 54 49 4f 4e 53 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 6f 72 69 67 69 6e 3a 20 2a 0d 0a 61 63 63 65 73 73 2d 63 6f 6e 74 72 6f 6c 2d 61 6c 6c 6f 77 2d 68 65 61 64 65 72 73 3a 20 63 6f 6e 74 65 6e 74 2d 74 79 70 65 2c 20 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 0d 0a 64 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 30 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c Data Ascii: HTTP/1.1 200 OKcontent-length: 0access-control-max-age: 86400access-control-allow-methods: POST, OPTIONSaccess-control-allow-origin: *access-control-allow-headers: content-type, content-lengthdate: Wed, 22 Nov 2023 16:21:40 GMTVia: 1.1 googl

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:40 UTC	598	OUT	GET /cdn-cgi/styles/challenges.css HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:40 UTC	410	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 30 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 63 73 73 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 36 36 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 68 75 2c 20 31 36 20 4e 6f 76 20 32 30 32 33 20 32 31 3a 35 35 3a 34 38 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 36 35 35 36 38 66 65 34 2d 31 39 63 38 22 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 63 31 37 39 35 34 30 38 30 30 2d 49 41 44 0d 0a 58 2d 46 72 61 6d 65 2d 4f 70 74 69 6f 6e 73 3a 20 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:40 GMTContent-Type: text/cssContent-Length: 6600Connection: closeLast-Modified: Thu, 16 Nov 2023 21:55:48 GMTETag: "65568fe4-19c8"Server: cloudflareCF-RAY: 82a281c179540800-IADX-Frame-Options:
2023-11-22 16:21:40 UTC	959	IN	Data Raw: 2a 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 33 31 33 31 33 31 7d 68 74 6d 6c 2c 62 75 74 74 6f 6e 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 79 73 74 65 6d 2d 75 69 2c 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 22 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 2c 22 Data Ascii: *{box-sizing:border-box;margin:0;padding:0}html{line-height:1.15;-webkit-text-size-adjust:100%;color:#313131}html,button{font-family:system-ui,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,"Apple Color Emoji","
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 65 3a 32 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 68 32 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 7d 2e 63 6f 72 65 2d 6d 73 67 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 62 6f 64 79 2d 74 65 78 74 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 65 78 70 61 6e 64 61 62 6c 65 2d 74 69 74 6c 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 Data Ascii: e:2.5rem;font-weight:500}.h2{line-height:2.25rem;font-size:1.5rem;font-weight:500}.core-msg{line-height:2.25rem;font-size:1.5rem;font-weight:400}.body-text{line-height:1.25rem;font-size:1rem;font-weight:400}.expandable-title{line-height:1.5rem;font-weight
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 51 68 47 6d 7a 53 49 34 51 68 48 47 68 56 75 66 7a 34 51 4a 2f 76 36 48 75 67 36 64 4b 30 45 4b 33 59 75 4d 38 2f 33 4c 78 35 68 33 5a 30 53 54 79 77 65 35 35 6f 78 52 65 6a 4d 35 51 6f 34 61 41 74 5a 38 65 54 42 75 57 70 36 64 6c 33 49 58 67 66 6e 6e 4c 70 79 7a 42 43 46 63 74 48 6f 6d 6e 53 6f 70 65 6a 4c 68 48 2f 33 41 4d 66 45 4d 6e 64 54 4a 41 41 41 41 41 45 6c 46 54 6b 53 75 51 6d 43 43 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 2e 74 65 78 74 2d 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 65 78 70 61 6e 64 61 62 6c 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 68 65 69 67 68 74 2c 62 6f 72 64 65 72 2d 6c 65 66 74 20 2e 32 73 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 31 32 35 72 65 6d 20 73 6f Data Ascii: QhGmzSI4QhHGhVufz4QJ/v6Hug6dK0EK3YuM8/3Lx5h3Z0STywe55oxRejM5Qo4aAtZ8eTBuWp6dl3IXgfnnLpyzBCFctHomnSopejLhH/3AMfEMndTJAAAAAElFTkSuQmCC);background-size:cover}.text-center{text-align:center}.expandable{transition:height,border-left .2s;border-left:.125rem so
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 64 74 68 3a 20 37 32 30 70 78 29 7b 2e 63 61 70 74 63 68 61 2d 70 72 6f 6d 70 74 3a 6e 6f 74 28 2e 68 69 64 64 65 6e 29 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 7d 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 32 72 65 6d 20 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 70 6f 77 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 Data Ascii: dth: 720px){.captcha-prompt:not(.hidden){flex-wrap:wrap;justify-content:center}}.pow-button{margin:2rem 0;background-color:#0051c3;color:#fff}.pow-button:hover{border-color:#003681;background-color:#003681;color:#fff}.footer{margin:0 auto;width:100%;max-w
2023-11-22 16:21:40 UTC	1369	IN	Data Raw: 6e 66 69 6e 69 74 65 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 31 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 34 35 73 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 32 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 33 73 7d 2e 6c 64 73 2d 72 69 6e 67 20 64 69 76 3a 6e 74 68 2d 63 68 69 6c 64 28 33 29 7b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 2d 2e 31 35 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 64 73 2d 72 69 6e 67 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 7d 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 Data Ascii: nfinite}.lds-ring div:nth-child(1){animation-delay:-.45s}.lds-ring div:nth-child(2){animation-delay:-.3s}.lds-ring div:nth-child(3){animation-delay:-.15s}@keyframes lds-ring{0%{transform:rotate(0)}to{transform:rotate(360deg)}}@media screen and (-ms-high-c
2023-11-22 16:21:40 UTC	165	IN	Data Raw: 37 34 61 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 62 69 67 2d 62 75 74 74 6f 6e 2c 62 6f 64 79 2e 6c 69 67 68 74 20 2e 70 6f 77 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 33 36 38 31 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 62 6f 64 79 2e 6c 69 67 68 74 20 2e 65 78 70 61 6e 64 61 62 6c 65 2e 65 78 70 61 6e 64 65 64 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 30 30 35 31 63 33 7d Data Ascii: 74a}body.light .big-button,body.light .pow-button{border-color:#003681;background-color:#003681;color:#fff}body.light .expandable.expanded{border-left-color:#0051c3}

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:41 UTC	486	OUT	POST /report/v3?s=sHE3%2F5fh5%2Fx2rUD27PEld7L2NWuihxittppZNThVXzeM1DEr%2FP1CZw3V1NkKXGSjcrC8Rz%2BLLk3%2F14mOyt5U2t6mSG0kZi%2BgrMHH8XGKckcR2BC1sXpFU1HBuFm4cheUAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 428 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:41 UTC	428	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 34 32 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 30 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 37 32 2e 36 37 2e 31 37 33 2e 31 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 70 6f 72 74 2d 64 6f 63 2e 6f 72 67 Data Ascii: [{"age":42,"body":{"elapsed_time":1004,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"172.67.173.18","status_code":403,"type":"http.error"},"type":"network-error","url":"https://report-doc.org
2023-11-22 16:21:41 UTC	168	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 63 6f 6e 74 65 6e 74 2d 6c 65 6e 67 74 68 3a 20 30 0d 0a 64 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 31 20 47 4d 54 0d 0a 56 69 61 3a 20 31 2e 31 20 67 6f 6f 67 6c 65 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 2c 68 33 2d 32 39 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 32 35 39 32 30 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKcontent-length: 0date: Wed, 22 Nov 2023 16:21:41 GMTVia: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:41 UTC	714	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=82a281bac8890808 HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_rt_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:41 UTC	670	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 52 65 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:41 GMTContent-Type: application/javascript; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Re
2023-11-22 16:21:41 UTC	699	IN	Data Raw: 37 64 31 31 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 61 2c 66 79 2c 66 7a 2c 66 41 2c 66 47 2c 66 48 2c 66 49 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 77 2c 67 78 2c 67 79 2c 67 7a 2c 67 Data Ascii: 7d11window._cf_chl_opt.uaSR=true;window._cf_chl_opt.uaO=false;~function(ia,fy,fz,fA,fG,fH,fI,fJ,fK,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gw,gx,gy,gz,g
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 69 61 28 31 38 37 32 29 5d 2c 66 41 3d 66 75 6e 63 74 69 6f 6e 28 69 62 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 62 3d 69 61 2c 64 3d 7b 27 74 4f 71 43 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 50 6f 5a 72 42 27 3a 69 62 28 31 37 32 35 29 2c 27 79 6c 6e 70 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 5e 69 7d 2c 27 68 68 65 6d 56 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 57 4d 65 76 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 2c 6a 29 7b 72 65 74 75 72 6e 20 68 28 69 2c 6a 29 7d 2c 27 47 67 49 70 79 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6d 68 68 47 72 27 Data Ascii: ia(1872)],fA=function(ib,d,e,f,g){return ib=ia,d={'tOqCC':function(h,i){return i==h},'PoZrB':ib(1725),'ylnpQ':function(h,i){return h^i},'hhemV':function(h,i,j){return h(i,j)},'WMevJ':function(h,i,j){return h(i,j)},'GgIpy':function(h,i){return h-i},'mhhGr'
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 44 50 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 42 44 48 6a 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 73 4b 6f 78 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 65 75 54 58 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 47 66 70 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 74 63 6b 41 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 67 77 62 64 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 67 47 74 50 63 27 3a 66 75 6e 63 74 69 6f Data Ascii: DPb':function(h,i){return i&h},'BDHja':function(h,i){return h==i},'sKoxA':function(h,i){return i==h},'euTXR':function(h,i){return h(i)},'MGfpU':function(h,i){return i*h},'tckAu':function(h,i){return h(i)},'gwbdU':function(h,i){return i!=h},'gGtPc':functio
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 66 6f 72 28 4f 3d 64 5b 69 65 28 31 39 31 34 29 5d 5b 69 65 28 35 36 39 29 5d 28 27 7c 27 29 2c 50 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 4f 5b 50 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 69 66 28 31 36 3e 61 75 29 51 3d 61 76 5b 61 77 2b 61 78 5d 3b 65 6c 73 65 20 66 6f 72 28 52 3d 69 65 28 38 39 34 29 5b 69 65 28 35 36 39 29 5d 28 27 7c 27 29 2c 53 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 52 5b 53 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 51 3d 64 5b 69 65 28 31 33 33 36 29 5d 28 62 46 28 51 2c 31 37 29 5e 62 47 28 51 2c 31 39 29 2c 51 3e 3e 3e 31 30 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 54 3d 62 4b 5b 62 4c 2d 31 35 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 Data Ascii: >>=1,s++);}else for(O=d[ie(1914)][ie(569)]('\|'),P=0;!![];){switch(O[P++]){case'0':if(16>au)Q=av[aw+ax];else for(R=ie(894)[ie(569)]('\|'),S=0;!![];){switch(R[S++]){case'0':Q=d[ie(1336)](bF(Q,17)^bG(Q,19),Q>>>10);continue;case'1':T=bK[bL-15];continue;case'2'
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 69 65 28 39 38 38 29 5d 5b 69 65 28 31 30 34 37 29 5d 5b 69 65 28 31 33 32 34 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 69 65 28 38 31 36 29 5d 28 32 35 36 2c 43 5b 69 65 28 35 34 35 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 65 28 37 32 39 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 65 28 35 34 35 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 65 28 32 30 34 37 29 5d 28 48 3c 3c 31 2e 37 33 2c 4d 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 69 65 28 37 32 39 29 5d 28 Data Ascii: ,F++),x[L]=E++,String(K))}if(''!==C){if(Object[ie(988)][ie(1047)][ie(1324)](B,C)){if(d[ie(816)](256,C[ie(545)](0))){for(s=0;s<F;H<<=1,I==j-1?(I=0,G[ie(729)](o(H)),H=0):I++,s++);for(M=C[ie(545)](0),s=0;8>s;H=d[ie(2047)](H<<1.73,M&1),I==j-1?(I=0,G[ie(729)](
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 64 5b 69 6a 28 39 31 37 29 5d 29 72 65 74 75 72 6e 20 68 5b 69 6a 28 35 34 35 29 5d 28 69 29 3b 65 6c 73 65 7b 66 6f 72 28 44 3d 6a 5b 69 6a 28 32 31 33 38 29 5d 28 6a 5b 69 6a 28 34 38 30 29 5d 28 74 68 69 73 2e 68 5b 38 31 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 31 38 34 2b 74 68 69 73 2e 68 5b 38 31 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 6a 28 35 34 35 29 5d 28 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 38 31 2e 36 37 5d 5b 30 5d 2b 2b 29 26 32 35 35 29 2c 38 29 7c 74 68 69 73 2e 68 5b 38 31 2e 36 34 5e 74 68 69 73 2e 67 5d 5b 33 5d 5e 6a 5b 69 6a 28 37 39 34 29 5d 28 74 68 69 73 2e 68 5b 6a 5b 69 6a 28 31 31 32 38 29 5d 28 38 31 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 6a 28 35 34 35 29 5d 28 74 68 69 73 2e 68 5b 6a 5b 69 6a 28 34 38 30 29 5d 28 38 31 2c Data Ascii: d[ij(917)])return h[ij(545)](i);else{for(D=j[ij(2138)](j[ij(480)](this.h[81^this.g][3],184+this.h[81^this.g][1][ij(545)](this.h[this.g^81.67][0]++)&255),8)\|this.h[81.64^this.g][3]^j[ij(794)](this.h[j[ij(1128)](81,this.g)][1][ij(545)](this.h[j[ij(480)](81,
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 3d 30 2c 4b 3d 4d 61 74 68 5b 69 6b 28 31 36 34 38 29 5d 28 32 2c 43 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 64 5b 69 6b 28 31 32 38 34 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4d 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 6b 28 31 36 34 38 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 69 6b 28 31 30 31 38 29 5d 28 46 2c 4b 29 3b 4c 3d 48 26 47 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 6b 28 37 32 35 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 69 6b 28 31 32 33 36 29 5d 28 64 5b 69 6b 28 39 31 34 29 5d 28 30 2c 4c 29 3f 31 3a 30 2c 46 29 2c 46 Data Ascii: =0,K=Math[ik(1648)](2,C),F=1;K!=F;L=H&G,H>>=1,0==H&&(H=j,G=o(I++)),J\|=(d[ik(1284)](0,L)?1:0)*F,F<<=1);switch(M=J){case 0:for(J=0,K=Math[ik(1648)](2,8),F=1;d[ik(1018)](F,K);L=H&G,H>>=1,0==H&&(H=j,G=d[ik(725)](o,I++)),J\|=d[ik(1236)](d[ik(914)](0,L)?1:0,F),F
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 2c 68 5b 69 72 28 31 34 32 36 29 5d 3d 69 72 28 35 37 33 29 2c 68 5b 69 72 28 35 33 39 29 5d 3d 69 72 28 31 33 30 36 29 2c 68 5b 69 72 28 31 33 33 31 29 5d 3d 69 72 28 31 39 38 33 29 2c 68 5b 69 72 28 34 37 37 29 5d 3d 69 72 28 31 37 30 39 29 2c 68 29 3b 74 72 79 7b 69 66 28 69 72 28 31 33 33 30 29 21 3d 3d 69 5b 69 72 28 37 34 36 29 5d 29 7b 69 66 28 6a 3d 66 79 5b 69 72 28 31 36 30 37 29 5d 5b 69 72 28 31 34 35 33 29 5d 3f 27 68 2f 27 2b 66 79 5b 69 72 28 31 36 30 37 29 5d 5b 69 72 28 31 34 35 33 29 5d 2b 27 2f 27 3a 27 27 2c 6b 3d 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 33 30 37 29 5d 28 69 5b 69 72 28 31 37 33 37 29 5d 28 69 72 28 31 30 35 31 29 2b 6a 2b 69 72 28 32 Data Ascii: ,h[ir(1426)]=ir(573),h[ir(539)]=ir(1306),h[ir(1331)]=ir(1983),h[ir(477)]=ir(1709),h);try{if(ir(1330)!==i[ir(746)]){if(j=fy[ir(1607)][ir(1453)]?'h/'+fy[ir(1607)][ir(1453)]+'/':'',k=i[ir(1307)](i[ir(1307)](i[ir(1307)](i[ir(1307)](i[ir(1737)](ir(1051)+j+ir(2
2023-11-22 16:21:41 UTC	1369	IN	Data Raw: 26 26 6e 5b 73 5b 69 75 28 31 34 35 31 29 5d 5d 5b 69 75 28 39 37 32 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 69 75 28 37 30 37 29 2c 27 77 69 64 67 65 74 49 64 27 3a 6f 5b 69 75 28 31 36 30 37 29 5d 5b 69 75 28 37 38 38 29 5d 2c 27 65 76 65 6e 74 27 3a 73 5b 69 75 28 31 32 35 34 29 5d 7d 2c 27 2a 27 29 7d 29 29 3a 66 79 5b 69 74 28 31 31 34 38 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 76 29 7b 69 76 3d 69 74 2c 66 79 5b 69 76 28 31 32 36 35 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6d 3d 5b 6a 5b 69 74 28 31 30 33 38 29 5d 28 69 74 28 36 38 38 29 2c 64 29 2c 69 74 28 31 35 37 32 29 2b 65 2c 6a 5b 69 74 28 31 35 39 39 29 5d 28 69 74 28 31 37 34 39 29 2c 66 29 2c 69 74 28 34 38 34 29 2b 67 2c 6a 5b 69 74 28 37 30 33 29 5d 28 69 74 28 31 38 31 32 29 2c 4a 53 4f 4e 5b Data Ascii: &&n[s[iu(1451)]][iu(972)]({'source':iu(707),'widgetId':o[iu(1607)][iu(788)],'event':s[iu(1254)]},'*')})):fy[it(1148)](function(iv){iv=it,fy[iv(1265)]()},1e3):(m=[j[it(1038)](it(688),d),it(1572)+e,j[it(1599)](it(1749),f),it(484)+g,j[it(703)](it(1812),JSON[

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:42 UTC	858	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1 Host: report-doc.org Connection: keep-alive Content-Length: 1817 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: b991f7e9b718311 sec-ch-ua-platform: "Windows" Accept: / Origin: https://report-doc.org Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:42 UTC	1817	OUT	Data Raw: 76 5f 38 32 61 32 38 31 62 61 63 38 38 39 30 38 30 38 3d 32 43 6f 62 69 62 58 62 34 62 39 62 31 62 4f 2d 6a 2d 62 57 2d 62 4c 4d 24 6a 76 55 78 69 36 59 61 62 75 4d 62 59 39 6f 59 4a 62 79 6f 75 49 59 78 62 24 31 5a 62 76 4e 59 69 59 76 2d 75 4e 7a 72 6f 59 6f 33 69 78 59 6e 33 59 4b 4d 64 75 7a 68 6a 64 38 59 64 45 39 59 5a 62 24 51 59 54 66 53 68 4e 72 59 75 33 69 34 59 6e 6d 5a 76 79 6c 4f 61 59 59 44 59 57 4d 57 77 59 4d 35 6e 5a 59 65 76 33 69 49 73 4a 62 24 39 59 7a 36 24 63 61 33 59 75 48 59 73 31 4d 4e 79 33 59 67 4f 65 62 4f 78 67 4d 59 54 78 25 32 62 59 68 36 52 4a 32 33 24 6f 38 76 2d 5a 6a 35 5a 52 74 64 66 43 65 76 68 4a 6e 64 44 43 31 7a 5a 2d 59 75 6a 52 59 69 46 59 4c 2d 77 6f 34 24 2b 7a 74 6a 49 6a 75 6f 59 58 38 54 37 38 59 59 52 6c 24 Data Ascii: v_82a281bac8890808=2CobibXb4b9b1bO-j-bW-bLM$jvUxi6YabuMbY9oYJbyouIYxb$1ZbvNYiYv-uNzroYo3ixYn3YKMduzhjd8YdE9YZb$QYTfShNrYu3i4YnmZvylOaYYDYWMWwYM5nZYev3iIsJb$9Yz6$ca3YuHYs1MNy3YgOebOxgMYTx%2bYh6RJ23$o8v-Zj5ZRtdfCevhJndDC1zZ-YujRYiFYL-wo4$+ztjIjuoYX8T78YYRl$
2023-11-22 16:21:43 UTC	654	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 67 65 6e 3a 20 54 78 6f 59 72 72 54 58 78 54 2b 6b 6a 4f 51 43 52 6d 49 41 39 68 77 41 65 6f 4f 4b 33 37 77 7a 71 74 39 61 2b 78 70 79 37 59 56 39 6f 51 41 54 4a 33 32 53 64 58 58 6f 46 69 33 5a 4b 7a 4e 7a 24 78 36 50 72 50 34 4d 6d 53 73 77 65 66 33 43 51 38 6a 2f 31 7a 67 3d 3d 0d 0a 52 65 70 6f 72 74 2d 54 6f 3a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:42 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-gen: TxoYrrTXxT+kjOQCRmIA9hwAeoOK37wzqt9a+xpy7YV9oQATJ32SdXXoFi3ZKzNz$x6PrP4MmSswef3CQ8j/1zg==Report-To:
2023-11-22 16:21:43 UTC	715	IN	Data Raw: 33 31 31 63 0d 0a 6b 34 43 56 75 35 53 30 6a 6e 36 7a 67 73 6d 59 75 4b 75 71 6a 73 37 44 6b 64 4b 2b 72 4d 53 68 72 71 4f 74 31 37 4c 59 73 61 2b 64 75 63 75 66 75 38 4f 79 30 63 57 33 74 74 58 4d 34 4c 37 74 7a 38 79 74 78 4e 50 54 39 65 76 76 38 4c 50 53 75 65 66 71 73 4c 58 41 75 4f 4b 36 33 51 44 56 43 41 50 43 38 76 7a 49 78 73 77 4e 34 38 72 67 44 76 45 50 35 51 67 51 35 4e 72 59 30 68 63 48 33 39 62 34 48 4f 49 53 49 2b 50 6d 46 42 33 35 39 52 76 74 4c 51 37 39 4d 66 45 77 4b 67 55 58 45 54 63 77 44 79 59 79 47 78 67 71 44 68 6a 2b 4c 6a 45 78 46 68 49 34 47 30 4d 32 4b 77 59 4e 4f 67 70 4e 55 55 42 4b 4a 55 73 78 56 31 41 79 52 53 6f 2f 53 45 68 4b 58 7a 56 43 47 30 55 37 49 79 59 33 61 47 56 4a 5a 45 35 46 54 57 35 77 61 6d 78 6b 51 43 70 32 62 Data Ascii: 311ck4CVu5S0jn6zgsmYuKuqjs7DkdK+rMShrqOt17LYsa+ducufu8Oy0cW3ttXM4L7tz8ytxNPT9evv8LPSuefqsLXAuOK63QDVCAPC8vzIxswN48rgDvEP5QgQ5NrY0hcH39b4HOISI+PmFB359RvtLQ79MfEwKgUXETcwDyYyGxgqDhj+LjExFhI4G0M2KwYNOgpNUUBKJUsxV1AyRSo/SEhKXzVCG0U7IyY3aGVJZE5FTW5wamxkQCp2b
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 64 62 46 6e 38 66 48 74 4d 65 4f 31 5a 36 39 31 74 2b 55 30 2b 4c 68 34 37 4b 77 34 73 4b 30 32 73 6a 65 74 39 37 42 71 37 33 69 36 2f 50 55 36 73 37 5a 32 4c 6a 4a 31 65 7a 6f 75 2b 72 56 35 66 6a 45 41 41 55 44 32 66 6a 56 44 65 7a 36 43 66 6f 45 36 39 54 70 38 64 2f 51 47 68 54 36 47 73 2f 33 49 64 72 61 48 2f 6b 67 48 68 38 70 39 79 6a 39 49 66 73 71 41 68 33 35 4d 52 45 66 4c 52 38 41 4e 67 77 46 4f 76 49 57 43 67 6f 66 4d 67 73 76 2b 55 59 62 2b 43 42 44 47 30 67 6f 4c 67 6c 4b 54 52 41 4b 4c 53 67 77 4c 31 67 75 44 7a 52 56 4a 6c 42 4a 4c 6a 34 68 4f 55 38 35 59 6d 64 57 57 6b 51 69 57 7a 52 41 4e 32 41 6e 4c 32 6c 6d 4d 46 34 79 5a 6d 73 35 62 30 68 54 65 6e 39 75 53 48 42 77 58 58 41 33 66 6a 6c 68 52 48 53 4d 66 57 56 48 68 6c 70 5a 65 32 78 79 Data Ascii: dbFn8fHtMeO1Z691t+U0+Lh47Kw4sK02sjet97Bq73i6/PU6s7Z2LjJ1ezou+rV5fjEAAUD2fjVDez6CfoE69Tp8d/QGhT6Gs/3IdraH/kgHh8p9yj9IfsqAh35MREfLR8ANgwFOvIWCgofMgsv+UYb+CBDG0goLglKTRAKLSgwL1guDzRVJlBJLj4hOU85YmdWWkQiWzRAN2AnL2lmMF4yZms5b0hTen9uSHBwXXA3fjlhRHSMfWVHhlpZe2xy
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 2f 58 6c 36 6d 65 75 71 75 5a 33 75 58 55 78 73 53 69 30 38 6e 42 71 2b 6a 69 79 4d 4b 36 76 4c 44 72 38 4d 6e 30 74 4d 62 37 74 65 54 78 30 74 33 36 33 4c 33 56 30 39 6b 49 33 38 55 4c 34 4f 76 44 33 77 66 6f 35 42 4c 78 37 4e 4c 72 36 77 54 59 39 77 6f 4c 36 52 66 71 30 65 6f 52 37 52 6f 53 38 2f 44 2b 2f 4f 55 63 42 43 55 6c 2b 69 30 43 48 51 49 75 38 75 33 30 37 79 45 49 42 78 6f 33 47 66 6b 52 2f 52 73 63 4e 69 30 53 52 6b 49 70 53 79 45 73 42 43 42 48 4b 53 4e 53 4d 69 30 54 4c 46 4a 45 47 54 68 4b 53 79 70 58 4b 78 49 72 54 79 38 34 51 54 4d 77 57 6b 55 6d 57 6c 35 66 50 54 6c 45 5a 44 35 74 64 57 6c 45 59 6b 41 7a 53 47 6f 34 62 31 6c 64 54 57 39 6a 59 58 70 69 59 48 70 37 63 34 56 48 68 48 35 4d 65 34 6d 4c 57 35 46 66 55 56 39 4e 69 56 4e 58 56 Data Ascii: /Xl6meuquZ3uXUxsSi08nBq+jiyMK6vLDr8Mn0tMb7teTx0t363L3V09kI38UL4OvD3wfo5BLx7NLr6wTY9woL6Rfq0eoR7RoS8/D+/OUcBCUl+i0CHQIu8u307yEIBxo3GfkR/RscNi0SRkIpSyEsBCBHKSNSMi0TLFJEGThKSypXKxIrTy84QTMwWkUmWl5fPTlEZD5tdWlEYkAzSGo4b1ldTW9jYXpiYHp7c4VHhH5Me4mLW5FfUV9NiVNXV
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 68 31 62 2b 78 31 4b 66 48 33 4b 6d 6c 70 4f 37 4a 78 50 48 47 37 50 48 79 78 76 65 75 75 4c 53 7a 73 64 4c 4b 37 64 62 65 79 2b 43 37 77 77 41 46 78 74 37 41 34 4e 66 56 42 63 7a 4d 43 74 6f 46 45 77 72 67 34 67 63 4a 34 2b 6e 6b 33 50 48 71 35 78 33 67 41 66 58 34 41 77 45 42 34 50 34 45 34 79 30 57 49 78 45 43 48 4f 34 67 38 54 4d 4e 37 66 67 37 4a 78 66 79 43 50 30 38 4d 53 38 55 47 76 34 33 49 41 4c 2b 41 55 59 71 4b 44 38 34 4b 69 5a 50 53 51 30 69 54 6b 41 74 4f 45 5a 51 55 6a 77 76 48 31 78 4b 59 55 73 63 50 46 52 64 55 6c 6f 33 4e 45 52 4f 4f 7a 63 77 55 47 55 79 4c 69 31 33 55 54 64 70 53 31 68 37 57 6d 64 4c 50 47 78 66 56 6b 32 43 65 54 36 43 58 56 39 6e 52 59 35 4e 6b 48 6c 6c 5a 6c 32 41 69 59 42 4a 5a 55 39 70 69 46 52 57 61 32 64 66 64 31 Data Ascii: h1b+x1KfH3KmlpO7JxPHG7PHyxveuuLSzsdLK7dbey+C7wwAFxt7A4NfVBczMCtoFEwrg4gcJ4+nk3PHq5x3gAfX4AwEB4P4E4y0WIxECHO4g8TMN7fg7JxfyCP08MS8UGv43IAL+AUYqKD84KiZPSQ0iTkAtOEZQUjwvH1xKYUscPFRdUlo3NEROOzcwUGUyLi13UTdpS1h7WmdLPGxfVk2CeT6CXV9nRY5NkHllZl2AiYBJZU9piFRWa2dfd1
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 78 61 6a 58 31 4e 33 72 37 4b 6d 76 34 4f 44 75 70 36 7a 75 77 36 2f 6e 75 73 62 46 2b 77 47 32 74 39 72 66 7a 64 33 57 42 51 48 48 32 2f 76 37 42 63 6f 50 30 4f 66 63 38 67 37 67 7a 65 63 5a 39 51 37 62 42 76 33 57 45 2f 76 39 47 68 38 59 42 39 34 66 45 51 76 34 46 79 41 4e 44 43 4d 4a 34 2b 34 73 49 42 45 6d 4e 66 49 6e 44 50 55 64 42 78 6b 39 47 41 70 41 52 44 59 35 47 43 49 71 50 52 68 49 51 45 55 4c 53 44 6c 4a 4a 55 42 49 53 7a 68 4e 4d 55 5a 61 55 6b 68 58 4b 69 30 62 54 7a 51 65 52 53 39 42 5a 55 41 79 57 55 5a 69 5a 56 42 43 58 6d 5a 55 5a 44 56 78 4b 56 5a 73 63 31 68 7a 54 6d 30 34 63 6b 41 36 4f 58 30 37 65 32 2b 41 61 48 75 43 69 56 70 6e 6b 47 69 46 58 55 79 55 61 70 5a 75 64 32 78 74 6d 32 79 53 6a 58 31 79 63 49 79 5a 6a 35 42 6d 5a 49 65 Data Ascii: xajX1N3r7Kmv4ODup6zuw6/nusbF+wG2t9rfzd3WBQHH2/v7BcoP0Ofc8g7gzecZ9Q7bBv3WE/v9Gh8YB94fEQv4FyANDCMJ4+4sIBEmNfInDPUdBxk9GApARDY5GCIqPRhIQEULSDlJJUBISzhNMUZaUkhXKi0bTzQeRS9BZUAyWUZiZVBCXmZUZDVxKVZsc1hzTm04ckA6OX07e2+AaHuCiVpnkGiFXUyUapZud2xtm2ySjX1ycIyZj5BmZIe
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 65 69 2f 71 4c 47 78 79 50 66 54 74 63 62 44 38 64 33 48 31 62 72 39 74 2f 44 78 31 74 67 46 2b 64 61 2f 34 77 72 66 77 77 34 47 43 2b 62 74 7a 68 4c 6f 37 67 62 4b 36 4f 4d 4e 32 2f 4d 51 35 77 76 72 2f 67 54 65 38 66 48 33 2b 41 44 7a 49 2f 76 32 4d 50 73 62 2b 79 4d 71 44 77 67 6c 4b 76 45 49 4b 76 49 2b 43 2f 55 67 4c 42 63 63 48 77 51 56 49 68 78 42 41 45 6f 67 54 68 77 46 44 79 6f 67 51 42 4d 56 4a 53 4d 77 51 79 59 31 52 6c 45 79 58 46 5a 54 47 47 4d 63 4d 7a 68 6c 58 6b 55 33 57 6a 52 57 4f 7a 68 51 61 30 41 38 54 45 68 45 51 47 70 4a 53 58 6f 37 58 6b 31 4c 61 6d 4a 54 63 33 46 46 55 33 52 48 61 56 64 55 69 6f 35 66 57 6f 70 38 5a 6f 52 50 61 6d 4a 76 68 6c 4a 75 5a 56 4a 63 61 6d 71 4b 67 58 5a 75 64 46 64 79 70 47 64 35 64 4a 70 30 66 6e 65 75 Data Ascii: ei/qLGxyPfTtcbD8d3H1br9t/Dx1tgF+da/4wrfww4GC+btzhLo7gbK6OMN2/MQ5wvr/gTe8fH3+ADzI/v2MPsb+yMqDwglKvEIKvI+C/UgLBccHwQVIhxBAEogThwFDyogQBMVJSMwQyY1RlEyXFZTGGMcMzhlXkU3WjRWOzhQa0A8TEhEQGpJSXo7Xk1LamJTc3FFU3RHaVdUio5fWop8ZoRPamJvhlJuZVJcamqKgXZudFdypGd5dJp0fneu
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 62 69 34 36 2f 55 30 66 6e 59 39 64 33 62 75 66 43 2b 31 38 37 33 2b 76 50 44 30 2b 45 4b 36 41 62 5a 41 41 44 73 41 4d 59 4f 46 39 4d 44 39 68 6f 62 45 77 77 50 44 68 2f 34 41 75 37 73 48 78 58 77 46 77 6f 72 38 78 76 39 49 2f 6b 66 4b 52 2f 39 49 79 33 6f 41 69 63 78 4e 77 59 72 4d 69 73 4b 4c 7a 59 5a 44 6a 4d 36 2b 42 49 33 50 6b 63 57 4f 30 4d 37 47 6a 39 48 4b 52 35 44 53 78 63 6b 4c 69 4d 61 56 54 4a 57 52 31 77 65 56 6c 78 51 5a 6c 34 6c 4e 55 4a 70 4a 6d 52 48 62 6b 59 2f 53 44 46 65 50 30 63 31 5a 48 46 34 65 30 64 6d 54 30 70 78 62 34 42 64 50 56 46 64 59 48 78 56 52 6e 52 32 64 31 78 59 66 6e 46 68 6a 30 74 6c 5a 6f 43 4c 63 6d 69 45 56 5a 75 59 65 6c 35 31 6f 46 6c 61 6a 6e 64 7a 6b 4a 39 35 70 32 4f 4e 70 34 6d 4c 63 4b 6d 4e 62 49 47 6b 6f Data Ascii: bi46/U0fnY9d3bufC+1873+vPD0+EK6AbZAADsAMYOF9MD9hobEwwPDh/4Au7sHxXwFwor8xv9I/kfKR/9Iy3oAicxNwYrMisKLzYZDjM6+BI3PkcWO0M7Gj9HKR5DSxckLiMaVTJWR1weVlxQZl4lNUJpJmRHbkY/SDFeP0c1ZHF4e0dmT0pxb4BdPVFdYHxVRnR2d1xYfnFhj0tlZoCLcmiEVZuYel51oFlajndzkJ95p2ONp4mLcKmNbIGko
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 54 78 39 33 31 39 74 54 41 34 4d 50 36 33 66 33 54 39 39 2f 72 34 77 41 4d 41 50 72 62 78 63 73 42 36 39 48 50 34 63 7a 75 2b 66 62 58 39 4f 72 31 37 64 34 67 44 2b 44 6e 48 42 50 36 34 66 59 73 48 41 66 6e 34 7a 44 71 36 78 63 51 38 6a 51 57 38 78 49 48 4c 50 6f 52 4f 54 55 58 4a 53 4a 43 48 30 4d 4a 49 53 59 5a 50 6b 30 4b 53 43 5a 53 4b 55 31 55 56 77 30 53 4c 54 42 47 58 42 6f 76 53 6a 45 59 57 32 4d 76 50 6b 59 6e 4f 47 51 6c 61 55 68 4a 50 43 38 71 4d 55 49 77 4e 45 74 74 53 45 39 58 53 58 6c 32 53 31 46 77 66 48 56 63 59 49 46 35 55 46 43 44 66 58 70 48 68 34 46 2b 68 6f 75 46 68 58 53 50 69 59 6c 6f 6b 34 32 4e 6b 70 65 52 6b 49 43 62 6c 5a 52 30 6e 35 6d 62 69 4b 4f 64 6e 36 4b 6e 6f 61 4b 63 61 5a 75 4f 5a 57 71 4c 67 6f 47 47 67 6f 74 35 65 62 Data Ascii: Tx9319tTA4MP63f3T99/r4wAMAPrbxcsB69HP4czu+fbX9Or17d4gD+DnHBP64fYsHAfn4zDq6xcQ8jQW8xIHLPoROTUXJSJCH0MJISYZPk0KSCZSKU1UVw0SLTBGXBovSjEYW2MvPkYnOGQlaUhJPC8qMUIwNEttSE9XSXl2S1FwfHVcYIF5UFCDfXpHh4F+houFhXSPiYlok42NkpeRkICblZR0n5mbiKOdn6KnoaKcaZuOZWqLgoGGgot5eb

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:42 UTC	577	OUT	GET /turnstile/v0/g/9914b343/api.js?onload=FAIg1&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://report-doc.org sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:43 UTC	296	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 33 34 32 35 34 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 41 63 63 65 73 73 2d 43 6f 6e 74 72 6f 6c 2d 41 6c 6c 6f 77 2d 4f 72 69 67 69 6e 3a 20 2a 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 33 31 35 33 36 30 30 30 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 64 31 30 65 33 38 35 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:43 GMTContent-Type: application/javascript; charset=UTF-8Content-Length: 34254Connection: closeAccess-Control-Allow-Origin: *Cache-Control: max-age=31536000Server: cloudflareCF-RAY: 82a281d10e385
2023-11-22 16:21:43 UTC	1073	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 4b 65 28 65 2c 6e 2c 69 2c 66 2c 75 2c 79 2c 6d 29 7b 74 72 79 7b 76 61 72 20 6c 3d 65 5b 79 5d 28 6d 29 2c 64 3d 6c 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 68 29 7b 69 28 68 29 3b 72 65 74 75 72 6e 7d 6c 2e 64 6f 6e 65 3f 6e 28 64 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 64 29 2e 74 68 65 6e 28 66 2c 75 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 65 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 74 68 69 73 2c 69 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 66 2c 75 29 7b 76 61 72 20 79 3d 65 2e 61 70 70 6c 79 28 6e 2c 69 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ke(e,n,i,f,u,y,m){try{var l=e[y](m),d=l.value}catch(h){i(h);return}l.done?n(d):Promise.resolve(d).then(f,u)}function Ze(e){return function(){var n=this,i=arguments;return new Promise(function(f,u){var y=e.apply(n,i);funct
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 21 31 2c 6d 2c 6c 3b 74 72 79 7b 66 6f 72 28 69 3d 69 2e 63 61 6c 6c 28 65 29 3b 21 28 75 3d 28 6d 3d 69 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 66 2e 70 75 73 68 28 6d 2e 76 61 6c 75 65 29 2c 21 28 6e 26 26 66 2e 6c 65 6e 67 74 68 3d 3d 3d 6e 29 29 3b 75 3d 21 30 29 3b 7d 63 61 74 63 68 28 64 29 7b 79 3d 21 30 2c 6c 3d 64 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 75 26 26 69 2e 72 65 74 75 72 6e 21 3d 6e 75 6c 6c 26 26 69 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 79 29 74 68 72 6f 77 20 6c 7d 7d 72 65 74 75 72 6e 20 66 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 74 28 29 7b 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 61 74 74 65 6d 70 74 20 74 6f 20 64 65 73 74 72 75 63 74 75 72 65 20 6e Data Ascii: !1,m,l;try{for(i=i.call(e);!(u=(m=i.next()).done)&&(f.push(m.value),!(n&&f.length===n));u=!0);}catch(d){y=!0,l=d}finally{try{!u&&i.return!=null&&i.return()}finally{if(y)throw l}}return f}}function rt(){throw new TypeError("Invalid attempt to destructure n
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 20 37 3a 76 3d 75 2e 6f 70 73 2e 70 6f 70 28 29 2c 75 2e 74 72 79 73 2e 70 6f 70 28 29 3b 63 6f 6e 74 69 6e 75 65 3b 64 65 66 61 75 6c 74 3a 69 66 28 6c 3d 75 2e 74 72 79 73 2c 21 28 6c 3d 6c 2e 6c 65 6e 67 74 68 3e 30 26 26 6c 5b 6c 2e 6c 65 6e 67 74 68 2d 31 5d 29 26 26 28 76 5b 30 5d 3d 3d 3d 36 7c 7c 76 5b 30 5d 3d 3d 3d 32 29 29 7b 75 3d 30 3b 63 6f 6e 74 69 6e 75 65 7d 69 66 28 76 5b 30 5d 3d 3d 3d 33 26 26 28 21 6c 7c 7c 76 5b 31 5d 3e 6c 5b 30 5d 26 26 76 5b 31 5d 3c 6c 5b 33 5d 29 29 7b 75 2e 6c 61 62 65 6c 3d 76 5b 31 5d 3b 62 72 65 61 6b 7d 69 66 28 76 5b 30 5d 3d 3d 3d 36 26 26 75 2e 6c 61 62 65 6c 3c 6c 5b 31 5d 29 7b 75 2e 6c 61 62 65 6c 3d 6c 5b 31 5d 2c 6c 3d 76 3b 62 72 65 61 6b 7d 69 66 28 6c 26 Data Ascii: ;continue;case 7:v=u.ops.pop(),u.trys.pop();continue;default:if(l=u.trys,!(l=l.length>0&&l[l.length-1])&&(v[0]===6\|\|v[0]===2)){u=0;continue}if(v[0]===3&&(!l\|\|v[1]>l[0]&&v[1]<l[3])){u.label=v[1];break}if(v[0]===6&&u.label<l[1]){u.label=l[1],l=v;break}if(l&
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 63 75 74 65 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 44 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 5f 46 41 49 4c 53 3d 22 61 6c 77 61 79 73 2d 66 61 69 6c 73 22 2c 65 2e 53 4f 4d 45 54 49 4d 45 53 5f 46 41 49 4c 53 3d 22 73 6f 6d 65 74 69 6d 65 73 2d 66 61 69 6c 73 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 44 65 7c 7c 28 44 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 64 61 72 6b 22 2c 22 6c 69 67 68 74 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 4d 65 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 Data Ascii: cute"})(Q\|\|(Q={}));var De;(function(e){e.ALWAYS_FAILS="always-fails",e.SOMETIMES_FAILS="sometimes-fails",e.TOO_SLOW="too-slow",e.OTHER="other"})(De\|\|(De={}));function Ue(e){return M(["auto","dark","light"],e)}function Me(e){return M(["auto","never"],e)}fu
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 66 2c 75 29 7b 72 65 74 75 72 6e 20 66 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 75 2c 66 7d 2c 71 28 65 2c 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 74 28 65 2c 6e 29 7b 69 66 28 74 79 70 65 6f 66 20 6e 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 6e 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 26 26 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 Data Ascii: function(f,u){return f.__proto__=u,f},q(e,n)}function _t(e,n){if(typeof n!="function"&&n!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(n&&n.prototype,{constructor:{value:e,writable:!0,configurab
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 75 2c 66 29 7d 2c 45 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 2c 6e 29 7b 72 65 74 75 72 6e 20 6e 26 26 28 6b 28 6e 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 3a 78 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 78 74 28 65 29 7b 76 61 72 20 6e 3d 62 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 66 3d 4a 28 65 29 2c 75 3b 69 66 28 6e 29 7b 76 61 72 20 79 3d 4a 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 75 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 66 2c 61 72 67 75 6d 65 6e 74 73 2c 79 29 7d 65 6c 73 65 20 75 3d 66 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 67 74 28 74 68 69 Data Ascii: u,f)},Ee(e)}function gt(e,n){return n&&(k(n)==="object"\|\|typeof n=="function")?n:xe(e)}function xt(e){var n=be();return function(){var f=J(e),u;if(n){var y=J(this).constructor;u=Reflect.construct(f,arguments,y)}else u=f.apply(this,arguments);return gt(thi
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 6f 6e 74 69 6e 75 65 7d 69 66 28 28 64 2e 69 73 45 78 65 63 75 74 69 6e 67 7c 7c 21 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 7c 7c 64 2e 69 73 49 6e 69 74 69 61 6c 69 7a 65 64 26 26 21 64 2e 69 73 53 74 61 6c 65 26 26 21 64 2e 69 73 45 78 65 63 75 74 65 64 29 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 21 3d 3d 30 26 26 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 2d 31 2d 56 74 29 7b 64 2e 77 61 74 63 68 63 61 74 2e 6c 61 73 74 41 63 6b 65 64 53 65 71 3d 30 2c 64 2e 77 61 74 63 68 63 61 74 2e 73 65 71 3d 30 2c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 54 75 72 6e 73 74 69 6c 65 20 57 69 64 67 65 74 20 73 65 65 6d 20 74 6f 20 68 61 76 65 20 63 72 61 73 68 Data Ascii: ontinue}if((d.isExecuting\|\|!d.isInitialized\|\|d.isInitialized&&!d.isStale&&!d.isExecuted)&&d.watchcat.lastAckedSeq!==0&&d.watchcat.lastAckedSeq<d.watchcat.seq-1-Vt){d.watchcat.lastAckedSeq=0,d.watchcat.seq=0,console.log("Turnstile Widget seem to have crash
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 6c 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 34 35 30 70 78 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 33 34 30 70 78 22 2c 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 61 62 73 6f 6c 75 74 65 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 32 30 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 57 69 64 74 68 3d 22 31 70 78 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 43 6f 6c 6f 72 3d 22 23 30 30 30 22 2c 6c 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 53 74 79 6c 65 3d 22 73 6f 6c 69 64 22 2c 6c 2e 73 Data Ascii: cf-turnstile-feedback",l.id="cf-fr-id",l.style.borderColor="#000000",l.style.width="450px",l.style.height="340px",l.style.position="absolute",l.style.zIndex="21474836420",l.style.borderWidth="1px",l.style.borderColor="#000",l.style.borderStyle="solid",l.s
2023-11-22 16:21:43 UTC	1369	IN	Data Raw: 66 69 6c 6c 22 2c 22 23 61 61 61 61 61 61 22 29 2c 76 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 30 22 29 2c 68 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 76 29 3b 76 61 72 20 77 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 22 6c 69 6e 65 22 29 3b 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 2d 77 69 64 74 68 22 2c 22 33 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 74 72 6f 6b 65 22 2c 22 23 66 66 66 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 66 69 6c 6c 22 2c 22 6e 6f 6e 65 22 29 2c 77 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 78 31 22 2c 22 Data Ascii: fill","#aaaaaa"),v.setAttribute("stroke-width","0"),h.appendChild(v);var w=document.createElementNS("http://www.w3.org/2000/svg","line");w.setAttribute("stroke-width","3"),w.setAttribute("stroke","#fff"),w.setAttribute("fill","none"),w.setAttribute("x1","

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-22 16:21:43 UTC	435	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonContent-Type: application/octet-streamETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modi

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:44 UTC	728	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:21:44 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:21:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	510	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1016394738:1700666829:-yVJKTyB4G9hzKxVgcHjtvuTc6QxdkOn-XEeN9njovw/82a281bac8890808/b991f7e9b718311 HTTP/1.1 Host: report-doc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:44 UTC	713	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 6c 58 Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:21:43 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: lX
2023-11-22 16:21:44 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:21:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2023-11-22 16:21:44 UTC	804	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 41 70 69 56 65 72 73 69 6f 6e 3a 20 44 69 73 74 72 69 62 75 74 65 20 31 2e 31 0d 0a 43 6f 6e 74 65 6e 74 2d 44 69 73 70 6f 73 69 74 69 6f 6e 3a 20 61 74 74 61 63 68 6d 65 6e 74 3b 20 66 69 6c 65 6e 61 6d 65 3d 63 6f 6e 66 69 67 2e 6a 73 6f 6e 3b 20 66 69 6c 65 6e 61 6d 65 2a 3d 55 54 46 2d 38 27 27 63 6f 6e 66 69 67 2e 6a 73 6f 6e 0d 0a 45 54 61 67 3a 20 22 30 78 36 34 36 36 37 46 37 30 37 46 46 30 37 44 36 32 42 37 33 33 44 42 43 42 37 39 45 46 45 33 38 35 35 45 36 38 38 36 43 39 39 37 35 42 30 43 30 42 34 36 37 44 34 36 32 33 31 42 33 46 41 35 45 37 22 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 54 75 65 2c 20 31 36 20 4d 61 79 20 32 30 31 37 20 32 32 3a 35 38 3a 30 30 20 47 4d 54 0d 0a 53 65 72 Data Ascii: HTTP/1.1 200 OKApiVersion: Distribute 1.1Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.jsonETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7"Last-Modified: Tue, 16 May 2017 22:58:00 GMTSer
2023-11-22 16:21:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:44 UTC	754	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:44 UTC	921	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 34 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:44 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0content-securit
2023-11-22 16:21:44 UTC	448	IN	Data Raw: 37 63 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c Data Ascii: 7c16<!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scal
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 3c 73 74 79 6c 65 3e 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 74 72 6f 6b 65 20 7b 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 20 7b 0a 20 20 30 25 2c 20 31 30 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 33 64 28 31 2c 20 31 2c 20 31 29 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 20 7b Data Ascii: <style>@keyframes rotate { 100% { transform: rotate(360deg); }}@keyframes stroke { 100% { stroke-dashoffset: 0; }}@keyframes scale { 0%, 100% { transform: none; } 50% { transform: scale3d(1, 1, 1); }}@keyframes fill {
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 38 70 78 20 30 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 7d 0a 0a 23 63 6f 6e 74 65 6e 74 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c Data Ascii: font-size: 16px; font-weight: 700;}p { margin: 8px 0; text-align: center; font-size: 20px; font-weight: 400;}#content { display: flex; align-items: center; justify-content: space-between; border: 1px solid #e0e0e0; background-col
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 72 63 6c 65 20 7b 0a 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 30 3b 0a 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 32 3b 0a 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 20 31 30 3b 0a 20 20 73 74 72 6f 6b 65 3a 20 23 30 33 38 31 32 37 3b 0a 20 20 66 69 6c 6c 3a 20 23 30 33 38 31 32 37 3b 0a 7d 0a 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 2e 70 31 20 7b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 3b 0a 7d 0a 2e 74 68 65 6d 65 2d Data Ascii: rcle { stroke-dashoffset: 0; stroke-width: 2; stroke-miterlimit: 10; stroke: #038127; fill: #038127;}.theme-dark #success-icon { box-shadow: inset 0 0 0 #0aa937;}.theme-dark #success-icon .p1 { box-shadow: inset 0 0 0 #0aa937;}.theme-
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 Data Ascii: #challenge-error-title a { color: #bbb;}.theme-dark #challenge-error-title a:visited, .theme-dark #challenge-error-title a:link { color: #bbb;}.theme-dark #challenge-error-title a:hover, .theme-dark #challenge-error-title a:active, .theme-dark #c
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 3a 20 23 62 62 62 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 2c 20 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 34 39 34 39 34 3b 0a 7d 0a 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 61 32 39 39 3b 0a 7d 0a 0a 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 Data Ascii: : #bbb;}.theme-dark #expired-refresh-link:active, .theme-dark #expired-refresh-link:hover, .theme-dark #expired-refresh-link:focus { color: #949494;}.theme-dark .overlay { border-color: #ffa299; color: #ffa299;}#challenge-error { margin: 0
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 20 77 69 64 74 68 3a 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 32 34 70 78 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 61 63 74 69 76 65 20 7e 20 73 70 61 6e 2e 63 74 70 2d 6c 61 62 65 6c 20 7b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 3b 0a 7d 0a 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 20 69 6e 70 75 74 3a 66 6f 63 75 73 20 7e 20 2e 6d 61 72 6b 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 63 34 Data Ascii: width: 24px; height: 24px;}.ctp-checkbox-label input:active ~ .mark { border: 2px solid #c44d0e;}.ctp-checkbox-label input:active ~ span.ctp-label { text-decoration: underline;}.ctp-checkbox-label input:focus ~ .mark { border: 2px solid #c4
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 31 38 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 33 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 70 78 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 74 70 2d 63 68 65 63 6b 62 6f 78 2d 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 0a 7d 0a 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 Data Ascii: n-items: center; justify-content: center; height: 118px;}.size-compact .link-spacer { margin-right: 3px; margin-left: 3px;}.size-compact .ctp-checkbox-container { text-align: left;}.size-compact #logo { margin-top: 5px; margin-bottom:
2023-11-22 16:21:44 UTC	1369	IN	Data Raw: 23 73 75 63 63 65 73 73 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 66 61 69 6c 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 65 78 70 69 72 65 64 2d 69 63 6f 6e 20 7b 0a 20 20 6c 65 66 74 3a 20 32 35 35 70 78 3b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 70 78 3b 0a 7d 0a 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 Data Ascii: #success-icon { left: 255px; margin-left: 8px;}.rtl #fail-icon { left: 255px; margin-left: 8px;}.rtl #spinner-icon { left: 255px; margin-left: 8px;}.rtl #expired-icon { left: 255px; margin-left: 8px;}.rtl #branding { margin: 0 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:45 UTC	711	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=82a281d8ed3d062f HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:45 UTC	335	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 61 76 61 73 63 72 69 70 74 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 53 65 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:45 GMTContent-Type: application/javascript; charset=UTF-8Transfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Se
2023-11-22 16:21:45 UTC	1034	IN	Data Raw: 37 65 36 30 0d 0a 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 7e 66 75 6e 63 74 69 6f 6e 28 69 38 2c 66 79 2c 66 7a 2c 66 43 2c 66 44 2c 66 45 2c 66 46 2c 66 47 2c 66 48 2c 66 49 2c 66 4a 2c 66 4b 2c 66 4c 2c 66 4d 2c 66 4e 2c 66 4f 2c 66 50 2c 66 51 2c 66 52 2c 66 53 2c 66 54 2c 66 55 2c 66 56 2c 66 57 2c 66 58 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 32 2c 67 33 2c 67 34 2c 67 35 2c 67 36 2c 67 37 2c 67 38 2c 67 39 2c 67 61 2c 67 62 2c 67 63 2c 67 64 2c 67 65 2c 67 66 2c 67 67 2c 67 68 2c 67 69 2c 67 6a 2c 67 6b 2c 67 6c 2c 67 6d 2c 67 6e 2c 67 6f 2c 67 70 2c 67 71 2c 67 72 2c 67 73 2c 67 74 2c 67 75 2c 67 76 2c 67 79 2c 67 58 2c 68 32 2c 68 62 2c 68 6a 2c 68 6e 2c 68 72 2c 68 73 2c 68 51 2c 68 52 2c 68 53 2c Data Ascii: 7e60window._cf_chl_opt.uaO=false;~function(i8,fy,fz,fC,fD,fE,fF,fG,fH,fI,fJ,fK,fL,fM,fN,fO,fP,fQ,fR,fS,fT,fU,fV,fW,fX,fY,fZ,g0,g1,g2,g3,g4,g5,g6,g7,g8,g9,ga,gb,gc,gd,ge,gf,gg,gh,gi,gj,gk,gl,gm,gn,go,gp,gq,gr,gs,gt,gu,gv,gy,gX,h2,hb,hj,hn,hr,hs,hQ,hR,hS,
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 31 29 5d 2c 27 77 69 64 67 65 74 49 64 27 3a 66 79 5b 69 61 28 31 39 35 38 29 5d 5b 69 61 28 31 32 39 31 29 5d 2c 27 65 76 65 6e 74 27 3a 69 61 28 31 31 39 38 29 2c 27 63 6f 64 65 27 3a 69 61 28 38 32 33 29 2c 27 72 63 56 27 3a 66 79 5b 69 61 28 31 39 35 38 29 5d 5b 69 61 28 31 32 31 30 29 5d 7d 2c 27 2a 27 29 7d 7d 2c 67 29 7d 2c 66 79 5b 69 38 28 32 31 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 69 62 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 69 3d 28 69 62 3d 69 38 2c 68 3d 7b 7d 2c 68 5b 69 62 28 34 32 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 75 29 7b 72 65 74 75 72 6e 20 73 2b 75 7d 2c 68 5b 69 62 28 31 33 34 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 75 29 7b 72 65 74 75 72 6e 20 73 2b 75 7d 2c 68 5b 69 62 28 33 34 34 29 5d Data Ascii: 1)],'widgetId':fy[ia(1958)][ia(1291)],'event':ia(1198),'code':ia(823),'rcV':fy[ia(1958)][ia(1210)]},'*')}},g)},fy[i8(217)]=function(f,g,ib,h,i,j,k,l,m,n,o){i=(ib=i8,h={},h[ib(422)]=function(s,u){return s+u},h[ib(1343)]=function(s,u){return s+u},h[ib(344)]
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 28 39 31 38 29 5d 3d 73 2c 6d 5b 69 63 28 31 37 34 30 29 5d 5b 69 63 28 31 31 34 35 29 5d 28 6f 2c 27 2a 27 29 29 3a 28 6d 3d 5b 6a 5b 69 63 28 36 39 39 29 5d 2b 64 2c 6a 5b 69 63 28 39 34 30 29 5d 2b 65 2c 6a 5b 69 63 28 32 33 35 29 5d 2b 66 2c 6a 5b 69 63 28 32 35 34 29 5d 28 6a 5b 69 63 28 38 31 32 29 5d 2c 67 29 2c 69 63 28 32 39 39 29 2b 4a 53 4f 4e 5b 69 63 28 31 32 39 33 29 5d 28 68 29 5d 5b 69 63 28 38 35 35 29 5d 28 69 63 28 31 36 30 35 29 29 2c 66 79 5b 69 63 28 32 30 33 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 65 29 7b 69 65 3d 69 63 2c 66 79 5b 69 65 28 32 31 37 29 5d 28 6d 29 7d 2c 31 30 29 2c 66 79 5b 69 63 28 32 30 33 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 67 29 7b 69 67 3d 69 63 2c 66 79 5b 69 67 28 31 37 37 33 29 5d 28 29 7d 2c 31 65 Data Ascii: (918)]=s,m[ic(1740)][ic(1145)](o,'*')):(m=[j[ic(699)]+d,j[ic(940)]+e,j[ic(235)]+f,j[ic(254)](j[ic(812)],g),ic(299)+JSON[ic(1293)](h)][ic(855)](ic(1605)),fy[ic(2033)](function(ie){ie=ic,fy[ie(217)](m)},10),fy[ic(2033)](function(ig){ig=ic,fy[ig(1773)]()},1e
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 69 6c 2c 6c 2c 6d 2c 6e 2c 6f 2c 73 2c 75 29 7b 69 66 28 69 6c 3d 69 69 2c 6c 3d 69 6c 28 31 35 37 32 29 2c 69 5b 69 6c 28 31 35 32 31 29 5d 21 3d 34 29 72 65 74 75 72 6e 20 66 5b 69 6c 28 31 33 36 38 29 5d 28 66 5b 69 6c 28 31 39 36 34 29 5d 2c 66 5b 69 6c 28 31 39 36 34 29 5d 29 3f 76 6f 69 64 20 30 3a 76 6f 69 64 20 64 28 29 3b 28 6d 3d 74 68 69 73 5b 69 6c 28 31 38 36 39 29 5d 28 69 6c 28 31 32 35 33 29 29 2c 66 5b 69 6c 28 34 32 34 29 5d 28 6d 2c 69 6c 28 38 35 31 29 29 29 26 26 28 6e 3d 4a 53 4f 4e 5b 69 6c 28 31 31 33 38 29 5d 28 69 5b 69 6c 28 36 33 30 29 5d 29 2c 6e 5b 69 6c 28 31 39 32 34 29 5d 26 26 28 6c 3d 6e 5b 69 6c 28 31 39 32 34 29 5d 29 29 3b 69 66 28 6f 3d 67 44 28 6c 29 2c 6f 26 26 28 69 6c 28 38 33 30 29 21 Data Ascii: function(il,l,m,n,o,s,u){if(il=ii,l=il(1572),i[il(1521)]!=4)return f[il(1368)](f[il(1964)],f[il(1964)])?void 0:void d();(m=this[il(1869)](il(1253)),f[il(424)](m,il(851)))&&(n=JSON[il(1138)](i[il(630)]),n[il(1924)]&&(l=n[il(1924)]));if(o=gD(l),o&&(il(830)!
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 38 28 31 38 36 30 29 2c 66 46 5b 69 38 28 35 33 39 29 5d 3d 69 38 28 36 31 30 29 2c 66 46 5b 69 38 28 31 32 38 34 29 5d 3d 69 38 28 36 32 36 29 2c 66 46 5b 69 38 28 31 32 37 31 29 5d 3d 69 38 28 35 30 37 29 2c 66 46 5b 69 38 28 31 39 39 34 29 5d 3d 69 38 28 31 37 33 38 29 2c 66 46 5b 69 38 28 31 32 37 35 29 5d 3d 69 38 28 31 32 37 30 29 2c 66 46 5b 69 38 28 31 31 39 31 29 5d 3d 69 38 28 31 39 39 31 29 2c 66 46 5b 69 38 28 31 39 37 34 29 5d 3d 69 38 28 31 31 34 39 29 2c 66 46 5b 69 38 28 31 39 36 31 29 5d 3d 69 38 28 31 37 34 31 29 2c 66 46 5b 69 38 28 33 38 32 29 5d 3d 69 38 28 32 30 33 39 29 2c 66 46 5b 69 38 28 39 32 37 29 5d 3d 69 38 28 36 33 39 29 2c 66 46 5b 69 38 28 31 37 35 29 5d 3d 69 38 28 31 30 33 39 29 2c 66 46 5b 69 38 28 35 38 32 29 5d 3d 69 Data Ascii: 8(1860),fF[i8(539)]=i8(610),fF[i8(1284)]=i8(626),fF[i8(1271)]=i8(507),fF[i8(1994)]=i8(1738),fF[i8(1275)]=i8(1270),fF[i8(1191)]=i8(1991),fF[i8(1974)]=i8(1149),fF[i8(1961)]=i8(1741),fF[i8(382)]=i8(2039),fF[i8(927)]=i8(639),fF[i8(175)]=i8(1039),fF[i8(582)]=i
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 28 39 32 37 29 5d 3d 69 38 28 33 35 32 29 2c 66 48 5b 69 38 28 31 37 35 29 5d 3d 69 38 28 36 38 36 29 2c 66 48 5b 69 38 28 35 38 32 29 5d 3d 69 38 28 31 31 33 39 29 2c 66 48 5b 69 38 28 31 39 32 29 5d 3d 69 38 28 38 34 37 29 2c 66 48 5b 69 38 28 33 31 39 29 5d 3d 69 38 28 31 35 32 39 29 2c 66 48 5b 69 38 28 31 37 39 30 29 5d 3d 69 38 28 39 35 30 29 2c 66 48 5b 69 38 28 31 39 35 31 29 5d 3d 69 38 28 32 34 38 29 2c 66 48 5b 69 38 28 31 38 31 34 29 5d 3d 69 38 28 31 30 39 38 29 2c 66 48 5b 69 38 28 35 35 31 29 5d 3d 69 38 28 36 30 37 29 2c 66 48 5b 69 38 28 36 35 34 29 5d 3d 69 38 28 31 36 33 37 29 2c 66 48 5b 69 38 28 31 39 36 35 29 5d 3d 69 38 28 31 38 38 39 29 2c 66 48 5b 69 38 28 32 39 35 29 5d 3d 69 38 28 31 33 32 38 29 2c 66 48 5b 69 38 28 31 35 31 33 Data Ascii: (927)]=i8(352),fH[i8(175)]=i8(686),fH[i8(582)]=i8(1139),fH[i8(192)]=i8(847),fH[i8(319)]=i8(1529),fH[i8(1790)]=i8(950),fH[i8(1951)]=i8(248),fH[i8(1814)]=i8(1098),fH[i8(551)]=i8(607),fH[i8(654)]=i8(1637),fH[i8(1965)]=i8(1889),fH[i8(295)]=i8(1328),fH[i8(1513
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 35 31 29 5d 3d 69 38 28 33 32 37 29 2c 66 4a 5b 69 38 28 36 35 34 29 5d 3d 69 38 28 31 38 37 39 29 2c 66 4a 5b 69 38 28 31 39 36 35 29 5d 3d 69 38 28 34 34 38 29 2c 66 4a 5b 69 38 28 32 39 35 29 5d 3d 69 38 28 32 30 35 31 29 2c 66 4a 5b 69 38 28 31 35 31 33 29 5d 3d 69 38 28 36 30 39 29 2c 66 4a 5b 69 38 28 31 31 35 39 29 5d 3d 69 38 28 31 37 33 33 29 2c 66 4a 5b 69 38 28 38 39 36 29 5d 3d 69 38 28 31 37 36 39 29 2c 66 4a 5b 69 38 28 31 34 38 32 29 5d 3d 69 38 28 34 38 32 29 2c 66 4a 5b 69 38 28 31 35 38 30 29 5d 3d 69 38 28 31 35 34 37 29 2c 66 4b 3d 7b 7d 2c 66 4b 5b 69 38 28 39 34 31 29 5d 3d 69 38 28 31 31 33 33 29 2c 66 4b 5b 69 38 28 35 33 39 29 5d 3d 69 38 28 31 34 30 31 29 2c 66 4b 5b 69 38 28 31 32 38 34 29 5d 3d 69 38 28 31 38 32 34 29 2c 66 4b Data Ascii: 51)]=i8(327),fJ[i8(654)]=i8(1879),fJ[i8(1965)]=i8(448),fJ[i8(295)]=i8(2051),fJ[i8(1513)]=i8(609),fJ[i8(1159)]=i8(1733),fJ[i8(896)]=i8(1769),fJ[i8(1482)]=i8(482),fJ[i8(1580)]=i8(1547),fK={},fK[i8(941)]=i8(1133),fK[i8(539)]=i8(1401),fK[i8(1284)]=i8(1824),fK
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 29 5d 3d 69 38 28 39 31 36 29 2c 66 4d 5b 69 38 28 31 32 38 34 29 5d 3d 69 38 28 37 38 38 29 2c 66 4d 5b 69 38 28 31 32 37 31 29 5d 3d 69 38 28 31 36 38 35 29 2c 66 4d 5b 69 38 28 31 39 39 34 29 5d 3d 69 38 28 38 31 38 29 2c 66 4d 5b 69 38 28 31 32 37 35 29 5d 3d 69 38 28 31 32 31 36 29 2c 66 4d 5b 69 38 28 31 31 39 31 29 5d 3d 69 38 28 39 36 36 29 2c 66 4d 5b 69 38 28 31 39 37 34 29 5d 3d 69 38 28 31 32 34 30 29 2c 66 4d 5b 69 38 28 31 39 36 31 29 5d 3d 69 38 28 31 33 34 35 29 2c 66 4d 5b 69 38 28 33 38 32 29 5d 3d 69 38 28 37 31 33 29 2c 66 4d 5b 69 38 28 39 32 37 29 5d 3d 69 38 28 31 31 35 30 29 2c 66 4d 5b 69 38 28 31 37 35 29 5d 3d 69 38 28 31 34 36 39 29 2c 66 4d 5b 69 38 28 35 38 32 29 5d 3d 69 38 28 39 33 37 29 2c 66 4d 5b 69 38 28 31 39 32 29 5d Data Ascii: )]=i8(916),fM[i8(1284)]=i8(788),fM[i8(1271)]=i8(1685),fM[i8(1994)]=i8(818),fM[i8(1275)]=i8(1216),fM[i8(1191)]=i8(966),fM[i8(1974)]=i8(1240),fM[i8(1961)]=i8(1345),fM[i8(382)]=i8(713),fM[i8(927)]=i8(1150),fM[i8(175)]=i8(1469),fM[i8(582)]=i8(937),fM[i8(192)]
2023-11-22 16:21:45 UTC	1369	IN	Data Raw: 36 35 39 29 2c 66 4f 5b 69 38 28 35 38 32 29 5d 3d 69 38 28 31 35 31 32 29 2c 66 4f 5b 69 38 28 31 39 32 29 5d 3d 69 38 28 31 33 32 32 29 2c 66 4f 5b 69 38 28 33 31 39 29 5d 3d 69 38 28 31 36 31 35 29 2c 66 4f 5b 69 38 28 31 37 39 30 29 5d 3d 69 38 28 32 32 35 29 2c 66 4f 5b 69 38 28 31 39 35 31 29 5d 3d 69 38 28 33 35 33 29 2c 66 4f 5b 69 38 28 31 38 31 34 29 5d 3d 69 38 28 31 30 36 39 29 2c 66 4f 5b 69 38 28 35 35 31 29 5d 3d 69 38 28 31 32 38 36 29 2c 66 4f 5b 69 38 28 36 35 34 29 5d 3d 69 38 28 31 38 37 35 29 2c 66 4f 5b 69 38 28 31 39 36 35 29 5d 3d 69 38 28 31 39 30 32 29 2c 66 4f 5b 69 38 28 32 39 35 29 5d 3d 69 38 28 32 31 31 29 2c 66 4f 5b 69 38 28 31 35 31 33 29 5d 3d 69 38 28 37 39 34 29 2c 66 4f 5b 69 38 28 31 31 35 39 29 5d 3d 69 38 28 36 39 Data Ascii: 659),fO[i8(582)]=i8(1512),fO[i8(192)]=i8(1322),fO[i8(319)]=i8(1615),fO[i8(1790)]=i8(225),fO[i8(1951)]=i8(353),fO[i8(1814)]=i8(1069),fO[i8(551)]=i8(1286),fO[i8(654)]=i8(1875),fO[i8(1965)]=i8(1902),fO[i8(295)]=i8(211),fO[i8(1513)]=i8(794),fO[i8(1159)]=i8(69

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:45 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:45 UTC	248	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 35 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 36 32 39 38 30 30 2c 20 70 75 62 6c 69 63 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 65 30 35 63 37 32 33 61 65 65 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:45 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closecache-control: max-age=2629800, publicServer: cloudflareCF-RAY: 82a281e05c723aee-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:45 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-11-22 16:21:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Windows Analysis Report
https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:46 UTC	438	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1/wh0E0SXYnx6pTBdJW%2Fl926I%2BPRUplRdtQz3K9lHXs%2Fs%3D HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:46 UTC	248	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 6d 61 78 2d 61 67 65 3d 32 36 32 39 38 30 30 2c 20 70 75 62 6c 69 63 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 31 65 36 37 38 32 64 30 35 66 31 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:46 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closecache-control: max-age=2629800, publicServer: cloudflareCF-RAY: 82a281e6782d05f1-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:46 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRsIDAT$IENDB`
2023-11-22 16:21:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:46 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:47 UTC	734	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 36 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:21:47 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:21:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:47 UTC	383	OUT	GET /favicon.ico HTTP/1.1 Host: report-doc.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:21:48 UTC	732	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 37 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 45 78 70 69 72 65 73 3a 20 30 0d 0a 53 74 72 69 63 74 2d 54 72 61 6e 73 70 6f 72 74 2d 53 65 63 75 72 69 74 79 3a 20 6d 61 78 2d 61 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: no-cache, no-store, must-revalidatePragma: no-cacheExpires: 0Strict-Transport-Security: max-a
2023-11-22 16:21:48 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:21:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:48 UTC	805	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/82a281d8ed3d062f/1700670106968/086cd84cc905b337cfeb5813071be2a30c5d7fededdd7fc625302b6261d08b8e/mpyr05rD6k1SCe6 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:48 UTC	152	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 31 20 55 6e 61 75 74 68 6f 72 69 7a 65 64 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 34 38 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 70 6c 61 69 6e 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a Data Ascii: HTTP/1.1 401 UnauthorizedDate: Wed, 22 Nov 2023 16:21:48 GMTContent-Type: text/plain; charset=UTF-8Transfer-Encoding: chunkedConnection: close
2023-11-22 16:21:48 UTC	1374	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 43 47 7a 59 54 4d 6b 46 73 7a 66 50 36 31 67 54 42 78 76 69 6f 77 78 64 66 2d 33 74 33 58 5f 47 4a 54 41 72 59 6d 48 51 69 34 34 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d 45 41 67 Data Ascii: www-authenticate: PrivateToken challenge=AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gCGzYTMkFszfP61gTBxviowxdf-3t3X_GJTArYmHQi44AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=, token-key=MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQMEAg
2023-11-22 16:21:48 UTC	6	IN	Data Raw: 31 0d 0a 4a 0d 0a Data Ascii: 1J
2023-11-22 16:21:48 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:50 UTC	776	OUT	GET /cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:51 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 31 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 32 30 33 36 63 62 33 33 39 33 32 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:51 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closeServer: cloudflareCF-RAY: 82a282036cb33932-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:51 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 0c 08 02 00 00 00 02 ac 61 92 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRaIDAT$IENDB`
2023-11-22 16:21:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:51 UTC	428	OUT	GET /cdn-cgi/challenge-platform/h/g/i/82a281d8ed3d062f/1700670106977/KqjhGQJRJoD_bVM HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:52 UTC	208	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 69 6d 61 67 65 2f 70 6e 67 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 32 61 32 38 32 30 61 34 64 39 37 32 34 31 39 2d 49 41 44 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:21:52 GMTContent-Type: image/pngTransfer-Encoding: chunkedConnection: closeServer: cloudflareCF-RAY: 82a2820a4d972419-IADalt-svc: h3=":443"; ma=86400
2023-11-22 16:21:52 UTC	67	IN	Data Raw: 33 64 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 0c 08 02 00 00 00 02 ac 61 92 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 0d 0a Data Ascii: 3dPNGIHDRaIDAT$IENDB`
2023-11-22 16:21:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:52 UTC	487	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:21:53 UTC	386	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 34 30 30 20 42 61 64 20 52 65 71 75 65 73 74 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 31 3a 35 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 61 63 68 65 2d 63 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 45 6c Data Ascii: HTTP/1.1 400 Bad RequestDate: Wed, 22 Nov 2023 16:21:53 GMTContent-Type: application/jsonTransfer-Encoding: chunkedConnection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: El
2023-11-22 16:21:53 UTC	12	IN	Data Raw: 37 0d 0a 69 6e 76 61 6c 69 64 0d 0a Data Ascii: 7invalid
2023-11-22 16:21:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:21:54 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=HspY2CHUf5tsTg5&MD=XHz6fdxt HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2023-11-22 16:21:54 UTC	560	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 50 72 61 67 6d 61 3a 20 6e 6f 2d 63 61 63 68 65 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6f 63 74 65 74 2d 73 74 72 65 61 6d 0d 0a 45 78 70 69 72 65 73 3a 20 2d 31 0d 0a 4c 61 73 74 2d 4d 6f 64 69 66 69 65 64 3a 20 4d 6f 6e 2c 20 30 31 20 4a 61 6e 20 30 30 30 31 20 30 30 3a 30 30 3a 30 30 20 47 4d 54 0d 0a 45 54 61 67 3a 20 22 58 41 6f 70 61 7a 56 30 30 58 44 57 6e 4a 43 77 6b 6d 45 57 52 76 36 4a 6b 62 6a 52 41 39 51 53 53 5a 32 2b 65 2f 33 4d 7a 45 6b 3d 5f 32 38 38 30 22 0d 0a 4d 53 2d 43 6f 72 72 65 6c 61 74 69 6f 6e 49 64 3a 20 62 38 37 33 39 61 65 32 2d 30 62 35 36 2d 34 64 38 66 2d Data Ascii: HTTP/1.1 200 OKCache-Control: no-cachePragma: no-cacheContent-Type: application/octet-streamExpires: -1Last-Modified: Mon, 01 Jan 0001 00:00:00 GMTETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880"MS-CorrelationId: b8739ae2-0b56-4d8f-
2023-11-22 16:21:54 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2023-11-22 16:21:54 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:01 UTC	918	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1659967187:1700666959:s-xfDmFBeCQJ3zR5aQxdS7p1hXAcQJ8HD8Iovqf91qk/82a281d8ed3d062f/39b36f2cbd2d955 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 29395 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: 39b36f2cbd2d955 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/30wzm/0x4AAAAAAADnPIDROrmt1Wwj/light/normal Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2023-11-22 16:22:01 UTC	16384	OUT	Data Raw: 76 5f 38 32 61 32 38 31 64 38 65 64 33 64 30 36 32 66 3d 6d 53 6e 39 6a 38 6f 46 5a 79 6e 74 35 2d 72 41 55 6f 6d 41 48 39 32 33 33 41 76 41 48 48 75 72 41 58 41 32 73 2d 54 41 70 41 6d 6a 4b 48 63 43 6f 47 63 41 2d 7a 41 79 46 53 43 6f 4b 41 75 58 73 63 71 38 41 4d 6c 35 39 56 48 39 6f 5a 41 68 41 36 5a 77 6e 6e 4a 55 48 41 36 41 24 73 41 33 77 36 63 48 41 46 41 70 57 35 41 32 74 41 2d 4a 24 41 65 25 32 62 63 30 5a 41 4d 57 35 6f 77 41 6d 6e 41 6a 77 73 41 4e 79 6d 51 36 41 41 72 4a 41 6d 5a 39 4a 39 48 41 66 39 4b 58 41 38 67 6e 5a 51 5a 7a 6e 48 70 58 41 64 51 51 75 75 63 6c 46 48 43 41 63 39 24 51 35 4a 39 77 5a 43 6e 6e 67 78 6f 24 4a 7a 36 33 41 41 67 46 35 48 48 24 41 74 6e 41 4d 5a 49 38 6f 41 55 54 77 24 32 57 36 75 4a 49 6f 38 7a 6d 4f 55 44 75 Data Ascii: v_82a281d8ed3d062f=mSn9j8oFZynt5-rAUomAH9233AvAHHurAXA2s-TApAmjKHcCoGcA-zAyFSCoKAuXscq8AMl59VH9oZAhA6ZwnnJUHA6A$sA3w6cHAFApW5A2tA-J$Ae%2bc0ZAMW5owAmnAjwsANymQ6AArJAmZ9J9HAf9KXA8gnZQZznHpXAdQQuuclFHCAc9$Q5J9wZCnngxo$Jz63AAgF5HH$AtnAMZI8oAUTw$2W6uJIo8zmOUDu
2023-11-22 16:22:01 UTC	13011	OUT	Data Raw: 79 79 33 61 6f 6c 53 4c 43 77 63 70 32 36 56 41 59 4e 6b 42 4f 48 52 39 2d 46 35 39 38 5a 41 58 41 6d 39 41 53 41 65 72 38 48 41 35 41 64 41 2d 46 41 50 4a 35 48 4b 53 6f 76 41 70 41 6d 35 2b 46 41 59 41 41 6e 41 52 2d 43 39 4f 6e 4b 2b 41 33 39 6d 37 67 51 41 58 39 75 41 41 30 41 64 39 4b 53 6f 2d 41 62 39 6f 35 6f 55 41 34 39 41 53 41 4c 41 76 39 65 53 4b 35 41 56 47 75 4e 6f 38 39 74 41 4b 53 41 48 41 59 42 50 2d 38 73 41 39 41 47 39 41 70 39 45 73 38 70 6f 37 41 79 41 4d 32 35 35 41 35 48 38 46 4b 73 6f 76 41 6e 39 63 4d 39 6e 41 6e 6e 4b 4f 48 53 39 6d 6e 6f 2b 41 44 41 63 5a 6f 35 6f 32 5a 2d 41 41 6f 48 6f 41 55 35 38 55 41 31 53 79 35 6f 36 58 2b 39 6e 53 6f 50 33 54 35 79 7a 48 63 41 7a 67 54 53 41 6f 73 7a 43 6f 63 6f 6c 53 75 41 4b 53 38 24 33 Data Ascii: yy3aolSLCwcp26VAYNkBOHR9-F598ZAXAm9ASAer8HA5AdA-FAPJ5HKSovApAm5+FAYAAnAR-C9OnK+A39m7gQAX9uAA0Ad9KSo-Ab9o5oUA49ASALAv9eSK5AVGuNo89tAKSAHAYBP-8sA9AG9Ap9Es8po7AyAM255A5H8FKsovAn9cM9nAnnKOHS9mno+ADAcZo5o2Z-AAoHoAU58UA1Sy5o6X+9nSoP3T5yzHcAzgTSAoszCocolSuAKS8$3
2023-11-22 16:22:02 UTC	1307	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 32 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 49 47 79 43 50 64 4b 36 48 34 49 4a 68 4e 32 4c 45 56 62 33 2b 63 46 4d 71 35 51 4e 6c 35 45 58 4e 71 50 62 65 63 52 77 49 4e 71 58 48 64 4a 38 39 58 78 45 6f 72 73 71 63 66 51 76 76 51 54 55 34 53 73 75 31 4e 37 2b 2b 43 32 4c 65 44 48 75 75 66 7a 53 36 52 6a 57 4b 76 32 64 61 4f 35 72 58 33 74 31 77 57 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:02 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closecf-chl-out: IGyCPdK6H4IJhN2LEVb3+cFMq5QNl5EXNqPbecRwINqXHdJ89XxEorsqcfQvvQTU4Ssu1N7++C2LeDHuufzS6RjWKv2daO5rX3t1wW
2023-11-22 16:22:02 UTC	62	IN	Data Raw: 64 62 38 0d 0a 69 48 6d 54 6d 71 57 54 6d 4c 57 39 77 4c 61 6b 77 4a 2b 58 78 5a 33 51 77 4d 79 6d 77 5a 54 43 6c 71 37 50 73 35 6e 4d 6b 4e 44 57 6e 61 7a 41 7a 4b 43 76 33 39 4c 49 75 Data Ascii: db8iHmTmqWTmLW9wLakwJ+XxZ3QwMymwZTClq7Ps5nMkNDWnazAzKCv39LIu
2023-11-22 16:22:02 UTC	1369	IN	Data Raw: 38 50 65 71 65 79 34 75 63 65 6f 73 4d 4c 32 74 73 50 47 2b 72 72 4e 31 2b 7a 35 30 74 54 79 36 38 48 39 37 66 4c 78 2b 39 62 35 41 50 54 72 2f 51 6a 75 38 66 4d 4c 42 2b 50 72 42 76 54 52 35 50 55 55 32 68 73 50 47 65 34 4f 33 52 48 67 46 2f 30 70 2f 41 59 43 4c 4f 73 66 34 53 41 41 45 43 34 53 37 51 55 58 4d 68 76 33 37 54 4d 6d 48 54 73 33 2f 66 73 77 49 66 34 36 4e 53 59 57 2f 43 68 45 49 53 49 59 4c 68 39 42 48 42 38 74 56 42 45 77 53 78 6f 61 4d 30 34 73 4d 54 64 6a 58 6a 6b 2b 48 56 6b 34 58 30 41 31 4b 69 4d 6c 58 56 42 46 50 55 77 39 4d 79 31 6d 54 47 70 54 55 45 52 62 52 32 39 4c 56 6f 42 43 62 56 64 51 67 56 78 46 50 49 78 43 58 34 32 4b 69 6d 42 78 6a 34 5a 4e 6c 46 4f 41 5a 47 68 6f 69 31 79 4c 62 48 36 62 6e 33 57 66 70 6e 6c 34 6e 5a 4f 71 Data Ascii: 8Peqey4uceosML2tsPG+rrN1+z50tTy68H97fLx+9b5APTr/Qju8fMLB+PrBvTR5PUU2hsPGe4O3RHgF/0p/AYCLOsf4SAAEC4S7QUXMhv37TMmHTs3/fswIf46NSYW/ChEISIYLh9BHB8tVBEwSxoaM04sMTdjXjk+HVk4X0A1KiMlXVBFPUw9My1mTGpTUERbR29LVoBCbVdQgVxFPIxCX42KimBxj4ZNlFOAZGhoi1yLbH6bn3Wfpnl4nZOq
2023-11-22 16:22:02 UTC	1369	IN	Data Raw: 66 7a 34 61 72 31 34 4f 53 78 7a 2b 2b 34 75 74 66 37 74 73 72 74 37 77 54 52 7a 77 48 5a 77 39 45 42 42 74 37 56 41 65 44 6a 35 75 33 53 33 68 51 55 42 39 58 76 45 50 6a 54 43 68 51 63 31 2f 62 39 44 39 76 62 2b 76 7a 69 4b 68 67 6c 35 69 30 4b 47 65 63 47 38 52 44 75 44 43 45 55 37 78 45 4f 4b 2f 50 7a 4e 51 34 4c 41 67 73 54 45 42 74 42 4e 67 41 68 52 45 6b 45 50 41 5a 4d 43 43 6c 4d 55 77 38 65 55 53 67 58 53 68 5a 54 45 7a 56 4e 50 52 35 69 4c 6d 49 74 50 44 4a 41 49 54 38 68 53 53 5a 71 58 47 77 77 58 6d 30 38 52 69 78 57 55 6a 5a 6e 61 58 67 37 62 56 35 6f 4f 6d 32 42 65 31 64 78 67 47 6c 43 58 34 52 33 52 6f 35 61 65 6d 52 6e 6a 48 52 50 61 34 57 53 61 4a 71 55 68 57 31 7a 6c 5a 56 79 59 71 53 50 58 34 43 64 6f 58 6c 30 6d 4a 64 2f 69 4b 53 52 67 Data Ascii: fz4ar14OSxz++4utf7tsrt7wTRzwHZw9EBBt7VAeDj5u3S3hQUB9XvEPjTChQc1/b9D9vb+vziKhgl5i0KGecG8RDuDCEU7xEOK/PzNQ4LAgsTEBtBNgAhREkEPAZMCClMUw8eUSgXShZTEzVNPR5iLmItPDJAIT8hSSZqXGwwXm08RixWUjZnaXg7bV5oOm2Be1dxgGlCX4R3Ro5aemRnjHRPa4WSaJqUhW1zlZVyYqSPX4CdoXl0mJd/iKSRg
2023-11-22 16:22:02 UTC	719	IN	Data Raw: 31 35 73 6e 30 75 76 37 5a 39 72 66 39 2b 2b 4c 4f 33 4d 58 63 30 75 48 69 78 38 4b 2f 35 73 6a 4e 45 4f 6b 54 30 52 51 46 46 74 41 58 32 64 4c 77 48 42 6a 34 36 65 77 44 39 41 41 58 47 66 66 38 42 52 51 48 36 42 6f 63 4a 2b 62 6e 4b 51 4c 30 35 2b 30 41 39 51 38 6f 4e 2f 4d 54 42 2f 62 39 41 6b 45 53 42 52 45 53 52 42 4d 41 4a 30 6f 6a 50 30 59 6d 44 6c 42 41 53 43 6c 45 54 45 67 6b 53 31 42 62 47 44 51 2b 58 52 35 64 57 52 77 36 4f 30 59 6c 4d 32 5a 43 5a 79 74 63 53 6b 6b 74 62 32 78 56 53 56 46 70 51 6a 63 73 52 6e 31 53 61 6a 31 58 51 47 35 79 57 6c 70 78 55 6b 56 41 56 57 75 4d 6a 6b 31 4f 53 56 79 4f 66 48 46 4e 67 34 53 59 56 35 69 56 61 31 74 55 64 33 4a 73 6b 48 64 35 59 35 46 2b 5a 48 32 58 69 6d 69 49 6e 49 75 43 65 34 35 75 67 6e 53 53 63 6f Data Ascii: 15sn0uv7Z9rf9++LO3MXc0uHix8K/5sjNEOkT0RQFFtAX2dLwHBj46ewD9AAXGff8BRQH6BocJ+bnKQL05+0A9Q8oN/MTB/b9AkESBRESRBMAJ0ojP0YmDlBASClETEgkS1BbGDQ+XR5dWRw6O0YlM2ZCZytcSkktb2xVSVFpQjcsRn1Saj1XQG5yWlpxUkVAVWuMjk1OSVyOfHFNg4SYV5iVa1tUd3JskHd5Y5F+ZH2XimiInIuCe45ugnSSco
2023-11-22 16:22:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2023-11-22 16:22:03 UTC	1027	OUT	POST /w/files/doc_order_11.22.2023_0368201058.js HTTP/1.1 Host: report-doc.org Connection: keep-alive Content-Length: 3616 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://report-doc.org Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://report-doc.org/w/files/doc_order_11.22.2023_0368201058.js?__cf_chl_tk=XuxhaDrbm05aROwP4yp3oEYzeKDRZb4cDxLYnrPY9lU-1700670099-0-gaNycGzNDJA Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cf_chl_2=b991f7e9b718311
2023-11-22 16:22:03 UTC	3616	OUT	Data Raw: 38 32 63 30 30 32 65 62 30 66 32 39 61 34 31 65 32 38 64 31 38 64 37 33 30 32 36 62 32 65 39 62 33 65 36 36 63 35 31 39 62 38 62 33 65 36 34 35 66 64 39 66 39 39 30 33 33 34 34 31 35 37 61 34 3d 76 4f 4f 75 78 2e 72 76 30 46 52 31 5a 64 61 7a 55 51 62 6b 6c 34 79 78 76 6c 52 61 33 32 49 58 44 54 30 77 53 79 6a 58 4c 72 63 2d 31 37 30 30 36 37 30 30 39 39 2d 30 2d 41 55 58 4b 31 35 50 4b 6a 4a 68 62 6e 73 56 6d 43 53 44 41 79 66 4a 49 55 67 5f 69 76 4a 47 64 54 4a 65 44 52 57 49 50 47 53 51 6d 72 6e 61 5f 5f 65 39 6e 44 55 44 54 36 2d 30 61 6d 79 56 4d 30 71 72 2d 6d 30 57 75 7a 38 41 31 6a 59 6a 51 32 50 66 62 54 55 51 70 4b 44 63 37 65 64 59 45 79 66 59 68 4e 67 37 47 73 33 4d 61 55 70 42 2d 58 67 67 41 63 57 4c 44 30 79 4c 53 4f 63 6f 53 6f 55 71 6b 47 Data Ascii: 82c002eb0f29a41e28d18d73026b2e9b3e66c519b8b3e645fd9f9903344157a4=vOOux.rv0FR1ZdazUQbkl4yxvlRa32IXDT0wSyjXLrc-1700670099-0-AUXK15PKjJhbnsVmCSDAyfJIUg_ivJGdTJeDRWIPGSQmrna__e9nDUDT6-0amyVM0qr-m0Wuz8A1jYjQ2PfbTUQpKDc7edYEyfYhNg7Gs3MaUpB-XggAcWLD0yLSOcoSoUqkG
2023-11-22 16:22:04 UTC	1054	IN	Data Raw: 48 54 54 50 2f 31 2e 31 20 32 30 30 20 4f 4b 0d 0a 44 61 74 65 3a 20 57 65 64 2c 20 32 32 20 4e 6f 76 20 32 30 32 33 20 31 36 3a 32 32 3a 30 33 20 47 4d 54 0d 0a 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 0d 0a 54 72 61 6e 73 66 65 72 2d 45 6e 63 6f 64 69 6e 67 3a 20 63 68 75 6e 6b 65 64 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 63 66 5f 63 68 6c 5f 32 3d 3b 20 70 61 74 68 3d 2f 3b 20 65 78 70 69 72 65 73 3d 54 68 75 2c 20 4a 61 6e 20 30 31 20 31 39 37 30 20 30 30 3a 30 30 3a 30 30 20 55 54 43 3b 20 64 6f 6d 61 69 6e 3d 2e 72 65 70 6f 72 74 2d 64 6f 63 2e 6f 72 67 3b 20 53 65 63 75 72 65 0d 0a 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 Data Ascii: HTTP/1.1 200 OKDate: Wed, 22 Nov 2023 16:22:03 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeSet-Cookie: cf_chl_2=; path=/; expires=Thu, Jan 01 1970 00:00:00 UTC; domain=.report-doc.org; SecureSet-Cookie:
2023-11-22 16:22:04 UTC	71	IN	Data Raw: 34 31 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 20 3d 20 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 22 3b 3c 2f 73 63 72 69 70 74 3e 0d 0a Data Ascii: 41<script>window.location.href = "https://www.google.com";</script>
2023-11-22 16:22:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0