Create Interactive Tour

Windows Analysis Report
https://nam.dcv.ms/TgEkOrA6UC

Overview

General Information

Sample URL:	https://nam.dcv.ms/TgEkOrA6UC
Analysis ID:	1594557
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Yara detected HtmlPhish29

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

AI detected suspicious URL

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 3552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,17684668280588792171,4281582922832748334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.dcv.ms/TgEkOrA6UC" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security
2.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary
• Boot Survival
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: http://tdn.docshostingservice.com/WeQiU/	Avira URL Cloud: Label: malware
Source: https://6353104403.lawyerfederaldocs.com/next.php	Avira URL Cloud: Label: malware
Source: https://tdn.docshostingservice.com/WeQiU	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://tdn.docshostingservice.com/WeQiU/

Joe Sandbox AI: Score: 8 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'tdn.docshostingservice.com' does not match the legitimate domain for Microsoft., The domain 'docshostingservice.com' does not appear to be directly associated with Microsoft., The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites., The URL structure includes a subdomain 'tdn', which could be an attempt to obscure the true nature of the site. DOM: 2.7.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 2.7.pages.csv, type: HTML

Yara detected HtmlPhish29

Source: Yara match

File source: 1.2.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u

Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT HERE' Source: '1.2.pages.csv'

AI detected suspicious Javascript

Source: 0.24.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://tdn.docshostingservice.com/WeQiU/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script retrieves a parameter from the URL, decodes it using the `atob` function, and assigns the result to the `rh13z8jemt` variable. This suggests the potential for malicious activity, such as loading and executing remote code or transmitting sensitive user data to an untrusted domain.

AI detected suspicious URL

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://nam.dcv.ms
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: https://nam.dcv.ms

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.2

OCR Text: New PDF Document Received Received on Thursday January 16, 2025 You've received (2) PDF Documents for your review VIEW DOCUMENT HERE

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: Number of links: 0

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: Invalid link: Privacy statement

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: <input type="password" .../> found

Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon
Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon
Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon
Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: No <meta name="author".. found

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /TgEkOrA6UC HTTP/1.1Host: nam.dcv.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/ls-pro.en-us.ba3db0403.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/css/dist/cv-response-page.min.92870c5.css HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.min.5e8194d.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/ls-pro.en-us.ba3db0403.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.min.5e8194d.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.postsubmit.ae2b319.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.quiz.4c32c58.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.616.93becff.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.616.93becff.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/customervoice/customervoice.ico HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/customervoice/customervoice.ico HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeQiU HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeQiU/ HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044e2e3bcea42c7&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044e2e3bcea42c7&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tdn.docshostingservice.com/WeQiU/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=b5m4uknv5k7hnk5hsqbar46fmc
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/9044e2e3bcea42c7/1737269383382/de356c1fd81a46bddefd36b919cdb8eeba81bc429d6324867d86a202bba2e10d/jadLPfBi_mOFiC2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9044e2e3bcea42c7/1737269383384/a-yfHM4XNZxDAiH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9044e2e3bcea42c7/1737269383384/a-yfHM4XNZxDAiH HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tdn.docshostingservice.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tdn.docshostingservice.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tdn.docshostingservice.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6353104403-1323985617.cos.na-ashburn.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6353104403-1323985617.cos.na-ashburn.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 6353104403.lawyerfederaldocs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeQiU/ HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: nam.dcv.ms
Source: global traffic	DNS traffic detected: DNS query: cdn.forms.office.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tdn.docshostingservice.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6353104403-1323985617.cos.na-ashburn.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 6353104403.lawyerfederaldocs.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3495sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 19 Jan 2025 06:49:43 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fKq2zwu9ay0ZDxLMVGz15Cqny15sSPA37jwXHtPMicDKyvTsIDKGwN0MN4izcCCy%2FvBkKJpokzSnaBIDt4OGXaNtmgV6XHgDuJe%2FDC5f5%2BH2PRxht%2FubjiVD%2F%2By6XrU396gzwb5xBcFrN0sN4A%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9044e2f129e44612-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=38453&min_rtt=38452&rtt_var=14422&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1238&delivery_rate=75915&cwnd=32&unsent_bytes=0&cid=91ea02fb957d415a&ts=320&x=0"

Source: chromecache_154.1.dr, chromecache_116.1.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_154.1.dr, chromecache_116.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_154.1.dr, chromecache_116.1.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_149.1.dr, chromecache_150.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_138.1.dr, chromecache_107.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_153.1.dr, chromecache_143.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.cachegroup-nerve.min.7d
Source: chromecache_109.1.dr, chromecache_126.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.1ds.e8b22bb.js.ma
Source: chromecache_117.1.dr, chromecache_125.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.616.93becff.js.ma
Source: chromecache_120.1.dr, chromecache_156.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvheadertheme.5c3
Source: chromecache_113.1.dr, chromecache_132.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvtitlerender.e68
Source: chromecache_106.1.dr, chromecache_136.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.ir.96ce202.js.map
Source: chromecache_163.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.postsubmit.ae2b31
Source: chromecache_111.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.quiz.4c32c58.js.m
Source: chromecache_135.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.vendors.aa37695.j
Source: chromecache_154.1.dr, chromecache_116.1.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.min.5e8194d.js.map/7508
Source: chromecache_107.1.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_155.1.dr	String found in binary or memory: https://forms.office.com.
Source: chromecache_157.1.dr, chromecache_151.1.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_105.1.dr, chromecache_131.1.dr, chromecache_110.1.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_105.1.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/customize/)
Source: chromecache_115.1.dr, chromecache_160.1.dr	String found in binary or memory: https://github.com/SoapBox/linkifyjs
Source: chromecache_105.1.dr, chromecache_131.1.dr, chromecache_110.1.dr, chromecache_157.1.dr, chromecache_151.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_131.1.dr, chromecache_110.1.dr, chromecache_157.1.dr, chromecache_151.1.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_117.1.dr, chromecache_125.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_117.1.dr, chromecache_125.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_117.1.dr, chromecache_125.1.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_158.1.dr, chromecache_130.1.dr	String found in binary or memory: https://mfpembedcdnwus2.azureedge.net/mfpembedcontwus2/Embed.css
Source: chromecache_158.1.dr, chromecache_130.1.dr	String found in binary or memory: https://mfpembedcdnwus2.azureedge.net/mfpembedcontwus2/Embed.js
Source: chromecache_154.1.dr, chromecache_116.1.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_107.1.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_117.1.dr, chromecache_125.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_158.1.dr, chromecache_130.1.dr	String found in binary or memory: https://tdn.docshostingservice.com/WeQiU
Source: chromecache_138.1.dr, chromecache_107.1.dr	String found in binary or memory: https://underscorejs.org

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: classification engine

Classification label: mal88.phis.win@20/97@48/19

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,17684668280588792171,4281582922832748334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.dcv.ms/TgEkOrA6UC"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2192 --field-trial-handle=1924,i,17684668280588792171,4281582922832748334,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: chromecache_105.1.dr

Binary or memory string: '}.ms-Icon--ConnectVirtualMachine::before{content:'

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	3 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nam.dcv.ms/TgEkOrA6UC	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://tdn.docshostingservice.com/favicon.ico	0%	Avira URL Cloud	safe
http://tdn.docshostingservice.com/WeQiU/	100%	Avira URL Cloud	malware
https://6353104403.lawyerfederaldocs.com/next.php	100%	Avira URL Cloud	malware
https://6353104403-1323985617.cos.na-ashburn.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://tdn.docshostingservice.com/WeQiU	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
e329293.dscd.akamaiedge.net	95.101.182.65	true	false	high
cos.na-ashburn.myqcloud.com	49.51.78.226	true	false	high
s-part-0033.t-0009.t-msedge.net	13.107.246.61	true	false	high
c-msn-pme.trafficmanager.net	13.74.129.1	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
tdn.docshostingservice.com	188.114.97.3	true	false	high
a1894.dscms.akamai.net	2.23.154.32	true	false	high
code.jquery.com	151.101.194.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.250.185.164	true	false	high
6353104403.lawyerfederaldocs.com	162.241.125.28	true	false	high
6353104403-1323985617.cos.na-ashburn.myqcloud.com	unknown	unknown	false	unknown
nam.dcv.ms	unknown	unknown	true	unknown
aadcdn.msftauth.net	unknown	unknown	false	high
cdn.forms.office.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.forms.office.net/forms/scripts/dists/ls-pro.en-us.ba3db0403.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.quiz.4c32c58.js	false		high
https://tdn.docshostingservice.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/672eb098a9f3/api.js	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/	false		high
https://cdn.forms.office.net/forms/css/dist/cv-response-page.min.92870c5.css	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.postsubmit.ae2b319.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js	false		high
https://tdn.docshostingservice.com/WeQiU/	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9044e2e3bcea42c7/1737269383382/de356c1fd81a46bddefd36b919cdb8eeba81bc429d6324867d86a202bba2e10d/jadLPfBi_mOFiC2	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044e2e3bcea42c7&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3	false		high
https://6353104403-1323985617.cos.na-ashburn.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.616.93becff.js	false		high
https://6353104403.lawyerfederaldocs.com/next.php	false	Avira URL Cloud: malware	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js	false		high
https://cdn.forms.office.net/forms/images/customervoice/customervoice.ico	false		high
https://nam.dcv.ms/TgEkOrA6UC	false		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9044e2e3bcea42c7/1737269383384/a-yfHM4XNZxDAiH	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://cdn.forms.office.net/forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://cdn.forms.office.net/forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.min.5e8194d.js	false		high
http://tdn.docshostingservice.com/WeQiU/	false	Avira URL Cloud: malware	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://tdn.docshostingservice.com/WeQiU	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://jquery.org/license	chromecache_154.1.dr, chromecache_116.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvtitlerender.e68	chromecache_113.1.dr, chromecache_132.1.dr	false	high
http://jqueryui.com	chromecache_154.1.dr, chromecache_116.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.vendors.aa37695.j	chromecache_135.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvheadertheme.5c3	chromecache_120.1.dr, chromecache_156.1.dr	false	high
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_154.1.dr, chromecache_116.1.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_131.1.dr, chromecache_110.1.dr, chromecache_157.1.dr, chromecache_151.1.dr	false	high
https://github.com/SoapBox/linkifyjs	chromecache_115.1.dr, chromecache_160.1.dr	false	high
https://forms.office.com.	chromecache_155.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.postsubmit.ae2b31	chromecache_163.1.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_149.1.dr, chromecache_150.1.dr	false	high
https://underscorejs.org	chromecache_138.1.dr, chromecache_107.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.1ds.e8b22bb.js.ma	chromecache_109.1.dr, chromecache_126.1.dr	false	high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_138.1.dr, chromecache_107.1.dr	false	high
https://getbootstrap.com/docs/3.4/customize/)	chromecache_105.1.dr	false	high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_107.1.dr	false	high
http://api.jqueryui.com/category/ui-core/	chromecache_154.1.dr, chromecache_116.1.dr	false	high
https://getbootstrap.com/)	chromecache_105.1.dr, chromecache_131.1.dr, chromecache_110.1.dr	false	high
https://jquery.org/license	chromecache_117.1.dr, chromecache_125.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.quiz.4c32c58.js.m	chromecache_111.1.dr	false	high
https://jquery.com/	chromecache_117.1.dr, chromecache_125.1.dr	false	high
https://getbootstrap.com)	chromecache_157.1.dr, chromecache_151.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.ir.96ce202.js.map	chromecache_106.1.dr, chromecache_136.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.min.5e8194d.js.map/7508	chromecache_154.1.dr, chromecache_116.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.616.93becff.js.ma	chromecache_117.1.dr, chromecache_125.1.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.cachegroup-nerve.min.7d	chromecache_153.1.dr, chromecache_143.1.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_105.1.dr, chromecache_131.1.dr, chromecache_110.1.dr, chromecache_157.1.dr, chromecache_151.1.dr	false	high
https://fb.me/react-polyfills	chromecache_107.1.dr	false	high
https://sizzlejs.com/	chromecache_117.1.dr, chromecache_125.1.dr	false	high
https://js.foundation/	chromecache_117.1.dr, chromecache_125.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
95.101.182.65	e329293.dscd.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
2.23.209.17	unknown	European Union	1273	CWVodafoneGroupPLCEU	false
49.51.78.226	cos.na-ashburn.myqcloud.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
162.241.125.28	6353104403.lawyerfederaldocs.com	United States	46606	UNIFIEDLAYER-AS-1US	false
142.250.185.164	www.google.com	United States	15169	GOOGLEUS	false
2.23.154.32	a1894.dscms.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
184.50.113.42	unknown	United States	16625	AKAMAI-ASUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
104.18.11.207	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	tdn.docshostingservice.com	European Union	13335	CLOUDFLARENETUS	false
49.51.77.119	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1594557
Start date and time:	2025-01-19 07:48:53 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 28s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://nam.dcv.ms/TgEkOrA6UC
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@20/97@48/19

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, SgrmBroker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.195, 142.250.185.174, 108.177.15.84, 142.250.186.142, 13.107.246.69, 13.107.246.51, 13.107.246.70, 13.107.246.40, 13.107.246.57, 172.217.18.14, 216.58.206.78, 2.22.50.144, 204.79.197.237, 13.107.21.237, 142.250.185.238, 142.250.185.142, 142.250.186.170, 142.250.185.138, 142.250.184.234, 142.250.185.234, 142.250.185.74, 142.250.186.42, 142.250.181.234, 216.58.206.74, 142.250.184.202, 172.217.16.202, 142.250.185.202, 142.250.186.138, 142.250.186.74, 216.58.206.42, 172.217.18.10, 142.250.185.106, 13.107.246.45, 13.74.129.1, 2.19.106.160, 20.109.210.53, 13.107.246.61
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, cdn.forms.office.net.edgesuite.net, www.tm.aadcdn.msftauth.trafficmanager.net, clientservices.googleapis.com, clients2.google.com, customervoice.microsoft.com, redirector.gvt1.com, csp.microsoft.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, c-bing-com.dual-a-0034.a-msedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, customervoice-prod.forms.office.com.akadns.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.tm.aadcdn.msftauth.akadns.net, c.bing.com, dual-a-0034.a-msedge.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, c1.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.dcv.ms/TgEkOrA6UC

Input	Output
URL: https://nam.dcv.ms Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true, "reasoning": "This URL appears to be attempting to mimic Microsoft's domain (ms). The unusual subdomain structure 'nam.dcv' and the .ms TLD (while it is a valid country code for Montserrat) make this suspicious when combined with the apparent attempt to associate with Microsoft." }
URL: https://nam.dcv.ms
URL: https://tdn.docshostingservice.com/WeQiU/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. While it does not demonstrate any high-risk indicators, the lack of context around the form's purpose and the potential for misuse warrants a low-risk score." }
function IceBloom() { document.forms[0].submit(); }
URL: https://tdn.docshostingservice.com/WeQiU/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script retrieves a parameter from the URL, decodes it using the `atob` function, and assigns the result to the `rh13z8jemt` variable. This suggests the potential for malicious activity, such as loading and executing remote code or transmitting sensitive user data to an untrusted domain." }
const accession = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Id cow picanha turkey pancetta ex, voluptate consectetur adipisicing biltong excepteur sirloin. In et shoulder chislic buffalo bacon irure aliqua leberkas t-bone do consequat lorem prosciutto ullamco. Nostrud tail beef ribs shankle, magna commodo lorem doner occaecat sirloin boudin prosciutto pork belly tempor. Short ribs prosciutto est ham tail, cow nulla aliquip. Dolore turducken ex dolore, aliquip shank occaecat et beef. Est turkey exercitation ipsum spare ribs. Id andouille porchetta culpa aliqua ham, ribeye cow brisket veniam beef burgdoggen. Laborum ullamco esse, dolor in shoulder sausage excepteur cillum ground round irure incididunt short ribs duis pancetta. Beef turkey sunt turducken sirloin nulla corned beef venison veniam bresaola. Aute doner cow pancetta, tri-tip venison quis. Do picanha bacon velit, dolor drumstick short loin ut. Mollit reprehenderit jerky officia culpa consectetur pork belly. Et eu esse nisi. Kielbasa ex short loin mollit. Ball tip occaecat ground round consequat spare ribs fugiat. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Pastrami porchetta shankle sirloin, ham hock ipsum sausage ham ad salami sed shoulder tail ex. Exercitation swine nostrud, salami nulla beef ground round qui officia pork belly consequat mollit pork sed. Non adipisicing ea culpa consequat ground round sirloin. Pariatur consectetur landjaeger, non shank biltong irure excepteur boudin spare ribs culpa tenderloin chislic. Beef burgdoggen ball tip, proident velit short ribs venison ut voluptate. Venison biltong sint excepteur cupidatat, alcatra ground round chuck picanha ribeye beef strip steak. Magna ullamco prosciutto jerky officia rump aliquip flank duis anim turducken irure mollit. Sed fugiat t-bone pariatur magna commodo pork quis adipisicing ex tempor. Frankfurter boudin beef ribs brisket jerky sausage biltong t-bone ipsum aliqua beef kevin rump adipisicing. Exercitation rump jerky labore velit. Deserunt alcatra jowl porchetta, enim ut nisi ullamco exercitation. Tenderloin elit culpa kevin doner ball tip. Dolore cow lorem venison, nisi brisket consequat pastrami kevin porchetta magna duis frankfurter tail. Jowl cupim sirloin aliqua kielbasa consequat ham hock irure ribeye short loin cupidatat filet mignon. Proident tenderloin picanha cupim et id elit strip steak shankle. rh13z8jemt = accession('e') == '' ? rh13z8jemt : accession('e'); rh13z8jemt = atob(rh13z8jemt);
URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "New PDF Document Received", "prominent_button_name": "VIEW DOCUMENT HERE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "file hosting" }

URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "Email, phone, or Skype" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" }

URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'tdn.docshostingservice.com' does not match the legitimate domain for Microsoft.", "The domain 'docshostingservice.com' does not appear to be directly associated with Microsoft.", "The presence of input fields for 'Email, phone, or Skype' suggests an attempt to collect sensitive information, which is common in phishing sites.", "The URL structure includes a subdomain 'tdn', which could be an attempt to obscure the true nature of the site." ], "riskscore": 8} Google indexed: False
URL: tdn.docshostingservice.com Brands: Microsoft Input Fields: Email, phone, or Skype

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Jan 19 05:49:24 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.981650418784285
Encrypted:	false
SSDEEP:	48:8N0dPTn/bHxZidAKZdA1FehwiZUklqehHy+3:8679DAy
MD5:	E6CE34FBE647BDD4951D798AF8F712C8
SHA1:	882C321D157F7B11B618220C24948C592BF81840
SHA-256:	7EEB28B63F3700D07818505988412A9112E7049D2CF0924F4D9E7BEA235A94C8
SHA-512:	633D8B6D9D23F0C1912357745C3F33D7505E48017F623F3091C594BC353AD16F45456AE29C39CADC4359A5C1D80138068E99DAFBD2BF292141AAA7CD5F27C1FC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......F>j..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I3Z$6....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V3Z+6....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V3Z+6....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V3Z+6..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V3Z-6...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............I.J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 19, 2025 07:49:23.845899105 CET	53	50774	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:23.883352995 CET	53	57009	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:24.586462975 CET	59913	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:24.586604118 CET	56600	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:24.848551035 CET	53	61244	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:26.907433033 CET	50453	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:26.907761097 CET	51126	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:28.159343958 CET	53152	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:28.159517050 CET	53009	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:28.529901981 CET	56204	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:28.530072927 CET	62367	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:28.536542892 CET	53	56204	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:28.536714077 CET	53	62367	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:37.635958910 CET	57693	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:37.636281967 CET	63663	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:37.648916960 CET	53	57693	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:37.649637938 CET	53	63663	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:39.022239923 CET	62652	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:39.022241116 CET	52063	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:39.036166906 CET	53	62652	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:39.181052923 CET	53	52063	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:39.814366102 CET	62049	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:39.814584017 CET	59021	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:39.820928097 CET	53	62049	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:39.821698904 CET	53	59021	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:41.150636911 CET	53534	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:41.150991917 CET	56923	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:41.157521009 CET	53	56923	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:41.158014059 CET	53	53534	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:41.168888092 CET	59522	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:41.169470072 CET	63070	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:41.176134109 CET	53	59522	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:41.176223993 CET	53	63070	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:41.817728043 CET	53	65101	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:51.785787106 CET	50549	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:51.785939932 CET	58659	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:51.799433947 CET	53	58659	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:51.799534082 CET	53	50549	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.490849018 CET	53614	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.491092920 CET	64517	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.491514921 CET	50388	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.491667986 CET	50361	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.492026091 CET	49554	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.492192030 CET	58331	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.492996931 CET	60478	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.493158102 CET	49761	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.493499041 CET	58332	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.493653059 CET	51700	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:53.497724056 CET	53	53614	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.497931004 CET	53	64517	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.498295069 CET	53	50388	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.498347998 CET	53	50361	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.499047041 CET	53	58331	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.499254942 CET	53	49554	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.499288082 CET	53	62658	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.499995947 CET	53	60478	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.500135899 CET	53	49761	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.884840012 CET	53	58332	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:53.907593012 CET	53	51700	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.206602097 CET	60969	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.206831932 CET	59928	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.213412046 CET	53	60969	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.213607073 CET	53	59928	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.251243114 CET	53888	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.251374960 CET	49457	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.254828930 CET	49669	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.255001068 CET	64033	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.257976055 CET	53	49457	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.258297920 CET	53	53888	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.261822939 CET	53	49669	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.262248993 CET	53	64033	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.282157898 CET	55901	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.282303095 CET	57075	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:54.288862944 CET	53	55901	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.289540052 CET	53	57075	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:54.673753023 CET	53	55831	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:55.996917963 CET	52666	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:55.997028112 CET	60271	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:56.001662970 CET	53223	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:56.001822948 CET	57612	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:56.003979921 CET	53	52666	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:56.181432009 CET	53	60271	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:56.212599993 CET	53	57612	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:56.216609001 CET	53	53223	1.1.1.1	192.168.2.16
Jan 19, 2025 07:49:59.870978117 CET	59610	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:49:59.871130943 CET	58224	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:50:00.233778954 CET	53	58224	1.1.1.1	192.168.2.16
Jan 19, 2025 07:50:00.233969927 CET	53	59610	1.1.1.1	192.168.2.16
Jan 19, 2025 07:50:00.790036917 CET	53	62566	1.1.1.1	192.168.2.16
Jan 19, 2025 07:50:02.898389101 CET	62732	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:50:02.898741961 CET	64757	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:50:03.007277966 CET	53	61323	1.1.1.1	192.168.2.16
Jan 19, 2025 07:50:03.811080933 CET	56681	53	192.168.2.16	1.1.1.1
Jan 19, 2025 07:50:03.811336040 CET	50161	53	192.168.2.16	1.1.1.1

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 19, 2025 07:49:29.582984924 CET	192.168.2.16	1.1.1.1	c278	(Port unreachable)	Destination Unreachable
Jan 19, 2025 07:49:39.181142092 CET	192.168.2.16	1.1.1.1	c290	(Port unreachable)	Destination Unreachable
Jan 19, 2025 07:49:56.181581020 CET	192.168.2.16	1.1.1.1	c24d	(Port unreachable)	Destination Unreachable
Jan 19, 2025 07:50:03.991354942 CET	192.168.2.16	1.1.1.1	c2ad	(Port unreachable)	Destination Unreachable

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jan 19, 2025 07:49:24.650599957 CET	1.1.1.1	192.168.2.16	0x402e	No error (0)	nam.dcv.ms	msformspro.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.650599957 CET	1.1.1.1	192.168.2.16	0x402e	No error (0)	msformspro.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.650599957 CET	1.1.1.1	192.168.2.16	0x402e	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.654304028 CET	1.1.1.1	192.168.2.16	0xb44e	No error (0)	nam.dcv.ms	msformspro.azurefd.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.654304028 CET	1.1.1.1	192.168.2.16	0xb44e	No error (0)	msformspro.azurefd.net	firstparty-azurefd-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.654304028 CET	1.1.1.1	192.168.2.16	0xb44e	No error (0)	firstparty-azurefd-prod.trafficmanager.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.654304028 CET	1.1.1.1	192.168.2.16	0xb44e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:24.654304028 CET	1.1.1.1	192.168.2.16	0xb44e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:26.914715052 CET	1.1.1.1	192.168.2.16	0x284b	No error (0)	cdn.forms.office.net	cdn.forms.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:26.914715052 CET	1.1.1.1	192.168.2.16	0x284b	No error (0)	cdn.forms.office.net.edgesuite.net	a1894.dscms.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:26.914715052 CET	1.1.1.1	192.168.2.16	0x284b	No error (0)	a1894.dscms.akamai.net		2.23.154.32	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:26.914715052 CET	1.1.1.1	192.168.2.16	0x284b	No error (0)	a1894.dscms.akamai.net		2.23.154.26	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:26.915338039 CET	1.1.1.1	192.168.2.16	0x31e1	No error (0)	cdn.forms.office.net	cdn.forms.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:26.915338039 CET	1.1.1.1	192.168.2.16	0x31e1	No error (0)	cdn.forms.office.net.edgesuite.net	a1894.dscms.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.166754961 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	cdn.forms.office.net	cdn.forms.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.166754961 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	cdn.forms.office.net.edgesuite.net	a1894.dscms.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.166754961 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	a1894.dscms.akamai.net		184.50.113.42	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:28.166754961 CET	1.1.1.1	192.168.2.16	0xfdd5	No error (0)	a1894.dscms.akamai.net		184.50.113.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:28.167967081 CET	1.1.1.1	192.168.2.16	0xd438	No error (0)	cdn.forms.office.net	cdn.forms.office.net.edgesuite.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.167967081 CET	1.1.1.1	192.168.2.16	0xd438	No error (0)	cdn.forms.office.net.edgesuite.net	a1894.dscms.akamai.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.512460947 CET	1.1.1.1	192.168.2.16	0xfedf	No error (0)	csp-afd-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.512460947 CET	1.1.1.1	192.168.2.16	0xfedf	No error (0)	azurefd-t-prod.trafficmanager.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.512460947 CET	1.1.1.1	192.168.2.16	0xfedf	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.512460947 CET	1.1.1.1	192.168.2.16	0xfedf	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:28.512703896 CET	1.1.1.1	192.168.2.16	0xbf57	No error (0)	csp-afd-prod.azurefd.net	azurefd-t-prod.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.512703896 CET	1.1.1.1	192.168.2.16	0xbf57	No error (0)	azurefd-t-prod.trafficmanager.net	shed.dual-low.s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.536542892 CET	1.1.1.1	192.168.2.16	0x726e	No error (0)	www.google.com		142.250.185.164	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:28.536714077 CET	1.1.1.1	192.168.2.16	0x495b	No error (0)	www.google.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:28.837210894 CET	1.1.1.1	192.168.2.16	0xa5cb	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:28.837210894 CET	1.1.1.1	192.168.2.16	0xa5cb	No error (0)	c-msn-pme.trafficmanager.net		13.74.129.1	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:28.845602036 CET	1.1.1.1	192.168.2.16	0x3ec9	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:31.502734900 CET	1.1.1.1	192.168.2.16	0x5f96	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:31.504607916 CET	1.1.1.1	192.168.2.16	0x4053	No error (0)	c.msn.com	c-msn-pme.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:31.504607916 CET	1.1.1.1	192.168.2.16	0x4053	No error (0)	c-msn-pme.trafficmanager.net		13.74.129.1	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:37.648916960 CET	1.1.1.1	192.168.2.16	0x3485	No error (0)	tdn.docshostingservice.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:37.648916960 CET	1.1.1.1	192.168.2.16	0x3485	No error (0)	tdn.docshostingservice.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:37.649637938 CET	1.1.1.1	192.168.2.16	0x53c	No error (0)	tdn.docshostingservice.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:39.036166906 CET	1.1.1.1	192.168.2.16	0x1cd5	No error (0)	tdn.docshostingservice.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:39.036166906 CET	1.1.1.1	192.168.2.16	0x1cd5	No error (0)	tdn.docshostingservice.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:39.181052923 CET	1.1.1.1	192.168.2.16	0xf7dc	No error (0)	tdn.docshostingservice.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:39.820928097 CET	1.1.1.1	192.168.2.16	0x4fd	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:39.820928097 CET	1.1.1.1	192.168.2.16	0x4fd	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:39.821698904 CET	1.1.1.1	192.168.2.16	0x9c49	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:41.157521009 CET	1.1.1.1	192.168.2.16	0x2f32	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:41.158014059 CET	1.1.1.1	192.168.2.16	0x49ce	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:41.158014059 CET	1.1.1.1	192.168.2.16	0x49ce	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:41.176134109 CET	1.1.1.1	192.168.2.16	0xd13f	No error (0)	challenges.cloudflare.com		104.18.94.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:41.176134109 CET	1.1.1.1	192.168.2.16	0xd13f	No error (0)	challenges.cloudflare.com		104.18.95.41	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:41.176223993 CET	1.1.1.1	192.168.2.16	0x6fb	No error (0)	challenges.cloudflare.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:51.799433947 CET	1.1.1.1	192.168.2.16	0xb0dc	No error (0)	tdn.docshostingservice.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:51.799534082 CET	1.1.1.1	192.168.2.16	0x389d	No error (0)	tdn.docshostingservice.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:51.799534082 CET	1.1.1.1	192.168.2.16	0x389d	No error (0)	tdn.docshostingservice.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.497724056 CET	1.1.1.1	192.168.2.16	0xdf8f	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.497724056 CET	1.1.1.1	192.168.2.16	0xdf8f	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.497724056 CET	1.1.1.1	192.168.2.16	0xdf8f	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.497724056 CET	1.1.1.1	192.168.2.16	0xdf8f	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.498295069 CET	1.1.1.1	192.168.2.16	0x845a	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.498295069 CET	1.1.1.1	192.168.2.16	0x845a	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.498347998 CET	1.1.1.1	192.168.2.16	0x4bb9	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:53.499047041 CET	1.1.1.1	192.168.2.16	0x16b6	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:53.499254942 CET	1.1.1.1	192.168.2.16	0x6afb	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.499254942 CET	1.1.1.1	192.168.2.16	0x6afb	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.499995947 CET	1.1.1.1	192.168.2.16	0xad8	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.499995947 CET	1.1.1.1	192.168.2.16	0xad8	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.500135899 CET	1.1.1.1	192.168.2.16	0xfe10	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:53.884840012 CET	1.1.1.1	192.168.2.16	0x941d	No error (0)	6353104403-1323985617.cos.na-ashburn.myqcloud.com	cos.na-ashburn.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:53.884840012 CET	1.1.1.1	192.168.2.16	0x941d	No error (0)	cos.na-ashburn.myqcloud.com		49.51.78.226	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:53.884840012 CET	1.1.1.1	192.168.2.16	0x941d	No error (0)	cos.na-ashburn.myqcloud.com		49.51.77.119	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.213412046 CET	1.1.1.1	192.168.2.16	0x9423	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.213412046 CET	1.1.1.1	192.168.2.16	0x9423	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.213607073 CET	1.1.1.1	192.168.2.16	0x271d	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:54.258297920 CET	1.1.1.1	192.168.2.16	0xa983	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.258297920 CET	1.1.1.1	192.168.2.16	0xa983	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.258297920 CET	1.1.1.1	192.168.2.16	0xa983	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.258297920 CET	1.1.1.1	192.168.2.16	0xa983	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.261822939 CET	1.1.1.1	192.168.2.16	0xea4	No error (0)	stackpath.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.261822939 CET	1.1.1.1	192.168.2.16	0xea4	No error (0)	stackpath.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.262248993 CET	1.1.1.1	192.168.2.16	0xb09f	No error (0)	stackpath.bootstrapcdn.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:54.288862944 CET	1.1.1.1	192.168.2.16	0xe9ba	No error (0)	maxcdn.bootstrapcdn.com		104.18.11.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.288862944 CET	1.1.1.1	192.168.2.16	0xe9ba	No error (0)	maxcdn.bootstrapcdn.com		104.18.10.207	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:54.289540052 CET	1.1.1.1	192.168.2.16	0x5a1e	No error (0)	maxcdn.bootstrapcdn.com			65	IN (0x0001)	false
Jan 19, 2025 07:49:56.003979921 CET	1.1.1.1	192.168.2.16	0xee3c	No error (0)	6353104403-1323985617.cos.na-ashburn.myqcloud.com	cos.na-ashburn.myqcloud.com		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:49:56.003979921 CET	1.1.1.1	192.168.2.16	0xee3c	No error (0)	cos.na-ashburn.myqcloud.com		49.51.77.119	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:56.003979921 CET	1.1.1.1	192.168.2.16	0xee3c	No error (0)	cos.na-ashburn.myqcloud.com		49.51.78.226	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:49:56.216609001 CET	1.1.1.1	192.168.2.16	0x7985	No error (0)	6353104403.lawyerfederaldocs.com		162.241.125.28	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:00.233969927 CET	1.1.1.1	192.168.2.16	0x658c	No error (0)	6353104403.lawyerfederaldocs.com		162.241.125.28	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:02.904998064 CET	1.1.1.1	192.168.2.16	0x8e15	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.904998064 CET	1.1.1.1	192.168.2.16	0x8e15	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.904998064 CET	1.1.1.1	192.168.2.16	0x8e15	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.904998064 CET	1.1.1.1	192.168.2.16	0x8e15	No error (0)	e329293.dscd.akamaiedge.net		95.101.182.65	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:02.904998064 CET	1.1.1.1	192.168.2.16	0x8e15	No error (0)	e329293.dscd.akamaiedge.net		95.101.182.98	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:02.906037092 CET	1.1.1.1	192.168.2.16	0x7f0f	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.906037092 CET	1.1.1.1	192.168.2.16	0x7f0f	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.906037092 CET	1.1.1.1	192.168.2.16	0x7f0f	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.940704107 CET	1.1.1.1	192.168.2.16	0xd696	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:02.940704107 CET	1.1.1.1	192.168.2.16	0xd696	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:03.790667057 CET	1.1.1.1	192.168.2.16	0xb2e8	No error (0)	shed.dual-low.s-part-0033.t-0009.t-msedge.net	s-part-0033.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:03.790667057 CET	1.1.1.1	192.168.2.16	0xb2e8	No error (0)	s-part-0033.t-0009.t-msedge.net		13.107.246.61	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:03.818039894 CET	1.1.1.1	192.168.2.16	0xe3e2	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.trafficmanager.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:03.818039894 CET	1.1.1.1	192.168.2.16	0xe3e2	No error (0)	www.tm.aadcdn.msftauth.trafficmanager.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:03.818039894 CET	1.1.1.1	192.168.2.16	0xe3e2	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:03.818039894 CET	1.1.1.1	192.168.2.16	0xe3e2	No error (0)	e329293.dscd.akamaiedge.net		2.23.209.17	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:03.818039894 CET	1.1.1.1	192.168.2.16	0xe3e2	No error (0)	e329293.dscd.akamaiedge.net		2.23.209.34	A (IP address)	IN (0x0001)	false
Jan 19, 2025 07:50:03.991281986 CET	1.1.1.1	192.168.2.16	0xb76	No error (0)	aadcdn.msftauth.net	www.tm.aadcdn.msftauth.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:03.991281986 CET	1.1.1.1	192.168.2.16	0xb76	No error (0)	www.tm.aadcdn.msftauth.akadns.net	aadcdn.msftauth.edgekey.net		CNAME (Canonical name)	IN (0x0001)	false
Jan 19, 2025 07:50:03.991281986 CET	1.1.1.1	192.168.2.16	0xb76	No error (0)	aadcdn.msftauth.edgekey.net	e329293.dscd.akamaiedge.net		CNAME (Canonical name)	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
Jan 19, 2025 07:49:39.061701059 CET	447	OUT	GET /WeQiU/ HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 19, 2025 07:49:39.559761047 CET	1078	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 19 Jan 2025 06:49:39 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 19 Jan 2025 07:49:39 GMT Location: https://tdn.docshostingservice.com/WeQiU/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hHoCmrEu9tvcgcWhvPWrAf3YHSmwAgRKQsYaPjQsZKoRRV9RChnrWIC9W8Ag1%2B6zxQW4xKtgkkVOJDZROnKVH4%2Fs3fa7eRqxHI35a9l4%2BXfHsg4X7RBbYBBFy2PEM6qFPHcF3DES8OCgBN0QSw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9044e2d5d87d5b3b-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=8416&min_rtt=8416&rtt_var=4208&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=447&delivery_rate=0&cwnd=30&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:25 UTC	663	OUT	GET /TgEkOrA6UC HTTP/1.1 Host: nam.dcv.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:25 UTC	452	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 19 Jan 2025 06:49:25 GMT Content-Length: 0 Connection: close Location: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Request-Context: appId=cid-v1:21349bca-d329-496c-8aa0-9636da32423a Delay: 0.9534 x-azure-ref: 20250119T064925Z-15fdc555dff27gskhC1EWRq24c00000006x0000000004cx3 X-Cache: CONFIG_NOCACHE

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:27 UTC	618	OUT	GET /forms/scripts/dists/ls-pro.en-us.ba3db0403.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:27 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 528595 Content-Type: application/javascript Content-MD5: hWIZETe6GRfPWIdQjjaFPQ== Last-Modified: Mon, 02 Dec 2024 05:03:10 GMT Accept-Ranges: bytes ETag: "0x8DD128E9E4170F2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: e280e19e-a01e-0050-0b66-629561000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:27 GMT Date: Sun, 19 Jan 2025 06:49:27 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:27 UTC	1115	IN	Data Raw: 77 69 6e 64 6f 77 2e 46 6f 72 6d 73 4c 73 4d 61 70 20 3d 20 28 77 69 6e 64 6f 77 2e 46 6f 72 6d 73 4c 73 4d 61 70 20 7c 7c 20 7b 7d 29 3b 77 69 6e 64 6f 77 2e 46 6f 72 6d 73 4c 73 4d 61 70 5b 22 65 6e 2d 75 73 22 5d 3d 7b 22 43 6f 6d 6d 6f 6e 5f 43 6c 6f 73 65 5f 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 43 6f 6d 6d 6f 6e 5f 42 61 63 6b 5f 54 65 78 74 22 3a 22 42 61 63 6b 22 2c 22 43 6f 6d 6d 6f 6e 5f 43 61 6e 63 65 6c 5f 54 65 78 74 22 3a 22 43 61 6e 63 65 6c 22 2c 22 43 6f 6d 6d 6f 6e 5f 53 74 6f 70 5f 54 65 78 74 22 3a 22 53 74 6f 70 22 2c 22 43 6f 6d 6d 6f 6e 5f 44 65 6c 65 74 65 5f 54 65 78 74 22 3a 22 44 65 6c 65 74 65 22 2c 22 43 6f 6d 6d 6f 6e 5f 44 65 6c 65 74 65 64 5f 54 65 78 74 22 3a 22 44 65 6c 65 74 65 64 22 2c 22 43 6f 6d 6d 6f 6e 5f 52 Data Ascii: window.FormsLsMap = (window.FormsLsMap \|\| {});window.FormsLsMap["en-us"]={"Common_Close_Text":"Close","Common_Back_Text":"Back","Common_Cancel_Text":"Cancel","Common_Stop_Text":"Stop","Common_Delete_Text":"Delete","Common_Deleted_Text":"Deleted","Common_R
2025-01-19 06:49:27 UTC	14336	IN	Data Raw: 5f 54 65 78 74 22 3a 22 41 6c 6c 6f 77 22 2c 22 43 6f 6d 6d 6f 6e 5f 43 6f 6e 66 69 72 6d 5f 54 65 78 74 22 3a 22 43 6f 6e 66 69 72 6d 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 50 65 6f 70 6c 65 22 3a 22 50 65 6f 70 6c 65 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 47 72 6f 75 70 73 22 3a 22 47 72 6f 75 70 73 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 45 78 74 65 72 6e 61 6c 22 3a 22 55 73 65 72 20 6f 75 74 73 69 64 65 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 43 68 61 74 73 22 3a 22 43 68 61 74 73 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 43 68 61 6e 6e 65 6c 73 22 3a 22 43 68 61 6e 6e 65 6c 73 22 2c 22 44 65 73 69 67 6e 65 72 5f 41 63 74 69 6f 6e 42 61 72 5f 44 65 6c 65 74 Data Ascii: _Text":"Allow","Common_Confirm_Text":"Confirm","Contact_Type_People":"People","Contact_Type_Groups":"Groups","Contact_Type_External":"User outside your organization","Contact_Type_Chats":"Chats","Contact_Type_Channels":"Channels","Designer_ActionBar_Delet
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 69 6e 67 53 68 61 70 65 54 72 6f 70 68 79 22 3a 22 54 72 6f 70 68 79 22 2c 22 44 65 73 69 67 6e 65 72 5f 44 65 73 63 72 69 70 74 69 6f 6e 46 6f 72 52 61 74 69 6e 67 53 68 61 70 65 46 6c 61 67 22 3a 22 46 6c 61 67 22 2c 22 44 65 73 69 67 6e 65 72 5f 44 65 73 63 72 69 70 74 69 6f 6e 46 6f 72 52 61 74 69 6e 67 53 68 61 70 65 4c 69 67 68 74 62 75 6c 62 22 3a 22 4c 69 67 68 74 62 75 6c 62 22 2c 22 44 65 73 69 67 6e 65 72 5f 44 65 73 63 72 69 70 74 69 6f 6e 46 6f 72 52 61 74 69 6e 67 53 68 61 70 65 52 69 62 62 6f 6e 22 3a 22 52 69 62 62 6f 6e 22 2c 22 44 65 73 69 67 6e 50 61 67 65 5f 4e 61 76 42 61 72 5f 52 65 63 79 63 6c 65 42 69 6e 22 3a 22 52 65 63 79 63 6c 65 20 62 69 6e 22 2c 22 44 65 73 69 67 6e 50 61 67 65 5f 4e 61 76 42 61 72 5f 46 65 65 64 62 61 63 6b Data Ascii: ingShapeTrophy":"Trophy","Designer_DescriptionForRatingShapeFlag":"Flag","Designer_DescriptionForRatingShapeLightbulb":"Lightbulb","Designer_DescriptionForRatingShapeRibbon":"Ribbon","DesignPage_NavBar_RecycleBin":"Recycle bin","DesignPage_NavBar_Feedback
2025-01-19 06:49:28 UTC	2024	IN	Data Raw: 67 65 5f 53 65 74 74 69 6e 67 73 50 61 6e 65 5f 53 68 75 66 66 6c 65 51 75 65 73 74 69 6f 6e 22 3a 22 53 68 75 66 66 6c 65 20 71 75 65 73 74 69 6f 6e 73 22 2c 22 44 65 73 69 67 6e 50 61 67 65 5f 53 65 74 74 69 6e 67 73 50 61 6e 65 5f 53 68 75 66 66 6c 65 41 6c 6c 51 75 65 73 74 69 6f 6e 73 22 3a 22 41 6c 6c 20 71 75 65 73 74 69 6f 6e 73 22 2c 22 44 65 73 69 67 6e 50 61 67 65 5f 53 65 74 74 69 6e 67 73 50 61 6e 65 5f 4c 6f 63 6b 47 69 76 65 6e 51 75 65 73 74 69 6f 6e 73 22 3a 22 4c 6f 63 6b 20 71 75 65 73 74 69 6f 6e 73 22 2c 22 44 65 73 69 67 6e 50 61 67 65 5f 53 65 74 74 69 6e 67 73 50 61 6e 65 5f 52 65 73 70 6f 6e 73 65 5f 54 69 74 6c 65 22 3a 22 4f 70 74 69 6f 6e 73 20 66 6f 72 20 72 65 73 70 6f 6e 73 65 73 22 2c 22 44 65 73 69 67 6e 50 61 67 65 5f 53 Data Ascii: ge_SettingsPane_ShuffleQuestion":"Shuffle questions","DesignPage_SettingsPane_ShuffleAllQuestions":"All questions","DesignPage_SettingsPane_LockGivenQuestions":"Lock questions","DesignPage_SettingsPane_Response_Title":"Options for responses","DesignPage_S
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 75 5f 50 72 65 66 69 6c 6c 22 3a 22 47 65 74 20 50 72 65 2d 66 69 6c 6c 65 64 20 55 52 4c 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 43 6f 70 79 55 52 4c 22 3a 22 4c 69 6e 6b 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 45 6d 62 65 64 43 6f 64 65 22 3a 22 45 6d 62 65 64 20 43 6f 64 65 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 51 52 43 6f 64 65 22 3a 22 51 52 20 63 6f 64 65 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 53 65 6e 64 54 6f 50 65 6f 70 6c 65 22 3a 22 53 65 6e 64 20 74 6f 20 70 65 6f 70 6c 65 3a 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 53 68 61 72 65 54 6f 53 6f 63 69 61 6c 22 3a 22 53 68 61 72 65 22 2c 22 46 6c 65 78 5f 50 61 6e 65 5f 53 68 61 72 Data Ascii: u_Prefill":"Get Pre-filled URL","FlexPane_SendView_CopyURL":"Link","FlexPane_SendView_EmbedCode":"Embed Code","FlexPane_SendView_QRCode":"QR code","FlexPane_SendView_SendToPeople":"Send to people:","FlexPane_SendView_ShareToSocial":"Share","Flex_Pane_Shar
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 61 74 75 73 5f 42 65 74 77 65 65 6e 5f 42 75 74 74 6f 6e 73 5f 54 65 78 74 22 3a 22 6f 72 22 2c 22 41 64 64 69 6e 5f 53 79 6e 63 53 74 61 74 75 73 5f 42 75 74 74 6f 6e 5f 53 77 69 74 63 68 41 63 63 6f 75 6e 74 22 3a 22 53 77 69 74 63 68 20 61 63 63 6f 75 6e 74 22 2c 22 54 65 61 63 68 69 6e 67 55 69 5f 47 6f 74 49 74 22 3a 22 47 6f 74 20 69 74 22 2c 22 54 65 61 63 68 69 6e 67 55 69 5f 54 72 79 49 74 22 3a 22 54 72 79 20 69 74 22 2c 22 54 65 61 63 68 69 6e 67 55 69 5f 46 72 6f 6d 52 43 5f 54 69 74 6c 65 22 3a 22 46 69 6c 6c 65 64 20 66 6f 72 6d 73 22 2c 22 54 65 61 63 68 69 6e 67 55 69 5f 46 72 6f 6d 52 43 5f 44 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 59 6f 75 72 20 72 65 63 65 6e 74 20 66 69 6c 6c 65 64 20 66 6f 72 6d 73 20 69 73 20 73 61 76 65 64 20 68 65 Data Ascii: atus_Between_Buttons_Text":"or","Addin_SyncStatus_Button_SwitchAccount":"Switch account","TeachingUi_GotIt":"Got it","TeachingUi_TryIt":"Try it","TeachingUi_FromRC_Title":"Filled forms","TeachingUi_FromRC_Description":"Your recent filled forms is saved he
2025-01-19 06:49:28 UTC	7952	IN	Data Raw: 69 65 77 5f 4e 61 76 42 61 72 5f 41 76 65 72 61 67 65 53 63 6f 72 65 5f 4c 61 62 65 6c 22 3a 22 50 6f 69 6e 74 73 3a 20 7b 30 7d 22 2c 22 41 63 63 65 73 73 69 62 69 6c 69 74 79 5f 53 6f 72 74 43 6f 6c 75 6d 6e 54 6f 67 67 6c 65 42 75 74 74 6f 6e 5f 4c 61 62 65 6c 22 3a 22 42 75 74 74 6f 6e 20 75 73 65 64 20 74 6f 20 74 6f 67 67 6c 65 20 63 6f 6c 75 6d 6e 20 73 6f 72 74 20 6f 72 64 65 72 20 62 65 74 77 65 65 6e 20 61 73 63 65 6e 64 69 6e 67 20 61 6e 64 20 64 65 73 63 65 6e 64 69 6e 67 2e 22 2c 22 41 6e 61 6c 79 7a 65 56 69 65 77 5f 46 6f 72 6d 53 74 61 74 75 73 5f 41 63 63 65 73 73 69 62 69 6c 69 74 79 4c 61 62 65 6c 22 3a 22 54 68 65 20 66 6f 72 6d 20 73 74 61 74 75 73 20 69 73 20 7b 30 7d 22 2c 22 41 6e 61 6c 79 7a 65 56 69 65 77 5f 4e 75 6d 62 65 72 4f Data Ascii: iew_NavBar_AverageScore_Label":"Points: {0}","Accessibility_SortColumnToggleButton_Label":"Button used to toggle column sort order between ascending and descending.","AnalyzeView_FormStatus_AccessibilityLabel":"The form status is {0}","AnalyzeView_NumberO
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 6c 52 65 63 65 69 70 74 5f 44 69 73 61 62 6c 65 64 54 6f 6f 6c 74 69 70 22 3a 22 54 68 69 73 20 6f 70 74 69 6f 6e 20 69 73 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 77 68 65 6e 20 6e 61 6d 65 73 20 61 72 65 20 6e 6f 74 20 72 65 63 6f 72 64 65 64 2e 22 2c 22 52 65 45 78 70 6f 72 74 54 6f 45 78 63 65 6c 22 3a 22 53 79 6e 63 20 61 6c 6c 20 72 65 73 70 6f 6e 73 65 73 20 74 6f 20 61 20 6e 65 77 20 77 6f 72 6b 62 6f 6f 6b 22 2c 22 52 65 45 78 70 6f 72 74 54 6f 45 78 63 65 6c 5f 56 32 22 3a 22 44 69 73 63 6f 6e 6e 65 63 74 20 61 6e 64 20 73 79 6e 63 20 74 6f 20 61 20 6e 65 77 20 77 6f 72 6b 62 6f 6f 6b 22 2c 22 52 65 45 78 70 6f 72 74 54 6f 45 78 63 65 6c 5f 43 6f 6e 66 69 72 6d 5f 4d 65 73 73 61 67 65 22 3a 22 41 20 6e 65 77 20 77 6f 72 6b 62 6f 6f 6b 20 77 Data Ascii: lReceipt_DisabledTooltip":"This option is not available when names are not recorded.","ReExportToExcel":"Sync all responses to a new workbook","ReExportToExcel_V2":"Disconnect and sync to a new workbook","ReExportToExcel_Confirm_Message":"A new workbook w
2025-01-19 06:49:28 UTC	8048	IN	Data Raw: 61 69 6c 73 20 61 62 6f 75 74 20 74 68 65 20 61 62 75 73 65 20 6f 72 20 6f 66 66 65 6e 73 69 76 65 20 62 65 68 61 76 69 6f 72 20 79 6f 75 27 72 65 20 72 65 70 6f 72 74 69 6e 67 2e 22 2c 22 52 65 70 6f 72 74 5f 50 61 67 65 5f 52 65 70 6f 72 74 65 72 4e 61 6d 65 5f 50 6c 61 63 68 65 48 6f 6c 64 65 72 5f 56 32 22 3a 22 45 6e 74 65 72 20 79 6f 75 72 20 66 75 6c 6c 20 6e 61 6d 65 22 2c 22 52 65 70 6f 72 74 5f 50 61 67 65 5f 52 65 70 6f 72 74 65 72 45 6d 61 69 6c 5f 50 6c 61 63 68 65 48 6f 6c 64 65 72 5f 56 32 22 3a 22 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 20 61 64 64 72 65 73 73 22 2c 22 52 65 70 6f 72 74 5f 50 61 67 65 5f 52 65 70 6f 72 74 65 72 49 6e 66 6f 5f 45 6e 61 62 6c 65 51 75 65 73 74 69 6f 6e 5f 44 65 73 63 72 69 70 74 69 6f 6e 5f 53 74 72 Data Ascii: ails about the abuse or offensive behavior you're reporting.","Report_Page_ReporterName_PlacheHolder_V2":"Enter your full name","Report_Page_ReporterEmail_PlacheHolder_V2":"Enter your email address","Report_Page_ReporterInfo_EnableQuestion_Description_Str
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 73 68 61 72 65 64 22 2c 22 54 65 61 6d 73 5f 43 61 72 64 5f 4e 6f 74 53 68 6f 77 52 65 73 75 6c 74 73 54 65 78 74 22 3a 22 52 65 73 75 6c 74 73 20 6e 6f 74 20 73 68 61 72 65 64 22 2c 22 54 65 61 6d 73 5f 43 61 72 64 5f 44 72 61 66 74 50 75 62 6c 69 63 22 3a 22 50 75 62 6c 69 63 22 2c 22 54 65 61 6d 73 5f 43 61 72 64 5f 44 72 61 66 74 50 72 69 76 61 74 65 22 3a 22 50 72 69 76 61 74 65 22 2c 22 54 65 61 6d 73 5f 43 61 72 64 5f 44 72 61 66 74 50 75 62 6c 69 63 5f 53 74 61 74 75 73 22 3a 22 50 75 62 6c 69 63 20 64 72 61 66 74 22 2c 22 54 65 61 6d 73 5f 43 61 72 64 5f 44 72 61 66 74 50 72 69 76 61 74 65 5f 53 74 61 74 75 73 22 3a 22 50 72 69 76 61 74 65 20 64 72 61 66 74 22 2c 22 54 65 61 6d 73 5f 43 61 72 64 5f 50 6f 6c 6c 5f 41 72 69 61 5f 4c 61 62 65 6c 22 Data Ascii: shared","Teams_Card_NotShowResultsText":"Results not shared","Teams_Card_DraftPublic":"Public","Teams_Card_DraftPrivate":"Private","Teams_Card_DraftPublic_Status":"Public draft","Teams_Card_DraftPrivate_Status":"Private draft","Teams_Card_Poll_Aria_Label"

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:27 UTC	592	OUT	GET /forms/css/dist/cv-response-page.min.92870c5.css HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:28 UTC	581	IN	HTTP/1.1 200 OK Content-Length: 213851 Content-Type: text/css Content-MD5: HjLKa7r+BSFYpBv1xn9d6g== Last-Modified: Fri, 17 Jan 2025 04:51:46 GMT Accept-Ranges: bytes ETag: "0x8DD36B2A57F07B2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3aacda98-d01e-0017-2722-6afe3a000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:27 GMT Date: Sun, 19 Jan 2025 06:49:27 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:28 UTC	1131	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 2f 2a 21 0d 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 64 6f 63 73 2f 33 2e 34 2f 63 75 73 74 6f 6d 69 7a 65 2f 29 0d 0a 20 2a 2f 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 Data Ascii: @charset 'UTF-8';/! Generated using the Bootstrap Customizer (https://getbootstrap.com/docs/3.4/customize/) //! * Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs
2025-01-19 06:49:28 UTC	14336	IN	Data Raw: 6f 74 29 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 Data Ascii: ot){overflow:hidden}figure{margin:1em 40px}hr{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textare
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 65 73 73 43 65 6e 74 65 72 4c 6f 67 6f 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 92 b2 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6c 63 75 6c 61 74 6f 72 53 75 62 74 72 61 63 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a5 89 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6c 65 6e 64 61 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9e 87 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6d 65 72 61 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9c a2 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6e 63 65 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9c 91 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 65 6c 6c 50 68 6f 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a3 aa 27 7d 2e 6d 73 2d 49 63 6f Data Ascii: essCenterLogo::before{content:''}.ms-Icon--CalculatorSubtract::before{content:''}.ms-Icon--Calendar::before{content:''}.ms-Icon--Camera::before{content:''}.ms-Icon--Cancel::before{content:''}.ms-Icon--CellPhone::before{content:''}.ms-Ico
2025-01-19 06:49:28 UTC	2832	IN	Data Raw: 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 32 2e 36 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 35 29 2c 2d 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 7d 31 32 2e 35 25 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 32 2e 36 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 2c 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 23 30 33 37 38 37 63 2c 32 2e 35 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 31 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 30 20 32 2e 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 Data Ascii: (3,120,124,.2),-2.6em 0 0 0 rgba(3,120,124,.5),-1.8em -1.8em 0 0 rgba(3,120,124,.7)}12.5%{box-shadow:0 -2.6em 0 0 rgba(3,120,124,.7),1.8em -1.8em 0 0 #03787c,2.5em 0 0 0 rgba(3,120,124,.2),1.75em 1.75em 0 0 rgba(3,120,124,.2),0 2.5em 0 0 rgba(3,120,124,.2
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 7d 33 37 2e 35 25 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 32 2e 36 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 35 29 2c 32 2e 35 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 2c 31 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 30 20 32 2e 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 31 2e 38 65 6d 20 31 2e 38 65 6d Data Ascii: 0 rgba(3,120,124,.2),-1.8em -1.8em 0 0 rgba(3,120,124,.2)}37.5%{box-shadow:0 -2.6em 0 0 rgba(3,120,124,.2),1.8em -1.8em 0 0 rgba(3,120,124,.5),2.5em 0 0 0 rgba(3,120,124,.7),1.75em 1.75em 0 0 rgba(3,120,124,.2),0 2.5em 0 0 rgba(3,120,124,.2),-1.8em 1.8em
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 28 33 36 30 64 65 67 29 7d 7d 2e 70 61 67 65 2d 6c 6f 61 64 69 6e 67 2d 6d 65 73 73 61 67 65 62 6f 78 7b 74 6f 70 3a 34 35 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 70 61 67 65 2d 6c 6f 61 64 69 6e 67 2d 6d 65 73 73 61 67 65 7b 63 6f 6c 6f 72 3a 23 32 32 36 36 65 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 20 57 50 22 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 6d 61 72 67 69 6e 3a 33 30 70 78 20 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 73 75 62 Data Ascii: (360deg)}}.page-loading-messagebox{top:45%;width:100%;position:absolute;text-align:center}.page-loading-message{color:#2266e3;font-family:"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:17px;margin:30px 20px;display:inline-block;vertical-align:sub
2025-01-19 06:49:28 UTC	7952	IN	Data Raw: 70 78 3b 68 65 69 67 68 74 3a 33 31 70 78 7d 2e 66 66 2d 69 63 6f 6e 2e 66 6f 72 6d 73 2d 69 63 6f 6e 2d 73 69 7a 65 32 36 78 32 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 66 66 2d 69 63 6f 6e 2e 66 6f 72 6d 73 2d 69 63 6f 6e 2d 73 69 7a 65 32 34 78 32 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 77 69 64 74 68 3a 32 38 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 7d 2e 66 66 2d 69 63 6f 6e 2e 66 6f 72 6d 73 2d 69 63 6f 6e 2d 73 69 7a 65 32 32 78 32 32 7b 66 6f 6e 74 Data Ascii: px;height:31px}.ff-icon.forms-icon-size26x26{font-size:30px;font-style:normal;line-height:30px;width:30px;height:30px}.ff-icon.forms-icon-size24x24{font-size:28px;font-style:normal;line-height:28px;width:28px;height:28px}.ff-icon.forms-icon-size22x22{font
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 2d 6f 70 74 69 6f 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 61 64 64 69 6e 67 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 Data Ascii: center;line-height:25px;vertical-align:middle}.select-option-menu-container{background-color:#fff;box-shadow:0 2px 8px rgba(0,0,0,.2);position:absolute;padding:0;z-index:10;max-height:320px;overflow-y:auto;margin-bottom:0}@media screen and (-ms-high-contr
2025-01-19 06:49:28 UTC	8048	IN	Data Raw: 6f 76 65 72 20 2e 64 65 73 69 67 6e 2d 66 6f 72 6d 75 6c 61 2d 6d 69 78 65 72 5b 64 69 73 61 62 6c 65 64 5d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 61 36 61 36 61 36 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 64 65 73 69 67 6e 2d 71 75 65 73 74 69 6f 6e 2d 73 68 6f 72 74 2d 63 6f 72 72 65 63 74 2d 6d 61 74 68 2d 61 6e 73 77 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 64 65 73 69 67 6e 2d 66 6f 72 6d 75 6c 61 2d 6d 69 78 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 64 65 73 69 67 6e 2d 71 75 65 73 74 69 6f 6e 2d 63 68 6f 69 63 65 2d 6c 61 62 65 6c 20 2e 64 65 73 69 67 6e 2d 66 6f 72 6d 75 6c 61 2d 6d 69 78 65 72 7b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e Data Ascii: over .design-formula-mixer[disabled]{border-color:#a6a6a6;cursor:default}.design-question-short-correct-math-answer-container>.design-formula-mixer{background:#fff}.design-question-choice-label .design-formula-mixer{margin:0;min-height:40px;line-height:in
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 64 2d 63 6f 6c 6f 72 3a 23 65 61 65 61 65 61 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 32 30 34 64 37 34 7d 23 66 6f 72 6d 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 2e 66 6f 72 6d 2d 68 65 61 64 65 72 2d 74 65 78 74 2d 6d 65 73 73 61 67 65 7b 6d 61 72 67 69 6e 3a 31 35 70 78 20 30 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 3e 2e 66 6f 72 6d 2d 63 6f 6e 74 65 6e 74 2d 63 6f 6e 74 61 69 6e 65 72 7b 64 69 73 70 Data Ascii: d-color:#eaeaea;border-color:#204d74}#form-container{float:left;width:100%;height:100%;font-size:14px}.form-header-text-message{margin:15px 0;font-weight:600}.form-content{width:100%;height:100%;position:relative}.form-content>.form-content-container{disp

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:27 UTC	638	OUT	GET /forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:28 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 369103 Content-Type: application/javascript Content-MD5: bpOGhDwiNFolbzJGktYn8g== Last-Modified: Fri, 17 Jan 2025 04:52:51 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CC786961" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 8050c613-601e-0002-71ef-68e989000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:27 GMT Date: Sun, 19 Jan 2025 06:49:27 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:28 UTC	1117	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 74 28 29 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 3a 65 29 5b 6e 5d 3d 69 5b 6e 5d 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(
2025-01-19 06:49:28 UTC	14336	IN	Data Raw: 63 44 61 74 61 22 2c 65 5b 65 2e 49 50 56 34 41 64 64 72 65 73 73 3d 33 5d 3d 22 49 50 56 34 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 49 50 76 36 41 64 64 72 65 73 73 3d 34 5d 3d 22 49 50 76 36 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 4d 61 69 6c 53 75 62 6a 65 63 74 3d 35 5d 3d 22 4d 61 69 6c 53 75 62 6a 65 63 74 22 2c 65 5b 65 2e 50 68 6f 6e 65 4e 75 6d 62 65 72 3d 36 5d 3d 22 50 68 6f 6e 65 4e 75 6d 62 65 72 22 2c 65 5b 65 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 37 5d 3d 22 51 75 65 72 79 53 74 72 69 6e 67 22 2c 65 5b 65 2e 53 69 70 41 64 64 72 65 73 73 3d 38 5d 3d 22 53 69 70 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 53 6d 74 70 41 64 64 72 65 73 73 3d 39 5d 3d 22 53 6d 74 70 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 49 64 65 6e 74 69 74 79 3d 31 30 5d 3d 22 49 Data Ascii: cData",e[e.IPV4Address=3]="IPV4Address",e[e.IPv6Address=4]="IPv6Address",e[e.MailSubject=5]="MailSubject",e[e.PhoneNumber=6]="PhoneNumber",e[e.QueryString=7]="QueryString",e[e.SipAddress=8]="SipAddress",e[e.SmtpAddress=9]="SmtpAddress",e[e.Identity=10]="I
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 7d 72 65 74 75 72 6e 22 55 6e 6b 6e 6f 77 6e 22 7d 2c 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3e 2d 31 3f 22 2e 22 3a 65 2e 69 6e 64 65 78 4f 66 28 22 5f 22 29 3e 2d 31 3f 22 5f 22 3a 6e 75 6c 6c 7d 2c 65 2e 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 74 68 69 73 2e 62 29 74 68 69 73 2e 62 2e 73 65 74 50 72 6f 70 65 72 74 79 28 65 2c 74 29 3b 65 6c 73 65 20 69 66 28 74 68 69 73 2e 6b 29 7b 76 61 72 20 69 3d 6e 65 77 20 44 61 74 65 3b 69 2e 73 65 74 54 69 6d 65 28 69 2e 67 65 74 54 69 6d 65 28 29 2b 33 31 35 33 36 65 36 29 3b 76 61 72 20 6e 3d 22 65 78 70 69 72 65 73 3d 22 2b 69 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 65 Data Ascii: }return"Unknown"},e.Z=function(e){return e.indexOf(".")>-1?".":e.indexOf("_")>-1?"_":null},e.L=function(e,t){if(this.b)this.b.setProperty(e,t);else if(this.k){var i=new Date;i.setTime(i.getTime()+31536e6);var n="expires="+i.toUTCString();document.cookie=e
2025-01-19 06:49:28 UTC	3362	IN	Data Raw: 74 3b 76 61 72 20 75 3d 69 28 31 31 29 3b 74 2e 41 57 54 4c 6f 67 4d 61 6e 61 67 65 72 3d 75 2e 64 65 66 61 75 6c 74 3b 76 61 72 20 64 3d 69 28 32 39 29 3b 74 2e 41 57 54 54 72 61 6e 73 6d 69 73 73 69 6f 6e 4d 61 6e 61 67 65 72 3d 64 2e 64 65 66 61 75 6c 74 3b 76 61 72 20 63 3d 69 28 39 29 3b 74 2e 41 57 54 53 65 72 69 61 6c 69 7a 65 72 3d 63 2e 64 65 66 61 75 6c 74 3b 76 61 72 20 5f 3d 69 28 38 29 3b 74 2e 41 57 54 53 65 6d 61 6e 74 69 63 43 6f 6e 74 65 78 74 3d 5f 2e 64 65 66 61 75 6c 74 2c 74 2e 41 57 54 5f 43 4f 4c 4c 45 43 54 4f 52 5f 55 52 4c 5f 55 4e 49 54 45 44 5f 53 54 41 54 45 53 3d 22 68 74 74 70 73 3a 2f 2f 75 73 2e 70 69 70 65 2e 61 72 69 61 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 43 6f 6c 6c 65 63 74 6f 72 2f 33 2e 30 2f 22 2c 74 2e 41 Data Ascii: t;var u=i(11);t.AWTLogManager=u.default;var d=i(29);t.AWTTransmissionManager=d.default;var c=i(9);t.AWTSerializer=c.default;var _=i(8);t.AWTSemanticContext=_.default,t.AWT_COLLECTOR_URL_UNITED_STATES="https://us.pipe.aria.microsoft.com/Collector/3.0/",t.A
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 3e 38 26 32 35 35 2c 79 3e 3e 31 36 26 32 35 35 2c 79 3e 3e 3e 32 34 2c 32 35 35 26 76 2c 76 3e 3e 38 26 32 35 35 2c 76 3e 3e 31 36 26 32 35 35 2c 76 3e 3e 3e 32 34 5d 3b 72 65 74 75 72 6e 20 54 7d 76 61 72 20 67 3d 30 3b 66 6f 72 28 6c 3d 30 3b 6c 3c 32 33 3b 2b 2b 6c 29 67 3d 67 3c 3c 31 7c 5f 5b 2b 2b 70 5d 3b 67 7c 3d 66 2b 72 3c 3c 32 33 2c 67 3d 61 3c 3c 33 31 7c 32 31 34 37 34 38 33 36 34 37 26 67 3b 76 61 72 20 54 3d 5b 32 35 35 26 67 2c 67 3e 3e 38 26 32 35 35 2c 67 3e 3e 31 36 26 32 35 35 2c 67 3e 3e 3e 32 34 5d 3b 72 65 74 75 72 6e 20 54 7d 2c 65 2e 72 74 3d 5b 30 2c 30 2c 30 2c 30 5d 2c 65 2e 6e 74 3d 5b 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 2c 30 5d 2c 65 2e 75 74 3d 5b 30 2c 30 2c 31 32 38 2c 31 32 37 5d 2c 65 2e 73 74 3d 5b 30 2c 30 2c 31 Data Ascii: >8&255,y>>16&255,y>>>24,255&v,v>>8&255,v>>16&255,v>>>24];return T}var g=0;for(l=0;l<23;++l)g=g<<1\|_[++p];g\|=f+r<<23,g=a<<31\|2147483647&g;var T=[255&g,g>>8&255,g>>16&255,g>>>24];return T},e.rt=[0,0,0,0],e.nt=[0,0,0,0,0,0,0,0],e.ut=[0,0,128,127],e.st=[0,0,1
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 30 29 2c 30 7d 2c 44 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 74 3d 5b 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c Data Ascii: 0),0},D={}.hasOwnProperty,t=[],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|
2025-01-19 06:49:28 UTC	7952	IN	Data Raw: 6f 3d 70 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 28 61 3d 70 5b 6f 5d 29 26 26 2d 31 3c 28 69 3d 79 3f 50 28 65 2c 61 29 3a 73 5b 6f 5d 29 26 26 28 65 5b 69 5d 3d 21 28 74 5b 69 5d 3d 61 29 29 7d 7d 65 6c 73 65 20 70 3d 54 65 28 70 3d 3d 3d 74 3f 70 2e 73 70 6c 69 63 65 28 6c 2c 70 2e 6c 65 6e 67 74 68 29 3a 70 29 2c 79 3f 79 28 6e 75 6c 6c 2c 74 2c 70 2c 72 29 3a 48 2e 61 70 70 6c 79 28 74 2c 70 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 45 65 28 65 29 7b 66 6f 72 28 76 61 72 20 69 2c 74 2c 6e 2c 72 3d 65 2e 6c 65 6e 67 74 68 2c 6f 3d 62 2e 72 65 6c 61 74 69 76 65 5b 65 5b 30 5d 2e 74 79 70 65 5d 2c 61 3d 6f 7c 7c 62 2e 72 65 6c 61 74 69 76 65 5b 22 20 22 5d 2c 73 3d 6f 3f 31 3a 30 2c 75 3d 62 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 Data Ascii: o=p.length;while(o--)(a=p[o])&&-1<(i=y?P(e,a):s[o])&&(e[i]=!(t[i]=a))}}else p=Te(p===t?p.splice(l,p.length):p),y?y(null,t,p,r):H.apply(t,p)})}function Ee(e){for(var i,t,n,r=e.length,o=b.relative[e[0].type],a=o\|\|b.relative[" "],s=o?1:0,u=be(function(e){ret
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 46 61 6c 73 65 26 26 28 6c 3d 73 2e 6c 65 6e 67 74 68 2c 74 3d 21 31 29 7d 72 2e 6d 65 6d 6f 72 79 7c 7c 28 74 3d 21 31 29 2c 69 3d 21 31 2c 61 26 26 28 73 3d 74 3f 5b 5d 3a 22 22 29 7d 2c 66 3d 7b 61 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 73 26 26 28 74 26 26 21 69 26 26 28 6c 3d 73 2e 6c 65 6e 67 74 68 2d 31 2c 75 2e 70 75 73 68 28 74 29 29 2c 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 53 2e 65 61 63 68 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 6d 28 74 29 3f 72 2e 75 6e 69 71 75 65 26 26 66 2e 68 61 73 28 74 29 7c 7c 73 2e 70 75 73 68 28 74 29 3a 74 26 26 74 2e 6c 65 6e 67 74 68 26 26 22 73 74 72 69 6e 67 22 21 3d 3d 77 28 74 29 26 26 6e 28 74 29 7d 29 7d 28 61 72 67 75 6d 65 6e 74 73 29 2c 74 26 26 21 69 26 26 63 28 29 Data Ascii: False&&(l=s.length,t=!1)}r.memory\|\|(t=!1),i=!1,a&&(s=t?[]:"")},f={add:function(){return s&&(t&&!i&&(l=s.length-1,u.push(t)),function n(e){S.each(e,function(e,t){m(t)?r.unique&&f.has(t)\|\|s.push(t):t&&t.length&&"string"!==w(t)&&n(t)})}(arguments),t&&!i&&c()
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 3d 65 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 2e 64 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 26 26 21 31 3d 3d 3d 65 2e 72 65 74 75 72 6e 56 61 6c 75 65 3f 77 65 3a 54 65 2c 74 68 69 73 2e 74 61 72 67 65 74 3d 65 2e 74 61 72 67 65 74 26 26 33 3d 3d 3d 65 2e 74 61 72 67 65 74 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 74 61 72 67 65 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3a 65 2e 74 61 72 67 65 74 2c 74 68 69 73 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 65 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 2c 74 68 69 73 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 3d 65 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 3a 74 68 69 73 2e 74 79 70 65 3d 65 2c 74 26 26 53 2e 65 Data Ascii: isDefaultPrevented=e.defaultPrevented\|\|void 0===e.defaultPrevented&&!1===e.returnValue?we:Te,this.target=e.target&&3===e.target.nodeType?e.target.parentNode:e.target,this.currentTarget=e.currentTarget,this.relatedTarget=e.relatedTarget):this.type=e,t&&S.e
2025-01-19 06:49:28 UTC	7952	IN	Data Raw: 64 74 68 22 69 6e 20 74 7c 7c 22 68 65 69 67 68 74 22 69 6e 20 74 2c 70 3d 74 68 69 73 2c 64 3d 7b 7d 2c 68 3d 65 2e 73 74 79 6c 65 2c 67 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 61 65 28 65 29 2c 76 3d 59 2e 67 65 74 28 65 2c 22 66 78 73 68 6f 77 22 29 3b 66 6f 72 28 72 20 69 6e 20 6e 2e 71 75 65 75 65 7c 7c 28 6e 75 6c 6c 3d 3d 28 61 3d 53 2e 5f 71 75 65 75 65 48 6f 6f 6b 73 28 65 2c 22 66 78 22 29 29 2e 75 6e 71 75 65 75 65 64 26 26 28 61 2e 75 6e 71 75 65 75 65 64 3d 30 2c 73 3d 61 2e 65 6d 70 74 79 2e 66 69 72 65 2c 61 2e 65 6d 70 74 79 2e 66 69 72 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 6e 71 75 65 75 65 64 7c 7c 73 28 29 7d 29 2c 61 2e 75 6e 71 75 65 75 65 64 2b 2b 2c 70 2e 61 6c 77 61 79 73 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 2e 61 6c 77 Data Ascii: dth"in t\|\|"height"in t,p=this,d={},h=e.style,g=e.nodeType&&ae(e),v=Y.get(e,"fxshow");for(r in n.queue\|\|(null==(a=S._queueHooks(e,"fx")).unqueued&&(a.unqueued=0,s=a.empty.fire,a.empty.fire=function(){a.unqueued\|\|s()}),a.unqueued++,p.always(function(){p.alw

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:27 UTC	642	OUT	GET /forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:28 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 63359 Content-Type: application/javascript Content-MD5: euSTTOjaC1afTuE/diS1LQ== Last-Modified: Fri, 17 Jan 2025 04:52:47 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA1D9336" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: af3c1198-901e-0016-3f27-6aa1e6000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:27 GMT Date: Sun, 19 Jan 2025 06:49:27 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:28 UTC	1121	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 35 39 5d 2c 7b 33 38 32 39 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 6e 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 61 73 73 65 72 74 28 6e 2c 22 4e 65 72 76 65 20 2d 20 22 2b 74 29 2c 73 28 22 61 73 73 65 72 74 20 66 61 69 6c 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 73 28 22 54 4f 44 4f 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 73 28 22 74 6f 20 62 65 20 6f 76 65 72 72 69 64 64 65 6e Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[859],{38290:function(n,t,r){function i(n,t){n\|\|(console.assert(n,"Nerve - "+t),s("assert failed: ".concat(t)))}function e(n){return s("TODO: ".concat(n))}function u(){return s("to be overridden
2025-01-19 06:49:28 UTC	14336	IN	Data Raw: 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 3b 65 6c 73 65 7b 69 66 28 21 28 6e 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 54 68 65 20 70 61 72 61 6d 65 74 65 72 20 6f 66 20 53 70 65 63 2e 66 72 6f 6d 4d 61 73 74 65 72 43 6c 61 73 73 20 73 68 6f 75 6c 64 20 62 65 20 61 20 6d 61 73 74 65 72 20 63 6c 61 73 73 20 6f 66 20 61 20 66 75 6e 63 74 69 6f 6e 2e 22 29 3b 72 2e 6d 61 73 74 65 72 43 6c 61 73 73 47 65 74 74 65 72 3d 6e 7d 72 65 74 75 72 6e 20 64 28 72 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 6e 29 7b 76 61 72 20 74 3d 6e 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 5f 5f 6e 65 72 76 65 5f 5f 26 26 74 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 6e 65 72 76 65 4f 62 6a 65 63 74 54 79 70 Data Ascii: =function(){return n};else{if(!(n instanceof Function))throw Error("The parameter of Spec.fromMasterClass should be a master class of a function.");r.masterClassGetter=n}return d(r,t)}function h(n){var t=n;return t&&t.__nerve__&&t.__nerve__.nerveObjectTyp
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 75 70 64 61 74 65 44 69 72 74 69 6e 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6e 6e 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 67 65 74 50 72 6f 70 65 72 74 79 28 29 3b 6e 2e 50 61 72 65 6e 74 4d 61 73 74 65 72 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 64 69 72 74 79 43 68 65 63 6b 65 72 2e 73 65 74 4d 65 6d 62 65 72 44 69 72 74 69 6e 65 73 73 28 6e 2e 4e 61 6d 65 2c 74 68 69 73 2e 69 73 44 69 72 74 79 28 29 29 7d 7d 2c 6e 7d 28 29 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 29 7b 76 61 72 20 69 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 72 29 7c 7c 74 68 69 73 3b 72 65 74 75 72 6e 20 69 2e 74 6e 3d 74 2c 69 7d 72 65 74 75 72 6e 28 30 2c 69 2e 43 36 29 28 74 2c 6e 29 2c 74 2e 70 72 Data Ascii: totype.updateDirtiness=function(){if(this.nn){var n=this.getProperty();n.ParentMaster.__nerve__.dirtyChecker.setMemberDirtiness(n.Name,this.isDirty())}},n}(),b=function(n){function t(t,r){var i=n.call(this,r)\|\|this;return i.tn=t,i}return(0,i.C6)(t,n),t.pr
2025-01-19 06:49:28 UTC	3014	IN	Data Raw: 63 65 28 74 2e 6c 65 6e 67 74 68 29 3b 44 28 6e 2c 73 2c 21 30 29 7d 7d 29 29 7d 76 61 72 20 55 3d 22 63 6f 6c 6c 65 63 74 69 6f 6e 20 6d 61 73 74 65 72 22 3b 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 72 3b 74 3d 74 7c 7c 7b 7d 3b 76 61 72 20 69 3d 72 3d 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7c 7c 74 68 69 73 2c 65 3d 72 2e 5f 5f 6e 65 72 76 65 5f 5f 3b 65 2e 6d 61 72 6b 43 68 69 6c 64 72 65 6e 41 73 44 65 6c 65 74 65 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 53 28 28 6e 3d 69 29 2e 53 63 68 65 6d 61 5b 30 5d 29 7c 7c 28 30 2c 73 2e 47 54 29 28 6e 2e 4d 6f 64 65 6c 29 2e 6d 61 70 28 66 29 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e Data Ascii: ce(t.length);D(n,s,!0)}}))}var U="collection master";var x=function(n){function t(t){var r;t=t\|\|{};var i=r=n.call(this,t)\|\|this,e=r.__nerve__;e.markChildrenAsDeleted=function(){var n;S((n=i).Schema[0])\|\|(0,s.GT)(n.Model).map(f).forEach((function(n){return
2025-01-19 06:49:28 UTC	16384	IN	Data Raw: 2e 73 68 61 64 6f 77 4d 61 70 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 76 61 72 20 75 3d 6f 6e 28 69 29 2c 6f 3d 74 5b 75 5d 3b 69 66 28 21 6f 29 7b 76 61 72 20 63 3d 69 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 70 61 72 65 6e 74 53 63 68 65 6d 61 3b 6f 3d 28 72 6e 28 63 29 3f 72 28 63 29 3a 6e 29 5b 63 6e 28 69 29 5d 2c 28 30 2c 65 2e 76 41 29 28 6f 3d 3d 3d 74 5b 75 5d 2c 22 74 68 65 20 6e 65 77 20 73 68 61 64 6f 77 20 73 68 6f 75 6c 64 20 62 65 20 61 64 64 65 64 20 69 6e 74 6f 20 74 68 65 20 73 68 61 64 6f 77 20 6d 61 70 2e 22 29 7d 72 65 74 75 72 6e 20 6f 7d 7d 28 68 2c 61 29 2c 28 30 2c 73 2e 41 58 29 28 68 2e 5f 5f 6e 65 72 76 65 5f 5f 2c 22 73 68 61 64 6f 77 4d 61 70 70 65 72 22 29 Data Ascii: .shadowMapper=function(n,t){return function r(i){var u=on(i),o=t[u];if(!o){var c=i.__nerve__.parentSchema;o=(rn(c)?r(c):n)[cn(i)],(0,e.vA)(o===t[u],"the new shadow should be added into the shadow map.")}return o}}(h,a),(0,s.AX)(h.__nerve__,"shadowMapper")
2025-01-19 06:49:28 UTC	12120	IN	Data Raw: 2e 52 6e 2e 70 72 6f 6d 69 73 65 28 29 29 3a 74 68 69 73 2e 4b 6e 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 73 74 70 6f 6e 65 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6b 6e 2e 70 6f 73 74 70 6f 6e 65 55 70 64 61 74 65 26 26 74 68 69 73 2e 6b 6e 2e 70 6f 73 74 70 6f 6e 65 55 70 64 61 74 65 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 45 6e 2e 66 6c 75 73 68 28 29 2c 74 68 69 73 2e 41 6e 2e 66 6c 75 73 68 28 29 2c 74 68 69 73 2e 47 6e 26 26 28 74 68 69 73 2e 47 6e 2e 63 61 6e 63 65 6c 28 29 2c 74 68 69 73 2e 47 6e 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 6b 6e 2e 63 61 6e 63 65 6c 55 70 64 61 74 65 26 26 74 68 69 73 2e 6b 6e 2e 63 61 6e 63 65 6c 55 70 Data Ascii: .Rn.promise()):this.Kn()},n.prototype.postponeUpdate=function(){this.kn.postponeUpdate&&this.kn.postponeUpdate()},n.prototype.flush=function(){this.En.flush(),this.An.flush(),this.Gn&&(this.Gn.cancel(),this.Gn=void 0,this.kn.cancelUpdate&&this.kn.cancelUp

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:27 UTC	591	OUT	GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:28 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 31572 Content-Type: application/javascript Content-MD5: msoK+8RWE2XR2wfYgDfuUw== Last-Modified: Fri, 17 Jan 2025 04:52:51 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CC789070" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 4a968d89-f01e-0000-4327-6a5731000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:27 GMT Date: Sun, 19 Jan 2025 06:49:27 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:28 UTC	1121	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6c 69 6e 6b 69 66 79 2e 6a 73 20 76 32 2e 31 2e 38 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 53 6f 61 70 42 6f 78 2f 6c 69 6e 6b 69 66 79 6a 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 53 6f 61 70 42 6f 78 20 49 6e 6e 6f 76 61 74 69 6f 6e 73 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e Data Ascii: /! linkify.js v2.1.8 * https://github.com/SoapBox/linkifyjs * Copyright (c) 2014 SoapBox Innovations Inc. * Licensed under the MIT license */!function(){"use strict";var n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function
2025-01-19 06:49:28 UTC	14336	IN	Data Raw: 6f 72 65 54 61 67 73 3d 5b 5d 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3d 6e 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 6e 2e 6c 69 6e 6b 41 74 74 72 69 62 75 74 65 73 7c 7c 68 2e 61 74 74 72 69 62 75 74 65 73 2c 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 3f 6e 2e 63 6c 61 73 73 4e 61 6d 65 3a 6e 2e 6c 69 6e 6b 43 6c 61 73 73 7c 7c 68 2e 63 6c 61 73 73 4e 61 6d 65 3b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 69 67 6e 6f 72 65 54 61 67 73 22 29 3f 6e 2e 69 67 6e 6f 72 65 54 61 67 73 3a 68 2e 69 67 6e 6f 72 65 54 61 67 73 2c 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 74 68 69 73 2e 69 67 6e 6f 72 65 54 61 67 73 Data Ascii: oreTags=[],this.attributes=n.attributes\|\|n.linkAttributes\|\|h.attributes,this.className=n.hasOwnProperty("className")?n.className:n.linkClass\|\|h.className;for(var e=n.hasOwnProperty("ignoreTags")?n.ignoreTags:h.ignoreTags,a=0;a<e.length;a++)this.ignoreTags
2025-01-19 06:49:28 UTC	16115	IN	Data Raw: 22 3a 22 2c 6d 6e 29 2c 62 6e 2e 6f 6e 28 22 3a 22 2c 66 6e 29 3b 76 61 72 20 64 6e 3d 63 28 22 6c 6f 63 61 6c 68 6f 73 74 22 2c 56 2c 6a 2c 78 29 3b 46 2e 70 75 73 68 2e 61 70 70 6c 79 28 46 2c 64 6e 29 2c 56 2e 6f 6e 28 57 2c 24 29 2c 24 2e 6f 6e 28 22 2d 22 2c 65 6e 29 2e 6f 6e 28 57 2c 24 29 2e 6f 6e 28 58 2c 6e 6e 29 2c 6e 6e 2e 6f 6e 28 22 2d 22 2c 65 6e 29 2e 6f 6e 28 58 2c 6e 6e 29 3b 66 6f 72 28 76 61 72 20 78 6e 3d 30 3b 78 6e 3c 46 2e 6c 65 6e 67 74 68 3b 78 6e 2b 2b 29 46 5b 78 6e 5d 2e 6f 6e 28 22 2d 22 2c 65 6e 29 2e 6f 6e 28 58 2c 6e 6e 29 3b 65 6e 2e 6f 6e 28 22 2d 22 2c 65 6e 29 2e 6f 6e 28 57 2c 6e 6e 29 2e 6f 6e 28 58 2c 6e 6e 29 2c 56 2e 64 65 66 61 75 6c 74 54 72 61 6e 73 69 74 69 6f 6e 3d 4a 28 45 29 3b 76 61 72 20 79 6e 3d 66 75 6e Data Ascii: ":",mn),bn.on(":",fn);var dn=c("localhost",V,j,x);F.push.apply(F,dn),V.on(W,$),$.on("-",en).on(W,$).on(X,nn),nn.on("-",en).on(X,nn);for(var xn=0;xn<F.length;xn++)F[xn].on("-",en).on(X,nn);en.on("-",en).on(W,nn).on(X,nn),V.defaultTransition=J(E);var yn=fun

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:28 UTC	404	OUT	GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:29 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 31572 Content-Type: application/javascript Content-MD5: msoK+8RWE2XR2wfYgDfuUw== Last-Modified: Wed, 11 Dec 2024 04:47:55 GMT Accept-Ranges: bytes ETag: "0x8DD199EFA646D65" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9d05d166-301e-0052-3493-4b2bd9000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:28 GMT Date: Sun, 19 Jan 2025 06:49:28 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:29 UTC	1131	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6c 69 6e 6b 69 66 79 2e 6a 73 20 76 32 2e 31 2e 38 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 53 6f 61 70 42 6f 78 2f 6c 69 6e 6b 69 66 79 6a 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 53 6f 61 70 42 6f 78 20 49 6e 6e 6f 76 61 74 69 6f 6e 73 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e Data Ascii: /! linkify.js v2.1.8 * https://github.com/SoapBox/linkifyjs * Copyright (c) 2014 SoapBox Innovations Inc. * Licensed under the MIT license */!function(){"use strict";var n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function
2025-01-19 06:49:29 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 73 3d 6e 2e 61 74 74 72 69 62 75 74 65 73 7c 7c 6e 2e 6c 69 6e 6b 41 74 74 72 69 62 75 74 65 73 7c 7c 68 2e 61 74 74 72 69 62 75 74 65 73 2c 74 68 69 73 2e 63 6c 61 73 73 4e 61 6d 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 3f 6e 2e 63 6c 61 73 73 4e 61 6d 65 3a 6e 2e 6c 69 6e 6b 43 6c 61 73 73 7c 7c 68 2e 63 6c 61 73 73 4e 61 6d 65 3b 66 6f 72 28 76 61 72 20 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 22 69 67 6e 6f 72 65 54 61 67 73 22 29 3f 6e 2e 69 67 6e 6f 72 65 54 61 67 73 3a 68 2e 69 67 6e 6f 72 65 54 61 67 73 2c 61 3d 30 3b 61 3c 65 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 74 68 69 73 2e 69 67 6e 6f 72 65 54 61 67 73 2e 70 75 73 68 28 65 5b 61 5d Data Ascii: ,this.attributes=n.attributes\|\|n.linkAttributes\|\|h.attributes,this.className=n.hasOwnProperty("className")?n.className:n.linkClass\|\|h.className;for(var e=n.hasOwnProperty("ignoreTags")?n.ignoreTags:h.ignoreTags,a=0;a<e.length;a++)this.ignoreTags.push(e[a]
2025-01-19 06:49:29 UTC	14057	IN	Data Raw: 4c 2c 43 6e 29 2c 41 6e 2e 6f 6e 28 43 2c 52 6e 29 2e 6f 6e 28 78 2c 52 6e 29 2e 6f 6e 28 6a 2c 42 6e 29 2e 6f 6e 28 4f 2c 52 6e 29 2c 43 6e 2e 6f 6e 28 43 2c 44 6e 29 2e 6f 6e 28 78 2c 44 6e 29 2e 6f 6e 28 4f 2c 44 6e 29 2e 6f 6e 28 6a 2c 44 6e 29 2c 52 6e 2e 6f 6e 28 6b 2c 48 6e 29 2c 6e 65 2e 6f 6e 28 6b 2c 65 65 29 2c 48 6e 2e 6f 6e 28 43 2c 42 6e 29 2e 6f 6e 28 78 2c 52 6e 29 2e 6f 6e 28 4f 2c 52 6e 29 2e 6f 6e 28 6a 2c 52 6e 29 2c 65 65 2e 6f 6e 28 43 2c 61 65 29 2e 6f 6e 28 78 2c 6e 65 29 2e 6f 6e 28 4f 2c 6e 65 29 2e 6f 6e 28 6a 2c 6e 65 29 2c 42 6e 2e 6f 6e 28 6b 2c 48 6e 29 2c 61 65 2e 6f 6e 28 6b 2c 65 65 29 2c 42 6e 2e 6f 6e 28 76 2c 55 6e 29 2e 6f 6e 28 4c 2c 44 6e 29 2c 55 6e 2e 6f 6e 28 4f 2c 4d 6e 29 2c 4d 6e 2e 6f 6e 28 4c 2c 44 6e 29 2c Data Ascii: L,Cn),An.on(C,Rn).on(x,Rn).on(j,Bn).on(O,Rn),Cn.on(C,Dn).on(x,Dn).on(O,Dn).on(j,Dn),Rn.on(k,Hn),ne.on(k,ee),Hn.on(C,Bn).on(x,Rn).on(O,Rn).on(j,Rn),ee.on(C,ae).on(x,ne).on(O,ne).on(j,ne),Bn.on(k,Hn),ae.on(k,ee),Bn.on(v,Un).on(L,Dn),Un.on(O,Mn),Mn.on(L,Dn),

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:30 UTC	402	OUT	GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:30 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 107394 Content-Type: application/javascript Content-MD5: qfr2faMBNtX0KL5W763chg== Last-Modified: Fri, 17 Jan 2025 04:52:47 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA2078FA" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2559a489-601e-0002-378f-69e989000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:30 GMT Date: Sun, 19 Jan 2025 06:49:30 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:30 UTC	1118	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 37 5d 2c 7b 38 37 33 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 7d 29 3b 76 61 72 20 72 3d 74 28 38 36 37 38 33 29 2c 69 3d 74 28 32 35 36 32 31 29 2c 6f 3d 74 28 33 35 30 39 31 29 2c 75 3d 74 28 31 38 38 30 29 2c 61 3d 74 28 33 38 38 30 35 29 2c 63 3d 74 28 37 35 30 37 32 29 2c 73 3d 74 28 39 38 30 39 30 29 2c 66 3d 74 28 39 38 31 30 34 29 2c 6c 3d 74 28 37 38 39 38 34 29 2c 64 3d 74 28 38 32 38 37 33 29 2c 76 3d 74 28 34 38 38 33 32 29 2c 68 3d 35 30 30 3b 66 75 6e 63 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[267],{8730:function(n,e,t){t.d(e,{A:function(){return N}});var r=t(86783),i=t(25621),o=t(35091),u=t(1880),a=t(38805),c=t(75072),s=t(98090),f=t(98104),l=t(78984),d=t(82873),v=t(48832),h=500;func
2025-01-19 06:49:30 UTC	14336	IN	Data Raw: 6e 3a 28 30 2c 63 2e 6d 6d 29 28 6e 29 7d 2c 21 30 29 7d 7d 69 7c 7c 6e 5b 73 2e 24 35 5d 28 65 2c 74 29 7d 2c 6e 5b 73 2e 74 6e 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 28 29 7d 7d 29 29 2c 75 7d 72 65 74 75 72 6e 28 30 2c 72 2e 71 55 29 28 65 2c 6e 29 2c 65 2e 5f 5f 69 65 44 79 6e 3d 31 2c 65 7d 28 74 28 36 38 34 35 29 2e 73 29 2c 49 3d 74 28 31 34 38 30 38 29 2c 53 3d 22 50 6c 75 67 69 6e 73 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 69 6e 69 74 69 61 6c 69 7a 65 20 6d 65 74 68 6f 64 22 2c 54 3d 22 53 44 4b 20 69 73 20 73 74 69 6c 6c 20 75 6e 6c 6f 61 64 69 6e 67 2e 2e 2e 22 2c 62 3d 7b 6c 6f 67 67 69 6e 67 4c 65 76 65 6c 43 6f 6e 73 6f 6c 65 3a 31 7d 3b 66 75 6e 63 74 69 6f 6e 20 45 28 6e 2c 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 75 2e 4e 53 28 65 Data Ascii: n:(0,c.mm)(n)},!0)}}i\|\|n[s.$5](e,t)},n[s.tn]=function(){f()}})),u}return(0,r.qU)(e,n),e.__ieDyn=1,e}(t(6845).s),I=t(14808),S="Plugins must provide initialize method",T="SDK is still unloading...",b={loggingLevelConsole:1};function E(n,e){return new u.NS(e
2025-01-19 06:49:30 UTC	16384	IN	Data Raw: 65 3d 28 6e 2e 65 78 74 7c 7c 7b 7d 29 2e 69 6e 74 77 65 62 3b 72 65 74 75 72 6e 20 65 26 26 28 30 2c 63 2e 79 44 29 28 65 2e 6d 73 66 70 63 29 3f 65 2e 6d 73 66 70 63 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 4f 28 6e 29 7b 66 6f 72 28 76 61 72 20 65 3d 6e 75 6c 6c 2c 74 3d 30 3b 6e 75 6c 6c 3d 3d 3d 65 26 26 74 3c 6e 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 65 3d 4e 28 6e 5b 74 5d 29 3b 72 65 74 75 72 6e 20 65 7d 76 61 72 20 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 3f 5b 5d 2e 63 6f 6e 63 61 74 28 74 29 3a 5b 5d 2c 69 3d 74 68 69 73 2c 6f 3d 4f 28 72 29 3b 69 2e 69 4b 65 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 2c 69 2e 4d 73 66 70 63 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: e=(n.ext\|\|{}).intweb;return e&&(0,c.yD)(e.msfpc)?e.msfpc:null}function O(n){for(var e=null,t=0;null===e&&t<n.length;t++)e=N(n[t]);return e}var R=function(){function n(e,t){var r=t?[].concat(t):[],i=this,o=O(r);i.iKey=function(){return e},i.Msfpc=function(
2025-01-19 06:49:30 UTC	2260	IN	Data Raw: 21 30 2c 70 2e 73 65 74 55 6e 6c 6f 61 64 69 6e 67 28 42 29 29 2c 6a 28 32 2c 32 29 7d 66 75 6e 63 74 69 6f 6e 20 69 28 6e 29 7b 42 3d 21 31 2c 70 2e 73 65 74 55 6e 6c 6f 61 64 69 6e 67 28 42 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 6e 2c 65 29 7b 69 66 28 6e 2e 73 65 6e 64 41 74 74 65 6d 70 74 7c 7c 28 6e 2e 73 65 6e 64 41 74 74 65 6d 70 74 3d 30 29 2c 6e 2e 6c 61 74 65 6e 63 79 7c 7c 28 6e 2e 6c 61 74 65 6e 63 79 3d 31 29 2c 6e 2e 65 78 74 26 26 6e 2e 65 78 74 2e 74 72 61 63 65 26 26 64 65 6c 65 74 65 20 6e 2e 65 78 74 2e 74 72 61 63 65 2c 6e 2e 65 78 74 26 26 6e 2e 65 78 74 2e 75 73 65 72 26 26 6e 2e 65 78 74 2e 75 73 65 72 2e 69 64 26 26 64 65 6c 65 74 65 20 6e 2e 65 78 74 2e 75 73 65 72 2e 69 64 2c 4b 26 26 28 63 2e 75 39 2c 6e 2e 65 78 74 3d 28 30 2c Data Ascii: !0,p.setUnloading(B)),j(2,2)}function i(n){B=!1,p.setUnloading(B)}function W(n,e){if(n.sendAttempt\|\|(n.sendAttempt=0),n.latency\|\|(n.latency=1),n.ext&&n.ext.trace&&delete n.ext.trace,n.ext&&n.ext.user&&n.ext.user.id&&delete n.ext.user.id,K&&(c.u9,n.ext=(0,
2025-01-19 06:49:30 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 72 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 69 3d 21 31 2c 75 3d 30 3d 3d 3d 74 3b 72 65 74 75 72 6e 21 75 7c 7c 70 2e 63 61 6e 53 65 6e 64 52 65 71 75 65 73 74 28 29 3f 28 30 2c 6f 2e 72 32 29 28 6e 2e 63 6f 72 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 50 6f 73 74 43 68 61 6e 6e 65 6c 2e 5f 71 75 65 75 65 42 61 74 63 68 65 73 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 74 3d 34 3b 74 3e 3d 65 3b 29 7b 76 61 72 20 72 3d 46 5b 74 5d 3b 72 26 26 72 2e 62 61 74 63 68 65 73 26 26 72 2e 62 61 74 63 68 65 73 2e 6c 65 6e 67 74 68 3e 30 26 26 28 28 30 2c 73 2e 49 75 29 28 72 2e 62 61 74 63 68 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 70 2e 61 64 64 42 61 74 63 68 28 65 29 Data Ascii: unction rn(e,t,r){var i=!1,u=0===t;return!u\|\|p.canSendRequest()?(0,o.r2)(n.core,(function(){return"PostChannel._queueBatches"}),(function(){for(var n=[],t=4;t>=e;){var r=F[t];r&&r.batches&&r.batches.length>0&&((0,s.Iu)(r.batches,(function(e){p.addBatch(e)
2025-01-19 06:49:31 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 62 28 6e 29 7c 7c 54 2e 70 75 73 68 28 6e 29 7d 2c 6e 2e 61 64 64 49 67 6e 6f 72 65 64 43 6f 6e 63 65 72 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 65 3b 74 3c 72 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 72 5b 74 5d 3b 6e 2e 61 64 64 49 67 6e 6f 72 65 64 43 6f 6e 63 65 72 6e 28 69 29 7d 7d 2c 6e 2e 6e 6f 74 69 66 79 43 6f 6e 63 65 72 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 30 2c 75 2e 49 75 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 62 28 6e 29 29 7b 76 61 72 20 65 3d 7b 6e 61 6d 65 3a 66 2c 65 78 74 3a 7b 6d 65 74 61 64 61 74 61 3a 7b 70 72 69 76 54 61 67 73 3a 33 33 35 35 34 34 33 32 2c Data Ascii: unction(n){b(n)\|\|T.push(n)},n.addIgnoredConcerns=function(e){if(0!==e.length)for(var t=0,r=e;t<r.length;t++){var i=r[t];n.addIgnoredConcern(i)}},n.notifyConcerns=function(n){(0,u.Iu)(n,(function(n){if(!b(n)){var e={name:f,ext:{metadata:{privTags:33554432,
2025-01-19 06:49:31 UTC	7952	IN	Data Raw: 74 75 72 6e 20 55 7d 2c 43 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6e 7d 2c 43 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 45 48 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 2c 45 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 45 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 2c 47 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 47 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 2c 49 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 2c 4a 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 2c 4b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 7d 2c 4b 59 3a 66 75 6e Data Ascii: turn U},CP:function(){return hn},Cv:function(){return N},EH:function(){return G},Ed:function(){return E},Et:function(){return K},Gh:function(){return _},Gv:function(){return P},Iu:function(){return W},Ju:function(){return R},KT:function(){return V},KY:fun
2025-01-19 06:49:31 UTC	16384	IN	Data Raw: 20 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 2c 38 32 38 37 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 50 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 69 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 6e 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 74 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 29 3b 76 61 72 20 72 3d 74 28 39 38 30 39 30 29 2c 69 3d 74 28 33 35 30 39 31 29 2c 6f 3d 74 28 37 35 30 37 32 29 2c 75 3d 74 28 33 38 38 30 35 29 2c 61 3d 74 28 37 38 39 38 34 29 2c 63 3d 74 28 31 38 38 30 29 2c 73 3d 74 28 34 38 38 33 32 29 2c 66 3d 22 54 65 6c 65 6d 65 74 72 79 50 6c 75 67 69 6e 43 Data Ascii: t()}function d(){return a}},82873:function(n,e,t){t.d(e,{PV:function(){return g},i8:function(){return v},nU:function(){return p},tS:function(){return h}});var r=t(98090),i=t(35091),o=t(75072),u=t(38805),a=t(78984),c=t(1880),s=t(48832),f="TelemetryPluginC
2025-01-19 06:49:31 UTC	16192	IN	Data Raw: 3d 6e 2e 73 70 6c 69 74 28 22 7c 22 29 3b 72 2e 6c 65 6e 67 74 68 3e 30 26 26 74 2e 73 65 74 49 64 28 72 5b 30 5d 29 3b 74 72 79 7b 69 66 28 72 2e 6c 65 6e 67 74 68 3e 31 29 7b 76 61 72 20 69 3d 2b 72 5b 31 5d 3b 74 2e 61 63 71 75 69 73 69 74 69 6f 6e 44 61 74 65 3d 2b 6e 65 77 20 44 61 74 65 28 69 29 2c 74 2e 61 63 71 75 69 73 69 74 69 6f 6e 44 61 74 65 3d 74 2e 61 63 71 75 69 73 69 74 69 6f 6e 44 61 74 65 3e 30 3f 74 2e 61 63 71 75 69 73 69 74 69 6f 6e 44 61 74 65 3a 30 7d 69 66 28 72 2e 6c 65 6e 67 74 68 3e 32 29 7b 76 61 72 20 6f 3d 2b 72 5b 32 5d 3b 74 2e 72 65 6e 65 77 61 6c 44 61 74 65 3d 2b 6e 65 77 20 44 61 74 65 28 6f 29 2c 74 2e 72 65 6e 65 77 61 6c 44 61 74 65 3d 74 2e 72 65 6e 65 77 61 6c 44 61 74 65 3e 30 3f 74 2e 72 65 6e 65 77 61 6c 44 61 Data Ascii: =n.split("\|");r.length>0&&t.setId(r[0]);try{if(r.length>1){var i=+r[1];t.acquisitionDate=+new Date(i),t.acquisitionDate=t.acquisitionDate>0?t.acquisitionDate:0}if(r.length>2){var o=+r[2];t.renewalDate=+new Date(o),t.renewalDate=t.renewalDate>0?t.renewalDa

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:31 UTC	402	OUT	GET /forms/scripts/dists/response-page-pro.chunk.616.93becff.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:32 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 91082 Content-Type: application/javascript Content-MD5: pVfY18P2NEUAWQLuAkh25g== Last-Modified: Wed, 11 Dec 2024 04:47:51 GMT Accept-Ranges: bytes ETag: "0x8DD199EF84E84EC" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3593d9a9-401e-002a-4693-4b8821000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:31 GMT Date: Sun, 19 Jan 2025 06:49:31 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:32 UTC	1121	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 36 5d 2c 7b 39 35 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 36 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 Data Ascii: (self.webpackChunk=self.webpackChunk\|\|[]).push([[616],{95616:function(e,t){var n;/! jQuery JavaScript Library v3.6.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright OpenJS Foundation and other contributors *
2025-01-19 06:49:32 UTC	14336	IN	Data Raw: 63 72 65 61 74 65 48 54 4d 4c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 7d 29 29 3b 76 61 72 20 54 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 43 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 28 6e 3d 6e 7c 7c 62 29 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 69 66 28 6f 2e 74 65 78 74 3d 65 2c 74 29 66 6f 72 28 72 20 69 6e 20 54 29 28 69 3d 74 5b 72 5d 7c 7c 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 72 29 29 26 26 6f 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 72 2c 69 29 3b 6e 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 2e 70 61 Data Ascii: createHTML:function(e){return e}}));var T={type:!0,src:!0,nonce:!0,noModule:!0};function C(e,t,n){var r,i,o=(n=n\|\|b).createElement("script");if(o.text=e,t)for(r in T)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).pa
2025-01-19 06:49:32 UTC	16384	IN	Data Raw: 22 29 2c 65 2e 73 6c 69 63 65 28 30 2c 34 29 7d 2c 43 48 49 4c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 5b 31 5d 3d 65 5b 31 5d 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 22 6e 74 68 22 3d 3d 3d 65 5b 31 5d 2e 73 6c 69 63 65 28 30 2c 33 29 3f 28 65 5b 33 5d 7c 7c 75 65 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 5b 34 5d 3d 2b 28 65 5b 34 5d 3f 65 5b 35 5d 2b 28 65 5b 36 5d 7c 7c 31 29 3a 32 2a 28 22 65 76 65 6e 22 3d 3d 3d 65 5b 33 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 65 5b 33 5d 29 29 2c 65 5b 35 5d 3d 2b 28 65 5b 37 5d 2b 65 5b 38 5d 7c 7c 22 6f 64 64 22 3d 3d 3d 65 5b 33 5d 29 29 3a 65 5b 33 5d 26 26 75 65 2e 65 72 72 6f 72 28 65 5b 30 5d 29 2c 65 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e Data Ascii: "),e.slice(0,4)},CHILD:function(e){return e[1]=e[1].toLowerCase(),"nth"===e[1].slice(0,3)?(e[3]\|\|ue.error(e[0]),e[4]=+(e[4]?e[5]+(e[6]\|\|1):2*("even"===e[3]\|\|"odd"===e[3])),e[5]=+(e[7]+e[8]\|\|"odd"===e[3])):e[3]&&ue.error(e[0]),e},PSEUDO:function(e){var t,n
2025-01-19 06:49:32 UTC	2233	IN	Data Raw: 20 61 3d 72 5b 32 5d 2c 73 3d 72 5b 35 5d 3b 69 5b 72 5b 31 5d 5d 3d 61 2e 61 64 64 2c 73 26 26 61 2e 61 64 64 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 73 7d 29 2c 74 5b 33 2d 65 5d 5b 32 5d 2e 64 69 73 61 62 6c 65 2c 74 5b 33 2d 65 5d 5b 33 5d 2e 64 69 73 61 62 6c 65 2c 74 5b 30 5d 5b 32 5d 2e 6c 6f 63 6b 2c 74 5b 30 5d 5b 33 5d 2e 6c 6f 63 6b 29 2c 61 2e 61 64 64 28 72 5b 33 5d 2e 66 69 72 65 29 2c 6f 5b 72 5b 30 5d 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 5b 72 5b 30 5d 2b 22 57 69 74 68 22 5d 28 74 68 69 73 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 7d 2c 6f 5b 72 5b 30 5d 2b 22 57 69 74 68 22 5d 3d 61 2e 66 69 72 65 57 69 74 68 7d 29 29 2c 69 2e 70 72 6f 6d 69 73 65 28 6f Data Ascii: a=r[2],s=r[5];i[r[1]]=a.add,s&&a.add((function(){n=s}),t[3-e][2].disable,t[3-e][3].disable,t[0][2].lock,t[0][3].lock),a.add(r[3].fire),o[r[0]]=function(){return o[r[0]+"With"](this===o?void 0:this,arguments),this},o[r[0]+"With"]=a.fireWith})),i.promise(o
2025-01-19 06:49:32 UTC	16384	IN	Data Raw: 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 4a 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 4a 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 63 61 63 68 65 28 65 29 3a 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 26 26 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 4a 28 74 29 5d 7d 2c 61 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 Data Ascii: this.cache(e);if("string"==typeof t)i[J(t)]=n;else for(r in t)i[J(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][J(t)]},access:function(e,t,n){return void 0===t\|\|t&&"string"==typeof t&&void 0===n?this
2025-01-19 06:49:32 UTC	16384	IN	Data Raw: 6e 5b 65 65 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 6e 5b 74 65 2e 65 78 70 61 6e 64 6f 5d 26 26 28 6e 5b 74 65 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 6b 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 65 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 65 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 6b 2e 74 65 78 74 28 74 68 69 73 29 3a 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 Data Ascii: n[ee.expando]=void 0}n[te.expando]&&(n[te.expando]=void 0)}}}),k.fn.extend({detach:function(e){return $e(this,e,!0)},remove:function(e){return $e(this,e)},text:function(e){return V(this,(function(e){return void 0===e?k.text(this):this.empty().each((functi
2025-01-19 06:49:32 UTC	7952	IN	Data Raw: 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 6b 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 6b 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 6b 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 6b 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 76 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 6b 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 Data Ascii: pe;if(3!==o&&8!==o&&2!==o)return void 0===e.getAttribute?k.prop(e,t,n):(1===o&&k.isXMLDoc(e)\|\|(i=k.attrHooks[t.toLowerCase()]\|\|(k.expr.match.bool.test(t)?vt:void 0)),void 0!==n?null===n?void k.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.s
2025-01-19 06:49:32 UTC	16288	IN	Data Raw: 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 6e 29 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 22 22 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 65 2e 6a 71 75 65 72 79 26 26 21 6b 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 65 29 29 6b 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 76 61 6c 75 65 29 7d 29 29 3b 65 6c 73 65 20 66 6f 72 28 6e 20 69 6e 20 65 29 48 74 28 6e 2c 65 5b 6e 5d 2c 74 2c 69 29 3b 72 65 74 75 72 6e 20 72 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 6b 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: ent(e)+"="+encodeURIComponent(null==n?"":n)};if(null==e)return"";if(Array.isArray(e)\|\|e.jquery&&!k.isPlainObject(e))k.each(e,(function(){i(this.name,this.value)}));else for(n in e)Ht(n,e[n],t,i);return r.join("&")},k.fn.extend({serialize:function(){return

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:32 UTC	635	OUT	GET /forms/images/customervoice/customervoice.ico HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:32 UTC	583	IN	HTTP/1.1 200 OK Content-Length: 4286 Content-Type: image/x-icon Content-MD5: 7is1f6X7ppryOBaOOhon4Q== Last-Modified: Wed, 11 Dec 2024 04:47:02 GMT Accept-Ranges: bytes ETag: "0x8DD199EDABF3C9B" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: d047e91f-b01e-0001-0592-4b08ed000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:32 GMT Date: Sun, 19 Jan 2025 06:49:32 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:32 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf df 70 10 d3 df 7b 40 d6 e3 7c 6f d4 df 78 90 d4 e2 78 9f d3 Data Ascii: ( @ p{@\|oxx

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:33 UTC	388	OUT	GET /forms/images/customervoice/customervoice.ico HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:33 UTC	583	IN	HTTP/1.1 200 OK Content-Length: 4286 Content-Type: image/x-icon Content-MD5: 7is1f6X7ppryOBaOOhon4Q== Last-Modified: Wed, 11 Dec 2024 04:47:02 GMT Accept-Ranges: bytes ETag: "0x8DD199EDABF3C9B" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 80812f3d-101e-007a-7992-4b4a71000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:33 GMT Date: Sun, 19 Jan 2025 06:49:33 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:33 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf df 70 10 d3 df 7b 40 d6 e3 7c 6f d4 df 78 90 d4 e2 78 9f d3 Data Ascii: ( @ p{@\|oxx

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:33 UTC	599	OUT	GET /forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:34 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 24179 Content-Type: application/javascript Content-MD5: nui/rrnB30EREYfenBAvMw== Last-Modified: Fri, 17 Jan 2025 04:52:48 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA32ECD9" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3de8cf8d-601e-003d-5d3e-6a212a000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:34 GMT Date: Sun, 19 Jan 2025 06:49:34 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:34 UTC	1003	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 35 34 5d 2c 7b 39 36 38 38 3a 66 75 6e 63 74 69 6f 6e 28 6f 2c 65 2c 72 29 7b 72 2e 64 28 65 2c 7b 24 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 47 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6c 7d 2c 52 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 7d 2c 54 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 64 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 6b 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 7d 2c 71 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[954],{9688:function(o,e,r){r.d(e,{$_:function(){return n},G0:function(){return l},R2:function(){return d},Tz:function(){return p},d9:function(){return i},kU:function(){return c},qN:function(){r
2025-01-19 06:49:34 UTC	534	IN	Data Raw: 23 33 34 34 64 36 61 22 2c 54 68 75 6d 62 6e 61 69 6c 3a 6e 75 6c 6c 7d 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 65 36 66 32 66 31 22 2c 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 6e 75 6c 6c 2c 4e 61 6d 65 3a 22 43 56 5f 48 42 47 5f 54 72 61 76 65 6c 22 2c 50 72 69 6d 61 72 79 43 6f 6c 6f 72 3a 22 23 33 33 34 32 34 31 22 2c 53 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 3a 22 23 31 66 32 39 32 38 22 2c 54 68 75 6d 62 6e 61 69 6c 3a 6e 75 6c 6c 7d 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 66 32 65 62 65 36 22 2c 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 6e 75 6c 6c 2c 4e 61 6d 65 3a 22 43 56 5f 48 42 47 5f 48 61 70 70 79 43 68 69 6c 64 72 65 6e 22 2c 50 72 69 6d 61 72 79 43 6f 6c 6f 72 3a 22 23 36 36 33 64 32 32 Data Ascii: #344d6a",Thumbnail:null},{BackgroundColor:"#e6f2f1",BackgroundImage:null,Name:"CV_HBG_Travel",PrimaryColor:"#334241",SecondaryColor:"#1f2928",Thumbnail:null},{BackgroundColor:"#f2ebe6",BackgroundImage:null,Name:"CV_HBG_HappyChildren",PrimaryColor:"#663d22
2025-01-19 06:49:34 UTC	14336	IN	Data Raw: 2c 53 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 3a 22 23 33 66 35 38 35 62 22 2c 54 68 75 6d 62 6e 61 69 6c 3a 6e 75 6c 6c 7d 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 66 32 66 30 65 36 22 2c 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 6e 75 6c 6c 2c 4e 61 6d 65 3a 22 43 56 5f 48 42 47 5f 43 6f 66 66 65 65 43 75 70 22 2c 50 72 69 6d 61 72 79 43 6f 6c 6f 72 3a 22 23 37 35 36 34 31 32 22 2c 53 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 3a 22 23 35 62 34 65 30 65 22 2c 54 68 75 6d 62 6e 61 69 6c 3a 6e 75 6c 6c 7d 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 66 32 66 32 66 32 22 2c 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 6e 75 6c 6c 2c 4e 61 6d 65 3a 22 43 56 5f 48 42 47 5f 43 6f 76 69 64 22 2c 50 72 69 6d 61 72 79 43 6f Data Ascii: ,SecondaryColor:"#3f585b",Thumbnail:null},{BackgroundColor:"#f2f0e6",BackgroundImage:null,Name:"CV_HBG_CoffeeCup",PrimaryColor:"#756412",SecondaryColor:"#5b4e0e",Thumbnail:null},{BackgroundColor:"#f2f2f2",BackgroundImage:null,Name:"CV_HBG_Covid",PrimaryCo
2025-01-19 06:49:34 UTC	8306	IN	Data Raw: 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 20 7b 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 7d 22 29 3a 5b 32 2c 35 2c 38 5d 2e 69 6e 64 65 78 4f 66 28 6c 2e 54 7a 2e 69 6e 64 65 78 4f 66 28 55 29 29 3e 2d 31 3f 28 56 2b 3d 22 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 68 65 6d 65 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 62 6f 78 20 7b 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 2d 72 65 76 65 72 73 65 3b 20 7d 22 2c 56 2b 3d 22 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 68 65 6d Data Ascii: ice-form-title-container .office-form-title { text-align: center; }"):[2,5,8].indexOf(l.Tz.indexOf(U))>-1?(V+=".office-form-theme-primary-background.office-form-title-container .office-form-title-box { flex-direction: row-reverse; }",V+=".office-form-them

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:35 UTC	412	OUT	GET /forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:35 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 14439 Content-Type: application/javascript Content-MD5: jQOKK6i4+h1sZQQ0a+kJWQ== Last-Modified: Thu, 05 Dec 2024 04:53:45 GMT Accept-Ranges: bytes ETag: "0x8DD14E8CC824857" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 75f41e44-401e-0067-558f-6947cd000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:35 GMT Date: Sun, 19 Jan 2025 06:49:35 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:35 UTC	1125	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 36 5d 2c 7b 39 36 38 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6f 2c 74 29 7b 74 2e 64 28 6f 2c 7b 24 5f 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 7d 2c 47 30 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 7d 2c 52 32 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6d 7d 2c 54 7a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 64 39 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 6b 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 61 7d 2c 71 4e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[906],{9688:function(e,o,t){t.d(o,{$_:function(){return n},G0:function(){return u},R2:function(){return m},Tz:function(){return p},d9:function(){return r},kU:function(){return a},qN:function(){r
2025-01-19 06:49:35 UTC	13314	IN	Data Raw: 64 61 72 79 43 6f 6c 6f 72 3a 22 23 31 66 32 39 32 38 22 2c 54 68 75 6d 62 6e 61 69 6c 3a 6e 75 6c 6c 7d 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 66 32 65 62 65 36 22 2c 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 6e 75 6c 6c 2c 4e 61 6d 65 3a 22 43 56 5f 48 42 47 5f 48 61 70 70 79 43 68 69 6c 64 72 65 6e 22 2c 50 72 69 6d 61 72 79 43 6f 6c 6f 72 3a 22 23 36 36 33 64 32 32 22 2c 53 65 63 6f 6e 64 61 72 79 43 6f 6c 6f 72 3a 22 23 34 64 32 65 31 61 22 2c 54 68 75 6d 62 6e 61 69 6c 3a 6e 75 6c 6c 7d 2c 7b 42 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 66 32 66 32 66 32 22 2c 42 61 63 6b 67 72 6f 75 6e 64 49 6d 61 67 65 3a 6e 75 6c 6c 2c 4e 61 6d 65 3a 22 43 56 5f 48 42 47 5f 48 65 61 72 74 53 79 6d 62 6f 6c 22 2c 50 72 69 6d 61 Data Ascii: daryColor:"#1f2928",Thumbnail:null},{BackgroundColor:"#f2ebe6",BackgroundImage:null,Name:"CV_HBG_HappyChildren",PrimaryColor:"#663d22",SecondaryColor:"#4d2e1a",Thumbnail:null},{BackgroundColor:"#f2f2f2",BackgroundImage:null,Name:"CV_HBG_HeartSymbol",Prima

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:35 UTC	588	OUT	GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:36 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 13904 Content-Type: application/javascript Content-MD5: 1MbsdjUwadDctpVuXUy+kQ== Last-Modified: Fri, 17 Jan 2025 04:52:48 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA355D76" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 5217fa66-001e-002b-803e-6ad7fd000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:36 GMT Date: Sun, 19 Jan 2025 06:49:36 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:36 UTC	1004	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 32 5d 2c 7b 33 37 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 54 69 74 6c 65 4f 76 65 72 66 6c 6f 77 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 34 36 32 39 29 2c 72 3d 6e 28 34 31 35 39 34 29 2c 69 3d 6e 28 35 33 30 31 33 29 2c 73 3d 6e 28 31 36 30 33 38 29 2c 75 3d 6e 28 35 39 31 39 38 29 2c 61 3d 6e 28 33 33 35 38 39 29 2c 6c 3d 6e 28 33 39 39 36 32 29 2c 70 3d 6e 28 39 37 34 31 30 29 2c 63 3d 6e 28 33 33 33 33 30 29 2c 64 3d 6e 28 32 32 32 32 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[902],{3750:function(e,t,n){n.r(t),n.d(t,{TitleOverflowMenu:function(){return I}});var o=n(34629),r=n(41594),i=n(53013),s=n(16038),u=n(59198),a=n(33589),l=n(39962),p=n(97410),c=n(33330),d=n(2222
2025-01-19 06:49:36 UTC	533	IN	Data Raw: 62 69 6e 64 28 6e 29 2c 6e 2e 68 61 6e 64 6c 65 54 72 69 67 67 65 72 46 6f 63 75 73 3d 6e 2e 68 61 6e 64 6c 65 54 72 69 67 67 65 72 46 6f 63 75 73 2e 62 69 6e 64 28 6e 29 2c 6e 2e 68 61 6e 64 6c 65 54 72 69 67 67 65 72 43 6c 69 63 6b 3d 6e 2e 68 61 6e 64 6c 65 54 72 69 67 67 65 72 43 6c 69 63 6b 2e 62 69 6e 64 28 6e 29 2c 6e 2e 63 6f 6c 6c 61 70 73 65 4d 65 6e 75 3d 6e 2e 63 6f 6c 6c 61 70 73 65 4d 65 6e 75 2e 62 69 6e 64 28 6e 29 2c 6e 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 43 36 29 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 73 65 74 26 26 28 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 4d 65 6e 75 45 78 70 61 6e 64 65 64 Data Ascii: bind(n),n.handleTriggerFocus=n.handleTriggerFocus.bind(n),n.handleTriggerClick=n.handleTriggerClick.bind(n),n.collapseMenu=n.collapseMenu.bind(n),n}return(0,o.C6)(t,e),t.prototype.componentWillReceiveProps=function(e){e.Reset&&(this.setState({MenuExpanded
2025-01-19 06:49:36 UTC	12367	IN	Data Raw: 69 67 67 65 72 46 6f 63 75 73 65 64 3d 21 31 29 2c 21 74 2e 4d 65 6e 75 45 78 70 61 6e 64 65 64 26 26 74 68 69 73 2e 73 74 61 74 65 2e 4d 65 6e 75 45 78 70 61 6e 64 65 64 26 26 28 74 68 69 73 2e 70 72 6f 70 73 2e 44 69 73 61 62 6c 65 41 64 6a 75 73 74 50 6f 70 75 70 50 6f 73 69 74 69 6f 6e 7c 7c 74 68 69 73 2e 61 64 6a 75 73 74 50 6f 70 75 70 50 6f 73 69 74 69 6f 6e 28 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 6e 2e 73 65 74 46 6f 63 75 73 4f 6e 4d 65 6e 75 49 74 65 6d 28 6e 75 6c 6c 3d 3d 3d 28 65 3d 6e 2e 67 65 74 4d 65 6e 75 49 74 65 6d 45 6c 65 6d 65 6e 74 73 28 29 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 65 3f 76 6f 69 64 20 30 3a 65 5b 30 5d 29 7d 29 2c 30 29 2c 74 68 69 73 2e 70 72 6f 70 73 2e 6f 6e 4d Data Ascii: iggerFocused=!1),!t.MenuExpanded&&this.state.MenuExpanded&&(this.props.DisableAdjustPopupPosition\|\|this.adjustPopupPosition(),setTimeout((function(){var e;n.setFocusOnMenuItem(null===(e=n.getMenuItemElements())\|\|void 0===e?void 0:e[0])}),0),this.props.onM

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:37 UTC	401	OUT	GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:37 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 13904 Content-Type: application/javascript Content-MD5: srEPVG3mvngIQHftZF3dUQ== Last-Modified: Tue, 17 Dec 2024 04:50:48 GMT Accept-Ranges: bytes ETag: "0x8DD1E566007AEC7" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 471de73e-d01e-0065-7f5f-50f975000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:49:37 GMT Date: Sun, 19 Jan 2025 06:49:37 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:49:37 UTC	1126	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 32 5d 2c 7b 33 37 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 54 69 74 6c 65 4f 76 65 72 66 6c 6f 77 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 34 36 32 39 29 2c 72 3d 6e 28 34 31 35 39 34 29 2c 69 3d 6e 28 35 33 30 31 33 29 2c 73 3d 6e 28 31 36 30 33 38 29 2c 75 3d 6e 28 35 39 31 39 38 29 2c 61 3d 6e 28 33 33 35 38 39 29 2c 6c 3d 6e 28 33 39 39 36 32 29 2c 70 3d 6e 28 39 37 34 31 30 29 2c 63 3d 6e 28 33 33 33 33 30 29 2c 64 3d 6e 28 32 32 32 32 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[902],{3750:function(e,t,n){n.r(t),n.d(t,{TitleOverflowMenu:function(){return I}});var o=n(34629),r=n(41594),i=n(53013),s=n(16038),u=n(59198),a=n(33589),l=n(39962),p=n(97410),c=n(33330),d=n(2222
2025-01-19 06:49:37 UTC	12778	IN	Data Raw: 3d 6e 2e 63 6f 6c 6c 61 70 73 65 4d 65 6e 75 2e 62 69 6e 64 28 6e 29 2c 6e 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 43 36 29 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 73 65 74 26 26 28 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 4d 65 6e 75 45 78 70 61 6e 64 65 64 3a 21 31 7d 29 2c 65 2e 6f 6e 4d 65 6e 75 52 65 73 65 74 26 26 65 2e 6f 6e 4d 65 6e 75 52 65 73 65 74 28 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 Data Ascii: =n.collapseMenu.bind(n),n}return(0,o.C6)(t,e),t.prototype.componentWillReceiveProps=function(e){e.Reset&&(this.setState({MenuExpanded:!1}),e.onMenuReset&&e.onMenuReset(),this.focus())},t.prototype.componentDidMount=function(){window.addEventListener("resi

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:38 UTC	727	OUT	GET /WeQiU HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:39 UTC	889	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 19 Jan 2025 06:49:38 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://tdn.docshostingservice.com/WeQiU/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uR%2FivAk%2FX43qq%2BTQDFHYPWoInTFqhPvZePDW0aSH%2B1Z%2BD5Puo2UpVx0vC6g9eUd2QSysSY7RnUNoQ%2BFdNzpc%2BHZDYiXRu6d7xrwX%2BhvaPK%2BcFlNx6tH3dqQ1vaMxy20XMgx5CDZG4n0RxCGgnA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9044e2d19d0d05ad-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=6993&min_rtt=6990&rtt_var=2627&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1305&delivery_rate=416310&cwnd=32&unsent_bytes=0&cid=93dc48cdf8762bd5&ts=293&x=0"
2025-01-19 06:49:39 UTC	255	IN	Data Raw: 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 64 6e 2e 64 6f 63 73 68 6f 73 74 69 6e 67 73 65 72 76 69 63 65 2e 63 6f 6d 2f 57 65 51 69 55 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f9<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://tdn.docshostingservice.com/WeQiU/">here</a>.</p></body></html>
2025-01-19 06:49:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.dcv.ms/TgEkOrA6UC

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Windows Analysis Report
https://nam.dcv.ms/TgEkOrA6UC

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:40 UTC	554	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tdn.docshostingservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:40 UTC	386	IN	HTTP/1.1 302 Found Date: Sun, 19 Jan 2025 06:49:40 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/672eb098a9f3/api.js Server: cloudflare CF-RAY: 9044e2db5da34316-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:40 UTC	569	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tdn.docshostingservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:41 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:49:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9044e2df3a2b42be-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:49:41 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:41 UTC	810	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tdn.docshostingservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:41 UTC	1362	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:49:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27003 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-19 06:49:41 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 34 34 65 32 65 33 62 63 65 61 34 32 63 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 9044e2e3bcea42c7-EWRalt-svc: h3=":443"; ma=86400
2025-01-19 06:49:41 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-19 06:49:41 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:42 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044e2e3bcea42c7&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:42 UTC	331	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:49:42 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 119555 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9044e2e7ac6a7ca5-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:49:42 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4b 4d 72 57 68 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.KMrWh3={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"http
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 Data Ascii: here%20for%20more%20information%3C%2Fa%3E","turnstile_footer_privacy":"Privacy","turnstile_refresh":"Refresh","turnstile_verifying":"Verifying...","turnstile_failure":"Error","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challe
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 2c 66 58 2c 66 59 2c 67 32 2c 67 33 2c 67 61 2c 67 67 2c 67 68 2c 67 48 2c 67 65 2c 67 66 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 39 38 29 29 2f 31 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 31 37 38 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 30 36 29 29 2f 33 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 30 35 29 29 2f 34 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 38 36 34 29 29 2f 35 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 31 33 29 29 2f 36 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 37 34 29 29 2f 37 29 2b 70 61 72 73 65 49 Data Ascii: ,fX,fY,g2,g3,ga,gg,gh,gH,ge,gf){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(1898))/1(-parseInt(gI(1178))/2)+parseInt(gI(1306))/3(-parseInt(gI(1705))/4)+-parseInt(gI(864))/5+parseInt(gI(1013))/6*(-parseInt(gI(1274))/7)+parseI
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 29 2c 27 66 42 73 45 4e 27 3a 67 4d 28 31 36 35 31 29 7d 29 3b 74 72 79 7b 69 66 28 67 4d 28 38 33 34 29 3d 3d 3d 67 4d 28 38 33 34 29 29 7b 28 6a 3d 69 5b 67 4d 28 39 33 33 29 5d 28 65 4f 2c 66 5b 67 4d 28 31 34 36 32 29 5d 2c 66 5b 67 4d 28 39 34 39 29 5d 29 2c 69 5b 67 4d 28 37 37 31 29 5d 28 66 5b 67 4d 28 31 34 36 32 29 5d 2c 45 72 72 6f 72 29 29 3f 66 5b 67 4d 28 31 34 36 32 29 5d 3d 4a 53 4f 4e 5b 67 4d 28 31 33 35 37 29 5d 28 66 5b 67 4d 28 31 34 36 32 29 5d 2c 4f 62 6a 65 63 74 5b 67 4d 28 31 38 36 33 29 5d 28 66 5b 67 4d 28 31 34 36 32 29 5d 29 29 3a 69 5b 67 4d 28 31 39 36 31 29 5d 3d 3d 3d 67 4d 28 31 37 34 33 29 3f 28 46 3d 7b 7d 2c 46 5b 67 4d 28 31 34 33 32 29 5d 3d 69 5b 67 4d 28 31 35 37 30 29 5d 2c 46 5b 67 4d 28 31 35 31 35 29 5d 3d 69 Data Ascii: ),'fBsEN':gM(1651)});try{if(gM(834)===gM(834)){(j=i[gM(933)](eO,f[gM(1462)],f[gM(949)]),i[gM(771)](f[gM(1462)],Error))?f[gM(1462)]=JSON[gM(1357)](f[gM(1462)],Object[gM(1863)](f[gM(1462)])):i[gM(1961)]===gM(1743)?(F={},F[gM(1432)]=i[gM(1570)],F[gM(1515)]=i
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 30 30 29 2c 66 5b 67 50 28 31 35 35 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 76 7d 2c 66 5b 67 50 28 31 32 34 34 29 5d 3d 67 50 28 31 33 35 31 29 2c 66 5b 67 50 28 31 34 39 35 29 5d 3d 67 50 28 37 34 37 29 2c 67 3d 66 2c 67 5b 67 50 28 31 35 35 35 29 5d 28 65 2c 45 72 72 6f 72 29 29 3f 28 68 3d 65 5b 67 50 28 39 33 37 29 5d 2c 65 5b 67 50 28 31 30 38 32 29 5d 26 26 74 79 70 65 6f 66 20 65 5b 67 50 28 31 30 38 32 29 5d 3d 3d 3d 67 5b 67 50 28 31 32 34 34 29 5d 29 26 26 28 28 6c 3d 65 5b 67 50 28 31 30 38 32 29 5d 5b 67 50 28 31 33 31 33 29 5d 28 27 5c 6e 27 29 2c 6c 5b 67 50 28 37 35 32 29 5d 3e 31 29 26 26 28 6d 3d 2f 5e 5c 73 2a 61 74 5c 73 2b 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c Data Ascii: 00),f[gP(1555)]=function(s,v){return s instanceof v},f[gP(1244)]=gP(1351),f[gP(1495)]=gP(747),g=f,g[gP(1555)](e,Error))?(h=e[gP(937)],e[gP(1082)]&&typeof e[gP(1082)]===g[gP(1244)])&&((l=e[gP(1082)][gP(1313)]('\n'),l[gP(752)]>1)&&(m=/^\s*at\s+(.+):(\d+):(\
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 2c 31 65 33 29 3a 28 6c 3d 7b 7d 2c 6c 5b 67 52 28 37 34 34 29 5d 3d 64 2c 6c 5b 67 52 28 39 34 39 29 5d 3d 65 2c 6c 5b 67 52 28 35 39 38 29 5d 3d 66 2c 6c 5b 67 52 28 31 39 30 38 29 5d 3d 67 2c 6c 5b 67 52 28 31 34 36 32 29 5d 3d 68 2c 6d 3d 6c 2c 65 4d 5b 67 52 28 31 36 31 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 55 29 7b 67 55 3d 67 52 2c 65 4d 5b 67 55 28 31 32 39 34 29 5d 28 6d 2c 75 6e 64 65 66 69 6e 65 64 2c 67 55 28 35 31 34 29 29 7d 2c 31 30 29 2c 65 4d 5b 67 52 28 31 36 31 32 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 56 29 7b 67 56 3d 67 52 2c 65 4d 5b 67 56 28 31 35 39 31 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 67 52 28 36 38 31 29 5d 5b 67 52 28 31 36 37 39 29 5d 28 67 52 28 31 39 30 36 29 2c 64 Data Ascii: continue}break}},1e3):(l={},l[gR(744)]=d,l[gR(949)]=e,l[gR(598)]=f,l[gR(1908)]=g,l[gR(1462)]=h,m=l,eM[gR(1612)](function(gU){gU=gR,eM[gU(1294)](m,undefined,gU(514))},10),eM[gR(1612)](function(gV){gV=gR,eM[gV(1591)]()},1e3),eM[gR(681)][gR(1679)](gR(1906),d
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 37 32 35 29 5d 3d 66 4c 2c 66 53 5b 67 4a 28 31 31 34 38 29 5d 3d 66 4d 2c 66 53 5b 67 4a 28 31 30 36 38 29 5d 3d 66 48 2c 66 53 5b 67 4a 28 31 32 30 33 29 5d 3d 66 4e 2c 66 53 5b 67 4a 28 31 35 35 37 29 5d 3d 66 4b 2c 66 53 5b 67 4a 28 31 39 37 38 29 5d 3d 66 4a 2c 66 53 5b 67 4a 28 31 32 34 38 29 5d 3d 66 38 2c 66 53 5b 67 4a 28 39 31 33 29 5d 3d 66 46 2c 66 53 5b 67 4a 28 31 30 33 37 29 5d 3d 66 45 2c 66 53 5b 67 4a 28 31 35 35 34 29 5d 3d 65 5a 2c 66 53 5b 67 4a 28 35 31 30 29 5d 3d 66 30 2c 66 53 5b 67 4a 28 31 35 37 36 29 5d 3d 66 6d 2c 66 53 5b 67 4a 28 31 34 35 32 29 5d 3d 66 6f 2c 66 53 5b 67 4a 28 36 36 33 29 5d 3d 66 6e 2c 66 53 5b 67 4a 28 31 35 33 33 29 5d 3d 66 79 2c 66 53 5b 67 4a 28 31 34 31 30 29 5d 3d 66 78 2c 66 53 5b 67 4a 28 31 38 37 Data Ascii: 725)]=fL,fS[gJ(1148)]=fM,fS[gJ(1068)]=fH,fS[gJ(1203)]=fN,fS[gJ(1557)]=fK,fS[gJ(1978)]=fJ,fS[gJ(1248)]=f8,fS[gJ(913)]=fF,fS[gJ(1037)]=fE,fS[gJ(1554)]=eZ,fS[gJ(510)]=f0,fS[gJ(1576)]=fm,fS[gJ(1452)]=fo,fS[gJ(663)]=fn,fS[gJ(1533)]=fy,fS[gJ(1410)]=fx,fS[gJ(187
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 68 2a 69 7d 2c 27 4f 48 77 4e 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 4f 42 56 47 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 70 5a 48 78 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2a 69 7d 2c 27 6b 61 65 67 49 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 71 54 6a 6c 53 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 61 61 50 70 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 46 69 77 79 5a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 7d 2c 65 Data Ascii: eturn hi},'OHwNx':function(h,i){return h!=i},'OBVGq':function(h,i){return h==i},'pZHxU':function(h,i){return hi},'kaegI':function(h,i){return h>i},'qTjlS':function(h,i){return h==i},'aaPpj':function(h,i){return i*h},'FiwyZ':function(h,i){return h(i)}},e
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 3d 30 3b 73 3c 46 3b 48 3d 64 5b 69 6b 28 31 33 32 31 29 5d 28 48 3c 3c 31 2e 39 32 2c 64 5b 69 6b 28 31 36 36 33 29 5d 28 4d 2c 31 29 29 2c 64 5b 69 6b 28 31 30 30 37 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 69 6b 28 31 33 39 33 29 5d 28 64 5b 69 6b 28 31 34 37 36 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 64 5b 69 6b 28 31 30 30 37 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 69 6b 28 35 38 33 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 64 5b 69 6b 28 31 34 37 36 29 5d 28 53 74 72 69 6e 67 2c 4b 29 29 7d 69 66 28 64 5b 69 6b 28 31 33 37 39 29 5d 28 27 27 2c 43 29 29 7b 69 66 28 4f 62 6a 65 63 74 5b 69 6b 28 31 36 30 33 29 5d 5b 69 6b 28 38 30 33 29 5d Data Ascii: =0;s<F;H=d[ik(1321)](H<<1.92,d[ik(1663)](M,1)),d[ik(1007)](I,j-1)?(I=0,G[ik(1393)](d[ik(1476)](o,H)),H=0):I++,M>>=1,s++);C=(D--,d[ik(1007)](0,D)&&(D=Math[ik(583)](2,F),F++),x[L]=E++,d[ik(1476)](String,K))}if(d[ik(1379)]('',C)){if(Object[ik(1603)][ik(803)]
2025-01-19 06:49:42 UTC	1369	IN	Data Raw: 2c 49 3d 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 6f 28 35 38 33 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 30 3d 3d 48 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 6f 28 31 34 37 36 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 46 2a 28 30 3c 4c 3f 31 3a 30 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 6f 28 35 38 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 69 6f 28 39 35 33 29 5d 28 46 2c 4b 29 3b 4c 3d 64 5b 69 6f 28 31 32 32 30 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 64 5b 69 6f 28 31 36 31 33 29 5d 28 6f 2c 49 2b 2b 29 29 2c Data Ascii: ,I=1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[io(583)](2,2),F=1;K!=F;L=G&H,H>>=1,0==H&&(H=j,G=d[io(1476)](o,I++)),J\|=F*(0<L?1:0),F<<=1);switch(J){case 0:for(J=0,K=Math[io(583)](2,8),F=1;d[io(953)](F,K);L=d[io(1220)](G,H),H>>=1,H==0&&(H=j,G=d[io(1613)](o,I++)),

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:42 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:42 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:49:42 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9044e2e7eb718c78-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:49:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:42 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:43 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:49:43 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9044e2ebde9e0fab-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:49:43 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:43 UTC	1175	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3495 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:43 UTC	3495	OUT	Data Raw: 76 5f 39 30 34 34 65 32 65 33 62 63 65 61 34 32 63 37 3d 30 66 6b 77 68 77 37 77 62 77 72 77 4a 77 4e 68 6c 73 68 6c 72 69 77 79 38 4b 78 77 6c 66 76 62 64 6c 6f 70 6c 4e 37 77 36 47 6c 2d 53 6c 73 51 42 4f 6e 4e 54 42 6b 6c 75 77 47 78 77 4e 64 6c 63 76 77 6c 54 4a 47 78 7a 6c 38 53 38 39 6c 6a 39 6c 25 32 62 5a 49 72 36 4a 6c 4f 38 6e 52 32 6c 59 37 6c 64 6c 51 46 57 65 52 68 6c 76 45 41 69 36 36 37 36 64 6c 30 37 6c 24 41 51 48 6e 6d 75 4e 73 66 34 32 54 77 6c 63 78 77 4e 76 6c 2b 37 6c 42 6c 59 72 6d 76 53 39 6c 45 38 6c 49 6c 59 6a 53 6a 4e 66 77 42 70 76 63 44 7a 54 36 76 77 36 4b 7a 38 36 31 4e 6b 36 69 37 61 37 37 6c 39 4a 48 64 62 46 4a 45 63 6e 56 68 6c 36 7a 4f 38 36 44 59 54 65 58 64 37 37 77 77 36 39 6c 6a 37 36 30 33 79 70 67 45 7a 6e 76 59 Data Ascii: v_9044e2e3bcea42c7=0fkwhw7wbwrwJwNhlshlriwy8KxwlfvbdloplN7w6Gl-SlsQBOnNTBkluwGxwNdlcvwlTJGxzl8S89lj9l%2bZIr6JlO8nR2lY7ldlQFWeRhlvEAi6676dl07l$AQHnmuNsf42TwlcxwNvl+7lBlYrmvS9lE8lIlYjSjNfwBpvcDzT6vw6Kz861Nk6i7a77l9JHdbFJEcnVhl6zO86DYTeXd77ww69lj7603ypgEznvY
2025-01-19 06:49:43 UTC	815	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:49:43 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 162512 Connection: close cf-chl-gen: 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$qonZL0MaxO8xheEbWC2CFg== Server: cloudflare CF-RAY: 9044e2ee0ba97c6f-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:49:43 UTC	554	IN	Data Raw: 63 31 52 39 69 45 78 59 5a 33 31 69 62 4a 53 54 63 57 4e 76 61 47 35 53 65 48 52 33 6b 46 35 61 61 71 4b 64 6e 47 57 59 70 61 47 45 68 6e 64 6b 61 4a 75 4e 61 71 32 43 6a 61 5a 73 69 47 32 46 72 5a 75 56 68 37 4e 37 6f 4a 2b 2f 72 4c 65 74 75 36 54 43 71 62 36 47 79 72 7a 4a 74 71 33 51 78 73 57 46 68 74 50 4c 6a 61 6a 5a 31 4c 71 77 33 4d 6a 67 74 2b 47 31 33 71 53 38 77 72 4b 65 76 65 76 56 71 38 48 76 32 72 72 4b 34 38 69 2f 7a 2b 69 31 74 76 66 4e 75 4d 58 38 35 2f 4f 39 75 65 76 33 76 77 50 42 31 63 59 4a 32 51 54 30 43 2f 67 49 7a 41 54 37 30 78 44 2b 44 41 49 42 36 76 76 70 48 51 67 67 36 50 6e 32 41 66 6a 31 47 65 4d 6e 49 79 50 6e 4a 43 49 70 41 67 34 70 4d 43 76 77 4d 43 7a 76 37 53 34 55 41 2f 6b 50 45 7a 34 37 4c 66 6f 61 51 6a 30 7a 41 44 51 Data Ascii: c1R9iExYZ31ibJSTcWNvaG5SeHR3kF5aaqKdnGWYpaGEhndkaJuNaq2CjaZsiG2FrZuVh7N7oJ+/rLetu6TCqb6GyrzJtq3QxsWFhtPLjajZ1Lqw3Mjgt+G13qS8wrKevevVq8Hv2rrK48i/z+i1tvfNuMX85/O9uev3vwPB1cYJ2QT0C/gIzAT70xD+DAIB6vvpHQgg6Pn2Afj1GeMnIyPnJCIpAg4pMCvwMCzv7S4UA/kPEz47LfoaQj0zADQ
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 67 59 43 51 4c 31 37 75 62 73 2f 41 30 78 4d 67 67 59 43 67 67 75 4f 2f 67 63 4e 66 55 2b 44 53 41 63 2b 66 34 42 44 30 63 52 47 52 67 73 44 45 77 35 50 43 67 72 55 6b 6c 47 48 6c 49 57 55 69 70 48 4e 45 74 53 47 52 30 36 54 56 56 6c 55 46 6c 6a 4a 31 6c 48 61 43 74 56 4b 6e 42 72 55 45 46 6e 59 57 30 77 55 6c 5a 4f 65 48 52 4b 62 48 39 64 54 6a 31 39 59 56 61 42 51 34 68 2f 56 46 79 4c 64 6f 5a 6c 54 34 4f 4e 62 32 6c 79 61 6d 39 77 6c 59 52 76 64 57 6c 79 5a 6e 52 58 66 56 69 44 62 6e 4f 6e 64 34 4f 53 59 33 6d 64 67 5a 6d 44 73 47 79 7a 68 33 2b 4a 6c 6f 64 71 72 48 57 73 6b 59 65 55 73 4b 47 54 6e 4c 57 6b 73 33 32 61 70 4a 2b 5a 69 4c 66 4b 6d 35 72 4c 70 39 43 4a 76 37 4b 6e 79 36 72 59 32 64 53 77 79 64 7a 63 76 72 66 62 75 4d 50 55 77 75 58 41 71 Data Ascii: gYCQL17ubs/A0xMggYCgguO/gcNfU+DSAc+f4BD0cRGRgsDEw5PCgrUklGHlIWUipHNEtSGR06TVVlUFljJ1lHaCtVKnBrUEFnYW0wUlZOeHRKbH9dTj19YVaBQ4h/VFyLdoZlT4ONb2lyam9wlYRvdWlyZnRXfViDbnOnd4OSY3mdgZmDsGyzh3+JlodqrHWskYeUsKGTnLWks32apJ+ZiLfKm5rLp9CJv7Kny6rY2dSwydzcvrfbuMPUwuXAq
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 64 47 78 76 70 48 67 6b 41 43 41 66 72 4f 67 73 78 38 7a 73 36 2b 66 30 7a 39 55 41 75 49 68 45 6d 46 52 63 6d 42 6b 59 62 4b 69 38 71 48 79 34 79 46 6a 4d 72 52 46 6b 73 45 31 67 56 4e 7a 73 61 55 53 4e 46 57 6c 5a 57 47 6a 56 4a 59 45 6c 46 51 32 45 69 4d 47 4e 74 55 56 55 2f 4e 54 52 58 61 46 42 54 4f 6e 4e 6e 61 6c 68 4c 67 6f 4a 45 64 58 42 34 64 6f 46 6a 6a 59 78 64 69 33 68 6f 6a 6e 4a 7a 64 56 47 48 54 31 6c 6a 65 34 74 50 68 34 39 64 62 4b 47 44 67 35 75 68 69 4b 4e 70 69 49 4f 61 66 6e 2b 46 5a 36 2b 73 69 6d 75 4a 64 4a 43 55 74 49 36 31 65 49 2b 57 73 61 79 68 6e 62 79 7a 75 35 71 2f 69 4b 4b 42 77 6e 36 70 67 4c 43 68 69 62 2b 62 72 4b 62 4c 72 63 75 59 30 4e 53 30 30 37 61 36 75 4c 44 43 6d 64 2f 62 70 4c 4c 6d 36 64 71 70 34 63 72 43 78 62 Data Ascii: dGxvpHgkACAfrOgsx8zs6+f0z9UAuIhEmFRcmBkYbKi8qHy4yFjMrRFksE1gVNzsaUSNFWlZWGjVJYElFQ2EiMGNtUVU/NTRXaFBTOnNnalhLgoJEdXB4doFjjYxdi3hojnJzdVGHT1lje4tPh49dbKGDg5uhiKNpiIOafn+FZ6+simuJdJCUtI61eI+Wsayhnbyzu5q/iKKBwn6pgLChib+brKbLrcuY0NS007a6uLDCmd/bpLLm6dqp4crCxb
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 41 77 30 4b 4d 44 67 78 39 52 4c 37 43 68 4e 45 4a 50 30 34 42 51 52 46 4f 30 42 41 47 7a 64 44 53 42 73 2f 54 43 64 4a 52 69 51 77 4a 31 6b 37 4c 79 30 61 50 32 46 65 54 44 46 63 5a 46 51 35 48 32 68 67 58 46 38 2b 57 79 38 73 63 57 52 6b 63 6d 74 6b 63 47 42 56 55 30 56 49 50 46 4d 31 66 31 65 41 4f 6d 31 6b 50 59 64 6a 5a 59 52 4b 6a 46 6d 41 59 59 64 73 5a 34 75 41 6c 6e 4e 33 64 59 6d 4d 65 6f 2b 51 69 49 42 2f 6f 49 74 37 65 6e 46 7a 70 70 4f 62 6e 58 71 42 61 4a 39 38 72 36 65 78 67 59 32 6a 63 59 52 7a 6b 6e 71 5a 6c 62 57 4c 75 61 69 77 65 72 36 73 6a 37 53 2f 68 5a 47 69 74 61 32 71 71 59 62 4b 73 74 43 70 77 4b 4b 6c 78 4b 44 57 6c 4e 4f 4f 74 73 33 4a 76 72 76 55 79 35 7a 59 33 74 66 63 78 74 6e 4a 79 61 33 6c 31 39 2b 2b 37 4e 7a 6f 36 62 50 Data Ascii: Aw0KMDgx9RL7ChNEJP04BQRFO0BAGzdDSBs/TCdJRiQwJ1k7Ly0aP2FeTDFcZFQ5H2hgXF8+Wy8scWRkcmtkcGBVU0VIPFM1f1eAOm1kPYdjZYRKjFmAYYdsZ4uAlnN3dYmMeo+QiIB/oIt7enFzppObnXqBaJ98r6exgY2jcYRzknqZlbWLuaiwer6sj7S/hZGita2qqYbKstCpwKKlxKDWlNOOts3JvrvUy5zY3tfcxtnJya3l19++7Nzo6bP
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 6a 33 2b 48 44 44 37 4e 41 51 2b 41 79 4e 47 53 68 38 44 4e 79 38 37 51 54 73 7a 44 69 6b 39 4b 56 51 34 52 56 63 77 4c 46 6b 55 48 68 6f 32 48 44 59 32 59 46 4e 45 55 30 42 4a 62 46 35 6f 4a 44 77 71 57 6d 31 4c 4c 69 35 6c 4b 58 42 7a 56 56 77 33 64 7a 52 37 65 7a 4e 54 68 45 46 69 57 6c 52 6f 68 6e 39 5a 52 49 4a 41 61 57 68 38 6a 59 61 54 54 6c 47 49 63 57 36 62 6b 5a 31 73 64 58 2b 52 69 6d 46 78 58 58 74 75 6d 49 69 43 6d 4b 79 4d 61 4b 61 44 67 36 75 6d 69 58 42 79 63 49 56 7a 74 34 6d 4e 64 6e 74 34 6e 58 65 75 6b 59 43 43 73 34 43 37 78 72 32 5a 77 34 4c 46 69 35 65 71 77 4e 47 63 74 59 7a 56 31 73 4f 58 71 64 53 54 32 4a 53 35 6e 35 76 54 6f 71 2b 77 33 61 48 6a 70 38 71 71 32 4e 37 5a 71 65 79 72 30 62 47 74 72 63 44 6b 39 39 66 7a 37 38 72 58 Data Ascii: j3+HDD7NAQ+AyNGSh8DNy87QTszDik9KVQ4RVcwLFkUHho2HDY2YFNEU0BJbF5oJDwqWm1LLi5lKXBzVVw3dzR7ezNThEFiWlRohn9ZRIJAaWh8jYaTTlGIcW6bkZ1sdX+RimFxXXtumIiCmKyMaKaDg6umiXBycIVzt4mNdnt4nXeukYCCs4C7xr2Zw4LFi5eqwNGctYzV1sOXqdST2JS5n5vToq+w3aHjp8qq2N7Zqeyr0bGtrcDk99fz78rX
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 4a 44 50 54 49 67 51 77 59 68 4e 79 59 49 4b 77 77 66 4a 7a 4e 51 4a 79 35 56 47 42 63 33 45 79 34 70 4c 44 35 43 4e 54 52 43 55 45 46 56 53 44 51 2b 49 6b 6c 6d 53 47 46 4e 63 6d 4d 76 4d 69 39 49 61 6e 4a 36 56 58 78 33 58 45 70 2f 56 48 5a 63 62 45 41 2f 67 33 74 34 56 59 56 35 53 59 53 48 59 56 6d 45 57 34 42 70 54 33 57 54 59 4a 5a 78 6d 30 35 76 6d 6c 79 4c 6f 6d 39 75 6d 70 47 6b 6e 35 79 56 70 71 52 70 6c 61 4f 71 6d 47 4f 6b 72 4a 79 48 72 62 47 50 75 70 4b 5a 6c 6e 61 4d 71 36 79 4c 65 37 65 50 77 72 6d 38 6c 36 4b 2f 6e 49 4b 58 79 61 47 68 6e 59 2f 50 6a 38 43 49 30 35 4c 52 70 63 33 52 32 61 66 4e 6e 4b 71 65 31 74 6d 65 78 4c 57 31 31 75 4f 72 36 71 6e 48 75 4c 6a 69 71 4c 2f 4d 37 38 6a 41 30 4c 4c 4b 7a 50 44 6f 79 67 47 35 33 67 54 75 30 Data Ascii: JDPTIgQwYhNyYIKwwfJzNQJy5VGBc3Ey4pLD5CNTRCUEFVSDQ+IklmSGFNcmMvMi9IanJ6VXx3XEp/VHZcbEA/g3t4VYV5SYSHYVmEW4BpT3WTYJZxm05vmlyLom9umpGkn5yVpqRplaOqmGOkrJyHrbGPupKZlnaMq6yLe7ePwrm8l6K/nIKXyaGhnY/Pj8CI05LRpc3R2afNnKqe1tmexLW11uOr6qnHuLjiqL/M78jA0LLKzPDoygG53gTu0
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 58 4a 69 63 71 43 43 46 41 48 43 74 4b 56 6c 59 58 4f 43 35 53 50 44 77 58 46 6c 6f 79 46 46 5a 59 5a 6c 6f 2b 58 6c 6b 79 58 54 35 73 4c 56 35 52 63 55 77 72 52 6d 41 79 52 57 74 6e 65 54 68 6d 56 55 35 77 50 31 68 63 64 48 39 66 67 33 70 48 50 31 74 34 67 6d 5a 4b 65 57 79 49 58 32 35 65 63 32 70 77 6b 31 56 6a 56 48 4f 62 6e 58 47 57 58 56 52 68 65 6d 4a 31 6f 58 4f 44 66 61 68 69 67 71 2b 61 73 4c 47 72 6b 6d 79 55 6b 57 39 33 64 4a 43 36 6d 72 74 32 6d 5a 2b 51 72 62 47 64 76 5a 6d 62 68 37 62 44 77 4d 79 33 72 36 57 4c 6d 70 76 46 70 4b 2b 53 78 61 69 52 6c 63 6a 47 32 5a 6a 66 6c 37 7a 53 6f 64 4c 65 73 72 65 6b 71 4c 4c 6f 78 2b 4b 2f 30 4f 69 37 78 4f 61 7a 71 2b 79 79 71 73 6e 4a 7a 4c 4c 49 32 76 37 49 33 76 72 72 2b 62 66 6d 78 66 73 42 41 2b Data Ascii: XJicqCCFAHCtKVlYXOC5SPDwXFloyFFZYZlo+XlkyXT5sLV5RcUwrRmAyRWtneThmVU5wP1hcdH9fg3pHP1t4gmZKeWyIX25ec2pwk1VjVHObnXGWXVRhemJ1oXODfahigq+asLGrkmyUkW93dJC6mrt2mZ+QrbGdvZmbh7bDwMy3r6WLmpvFpK+SxaiRlcjG2Zjfl7zSodLesrekqLLox+K/0Oi7xOazq+yyqsnJzLLI2v7I3vrr+bfmxfsBA+
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 52 79 51 51 55 55 55 55 4a 44 68 4c 46 78 55 51 53 45 41 79 46 46 52 46 50 69 42 5a 53 54 39 47 61 32 31 46 61 69 67 6e 50 6b 6c 51 5a 30 4a 47 54 56 4e 42 64 31 42 72 50 48 31 56 57 6d 46 2f 56 58 56 4e 67 31 68 34 53 48 35 68 5a 6f 65 47 59 34 43 46 58 34 69 43 58 55 68 66 6a 47 71 4e 54 59 56 76 69 33 4e 63 69 58 5a 38 6f 58 4f 63 68 33 65 43 59 48 39 36 69 32 79 76 67 59 78 2f 74 4a 57 74 73 36 78 7a 6a 5a 43 37 70 72 64 31 6b 72 32 52 73 4a 79 52 6b 58 36 5a 65 70 6a 4a 70 4c 2b 6c 71 4b 69 48 77 34 2b 69 78 6f 79 56 73 72 57 6d 71 37 48 4f 7a 35 32 6f 33 39 2f 61 6e 70 75 36 76 4d 47 66 71 62 50 46 79 63 4c 4b 78 73 7a 53 7a 63 37 6e 7a 73 76 50 36 62 48 48 31 37 54 4f 32 39 72 4b 38 37 6e 31 7a 77 54 76 36 4d 44 70 33 2b 6a 64 43 51 50 6e 36 67 45 Data Ascii: RyQQUUUUJDhLFxUQSEAyFFRFPiBZST9Ga21FaignPklQZ0JGTVNBd1BrPH1VWmF/VXVNg1h4SH5hZoeGY4CFX4iCXUhfjGqNTYVvi3NciXZ8oXOch3eCYH96i2yvgYx/tJWts6xzjZC7prd1kr2RsJyRkX6ZepjJpL+lqKiHw4+ixoyVsrWmq7HOz52o39/anpu6vMGfqbPFycLKxszSzc7nzsvP6bHH17TO29rK87n1zwTv6MDp3+jdCQPn6gE
2025-01-19 06:49:43 UTC	1369	IN	Data Raw: 54 4e 4f 4b 56 55 76 54 46 63 78 51 57 4a 68 4c 56 30 66 61 43 49 32 58 55 42 74 53 32 45 71 63 55 64 53 61 30 78 4a 52 56 46 53 55 6b 35 6b 61 6a 52 2f 57 33 74 52 56 46 70 6b 52 6c 53 41 50 32 6c 4c 52 57 5a 6d 56 35 47 46 63 6f 35 73 54 49 56 72 62 33 57 51 62 6e 5a 6c 6e 58 4a 35 6b 48 46 79 66 5a 4f 51 65 6f 4e 6b 71 32 68 69 6e 32 56 76 6e 6d 71 42 67 6d 32 71 6e 33 53 71 6b 59 56 31 71 61 61 56 63 62 61 2b 6f 61 43 4e 6f 4d 47 6f 6f 33 75 5a 66 59 75 38 77 4d 4f 35 69 36 36 52 6b 4d 50 50 72 73 57 78 30 72 62 47 74 4d 76 59 75 64 76 68 72 4b 2f 50 30 62 76 65 71 62 4f 34 71 71 50 73 76 2b 75 70 72 65 62 56 33 64 48 71 79 63 58 31 36 2f 50 49 30 75 71 36 76 62 33 31 76 37 66 62 31 4d 66 79 43 64 33 33 39 38 37 65 7a 4d 50 45 44 2b 55 4c 7a 4e 54 34 Data Ascii: TNOKVUvTFcxQWJhLV0faCI2XUBtS2EqcUdSa0xJRVFSUk5kajR/W3tRVFpkRlSAP2lLRWZmV5GFco5sTIVrb3WQbnZlnXJ5kHFyfZOQeoNkq2hin2VvnmqBgm2qn3SqkYV1qaaVcba+oaCNoMGoo3uZfYu8wMO5i66RkMPPrsWx0rbGtMvYudvhrK/P0bveqbO4qqPsv+uprebV3dHqycX16/PI0uq6vb31v7fb1MfyCd33987ezMPED+ULzNT4

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:43 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tdn.docshostingservice.com/WeQiU/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=b5m4uknv5k7hnk5hsqbar46fmc
2025-01-19 06:49:44 UTC	855	IN	HTTP/1.1 404 Not Found Date: Sun, 19 Jan 2025 06:49:43 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fKq2zwu9ay0ZDxLMVGz15Cqny15sSPA37jwXHtPMicDKyvTsIDKGwN0MN4izcCCy%2FvBkKJpokzSnaBIDt4OGXaNtmgV6XHgDuJe%2FDC5f5%2BH2PRxht%2FubjiVD%2F%2By6XrU396gzwb5xBcFrN0sN4A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9044e2f129e44612-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=38453&min_rtt=38452&rtt_var=14422&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1238&delivery_rate=75915&cwnd=32&unsent_bytes=0&cid=91ea02fb957d415a&ts=320&x=0"
2025-01-19 06:49:44 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-19 06:49:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:44 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2020878935:1737267198:NNIom-ug66VatM9-NM6Im8eL9PkjOqswD7N0Mg8o2a0/9044e2e3bcea42c7/ad49Jk3ZtlPu44t6ZutTkq_.vLaukYXX3kDt_REivMI-1737269381-1.1.1.1-IEbrRv_EMJLpbIO7vxVLp06PTMDTA5Jbu.dQ_kLInhw3Q1e31XBhqwJzdXYuWRz3 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:44 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Sun, 19 Jan 2025 06:49:44 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: hdoCrpKA/aAcSBIeeZlUAnuBNtwsY8l94MZUbQwZEAjsraStqE3aIP6hajIAC42EA5mP5DP/5MjbG2VtxvBIZg==$H5BDgr4XFJPK40iuRqUKMw== Server: cloudflare CF-RAY: 9044e2f3dd686a58-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:49:44 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:49:45 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/9044e2e3bcea42c7/1737269383382/de356c1fd81a46bddefd36b919cdb8eeba81bc429d6324867d86a202bba2e10d/jadLPfBi_mOFiC2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/2ytgs/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:49:45 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Sun, 19 Jan 2025 06:49:45 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-19 06:49:45 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 33 6a 56 73 48 39 67 61 52 72 33 65 5f 54 61 35 47 63 32 34 37 72 71 42 76 45 4b 64 59 79 53 47 66 59 61 69 41 72 75 69 34 51 30 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g3jVsH9gaRr3e_Ta5Gc247rqBvEKdYySGfYaiArui4Q0AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-19 06:49:45 UTC	1	IN	Data Raw: 4a Data Ascii: J