Create Interactive Tour

Windows Analysis Report
https://nam.dcv.ms/TgEkOrA6UC

Overview

General Information

Sample URL:	https://nam.dcv.ms/TgEkOrA6UC
Analysis ID:	1594559
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Yara detected HtmlPhish29

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

AI detected suspicious URL

Phishing site or detected (based on various text indicators)

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5416 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 8 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1836,i,13089274699566731100,11457532213031407297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.dcv.ms/TgEkOrA6UC" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_29	Yara detected HtmlPhish_29	Joe Security
2.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary
• Malware Analysis System Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://tdn.docshostingservice.com/WeQiU	Avira URL Cloud: Label: malware
Source: https://6353104403.lawyerfederaldocs.com/next.php	Avira URL Cloud: Label: malware
Source: http://tdn.docshostingservice.com/WeQiU/	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://tdn.docshostingservice.com/WeQiU/

Joe Sandbox AI: Score: 8 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'tdn.docshostingservice.com' does not match the legitimate domain 'microsoft.com'., The domain 'docshostingservice.com' does not appear to be directly associated with Microsoft., The presence of a subdomain 'tdn' and the main domain 'docshostingservice.com' suggests a third-party service, which could be legitimate if Microsoft uses this service, but it is not directly verifiable., The email address 'yilg6k@inzf.net' does not appear to be associated with Microsoft, which raises suspicion., The URL structure and domain do not provide clear evidence of being a legitimate Microsoft service. DOM: 2.6.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 2.6.pages.csv, type: HTML

Yara detected HtmlPhish29

Source: Yara match

File source: 1.2.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u

Joe Sandbox AI: Page contains button: 'VIEW DOCUMENT HERE' Source: '1.2.pages.csv'

AI detected suspicious Javascript

Source: 0.22.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://tdn.docshostingservice.com/WeQiU/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script retrieves a parameter from the URL, decodes it using the `atob` function, and assigns the result to the `rh13z8jemt` variable. This suggests the potential for malicious activity, such as loading and executing remote code or transmitting sensitive user data to an untrusted domain.

AI detected suspicious URL

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://nam.dcv.ms
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: https://nam.dcv.ms

Phishing site or detected (based on various text indicators)

Source: Chrome DOM: 1.2

OCR Text: New PDF Document Received Received on Thursday January 16, 2025 You've received (2) PDF Documents for your review VIEW DOCUMENT HERE

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: Number of links: 0

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: Title: Sign in to your account does not match URL

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: Invalid link: Privacy statement

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: <input type="password" .../> found

Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon
Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon
Source: https://tdn.docshostingservice.com/WeQiU/	HTTP Parser: No favicon

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: No <meta name="author".. found

Source: https://tdn.docshostingservice.com/WeQiU/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	TCP traffic detected without corresponding DNS query: 2.22.50.144
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /TgEkOrA6UC HTTP/1.1Host: nam.dcv.msConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/ls-pro.en-us.ba3db0403.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/css/dist/cv-response-page.min.92870c5.css HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.min.5e8194d.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://customervoice.microsoft.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/ls-pro.en-us.ba3db0403.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.postsubmit.ae2b319.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.quiz.4c32c58.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.min.5e8194d.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.616.93becff.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.616.93becff.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js?cache-bust=true&retry-attempt=1 HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js?cache-bust=true&retry-attempt=1 HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js?cache-bust=true&retry-attempt=1 HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/customervoice/customervoice.ico HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js?cache-bust=true&retry-attempt=1 HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/images/customervoice/customervoice.ico HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1Host: cdn.forms.office.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeQiU HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://customervoice.microsoft.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeQiU/ HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044eba9f99ade96&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044eba9f99ade96&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tdn.docshostingservice.com/WeQiU/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=7t3hf7o6f64os7cu3e34b8nj4t
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/9044eba9f99ade96/1737269742816/d971aa3269afe4aa4cc5713fa04394edce874b1d7bf3c4b24d76188715d4e524/VlDglZQNc8V-LCZ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9044eba9f99ade96/1737269742818/ywJ4Qu7b03G_zlE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9044eba9f99ade96/1737269742818/ywJ4Qu7b03G_zlE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tdn.docshostingservice.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tdn.docshostingservice.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://tdn.docshostingservice.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6353104403-1323985617.cos.na-ashburn.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6353104403-1323985617.cos.na-ashburn.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 6353104403.lawyerfederaldocs.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tdn.docshostingservice.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /WeQiU/ HTTP/1.1Host: tdn.docshostingservice.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nam.dcv.ms
Source: global traffic	DNS traffic detected: DNS query: cdn.forms.office.net
Source: global traffic	DNS traffic detected: DNS query: tdn.docshostingservice.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6353104403-1323985617.cos.na-ashburn.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 6353104403.lawyerfederaldocs.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3496sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9Msec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Sun, 19 Jan 2025 06:55:43 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2TpChXTD6Qu13XLZuHadyenH6qIuU6cu76yg4e%2BAOcPzefWuTsIze1I0JBsRThqq53v9HR7FtaxgAGC5QklVGs1CZ5%2FFiHnvNhfPyK88w7YYh19nlPD4Wodbhfw2538hWlzd0IkZ26u%2B1OdhYg%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 9044ebb7cc45eab9-DFWalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=38238&min_rtt=38084&rtt_var=14589&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1238&delivery_rate=74268&cwnd=32&unsent_bytes=0&cid=3c2f230e16266bb1&ts=340&x=0"

Source: chromecache_103.2.dr, chromecache_141.2.dr	String found in binary or memory: http://api.jqueryui.com/category/ui-core/
Source: chromecache_103.2.dr, chromecache_141.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_103.2.dr, chromecache_141.2.dr	String found in binary or memory: http://jqueryui.com
Source: chromecache_137.2.dr, chromecache_136.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_126.2.dr, chromecache_94.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_140.2.dr, chromecache_131.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.cachegroup-nerve.min.7d
Source: chromecache_122.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.1ds.e8b22bb.js.ma
Source: chromecache_112.2.dr, chromecache_104.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.616.93becff.js.ma
Source: chromecache_143.2.dr, chromecache_107.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvheadertheme.5c3
Source: chromecache_100.2.dr, chromecache_119.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvtitlerender.e68
Source: chromecache_93.2.dr, chromecache_124.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.ir.96ce202.js.map
Source: chromecache_151.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.postsubmit.ae2b31
Source: chromecache_99.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.quiz.4c32c58.js.m
Source: chromecache_110.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.vendors.aa37695.j
Source: chromecache_103.2.dr, chromecache_141.2.dr	String found in binary or memory: https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.min.5e8194d.js.map/7508
Source: chromecache_94.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_120.2.dr	String found in binary or memory: https://forms.office.com.
Source: chromecache_138.2.dr, chromecache_144.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_98.2.dr, chromecache_92.2.dr, chromecache_118.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_92.2.dr	String found in binary or memory: https://getbootstrap.com/docs/3.4/customize/)
Source: chromecache_148.2.dr, chromecache_102.2.dr	String found in binary or memory: https://github.com/SoapBox/linkifyjs
Source: chromecache_138.2.dr, chromecache_144.2.dr, chromecache_98.2.dr, chromecache_92.2.dr, chromecache_118.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_138.2.dr, chromecache_144.2.dr, chromecache_98.2.dr, chromecache_118.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_112.2.dr, chromecache_104.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_112.2.dr, chromecache_104.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_112.2.dr, chromecache_104.2.dr	String found in binary or memory: https://js.foundation/
Source: chromecache_145.2.dr, chromecache_117.2.dr	String found in binary or memory: https://mfpembedcdnwus2.azureedge.net/mfpembedcontwus2/Embed.css
Source: chromecache_145.2.dr, chromecache_117.2.dr	String found in binary or memory: https://mfpembedcdnwus2.azureedge.net/mfpembedcontwus2/Embed.js
Source: chromecache_103.2.dr, chromecache_141.2.dr	String found in binary or memory: https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE
Source: chromecache_94.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_112.2.dr, chromecache_104.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_145.2.dr, chromecache_117.2.dr	String found in binary or memory: https://tdn.docshostingservice.com/WeQiU
Source: chromecache_126.2.dr, chromecache_94.2.dr	String found in binary or memory: https://underscorejs.org

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49978
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49978 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal88.phis.win@20/95@50/17

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1836,i,13089274699566731100,11457532213031407297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://nam.dcv.ms/TgEkOrA6UC"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2136 --field-trial-handle=1836,i,13089274699566731100,11457532213031407297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: chromecache_92.2.dr

Binary or memory string: '}.ms-Icon--ConnectVirtualMachine::before{content:'

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	3 Browser Extensions	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://nam.dcv.ms/TgEkOrA6UC	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://6353104403-1323985617.cos.na-ashburn.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://tdn.docshostingservice.com/WeQiU	100%	Avira URL Cloud	malware
https://6353104403.lawyerfederaldocs.com/next.php	100%	Avira URL Cloud	malware
https://tdn.docshostingservice.com/favicon.ico	0%	Avira URL Cloud	safe
http://tdn.docshostingservice.com/WeQiU/	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0016.t-0009.t-msedge.net	13.107.246.44	true	false	high
e329293.dscd.akamaiedge.net	2.23.209.17	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
cos.na-ashburn.myqcloud.com	49.51.77.119	true	false	high
c-msn-pme.trafficmanager.net	13.74.129.1	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false	high
tdn.docshostingservice.com	188.114.96.3	true	false	high
a1894.dscms.akamai.net	184.50.113.41	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	142.250.185.132	true	false	high
6353104403.lawyerfederaldocs.com	162.241.125.28	true	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
cdn.forms.office.net	unknown	unknown	false	high
6353104403-1323985617.cos.na-ashburn.myqcloud.com	unknown	unknown	false	high
nam.dcv.ms	unknown	unknown	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.forms.office.net/forms/scripts/dists/ls-pro.en-us.ba3db0403.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.quiz.4c32c58.js	false		high
https://tdn.docshostingservice.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/turnstile/v0/g/672eb098a9f3/api.js	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/	false		high
https://cdn.forms.office.net/forms/css/dist/cv-response-page.min.92870c5.css	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.postsubmit.ae2b319.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js	false		high
https://tdn.docshostingservice.com/WeQiU/	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9044eba9f99ade96/1737269742818/ywJ4Qu7b03G_zlE	false		high
https://6353104403-1323985617.cos.na-ashburn.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.616.93becff.js	false		high
https://6353104403.lawyerfederaldocs.com/next.php	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044eba9f99ade96&lang=auto	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js	false		high
https://cdn.forms.office.net/forms/images/customervoice/customervoice.ico	false		high
https://nam.dcv.ms/TgEkOrA6UC	false		unknown
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://cdn.forms.office.net/forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js?cache-bust=true&retry-attempt=1	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://cdn.forms.office.net/forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.cvheadertheme.5c38bfd.js	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.min.5e8194d.js	false		high
http://tdn.docshostingservice.com/WeQiU/	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://tdn.docshostingservice.com/WeQiU	true	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js?cache-bust=true&retry-attempt=1	false		high
https://cdn.forms.office.net/forms/scripts/dists/response-page-pro.chunk.cvtitlerender.e688a7b.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9044eba9f99ade96/1737269742816/d971aa3269afe4aa4cc5713fa04394edce874b1d7bf3c4b24d76188715d4e524/VlDglZQNc8V-LCZ	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://jquery.org/license	chromecache_103.2.dr, chromecache_141.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvtitlerender.e68	chromecache_100.2.dr, chromecache_119.2.dr	false	high
http://jqueryui.com	chromecache_103.2.dr, chromecache_141.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.vendors.aa37695.j	chromecache_110.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.cvheadertheme.5c3	chromecache_143.2.dr, chromecache_107.2.dr	false	high
https://raw.githubusercontent.com/stefanpenner/es6-promise/master/LICENSE	chromecache_103.2.dr, chromecache_141.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_138.2.dr, chromecache_144.2.dr, chromecache_98.2.dr, chromecache_118.2.dr	false	high
https://github.com/SoapBox/linkifyjs	chromecache_148.2.dr, chromecache_102.2.dr	false	high
https://forms.office.com.	chromecache_120.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.postsubmit.ae2b31	chromecache_151.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_137.2.dr, chromecache_136.2.dr	false	high
https://underscorejs.org	chromecache_126.2.dr, chromecache_94.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.1ds.e8b22bb.js.ma	chromecache_122.2.dr	false	high
http://www.apache.org/licenses/LICENSE-2.0	chromecache_126.2.dr, chromecache_94.2.dr	false	high
https://getbootstrap.com/docs/3.4/customize/)	chromecache_92.2.dr	false	high
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_94.2.dr	false	high
http://api.jqueryui.com/category/ui-core/	chromecache_103.2.dr, chromecache_141.2.dr	false	high
https://getbootstrap.com/)	chromecache_98.2.dr, chromecache_92.2.dr, chromecache_118.2.dr	false	high
https://jquery.org/license	chromecache_112.2.dr, chromecache_104.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.quiz.4c32c58.js.m	chromecache_99.2.dr	false	high
https://jquery.com/	chromecache_112.2.dr, chromecache_104.2.dr	false	high
https://getbootstrap.com)	chromecache_138.2.dr, chromecache_144.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.ir.96ce202.js.map	chromecache_93.2.dr, chromecache_124.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.min.5e8194d.js.map/7508	chromecache_103.2.dr, chromecache_141.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.chunk.616.93becff.js.ma	chromecache_112.2.dr, chromecache_104.2.dr	false	high
https://artifacts.dev.azure.com/office/_apis/symbol/symsrv/response-page-pro.cachegroup-nerve.min.7d	chromecache_140.2.dr, chromecache_131.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_138.2.dr, chromecache_144.2.dr, chromecache_98.2.dr, chromecache_92.2.dr, chromecache_118.2.dr	false	high
https://fb.me/react-polyfills	chromecache_94.2.dr	false	high
https://sizzlejs.com/	chromecache_112.2.dr, chromecache_104.2.dr	false	high
https://js.foundation/	chromecache_112.2.dr, chromecache_104.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
2.23.209.34	unknown	European Union	1273	CWVodafoneGroupPLCEU	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
2.23.209.17	e329293.dscd.akamaiedge.net	European Union	1273	CWVodafoneGroupPLCEU	false
49.51.78.226	unknown	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
162.241.125.28	6353104403.lawyerfederaldocs.com	United States	46606	UNIFIEDLAYER-AS-1US	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
2.18.121.25	unknown	European Union	16625	AKAMAI-ASUS	false
142.250.185.132	www.google.com	United States	15169	GOOGLEUS	false
184.50.113.41	a1894.dscms.akamai.net	United States	16625	AKAMAI-ASUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	tdn.docshostingservice.com	European Union	13335	CLOUDFLARENETUS	false
49.51.77.119	cos.na-ashburn.myqcloud.com	China	132203	TENCENT-NET-AP-CNTencentBuildingKejizhongyiAvenueCN	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1594559
Start date and time:	2025-01-19 07:54:06 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://nam.dcv.ms/TgEkOrA6UC
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.win@20/95@50/17

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.99, 142.250.185.78, 142.251.168.84, 13.107.246.70, 13.107.246.40, 13.107.246.69, 13.107.246.57, 13.107.246.51, 13.107.21.237, 204.79.197.237, 199.232.214.172, 2.23.77.188, 142.250.185.138, 216.58.212.138, 142.250.185.170, 172.217.18.10, 142.250.184.202, 172.217.18.106, 142.250.186.42, 142.250.186.106, 142.250.185.234, 142.250.186.170, 216.58.206.74, 172.217.16.202, 142.250.185.202, 142.250.186.74, 142.250.185.106, 142.250.184.234, 184.28.90.27, 13.107.246.45, 13.74.129.1, 20.109.210.53, 13.107.246.44
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, cdn.forms.office.net.edgesuite.net, www.tm.aadcdn.msftauth.trafficmanager.net, clientservices.googleapis.com, clients2.google.com, customervoice.microsoft.com, redirector.gvt1.com, ocsp.digicert.com, update.googleapis.com, csp.microsoft.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, c-bing-com.dual-a-0034.a-msedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, customervoice-prod.forms.office.com.akadns.net, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, www.tm.aadcdn.msftauth.akadns.net, edgedl.me.gvt1.com, c.bing.com, dual-a-0034.a-msedge.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, c1.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://nam.dcv.ms/TgEkOrA6UC

Input	Output
URL: https://nam.dcv.ms Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true, "reasoning": "This URL appears to be attempting to mimic Microsoft services (ms TLD) with a suspicious subdomain structure. Legitimate Microsoft URLs typically use microsoft.com or azure.com domains. The .ms TLD combined with dcv subdomain suggests potential phishing or brand spoofing." }
URL: https://nam.dcv.ms
URL: https://tdn.docshostingservice.com/WeQiU/... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple form submission function, which is a common and legitimate behavior. While it does not demonstrate any high-risk indicators, the lack of context around the form's purpose and the target domain means further review may be necessary to fully assess the risk." }
function RoseFlare() { document.forms[0].submit(); }
URL: https://tdn.docshostingservice.com/WeQiU/... Model: Joe Sandbox AI	{ "risk_score": 8, "reasoning": "This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script retrieves a parameter from the URL, decodes it using the `atob` function, and assigns the result to the `rh13z8jemt` variable. This suggests the potential for malicious activity, such as loading and executing remote code or transmitting sensitive user data to an untrusted domain." }
const accession = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Id cow picanha turkey pancetta ex, voluptate consectetur adipisicing biltong excepteur sirloin. In et shoulder chislic buffalo bacon irure aliqua leberkas t-bone do consequat lorem prosciutto ullamco. Nostrud tail beef ribs shankle, magna commodo lorem doner occaecat sirloin boudin prosciutto pork belly tempor. Short ribs prosciutto est ham tail, cow nulla aliquip. Dolore turducken ex dolore, aliquip shank occaecat et beef. Est turkey exercitation ipsum spare ribs. Id andouille porchetta culpa aliqua ham, ribeye cow brisket veniam beef burgdoggen. Laborum ullamco esse, dolor in shoulder sausage excepteur cillum ground round irure incididunt short ribs duis pancetta. Beef turkey sunt turducken sirloin nulla corned beef venison veniam bresaola. Aute doner cow pancetta, tri-tip venison quis. Do picanha bacon velit, dolor drumstick short loin ut. Mollit reprehenderit jerky officia culpa consectetur pork belly. Et eu esse nisi. Kielbasa ex short loin mollit. Ball tip occaecat ground round consequat spare ribs fugiat. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Pastrami porchetta shankle sirloin, ham hock ipsum sausage ham ad salami sed shoulder tail ex. Exercitation swine nostrud, salami nulla beef ground round qui officia pork belly consequat mollit pork sed. Non adipisicing ea culpa consequat ground round sirloin. Pariatur consectetur landjaeger, non shank biltong irure excepteur boudin spare ribs culpa tenderloin chislic. Beef burgdoggen ball tip, proident velit short ribs venison ut voluptate. Venison biltong sint excepteur cupidatat, alcatra ground round chuck picanha ribeye beef strip steak. Magna ullamco prosciutto jerky officia rump aliquip flank duis anim turducken irure mollit. Sed fugiat t-bone pariatur magna commodo pork quis adipisicing ex tempor. Frankfurter boudin beef ribs brisket jerky sausage biltong t-bone ipsum aliqua beef kevin rump adipisicing. Exercitation rump jerky labore velit. Deserunt alcatra jowl porchetta, enim ut nisi ullamco exercitation. Tenderloin elit culpa kevin doner ball tip. Dolore cow lorem venison, nisi brisket consequat pastrami kevin porchetta magna duis frankfurter tail. Jowl cupim sirloin aliqua kielbasa consequat ham hock irure ribeye short loin cupidatat filet mignon. Proident tenderloin picanha cupim et id elit strip steak shankle. rh13z8jemt = accession('e') == '' ? rh13z8jemt : accession('e'); rh13z8jemt = atob(rh13z8jemt);
URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "New PDF Document Received", "prominent_button_name": "VIEW DOCUMENT HERE", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "file hosting" }

URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another account.", "prominent_button_name": "Next", "text_input_field_labels": [ "yilg6k@inzf.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://tdn.docshostingservice.com/WeQiU/ Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'tdn.docshostingservice.com' does not match the legitimate domain 'microsoft.com'.", "The domain 'docshostingservice.com' does not appear to be directly associated with Microsoft.", "The presence of a subdomain 'tdn' and the main domain 'docshostingservice.com' suggests a third-party service, which could be legitimate if Microsoft uses this service, but it is not directly verifiable.", "The email address 'yilg6k@inzf.net' does not appear to be associated with Microsoft, which raises suspicion.", "The URL structure and domain do not provide clear evidence of being a legitimate Microsoft service." ], "riskscore": 8} Google indexed: False
URL: tdn.docshostingservice.com Brands: Microsoft Input Fields: yilg6k@inzf.net

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (14187)
Category:	dropped
Size (bytes):	14439
Entropy (8bit):	5.4166061737255085
Encrypted:	false
SSDEEP:	384:/2iiKZgUDEnc7+o9gnfxZXeMOgBOgtZuQ5nXL:/PrgAEnc+o9OJOOOGZuQ5b
MD5:	8D038A2BA8B8FA1D6C6504346BE90959
SHA1:	41CCBECEF0FAF09D838B2C9FE897103E1BB327A9
SHA-256:	6A4471CA3D8DACE9974EFF8103FC7DE7FC9D8F908B04C5AC4E8383A07BB1AA82
SHA-512:	4BBA4430D85D21061C7B693C1BBE51DDEB8E1452BC34497C9F00D04656F3A26537057C43C482D769FEA9068000B0D994B069BAA984B07AFDC4D8D4274377107E
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[906],{9688:function(e,o,t){t.d(o,{$_:function(){return n},G0:function(){return u},R2:function(){return m},Tz:function(){return p},d9:function(){return r},kU:function(){return a},qN:function(){return c},re:function(){return i},uF:function(){return l}});var r=.5,i=1.5,a=4.5,n=3,l=1.5,s=[{BackgroundColor:"#eee6f2",BackgroundImage:null,Name:"CV_HBG_Professional",PrimaryColor:"#21052e",SecondaryColor:"#0f0214",Thumbnail:null},{BackgroundColor:"#e6eff2",BackgroundImage:null,Name:"CV_HBG_Friendly",PrimaryColor:"#185b75",SecondaryColor:"#13475b",Thumbnail:null},{BackgroundColor:"#e6f2eb",BackgroundImage:null,Name:"CV_HBG_Playful",PrimaryColor:"#237547",SecondaryColor:"#1b5b38",Thumbnail:null},{BackgroundColor:"#f2ece6",BackgroundImage:null,Name:"CV_HBG_Relaxed",PrimaryColor:"#68503c",SecondaryColor:"#4f3c2d",Thumbnail:null},{BackgroundColor:"#e6ecf2",BackgroundImage:null,Name:"CV_HBG_3DMolecules",PrimaryColor:"#416083",SecondaryColo

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 19, 2025 07:55:06.517802954 CET	53	57921	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:06.566400051 CET	53	60730	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:07.557777882 CET	53	49374	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:10.671485901 CET	57022	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:10.671648026 CET	56549	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:10.678740978 CET	53	56549	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:10.678777933 CET	53	57022	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:12.243822098 CET	54985	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:12.243971109 CET	57107	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:14.569417953 CET	52409	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:14.571202040 CET	60571	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:15.635998964 CET	60625	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:15.636151075 CET	56167	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:20.179439068 CET	138	138	192.168.2.4	192.168.2.255
Jan 19, 2025 07:55:24.490391970 CET	53	59828	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:36.174388885 CET	63331	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:36.174597025 CET	56853	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:36.188664913 CET	53	56853	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:36.342957020 CET	53	63331	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:37.971770048 CET	62176	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:37.971880913 CET	61135	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:37.986963034 CET	53	62176	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:38.139987946 CET	53	61135	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:39.216826916 CET	54421	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:39.217457056 CET	58133	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:39.224737883 CET	53	58133	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:39.224836111 CET	53	54421	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:40.547444105 CET	51865	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:40.547579050 CET	60866	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:40.552269936 CET	54621	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:40.552417994 CET	60107	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:40.555881023 CET	53	51865	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:40.555907965 CET	53	60866	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:40.559092045 CET	53	54621	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:40.559330940 CET	53	60107	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:43.227694035 CET	53	49692	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:52.577420950 CET	64629	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:52.577691078 CET	49843	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:52.590821981 CET	53	64629	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:52.590955973 CET	53	49843	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.195096970 CET	60884	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.195219994 CET	50416	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.195691109 CET	64128	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.195882082 CET	54088	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.196286917 CET	65491	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.196393013 CET	53985	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.201380014 CET	57512	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.201667070 CET	54805	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.202155113 CET	63214	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.202260971 CET	53	50416	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.202311993 CET	49710	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.202405930 CET	53	60884	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.202708960 CET	53	64128	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.202977896 CET	53	65491	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.203288078 CET	53	53985	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.203361988 CET	53	54088	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.204435110 CET	53	63882	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.208561897 CET	53	57512	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.208592892 CET	53	54805	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.394258976 CET	53	49710	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.596812010 CET	53	63214	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.881282091 CET	53528	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.881411076 CET	53921	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.888525963 CET	53	53921	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.888755083 CET	53	53528	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.948215008 CET	61692	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.948342085 CET	54592	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.955342054 CET	53	54592	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.955718040 CET	53	61692	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.971380949 CET	56226	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.971512079 CET	60731	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:54.977940083 CET	53	56226	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:54.979057074 CET	53	60731	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:55.010382891 CET	51221	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:55.010504007 CET	64188	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:55.017632961 CET	53	51221	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:55.017672062 CET	53	64188	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:55.359002113 CET	53	59998	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:56.679372072 CET	53049	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:56.679541111 CET	56125	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:56.680457115 CET	57363	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:56.680581093 CET	50571	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:55:56.890616894 CET	53	53049	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:56.890714884 CET	53	50571	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:56.892895937 CET	53	56125	1.1.1.1	192.168.2.4
Jan 19, 2025 07:55:57.176423073 CET	53	57363	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:05.436515093 CET	53118	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:05.436724901 CET	65237	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:05.652488947 CET	53	53118	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:05.652534008 CET	53	65237	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:05.945713043 CET	53	60501	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:06.421060085 CET	53	62811	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:08.453675985 CET	52259	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:08.453877926 CET	55948	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:08.561873913 CET	53	52379	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:09.375283957 CET	65251	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:09.375492096 CET	62910	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:16.030844927 CET	60527	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:16.030961990 CET	50801	53	192.168.2.4	1.1.1.1
Jan 19, 2025 07:56:16.037735939 CET	53	60527	1.1.1.1	192.168.2.4
Jan 19, 2025 07:56:16.037966967 CET	53	50801	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Jan 19, 2025 07:55:38.003618956 CET	447	OUT	GET /WeQiU/ HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 19, 2025 07:55:38.535465956 CET	1081	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 19 Jan 2025 06:55:38 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 19 Jan 2025 07:55:38 GMT Location: https://tdn.docshostingservice.com/WeQiU/ Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aPJioaqagCxgLEbwVIApSKfVZcVaNobocll6dJRtDxzsUhHe8HJB2RWHQvPHohkXH%2BtBHOaBEYYAdzaViE7wwhg80%2B5d6LcBQ5kT0S3Q56f4qQsYi3hckUy79zOXxX0cNtOXefmVxuuflBHx%2FA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 9044eb996eb167aa-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=38569&min_rtt=38569&rtt_var=19284&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=447&delivery_rate=0&cwnd=30&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Jan 19, 2025 07:56:23.544682980 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:13 UTC	663	OUT	GET /TgEkOrA6UC HTTP/1.1 Host: nam.dcv.ms Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:13 UTC	452	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 19 Jan 2025 06:55:13 GMT Content-Length: 0 Connection: close Location: https://customervoice.microsoft.com/Pages/ResponsePage.aspx?id=0XVg-kvXpk-nSAtLUgNlEiLdwlemP3FOqLrrnKcQ1fRUM0JNMFZGMkVSRVo5WldFUDBHNTVHOUFYRS4u Request-Context: appId=cid-v1:21349bca-d329-496c-8aa0-9636da32423a Delay: 1.3484 x-azure-ref: 20250119T065513Z-15fdc555dffblbhghC1EWR9d3n0000000cbg000000001dwm X-Cache: CONFIG_NOCACHE

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:15 UTC	618	OUT	GET /forms/scripts/dists/ls-pro.en-us.ba3db0403.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:15 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 528595 Content-Type: application/javascript Content-MD5: hWIZETe6GRfPWIdQjjaFPQ== Last-Modified: Mon, 02 Dec 2024 05:03:10 GMT Accept-Ranges: bytes ETag: "0x8DD128E9E4170F2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9be8b017-101e-007a-305f-504a71000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:15 GMT Date: Sun, 19 Jan 2025 06:55:15 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:15 UTC	1127	IN	Data Raw: 77 69 6e 64 6f 77 2e 46 6f 72 6d 73 4c 73 4d 61 70 20 3d 20 28 77 69 6e 64 6f 77 2e 46 6f 72 6d 73 4c 73 4d 61 70 20 7c 7c 20 7b 7d 29 3b 77 69 6e 64 6f 77 2e 46 6f 72 6d 73 4c 73 4d 61 70 5b 22 65 6e 2d 75 73 22 5d 3d 7b 22 43 6f 6d 6d 6f 6e 5f 43 6c 6f 73 65 5f 54 65 78 74 22 3a 22 43 6c 6f 73 65 22 2c 22 43 6f 6d 6d 6f 6e 5f 42 61 63 6b 5f 54 65 78 74 22 3a 22 42 61 63 6b 22 2c 22 43 6f 6d 6d 6f 6e 5f 43 61 6e 63 65 6c 5f 54 65 78 74 22 3a 22 43 61 6e 63 65 6c 22 2c 22 43 6f 6d 6d 6f 6e 5f 53 74 6f 70 5f 54 65 78 74 22 3a 22 53 74 6f 70 22 2c 22 43 6f 6d 6d 6f 6e 5f 44 65 6c 65 74 65 5f 54 65 78 74 22 3a 22 44 65 6c 65 74 65 22 2c 22 43 6f 6d 6d 6f 6e 5f 44 65 6c 65 74 65 64 5f 54 65 78 74 22 3a 22 44 65 6c 65 74 65 64 22 2c 22 43 6f 6d 6d 6f 6e 5f 52 Data Ascii: window.FormsLsMap = (window.FormsLsMap \|\| {});window.FormsLsMap["en-us"]={"Common_Close_Text":"Close","Common_Back_Text":"Back","Common_Cancel_Text":"Cancel","Common_Stop_Text":"Stop","Common_Delete_Text":"Delete","Common_Deleted_Text":"Deleted","Common_R
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 77 22 2c 22 43 6f 6d 6d 6f 6e 5f 43 6f 6e 66 69 72 6d 5f 54 65 78 74 22 3a 22 43 6f 6e 66 69 72 6d 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 50 65 6f 70 6c 65 22 3a 22 50 65 6f 70 6c 65 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 47 72 6f 75 70 73 22 3a 22 47 72 6f 75 70 73 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 45 78 74 65 72 6e 61 6c 22 3a 22 55 73 65 72 20 6f 75 74 73 69 64 65 20 79 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 43 68 61 74 73 22 3a 22 43 68 61 74 73 22 2c 22 43 6f 6e 74 61 63 74 5f 54 79 70 65 5f 43 68 61 6e 6e 65 6c 73 22 3a 22 43 68 61 6e 6e 65 6c 73 22 2c 22 44 65 73 69 67 6e 65 72 5f 41 63 74 69 6f 6e 42 61 72 5f 44 65 6c 65 74 65 22 3a 22 44 65 6c 65 74 65 20 71 Data Ascii: w","Common_Confirm_Text":"Confirm","Contact_Type_People":"People","Contact_Type_Groups":"Groups","Contact_Type_External":"User outside your organization","Contact_Type_Chats":"Chats","Contact_Type_Channels":"Channels","Designer_ActionBar_Delete":"Delete q
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 73 65 63 75 72 69 74 79 20 70 72 61 63 74 69 63 65 73 20 6f 66 20 69 74 73 20 63 75 73 74 6f 6d 65 72 73 2c 20 69 6e 63 6c 75 64 69 6e 67 20 74 68 6f 73 65 20 6f 66 20 74 68 69 73 20 66 6f 72 6d 20 6f 77 6e 65 72 2e 20 4e 65 76 65 72 20 67 69 76 65 20 6f 75 74 20 79 6f 75 72 20 70 61 73 73 77 6f 72 64 2e 22 2c 22 52 65 73 70 6f 6e 73 65 5f 50 61 67 65 5f 54 68 61 6e 6b 73 22 3a 22 54 68 61 6e 6b 73 21 22 2c 22 52 65 73 70 6f 6e 73 65 5f 53 75 62 6d 69 74 5f 41 67 61 69 6e 5f 4c 69 6e 6b 22 3a 22 53 75 62 6d 69 74 20 61 6e 6f 74 68 65 72 20 72 65 73 70 6f 6e 73 65 22 2c 22 52 65 73 70 6f 6e 73 65 5f 53 75 62 6d 69 74 5f 41 67 61 69 6e 5f 42 75 74 74 6f 6e 22 3a 22 53 75 62 6d 69 74 20 61 6e 6f 74 68 65 72 22 2c 22 52 65 73 70 6f 6e 73 65 5f 47 6f 5f 54 6f Data Ascii: security practices of its customers, including those of this form owner. Never give out your password.","Response_Page_Thanks":"Thanks!","Response_Submit_Again_Link":"Submit another response","Response_Submit_Again_Button":"Submit another","Response_Go_To
2025-01-19 06:55:15 UTC	4036	IN	Data Raw: 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 43 6f 70 79 55 52 4c 22 3a 22 4c 69 6e 6b 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 45 6d 62 65 64 43 6f 64 65 22 3a 22 45 6d 62 65 64 20 43 6f 64 65 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 51 52 43 6f 64 65 22 3a 22 51 52 20 63 6f 64 65 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 53 65 6e 64 54 6f 50 65 6f 70 6c 65 22 3a 22 53 65 6e 64 20 74 6f 20 70 65 6f 70 6c 65 3a 22 2c 22 46 6c 65 78 50 61 6e 65 5f 53 65 6e 64 56 69 65 77 5f 53 68 61 72 65 54 6f 53 6f 63 69 61 6c 22 3a 22 53 68 61 72 65 22 2c 22 46 6c 65 78 5f 50 61 6e 65 5f 53 68 61 72 65 56 69 65 77 5f 43 6f 70 79 5f 46 61 69 6c 65 64 22 3a 22 57 65 20 63 6f 75 6c 64 6e 27 74 20 63 6f 70 79 Data Ascii: xPane_SendView_CopyURL":"Link","FlexPane_SendView_EmbedCode":"Embed Code","FlexPane_SendView_QRCode":"QR code","FlexPane_SendView_SendToPeople":"Send to people:","FlexPane_SendView_ShareToSocial":"Share","Flex_Pane_ShareView_Copy_Failed":"We couldn't copy
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 73 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e 20 6d 6f 64 69 66 79 20 74 68 65 20 70 72 65 2d 66 69 6c 6c 65 64 20 61 6e 73 77 65 72 73 20 61 6e 64 20 72 65 2d 73 68 61 72 65 20 69 74 2e 22 2c 22 50 72 65 66 69 6c 6c 5f 53 65 74 74 69 6e 67 5f 54 65 78 74 22 3a 22 45 6e 61 62 6c 65 20 70 72 65 2d 66 69 6c 6c 65 64 20 61 6e 73 77 65 72 73 22 2c 22 50 72 65 66 69 6c 6c 5f 46 69 72 73 74 5f 54 69 6d 65 5f 49 6e 73 74 72 75 63 74 69 6f 6e 22 3a 22 50 72 65 2d 66 69 6c 6c 65 64 20 61 6e 73 77 65 72 73 20 61 72 65 20 64 69 73 61 62 6c 65 64 20 66 6f 72 20 79 6f 75 72 20 61 75 64 69 65 6e 63 65 2e 20 45 6e 61 62 6c 65 20 74 68 65 20 73 77 69 74 63 68 20 74 6f 20 61 64 64 20 70 72 65 2d 66 69 6c 6c 65 64 20 61 6e 73 77 65 72 73 20 61 6e 64 20 67 65 6e 65 72 61 74 65 Data Ascii: s the link can modify the pre-filled answers and re-share it.","Prefill_Setting_Text":"Enable pre-filled answers","Prefill_First_Time_Instruction":"Pre-filled answers are disabled for your audience. Enable the switch to add pre-filled answers and generate
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 72 61 74 69 6f 6e 5f 47 65 74 4c 69 6e 6b 5f 56 32 22 3a 22 53 68 61 72 65 20 74 68 65 20 6c 69 6e 6b 20 74 6f 20 63 6f 6c 6c 61 62 6f 72 61 74 65 20 61 6e 64 20 76 69 65 77 20 72 65 73 75 6c 74 22 2c 22 53 68 61 72 65 50 61 6e 65 5f 53 68 61 72 65 41 73 54 65 6d 70 6c 61 74 65 5f 54 69 74 6c 65 22 3a 22 41 6e 79 6f 6e 65 20 77 69 74 68 20 74 68 65 20 6c 69 6e 6b 20 63 61 6e 20 64 75 70 6c 69 63 61 74 65 22 2c 22 53 68 61 72 65 50 61 6e 65 5f 53 68 61 72 65 41 73 54 65 6d 70 6c 61 74 65 4e 6f 74 41 6c 6c 6f 77 65 64 5f 54 69 74 6c 65 22 3a 22 4f 6e 6c 79 20 70 65 6f 70 6c 65 20 69 6e 20 6d 79 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 63 61 6e 20 64 75 70 6c 69 63 61 74 65 22 2c 22 53 68 61 72 65 50 61 6e 65 5f 53 68 61 72 65 4f 70 74 69 6f 6e 5f 44 65 6c Data Ascii: ration_GetLink_V2":"Share the link to collaborate and view result","SharePane_ShareAsTemplate_Title":"Anyone with the link can duplicate","SharePane_ShareAsTemplateNotAllowed_Title":"Only people in my organization can duplicate","SharePane_ShareOption_Del
2025-01-19 06:55:15 UTC	7952	IN	Data Raw: 6c 65 20 72 69 67 68 74 20 6e 6f 77 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 45 78 63 65 6c 5f 50 69 6e 67 4f 6e 65 44 72 69 76 65 5f 53 75 62 74 69 74 6c 65 22 3a 22 50 6c 65 61 73 65 20 74 72 79 20 61 67 61 69 6e 2c 20 6f 72 20 64 6f 77 6e 6c 6f 61 64 20 74 68 65 20 45 78 63 65 6c 20 77 6f 72 6b 62 6f 6f 6b 20 74 6f 20 79 6f 75 72 20 64 65 76 69 63 65 20 74 6f 20 73 65 65 20 61 6c 6c 20 72 65 73 70 6f 6e 73 65 73 20 73 6f 20 66 61 72 2e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 45 78 63 65 6c 5f 50 69 6e 67 4f 6e 65 44 72 69 76 65 5f 72 65 6c 6f 61 64 22 3a 22 54 72 79 20 61 67 61 69 6e 22 2c 22 45 72 72 6f 72 5f 4d 65 73 73 61 67 65 5f 45 78 63 65 6c 5f 46 61 69 6c 65 64 54 6f 4f 70 65 6e 5f 43 6f 61 75 74 68 6f 72 22 3a 22 53 6f 72 Data Ascii: le right now","Error_Message_Excel_PingOneDrive_Subtitle":"Please try again, or download the Excel workbook to your device to see all responses so far.","Error_Message_Excel_PingOneDrive_reload":"Try again","Error_Message_Excel_FailedToOpen_Coauthor":"Sor
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 59 6f 75 72 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 68 61 73 20 6e 6f 74 20 65 6e 61 62 6c 65 64 20 4d 69 63 72 6f 73 6f 66 74 20 46 6f 72 6d 73 20 66 6f 72 20 79 6f 75 72 20 63 75 72 72 65 6e 74 20 61 63 63 6f 75 6e 74 22 2c 22 43 68 6f 69 63 65 5f 41 62 6f 75 74 5f 72 69 67 68 74 22 3a 22 41 62 6f 75 74 20 72 69 67 68 74 22 2c 22 43 68 6f 69 63 65 5f 41 6c 6c 5f 6f 66 5f 74 68 65 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 41 6c 6c 20 6f 66 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 43 68 6f 69 63 65 5f 41 5f 6c 69 74 74 6c 65 5f 6f 66 5f 74 68 65 5f 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 3a 22 41 20 6c 69 74 74 6c 65 20 6f 66 20 74 68 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 22 2c 22 43 68 6f 69 63 65 5f 45 78 74 72 65 6d 65 6c 79 5f 6f 72 Data Ascii: Your organization has not enabled Microsoft Forms for your current account","Choice_About_right":"About right","Choice_All_of_the_information":"All of the information","Choice_A_little_of_the_information":"A little of the information","Choice_Extremely_or
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 73 20 77 69 74 68 20 6f 74 68 65 72 73 22 2c 22 41 6e 61 6c 79 7a 65 56 69 65 77 5f 53 68 61 72 65 5f 52 65 73 75 6c 74 5f 4c 69 6e 6b 5f 45 78 74 65 72 6e 61 6c 5f 54 69 74 6c 65 22 3a 22 41 6e 79 6f 6e 65 20 77 69 74 68 20 74 68 69 73 20 6c 69 6e 6b 20 63 61 6e 20 76 69 65 77 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 65 73 70 6f 6e 73 65 73 22 2c 22 41 6e 61 6c 79 7a 65 56 69 65 77 5f 53 68 61 72 65 5f 52 65 73 75 6c 74 5f 4c 69 6e 6b 5f 49 6e 74 65 72 6e 61 6c 5f 54 69 74 6c 65 22 3a 22 4f 6e 6c 79 20 70 65 6f 70 6c 65 20 69 6e 20 6d 79 20 6f 72 67 61 6e 69 7a 61 74 69 6f 6e 20 63 61 6e 20 76 69 65 77 20 61 20 73 75 6d 6d 61 72 79 20 6f 66 20 72 65 73 70 6f 6e 73 65 73 22 2c 22 41 6e 61 6c 79 7a 65 56 69 65 77 5f 53 68 61 72 65 5f 52 65 73 75 6c 74 Data Ascii: s with others","AnalyzeView_Share_Result_Link_External_Title":"Anyone with this link can view a summary of responses","AnalyzeView_Share_Result_Link_Internal_Title":"Only people in my organization can view a summary of responses","AnalyzeView_Share_Result
2025-01-19 06:55:15 UTC	7952	IN	Data Raw: 4d 69 63 72 6f 73 6f 66 74 20 70 6c 61 74 66 6f 72 6d 73 2c 20 63 65 72 74 61 69 6e 20 66 65 61 74 75 72 65 73 20 61 6e 64 20 73 65 74 74 69 6e 67 73 20 6d 61 79 20 6e 6f 74 20 6d 61 74 63 68 20 65 78 61 63 74 6c 79 2c 20 6f 72 20 6e 6f 74 20 61 6c 6c 20 66 6f 72 6d 73 20 61 72 65 20 6d 69 67 72 61 74 65 64 20 63 6f 6d 70 6c 65 74 65 6c 79 2e 20 57 65 20 72 65 63 6f 6d 6d 65 6e 64 20 72 65 76 69 65 77 69 6e 67 20 74 68 65 20 66 6f 72 6d 20 62 65 66 6f 72 65 20 75 73 65 20 74 6f 20 65 6e 73 75 72 65 20 74 68 65 79 20 66 75 6e 63 74 69 6f 6e 20 61 73 20 69 6e 74 65 6e 64 65 64 2e 22 2c 22 47 46 6f 72 6d 4d 69 67 72 61 74 69 6f 6e 5f 5f 52 65 6d 69 6e 64 65 72 5f 44 69 61 6c 6f 67 5f 43 6f 6e 74 61 63 74 5f 73 74 72 69 6e 67 22 3a 22 50 6c 65 61 73 65 20 63 Data Ascii: Microsoft platforms, certain features and settings may not match exactly, or not all forms are migrated completely. We recommend reviewing the form before use to ensure they function as intended.","GFormMigration__Reminder_Dialog_Contact_string":"Please c

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:15 UTC	592	OUT	GET /forms/css/dist/cv-response-page.min.92870c5.css HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:15 UTC	581	IN	HTTP/1.1 200 OK Content-Length: 213851 Content-Type: text/css Content-MD5: HjLKa7r+BSFYpBv1xn9d6g== Last-Modified: Fri, 17 Jan 2025 04:51:46 GMT Accept-Ranges: bytes ETag: "0x8DD36B2A57F07B2" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 09c35ec8-c01e-0079-3da1-69ab15000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:15 GMT Date: Sun, 19 Jan 2025 06:55:15 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:15 UTC	1134	IN	Data Raw: 40 63 68 61 72 73 65 74 20 27 55 54 46 2d 38 27 3b 2f 2a 21 0d 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 64 6f 63 73 2f 33 2e 34 2f 63 75 73 74 6f 6d 69 7a 65 2f 29 0d 0a 20 2a 2f 2f 2a 21 0d 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 34 2e 31 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 39 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 Data Ascii: @charset 'UTF-8';/! Generated using the Bootstrap Customizer (https://getbootstrap.com/docs/3.4/customize/) //! * Bootstrap v3.4.1 (https://getbootstrap.com/) * Copyright 2011-2019 Twitter, Inc. * Licensed under MIT (https://github.com/twbs
2025-01-19 06:55:15 UTC	14336	IN	Data Raw: 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 66 69 67 75 72 65 7b 6d 61 72 67 69 6e 3a 31 65 6d 20 34 30 70 78 7d 68 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 70 72 65 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 63 6f 64 65 2c 6b 62 64 2c 70 72 65 2c 73 61 6d 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 6d 6f 6e 6f 73 70 61 63 65 2c 6d 6f 6e 6f 73 70 61 63 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 63 Data Ascii: {overflow:hidden}figure{margin:1em 40px}hr{-webkit-box-sizing:content-box;-moz-box-sizing:content-box;box-sizing:content-box;height:0}pre{overflow:auto}code,kbd,pre,samp{font-family:monospace,monospace;font-size:1em}button,input,optgroup,select,textarea{c
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 43 65 6e 74 65 72 4c 6f 67 6f 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ef 92 b2 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6c 63 75 6c 61 74 6f 72 53 75 62 74 72 61 63 74 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a5 89 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6c 65 6e 64 61 72 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9e 87 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6d 65 72 61 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9c a2 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 61 6e 63 65 6c 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee 9c 91 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d 43 65 6c 6c 50 68 6f 6e 65 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 ee a3 aa 27 7d 2e 6d 73 2d 49 63 6f 6e 2d 2d Data Ascii: CenterLogo::before{content:''}.ms-Icon--CalculatorSubtract::before{content:''}.ms-Icon--Calendar::before{content:''}.ms-Icon--Camera::before{content:''}.ms-Icon--Cancel::before{content:''}.ms-Icon--CellPhone::before{content:''}.ms-Icon--
2025-01-19 06:55:15 UTC	2829	IN	Data Raw: 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 32 2e 36 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 35 29 2c 2d 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 7d 31 32 2e 35 25 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 32 2e 36 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 2c 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 23 30 33 37 38 37 63 2c 32 2e 35 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 31 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 30 20 32 2e 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d Data Ascii: 120,124,.2),-2.6em 0 0 0 rgba(3,120,124,.5),-1.8em -1.8em 0 0 rgba(3,120,124,.7)}12.5%{box-shadow:0 -2.6em 0 0 rgba(3,120,124,.7),1.8em -1.8em 0 0 #03787c,2.5em 0 0 0 rgba(3,120,124,.2),1.75em 1.75em 0 0 rgba(3,120,124,.2),0 2.5em 0 0 rgba(3,120,124,.2),-
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 7d 33 37 2e 35 25 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 2d 32 2e 36 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 31 2e 38 65 6d 20 2d 31 2e 38 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 35 29 2c 32 2e 35 65 6d 20 30 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 37 29 2c 31 2e 37 35 65 6d 20 31 2e 37 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 30 20 32 2e 35 65 6d 20 30 20 30 20 72 67 62 61 28 33 2c 31 32 30 2c 31 32 34 2c 2e 32 29 2c 2d 31 2e 38 65 6d 20 31 2e 38 65 6d Data Ascii: 0 rgba(3,120,124,.2),-1.8em -1.8em 0 0 rgba(3,120,124,.2)}37.5%{box-shadow:0 -2.6em 0 0 rgba(3,120,124,.2),1.8em -1.8em 0 0 rgba(3,120,124,.5),2.5em 0 0 0 rgba(3,120,124,.7),1.75em 1.75em 0 0 rgba(3,120,124,.2),0 2.5em 0 0 rgba(3,120,124,.2),-1.8em 1.8em
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 28 33 36 30 64 65 67 29 7d 7d 2e 70 61 67 65 2d 6c 6f 61 64 69 6e 67 2d 6d 65 73 73 61 67 65 62 6f 78 7b 74 6f 70 3a 34 35 25 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 70 61 67 65 2d 6c 6f 61 64 69 6e 67 2d 6d 65 73 73 61 67 65 7b 63 6f 6c 6f 72 3a 23 32 32 36 36 65 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 20 57 50 22 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 37 70 78 3b 6d 61 72 67 69 6e 3a 33 30 70 78 20 32 30 70 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 73 75 62 Data Ascii: (360deg)}}.page-loading-messagebox{top:45%;width:100%;position:absolute;text-align:center}.page-loading-message{color:#2266e3;font-family:"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:17px;margin:30px 20px;display:inline-block;vertical-align:sub
2025-01-19 06:55:15 UTC	7952	IN	Data Raw: 70 78 3b 68 65 69 67 68 74 3a 33 31 70 78 7d 2e 66 66 2d 69 63 6f 6e 2e 66 6f 72 6d 73 2d 69 63 6f 6e 2d 73 69 7a 65 32 36 78 32 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 7d 2e 66 66 2d 69 63 6f 6e 2e 66 6f 72 6d 73 2d 69 63 6f 6e 2d 73 69 7a 65 32 34 78 32 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 38 70 78 3b 77 69 64 74 68 3a 32 38 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 7d 2e 66 66 2d 69 63 6f 6e 2e 66 6f 72 6d 73 2d 69 63 6f 6e 2d 73 69 7a 65 32 32 78 32 32 7b 66 6f 6e 74 Data Ascii: px;height:31px}.ff-icon.forms-icon-size26x26{font-size:30px;font-style:normal;line-height:30px;width:30px;height:30px}.ff-icon.forms-icon-size24x24{font-size:28px;font-style:normal;line-height:28px;width:28px;height:28px}.ff-icon.forms-icon-size22x22{font
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 73 65 6c 65 63 74 2d 6f 70 74 69 6f 6e 2d 6d 65 6e 75 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 70 61 64 64 69 6e 67 3a 30 3b 7a 2d 69 6e 64 65 78 3a 31 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 32 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 2d 6d 73 2d 68 69 67 68 2d 63 6f 6e 74 72 Data Ascii: center;line-height:25px;vertical-align:middle}.select-option-menu-container{background-color:#fff;box-shadow:0 2px 8px rgba(0,0,0,.2);position:absolute;padding:0;z-index:10;max-height:320px;overflow-y:auto;margin-bottom:0}@media screen and (-ms-high-contr
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 6f 76 65 72 20 2e 64 65 73 69 67 6e 2d 66 6f 72 6d 75 6c 61 2d 6d 69 78 65 72 5b 64 69 73 61 62 6c 65 64 5d 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 61 36 61 36 61 36 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 7d 2e 64 65 73 69 67 6e 2d 71 75 65 73 74 69 6f 6e 2d 73 68 6f 72 74 2d 63 6f 72 72 65 63 74 2d 6d 61 74 68 2d 61 6e 73 77 65 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 2e 64 65 73 69 67 6e 2d 66 6f 72 6d 75 6c 61 2d 6d 69 78 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 7d 2e 64 65 73 69 67 6e 2d 71 75 65 73 74 69 6f 6e 2d 63 68 6f 69 63 65 2d 6c 61 62 65 6c 20 2e 64 65 73 69 67 6e 2d 66 6f 72 6d 75 6c 61 2d 6d 69 78 65 72 7b 6d 61 72 67 69 6e 3a 30 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e Data Ascii: over .design-formula-mixer[disabled]{border-color:#a6a6a6;cursor:default}.design-question-short-correct-math-answer-container>.design-formula-mixer{background:#fff}.design-question-choice-label .design-formula-mixer{margin:0;min-height:40px;line-height:in
2025-01-19 06:55:15 UTC	7952	IN	Data Raw: 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 37 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 32 30 70 78 7d 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 2d 69 6d 61 67 65 2d 62 6f 78 7e 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 74 69 74 6c 65 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 73 75 62 74 69 74 6c 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 53 65 67 6f 65 20 55 49 22 2c 22 53 65 67 6f 65 20 57 50 22 2c 54 61 68 6f 6d 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 70 78 7d 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 73 75 62 74 69 74 6c 65 2e 68 65 61 64 69 6e 67 2d 31 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 35 70 78 7d 2e 6f 66 66 69 63 65 2d 66 6f 72 6d 2d 73 Data Ascii: ;margin-top:7px;margin-right:20px}.office-form-title-image-box~.office-form-title{line-height:1.3}.office-form-subtitle{font-family:"Segoe UI","Segoe WP",Tahoma,Arial,sans-serif;font-size:15px}.office-form-subtitle.heading-1{margin-top:25px}.office-form-s

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:15 UTC	638	OUT	GET /forms/scripts/vendors/combinedmin/basics_osi_v5_j3.min.14e59a0.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:15 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 369103 Content-Type: application/javascript Content-MD5: bpOGhDwiNFolbzJGktYn8g== Last-Modified: Wed, 11 Dec 2024 04:47:55 GMT Accept-Ranges: bytes ETag: "0x8DD199EFA6641E6" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: f1eab8db-f01e-003f-4593-4b9f92000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:15 GMT Date: Sun, 19 Jan 2025 06:55:15 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:15 UTC	1127	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 74 29 3b 65 6c 73 65 7b 76 61 72 20 69 3d 74 28 29 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 69 29 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 3a 65 29 5b 6e 5d 3d 69 5b 6e 5d 7d 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 Data Ascii: !function(e,t){if("object"==typeof exports&&"object"==typeof module)module.exports=t();else if("function"==typeof define&&define.amd)define([],t);else{var i=t();for(var n in i)("object"==typeof exports?exports:e)[n]=i[n]}}(this,function(){return function(
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 2e 49 50 56 34 41 64 64 72 65 73 73 3d 33 5d 3d 22 49 50 56 34 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 49 50 76 36 41 64 64 72 65 73 73 3d 34 5d 3d 22 49 50 76 36 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 4d 61 69 6c 53 75 62 6a 65 63 74 3d 35 5d 3d 22 4d 61 69 6c 53 75 62 6a 65 63 74 22 2c 65 5b 65 2e 50 68 6f 6e 65 4e 75 6d 62 65 72 3d 36 5d 3d 22 50 68 6f 6e 65 4e 75 6d 62 65 72 22 2c 65 5b 65 2e 51 75 65 72 79 53 74 72 69 6e 67 3d 37 5d 3d 22 51 75 65 72 79 53 74 72 69 6e 67 22 2c 65 5b 65 2e 53 69 70 41 64 64 72 65 73 73 3d 38 5d 3d 22 53 69 70 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 53 6d 74 70 41 64 64 72 65 73 73 3d 39 5d 3d 22 53 6d 74 70 41 64 64 72 65 73 73 22 2c 65 5b 65 2e 49 64 65 6e 74 69 74 79 3d 31 30 5d 3d 22 49 64 65 6e 74 69 74 79 22 2c 65 Data Ascii: .IPV4Address=3]="IPV4Address",e[e.IPv6Address=4]="IPv6Address",e[e.MailSubject=5]="MailSubject",e[e.PhoneNumber=6]="PhoneNumber",e[e.QueryString=7]="QueryString",e[e.SipAddress=8]="SipAddress",e[e.SmtpAddress=9]="SmtpAddress",e[e.Identity=10]="Identity",e
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 2c 6e 2e 74 6f 53 74 72 69 6e 67 28 29 29 7d 69 66 28 69 73 4e 61 4e 28 74 29 7c 7c 6e 75 6c 6c 3d 3d 3d 74 7c 7c 74 3d 3d 3d 72 2e 41 57 54 50 69 69 4b 69 6e 64 2e 4e 6f 74 53 65 74 7c 7c 74 3e 31 33 29 73 77 69 74 63 68 28 69 29 7b 63 61 73 65 20 6f 2e 41 57 54 55 73 65 72 49 64 54 79 70 65 2e 53 6b 79 70 65 3a 74 3d 72 2e 41 57 54 50 69 69 4b 69 6e 64 2e 49 64 65 6e 74 69 74 79 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 41 57 54 55 73 65 72 49 64 54 79 70 65 2e 45 6d 61 69 6c 41 64 64 72 65 73 73 3a 74 3d 72 2e 41 57 54 50 69 69 4b 69 6e 64 2e 53 6d 74 70 41 64 64 72 65 73 73 3b 62 72 65 61 6b 3b 63 61 73 65 20 6f 2e 41 57 54 55 73 65 72 49 64 54 79 70 65 2e 50 68 6f 6e 65 4e 75 6d 62 65 72 3a 74 3d 72 2e 41 57 54 50 69 69 4b 69 6e 64 2e 50 68 6f 6e 65 Data Ascii: ,n.toString())}if(isNaN(t)\|\|null===t\|\|t===r.AWTPiiKind.NotSet\|\|t>13)switch(i){case o.AWTUserIdType.Skype:t=r.AWTPiiKind.Identity;break;case o.AWTUserIdType.EmailAddress:t=r.AWTPiiKind.SmtpAddress;break;case o.AWTUserIdType.PhoneNumber:t=r.AWTPiiKind.Phone
2025-01-19 06:55:15 UTC	5376	IN	Data Raw: 69 7c 7c 34 32 39 34 39 36 37 31 36 38 26 74 3b 29 6e 2e 70 75 73 68 28 31 32 37 26 74 7c 31 32 38 29 2c 74 3d 28 31 32 37 26 69 29 3c 3c 32 35 7c 74 3e 3e 3e 37 2c 69 3e 3e 3e 3d 37 3b 72 65 74 75 72 6e 20 6e 2e 70 75 73 68 28 31 32 37 26 74 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 69 66 28 6c 2e 42 72 6f 77 73 65 72 43 68 65 63 6b 65 72 2e 5a 65 28 29 29 7b 76 61 72 20 74 3d 6e 65 77 20 44 61 74 61 56 69 65 77 28 6e 65 77 20 41 72 72 61 79 42 75 66 66 65 72 28 38 29 29 3b 74 2e 73 65 74 46 6c 6f 61 74 36 34 28 30 2c 65 2c 21 30 29 3b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 38 3b 2b 2b 6e 29 69 2e 70 75 73 68 28 74 2e 67 65 74 55 69 6e 74 38 28 6e 29 29 3b 72 65 74 75 72 6e 20 69 7d 72 65 74 75 72 6e 20 5f 2e 46 6c 6f 61 74 Data Ascii: i\|\|4294967168&t;)n.push(127&t\|128),t=(127&i)<<25\|t>>>7,i>>>=7;return n.push(127&t),n}function a(e){if(l.BrowserChecker.Ze()){var t=new DataView(new ArrayBuffer(8));t.setFloat64(0,e,!0);for(var i=[],n=0;n<8;++n)i.push(t.getUint8(n));return i}return _.Float
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 6f 66 66 46 6f 72 52 65 74 72 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 30 2c 69 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 31 32 30 30 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 32 34 30 30 3b 72 65 74 75 72 6e 20 74 3d 4d 61 74 68 2e 70 6f 77 28 34 2c 65 29 2a 69 2c 4d 61 74 68 2e 6d 69 6e 28 74 2c 31 32 65 34 29 7d 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 6e 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 69 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 76 61 72 20 6e 3d 69 28 30 29 2c 72 3d 69 28 39 29 2c 6f 3d 69 28 32 36 29 2c 73 3d 69 28 32 34 29 2c 61 3d 69 28 32 33 29 2c 75 3d 69 28 Data Ascii: offForRetry=function(e){var t=0,i=Math.floor(1200Math.random())+2400;return t=Math.pow(4,e)i,Math.min(t,12e4)},e}();t.default=n},function(e,t,i){"use strict";Object.defineProperty(t,"__esModule",{value:!0});var n=i(0),r=i(9),o=i(26),s=i(24),a=i(23),u=i(
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 3d 3d 3d 74 3a 22 6c 61 62 65 6c 22 69 6e 20 65 26 26 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 65 28 61 29 7b 72 65 74 75 72 6e 20 6c 65 28 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 6f 3d 2b 6f 2c 6c 65 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 Data Ascii: ===t:"label"in e&&e.disabled===t}}function ve(a){return le(function(o){return o=+o,le(function(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for
2025-01-19 06:55:15 UTC	7952	IN	Data Raw: 29 7b 72 65 74 75 72 6e 21 21 6e 2e 63 61 6c 6c 28 65 2c 74 2c 65 29 21 3d 3d 72 7d 29 3a 6e 2e 6e 6f 64 65 54 79 70 65 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 21 3d 3d 72 7d 29 3a 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 6e 3f 53 2e 67 72 65 70 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 2d 31 3c 69 2e 63 61 6c 6c 28 6e 2c 65 29 21 3d 3d 72 7d 29 3a 53 2e 66 69 6c 74 65 72 28 6e 2c 65 2c 72 29 7d 53 2e 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 74 5b 30 5d 3b 72 65 74 75 72 6e 20 6e 26 26 28 65 3d 22 3a 6e 6f 74 28 22 2b 65 2b 22 29 22 29 2c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 31 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 Data Ascii: ){return!!n.call(e,t,e)!==r}):n.nodeType?S.grep(e,function(e){return e===n!==r}):"string"!=typeof n?S.grep(e,function(e){return-1<i.call(n,e)!==r}):S.filter(n,e,r)}S.filter=function(e,t,n){var r=t[0];return n&&(e=":not("+e+")"),1===t.length&&1===r.nodeTyp
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 63 61 6c 6c 28 65 2c 72 29 2c 74 3d 6e 75 6c 6c 29 3a 28 6c 3d 74 2c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 6c 2e 63 61 6c 6c 28 53 28 65 29 2c 6e 29 7d 29 29 2c 74 29 29 66 6f 72 28 3b 73 3c 75 3b 73 2b 2b 29 74 28 65 5b 73 5d 2c 6e 2c 61 3f 72 3a 72 2e 63 61 6c 6c 28 65 5b 73 5d 2c 73 2c 74 28 65 5b 73 5d 2c 6e 29 29 29 3b 72 65 74 75 72 6e 20 69 3f 65 3a 6c 3f 74 2e 63 61 6c 6c 28 65 29 3a 75 3f 74 28 65 5b 30 5d 2c 6e 29 3a 6f 7d 2c 5f 3d 2f 5e 2d 6d 73 2d 2f 2c 7a 3d 2f 2d 28 5b 61 2d 7a 5d 29 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 55 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 5f 2c Data Ascii: call(e,r),t=null):(l=t,t=function(e,t,n){return l.call(S(e),n)})),t))for(;s<u;s++)t(e[s],n,a?r:r.call(e[s],s,t(e[s],n)));return i?e:l?t.call(e):u?t(e[0],n):o},_=/^-ms-/,z=/-([a-z])/g;function U(e,t){return t.toUpperCase()}function X(e){return e.replace(_,
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 2c 69 3d 28 6f 3d 76 65 28 65 29 29 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 73 3d 6f 5b 72 5d 2c 75 3d 61 5b 72 5d 2c 76 6f 69 64 20 30 2c 22 69 6e 70 75 74 22 3d 3d 3d 28 6c 3d 75 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 26 26 70 65 2e 74 65 73 74 28 73 2e 74 79 70 65 29 3f 75 2e 63 68 65 63 6b 65 64 3d 73 2e 63 68 65 63 6b 65 64 3a 22 69 6e 70 75 74 22 21 3d 3d 6c 26 26 22 74 65 78 74 61 72 65 61 22 21 3d 3d 6c 7c 7c 28 75 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 3d 73 2e 64 65 66 61 75 6c 74 56 61 6c 75 65 29 3b 69 66 28 74 29 69 66 28 6e 29 66 6f 72 28 6f 3d 6f 7c 7c 76 65 28 65 29 2c 61 3d 61 7c 7c 76 65 28 63 29 2c 72 3d 30 2c 69 3d 6f 2e 6c 65 6e 67 74 68 3b 72 3c 69 3b 72 2b 2b 29 4c 65 28 6f 5b 72 5d 2c 61 5b Data Ascii: ,i=(o=ve(e)).length;r<i;r++)s=o[r],u=a[r],void 0,"input"===(l=u.nodeName.toLowerCase())&&pe.test(s.type)?u.checked=s.checked:"input"!==l&&"textarea"!==l\|\|(u.defaultValue=s.defaultValue);if(t)if(n)for(o=o\|\|ve(e),a=a\|\|ve(c),r=0,i=o.length;r<i;r++)Le(o[r],a[
2025-01-19 06:55:15 UTC	7952	IN	Data Raw: 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 29 2e 76 61 6c 75 65 3d 22 74 22 2c 74 74 2e 74 79 70 65 3d 22 72 61 64 69 6f 22 2c 79 2e 72 61 64 69 6f 56 61 6c 75 65 3d 22 74 22 3d 3d 3d 74 74 2e 76 61 6c 75 65 3b 76 61 72 20 63 74 2c 66 74 3d 53 2e 65 78 70 72 2e 61 74 74 72 48 61 6e 64 6c 65 3b 53 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 24 28 74 68 69 73 2c 53 2e 61 74 74 72 2c 65 2c 74 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 72 65 6d 6f 76 65 41 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 2e 72 65 6d 6f 76 65 41 74 74 72 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c Data Ascii: Element("input")).value="t",tt.type="radio",y.radioValue="t"===tt.value;var ct,ft=S.expr.attrHandle;S.fn.extend({attr:function(e,t){return $(this,S.attr,e,t,1<arguments.length)},removeAttr:function(e){return this.each(function(){S.removeAttr(this,e)})}}),

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:15 UTC	591	OUT	GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:15 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 31572 Content-Type: application/javascript Content-MD5: msoK+8RWE2XR2wfYgDfuUw== Last-Modified: Wed, 11 Dec 2024 04:47:55 GMT Accept-Ranges: bytes ETag: "0x8DD199EFA646D65" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9d05d166-301e-0052-3493-4b2bd9000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:15 GMT Date: Sun, 19 Jan 2025 06:55:15 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:15 UTC	15790	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6c 69 6e 6b 69 66 79 2e 6a 73 20 76 32 2e 31 2e 38 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 53 6f 61 70 42 6f 78 2f 6c 69 6e 6b 69 66 79 6a 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 53 6f 61 70 42 6f 78 20 49 6e 6e 6f 76 61 74 69 6f 6e 73 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e Data Ascii: /! linkify.js v2.1.8 * https://github.com/SoapBox/linkifyjs * Copyright (c) 2014 SoapBox Innovations Inc. * Licensed under the MIT license */!function(){"use strict";var n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function
2025-01-19 06:55:15 UTC	15782	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 74 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 61 3b 29 7b 66 6f 72 28 76 61 72 20 72 3d 56 2c 69 3d 6e 75 6c 6c 2c 73 3d 30 2c 63 3d 6e 75 6c 6c 2c 6c 3d 2d 31 3b 6f 3c 61 26 26 28 69 3d 72 2e 6e 65 78 74 28 65 5b 6f 5d 29 29 3b 29 72 3d 69 2c 72 2e 61 63 63 65 70 74 73 28 29 3f 28 6c 3d 30 2c 63 3d 72 29 3a 6c 3e 3d 30 26 26 6c 2b 2b 2c 73 2b 2b 2c 6f 2b 2b 3b 69 66 28 21 28 6c 3c 30 29 29 7b 6f 2d 3d 6c 2c 73 2d 3d 6c 3b 76 61 72 20 75 3d 63 2e 65 6d 69 74 28 29 3b 74 2e 70 75 73 68 28 6e 65 77 20 75 28 6e 2e 73 75 62 73 74 72 28 6f 2d 73 2c 73 29 29 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 76 6e 3d 56 2c 6b 6e 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 53 74 61 74 65 3a 6d 2c 54 4f 4b 45 4e 53 3a 59 2c 72 75 6e 3a 79 6e 2c 73 74 61 72 74 Data Ascii: .length,t=[],o=0;o<a;){for(var r=V,i=null,s=0,c=null,l=-1;o<a&&(i=r.next(e[o]));)r=i,r.accepts()?(l=0,c=r):l>=0&&l++,s++,o++;if(!(l<0)){o-=l,s-=l;var u=c.emit();t.push(new u(n.substr(o-s,s)))}}return t},vn=V,kn=Object.freeze({State:m,TOKENS:Y,run:yn,start

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:15 UTC	642	OUT	GET /forms/scripts/dists/response-page-pro.cachegroup-nerve.min.7d75bb5.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://customervoice.microsoft.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:15 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 63359 Content-Type: application/javascript Content-MD5: euSTTOjaC1afTuE/diS1LQ== Last-Modified: Mon, 06 Jan 2025 05:25:37 GMT Accept-Ranges: bytes ETag: "0x8DD2E128DAF6A0D" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 097c07e8-d01e-0017-65a6-60fe3a000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:15 GMT Date: Sun, 19 Jan 2025 06:55:15 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:15 UTC	15790	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 35 39 5d 2c 7b 33 38 32 39 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 2c 72 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 6e 2c 74 29 7b 6e 7c 7c 28 63 6f 6e 73 6f 6c 65 2e 61 73 73 65 72 74 28 6e 2c 22 4e 65 72 76 65 20 2d 20 22 2b 74 29 2c 73 28 22 61 73 73 65 72 74 20 66 61 69 6c 65 64 3a 20 22 2e 63 6f 6e 63 61 74 28 74 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 6e 29 7b 72 65 74 75 72 6e 20 73 28 22 54 4f 44 4f 3a 20 22 2e 63 6f 6e 63 61 74 28 6e 29 29 7d 66 75 6e 63 74 69 6f 6e 20 75 28 29 7b 72 65 74 75 72 6e 20 73 28 22 74 6f 20 62 65 20 6f 76 65 72 72 69 64 64 65 6e Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[859],{38290:function(n,t,r){function i(n,t){n\|\|(console.assert(n,"Nerve - "+t),s("assert failed: ".concat(t)))}function e(n){return s("TODO: ".concat(n))}function u(){return s("to be overridden
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 69 61 6c 69 7a 65 53 6f 75 72 63 65 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 68 69 73 2e 73 65 74 53 6f 75 72 63 65 44 61 74 61 28 6e 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 44 65 6c 74 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 76 65 72 74 4d 6f 64 65 6c 54 6f 53 6f 75 72 63 65 44 61 74 61 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 6e 61 70 73 68 6f 74 54 6f 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6f 6e 76 65 72 74 4d 6f 64 65 6c 54 6f 53 6f 75 72 63 65 44 61 74 61 28 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 53 6f 75 72 63 65 44 61 74 61 3d 66 75 6e 63 74 69 6f Data Ascii: .prototype.initializeSourceData=function(n){this.setSourceData(n)},t.prototype.getDelta=function(){return this.convertModelToSourceData()},t.prototype.getSnapshotToUpdate=function(){return this.convertModelToSourceData()},t.prototype.getSourceData=functio
2025-01-19 06:55:15 UTC	2681	IN	Data Raw: 2c 6f 3d 21 75 2e 77 69 74 68 44 61 74 61 53 6f 75 72 63 65 26 26 21 75 2e 69 6e 66 6f 2e 41 74 74 72 69 62 75 74 65 73 2e 49 73 4c 6f 63 61 6c 46 69 65 6c 64 3b 72 65 74 75 72 6e 20 65 2e 64 69 72 74 79 43 68 65 63 6b 65 72 3d 6e 65 77 20 46 28 69 2c 74 2e 45 78 69 73 74 69 6e 67 49 6e 44 61 74 61 53 6f 75 72 63 65 2c 6f 29 2c 28 30 2c 73 2e 41 58 29 28 65 2c 22 64 69 72 74 79 43 68 65 63 6b 65 72 22 29 2c 65 2e 6d 6f 64 65 6c 3d 6e 65 77 20 43 28 69 2c 74 29 2c 28 30 2c 73 2e 41 58 29 28 65 2c 22 6d 6f 64 65 6c 22 29 2c 65 2e 63 68 61 6e 67 65 4d 61 6e 61 67 65 72 3d 6e 65 77 20 6a 28 69 29 2c 28 30 2c 73 2e 41 58 29 28 65 2c 22 63 68 61 6e 67 65 4d 61 6e 61 67 65 72 22 29 2c 72 7d 72 65 74 75 72 6e 28 30 2c 69 2e 43 36 29 28 74 2c 6e 29 2c 74 2e 70 72 Data Ascii: ,o=!u.withDataSource&&!u.info.Attributes.IsLocalField;return e.dirtyChecker=new F(i,t.ExistingInDataSource,o),(0,s.AX)(e,"dirtyChecker"),e.model=new C(i,t),(0,s.AX)(e,"model"),e.changeManager=new j(i),(0,s.AX)(e,"changeManager"),r}return(0,i.C6)(t,n),t.pr
2025-01-19 06:55:15 UTC	16384	IN	Data Raw: 2e 73 68 61 64 6f 77 4d 61 70 70 65 72 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 72 28 69 29 7b 76 61 72 20 75 3d 6f 6e 28 69 29 2c 6f 3d 74 5b 75 5d 3b 69 66 28 21 6f 29 7b 76 61 72 20 63 3d 69 2e 5f 5f 6e 65 72 76 65 5f 5f 2e 70 61 72 65 6e 74 53 63 68 65 6d 61 3b 6f 3d 28 72 6e 28 63 29 3f 72 28 63 29 3a 6e 29 5b 63 6e 28 69 29 5d 2c 28 30 2c 65 2e 76 41 29 28 6f 3d 3d 3d 74 5b 75 5d 2c 22 74 68 65 20 6e 65 77 20 73 68 61 64 6f 77 20 73 68 6f 75 6c 64 20 62 65 20 61 64 64 65 64 20 69 6e 74 6f 20 74 68 65 20 73 68 61 64 6f 77 20 6d 61 70 2e 22 29 7d 72 65 74 75 72 6e 20 6f 7d 7d 28 68 2c 61 29 2c 28 30 2c 73 2e 41 58 29 28 68 2e 5f 5f 6e 65 72 76 65 5f 5f 2c 22 73 68 61 64 6f 77 4d 61 70 70 65 72 22 29 Data Ascii: .shadowMapper=function(n,t){return function r(i){var u=on(i),o=t[u];if(!o){var c=i.__nerve__.parentSchema;o=(rn(c)?r(c):n)[cn(i)],(0,e.vA)(o===t[u],"the new shadow should be added into the shadow map.")}return o}}(h,a),(0,s.AX)(h.__nerve__,"shadowMapper")
2025-01-19 06:55:15 UTC	12120	IN	Data Raw: 2e 52 6e 2e 70 72 6f 6d 69 73 65 28 29 29 3a 74 68 69 73 2e 4b 6e 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 70 6f 73 74 70 6f 6e 65 55 70 64 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6b 6e 2e 70 6f 73 74 70 6f 6e 65 55 70 64 61 74 65 26 26 74 68 69 73 2e 6b 6e 2e 70 6f 73 74 70 6f 6e 65 55 70 64 61 74 65 28 29 7d 2c 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6c 75 73 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 45 6e 2e 66 6c 75 73 68 28 29 2c 74 68 69 73 2e 41 6e 2e 66 6c 75 73 68 28 29 2c 74 68 69 73 2e 47 6e 26 26 28 74 68 69 73 2e 47 6e 2e 63 61 6e 63 65 6c 28 29 2c 74 68 69 73 2e 47 6e 3d 76 6f 69 64 20 30 2c 74 68 69 73 2e 6b 6e 2e 63 61 6e 63 65 6c 55 70 64 61 74 65 26 26 74 68 69 73 2e 6b 6e 2e 63 61 6e 63 65 6c 55 70 Data Ascii: .Rn.promise()):this.Kn()},n.prototype.postponeUpdate=function(){this.kn.postponeUpdate&&this.kn.postponeUpdate()},n.prototype.flush=function(){this.En.flush(),this.An.flush(),this.Gn&&(this.Gn.cancel(),this.Gn=void 0,this.kn.cancelUpdate&&this.kn.cancelUp

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:16 UTC	404	OUT	GET /forms/scripts/vendors/combinedmin/response_v2.min.ad1c4f6.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:16 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 31572 Content-Type: application/javascript Content-MD5: msoK+8RWE2XR2wfYgDfuUw== Last-Modified: Wed, 11 Dec 2024 04:47:55 GMT Accept-Ranges: bytes ETag: "0x8DD199EFA646D65" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 1c55efcf-601e-0002-1993-4be989000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:16 GMT Date: Sun, 19 Jan 2025 06:55:16 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:16 UTC	15790	IN	Data Raw: 2f 2a 21 0d 0a 20 2a 20 6c 69 6e 6b 69 66 79 2e 6a 73 20 76 32 2e 31 2e 38 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 53 6f 61 70 42 6f 78 2f 6c 69 6e 6b 69 66 79 6a 73 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 53 6f 61 70 42 6f 78 20 49 6e 6e 6f 76 61 74 69 6f 6e 73 20 49 6e 63 2e 0d 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 3f 66 75 6e 63 74 69 6f 6e Data Ascii: /! linkify.js v2.1.8 * https://github.com/SoapBox/linkifyjs * Copyright (c) 2014 SoapBox Innovations Inc. * Licensed under the MIT license */!function(){"use strict";var n="function"==typeof Symbol&&"symbol"==typeof Symbol.iterator?function
2025-01-19 06:55:16 UTC	15782	IN	Data Raw: 2e 6c 65 6e 67 74 68 2c 74 3d 5b 5d 2c 6f 3d 30 3b 6f 3c 61 3b 29 7b 66 6f 72 28 76 61 72 20 72 3d 56 2c 69 3d 6e 75 6c 6c 2c 73 3d 30 2c 63 3d 6e 75 6c 6c 2c 6c 3d 2d 31 3b 6f 3c 61 26 26 28 69 3d 72 2e 6e 65 78 74 28 65 5b 6f 5d 29 29 3b 29 72 3d 69 2c 72 2e 61 63 63 65 70 74 73 28 29 3f 28 6c 3d 30 2c 63 3d 72 29 3a 6c 3e 3d 30 26 26 6c 2b 2b 2c 73 2b 2b 2c 6f 2b 2b 3b 69 66 28 21 28 6c 3c 30 29 29 7b 6f 2d 3d 6c 2c 73 2d 3d 6c 3b 76 61 72 20 75 3d 63 2e 65 6d 69 74 28 29 3b 74 2e 70 75 73 68 28 6e 65 77 20 75 28 6e 2e 73 75 62 73 74 72 28 6f 2d 73 2c 73 29 29 29 7d 7d 72 65 74 75 72 6e 20 74 7d 2c 76 6e 3d 56 2c 6b 6e 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 7b 53 74 61 74 65 3a 6d 2c 54 4f 4b 45 4e 53 3a 59 2c 72 75 6e 3a 79 6e 2c 73 74 61 72 74 Data Ascii: .length,t=[],o=0;o<a;){for(var r=V,i=null,s=0,c=null,l=-1;o<a&&(i=r.next(e[o]));)r=i,r.accepts()?(l=0,c=r):l>=0&&l++,s++,o++;if(!(l<0)){o-=l,s-=l;var u=c.emit();t.push(new u(n.substr(o-s,s)))}}return t},vn=V,kn=Object.freeze({State:m,TOKENS:Y,run:yn,start

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:16 UTC	589	OUT	GET /forms/scripts/dists/response-page-pro.chunk.1ds.e8b22bb.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:17 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 107394 Content-Type: application/javascript Content-MD5: qfr2faMBNtX0KL5W763chg== Last-Modified: Fri, 17 Jan 2025 04:52:47 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA2078FA" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 2559a489-601e-0002-378f-69e989000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:17 GMT Date: Sun, 19 Jan 2025 06:55:17 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:17 UTC	15789	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 36 37 5d 2c 7b 38 37 33 30 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 41 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 7d 29 3b 76 61 72 20 72 3d 74 28 38 36 37 38 33 29 2c 69 3d 74 28 32 35 36 32 31 29 2c 6f 3d 74 28 33 35 30 39 31 29 2c 75 3d 74 28 31 38 38 30 29 2c 61 3d 74 28 33 38 38 30 35 29 2c 63 3d 74 28 37 35 30 37 32 29 2c 73 3d 74 28 39 38 30 39 30 29 2c 66 3d 74 28 39 38 31 30 34 29 2c 6c 3d 74 28 37 38 39 38 34 29 2c 64 3d 74 28 38 32 38 37 33 29 2c 76 3d 74 28 34 38 38 33 32 29 2c 68 3d 35 30 30 3b 66 75 6e 63 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[267],{8730:function(n,e,t){t.d(e,{A:function(){return N}});var r=t(86783),i=t(25621),o=t(35091),u=t(1880),a=t(38805),c=t(75072),s=t(98090),f=t(98104),l=t(78984),d=t(82873),v=t(48832),h=500;func
2025-01-19 06:55:17 UTC	16384	IN	Data Raw: 2c 69 2e 61 64 64 45 76 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 21 21 6e 26 26 28 72 2e 70 75 73 68 28 6e 29 2c 6f 7c 7c 28 6f 3d 4e 28 6e 29 29 2c 21 30 29 7d 2c 69 2e 73 70 6c 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 75 3b 69 66 28 74 3c 72 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 61 3d 72 2e 6c 65 6e 67 74 68 2d 74 3b 28 30 2c 73 2e 68 58 29 28 69 29 7c 7c 28 61 3d 69 3c 61 3f 69 3a 61 29 2c 75 3d 72 2e 73 70 6c 69 63 65 28 74 2c 61 29 2c 6f 3d 4f 28 72 29 7d 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 65 2c 75 29 7d 7d 72 65 74 75 72 6e 20 6e 2e 63 72 65 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 28 65 2c 74 29 7d 2c 6e 7d 28 29 2c 55 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ,i.addEvent=function(n){return!!n&&(r.push(n),o\|\|(o=N(n)),!0)},i.split=function(t,i){var u;if(t<r.length){var a=r.length-t;(0,s.hX)(i)\|\|(a=i<a?i:a),u=r.splice(t,a),o=O(r)}return new n(e,u)}}return n.create=function(e,t){return new n(e,t)},n}(),U=function(
2025-01-19 06:55:17 UTC	1925	IN	Data Raw: 68 57 29 28 6e 2e 64 61 74 61 29 29 29 2c 6e 2e 73 79 6e 63 29 69 66 28 4f 7c 7c 45 29 6e 2e 6c 61 74 65 6e 63 79 3d 33 2c 6e 2e 73 79 6e 63 3d 21 31 3b 65 6c 73 65 20 69 66 28 70 29 72 65 74 75 72 6e 20 4b 26 26 28 6e 3d 28 30 2c 73 2e 68 57 29 28 6e 29 29 2c 76 6f 69 64 20 70 2e 73 65 6e 64 53 79 6e 63 68 72 6f 6e 6f 75 73 42 61 74 63 68 28 52 2e 63 72 65 61 74 65 28 6e 2e 69 4b 65 79 2c 5b 6e 5d 29 2c 21 30 3d 3d 3d 6e 2e 73 79 6e 63 3f 31 3a 6e 2e 73 79 6e 63 2c 33 29 3b 76 61 72 20 74 3d 6e 2e 6c 61 74 65 6e 63 79 2c 72 3d 5f 2c 69 3d 41 3b 34 3d 3d 3d 74 26 26 28 72 3d 77 2c 69 3d 78 29 3b 76 61 72 20 6f 3d 21 31 3b 69 66 28 72 3c 69 29 6f 3d 21 6e 6e 28 6e 2c 65 29 3b 65 6c 73 65 7b 76 61 72 20 75 3d 31 2c 61 3d 32 30 3b 34 3d 3d 3d 74 26 26 28 75 Data Ascii: hW)(n.data))),n.sync)if(O\|\|E)n.latency=3,n.sync=!1;else if(p)return K&&(n=(0,s.hW)(n)),void p.sendSynchronousBatch(R.create(n.iKey,[n]),!0===n.sync?1:n.sync,3);var t=n.latency,r=_,i=A;4===t&&(r=w,i=x);var o=!1;if(r<i)o=!nn(n,e);else{var u=1,a=20;4===t&&(u
2025-01-19 06:55:17 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 72 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 69 3d 21 31 2c 75 3d 30 3d 3d 3d 74 3b 72 65 74 75 72 6e 21 75 7c 7c 70 2e 63 61 6e 53 65 6e 64 52 65 71 75 65 73 74 28 29 3f 28 30 2c 6f 2e 72 32 29 28 6e 2e 63 6f 72 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 50 6f 73 74 43 68 61 6e 6e 65 6c 2e 5f 71 75 65 75 65 42 61 74 63 68 65 73 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 6e 3d 5b 5d 2c 74 3d 34 3b 74 3e 3d 65 3b 29 7b 76 61 72 20 72 3d 46 5b 74 5d 3b 72 26 26 72 2e 62 61 74 63 68 65 73 26 26 72 2e 62 61 74 63 68 65 73 2e 6c 65 6e 67 74 68 3e 30 26 26 28 28 30 2c 73 2e 49 75 29 28 72 2e 62 61 74 63 68 65 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 70 2e 61 64 64 42 61 74 63 68 28 65 29 Data Ascii: unction rn(e,t,r){var i=!1,u=0===t;return!u\|\|p.canSendRequest()?(0,o.r2)(n.core,(function(){return"PostChannel._queueBatches"}),(function(){for(var n=[],t=4;t>=e;){var r=F[t];r&&r.batches&&r.batches.length>0&&((0,s.Iu)(r.batches,(function(e){p.addBatch(e)
2025-01-19 06:55:17 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 6e 29 7b 62 28 6e 29 7c 7c 54 2e 70 75 73 68 28 6e 29 7d 2c 6e 2e 61 64 64 49 67 6e 6f 72 65 64 43 6f 6e 63 65 72 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 30 21 3d 3d 65 2e 6c 65 6e 67 74 68 29 66 6f 72 28 76 61 72 20 74 3d 30 2c 72 3d 65 3b 74 3c 72 2e 6c 65 6e 67 74 68 3b 74 2b 2b 29 7b 76 61 72 20 69 3d 72 5b 74 5d 3b 6e 2e 61 64 64 49 67 6e 6f 72 65 64 43 6f 6e 63 65 72 6e 28 69 29 7d 7d 2c 6e 2e 6e 6f 74 69 66 79 43 6f 6e 63 65 72 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 28 30 2c 75 2e 49 75 29 28 6e 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 21 62 28 6e 29 29 7b 76 61 72 20 65 3d 7b 6e 61 6d 65 3a 66 2c 65 78 74 3a 7b 6d 65 74 61 64 61 74 61 3a 7b 70 72 69 76 54 61 67 73 3a 33 33 35 35 34 34 33 32 2c Data Ascii: unction(n){b(n)\|\|T.push(n)},n.addIgnoredConcerns=function(e){if(0!==e.length)for(var t=0,r=e;t<r.length;t++){var i=r[t];n.addIgnoredConcern(i)}},n.notifyConcerns=function(n){(0,u.Iu)(n,(function(n){if(!b(n)){var e={name:f,ext:{metadata:{privTags:33554432,
2025-01-19 06:55:17 UTC	7952	IN	Data Raw: 74 75 72 6e 20 55 7d 2c 43 50 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 6e 7d 2c 43 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4e 7d 2c 45 48 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 47 7d 2c 45 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 45 7d 2c 45 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4b 7d 2c 47 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 7d 2c 47 76 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 50 7d 2c 49 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 57 7d 2c 4a 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 52 7d 2c 4b 54 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 56 7d 2c 4b 59 3a 66 75 6e Data Ascii: turn U},CP:function(){return hn},Cv:function(){return N},EH:function(){return G},Ed:function(){return E},Et:function(){return K},Gh:function(){return _},Gv:function(){return P},Iu:function(){return W},Ju:function(){return R},KT:function(){return V},KY:fun
2025-01-19 06:55:17 UTC	16384	IN	Data Raw: 20 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 72 65 74 75 72 6e 20 61 7d 7d 2c 38 32 38 37 33 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 65 2c 74 29 7b 74 2e 64 28 65 2c 7b 50 56 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 67 7d 2c 69 38 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 76 7d 2c 6e 55 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 70 7d 2c 74 53 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 68 7d 7d 29 3b 76 61 72 20 72 3d 74 28 39 38 30 39 30 29 2c 69 3d 74 28 33 35 30 39 31 29 2c 6f 3d 74 28 37 35 30 37 32 29 2c 75 3d 74 28 33 38 38 30 35 29 2c 61 3d 74 28 37 38 39 38 34 29 2c 63 3d 74 28 31 38 38 30 29 2c 73 3d 74 28 34 38 38 33 32 29 2c 66 3d 22 54 65 6c 65 6d 65 74 72 79 50 6c 75 67 69 6e 43 Data Ascii: t()}function d(){return a}},82873:function(n,e,t){t.d(e,{PV:function(){return g},i8:function(){return v},nU:function(){return p},tS:function(){return h}});var r=t(98090),i=t(35091),o=t(75072),u=t(38805),a=t(78984),c=t(1880),s=t(48832),f="TelemetryPluginC

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:17 UTC	589	OUT	GET /forms/scripts/dists/response-page-pro.chunk.616.93becff.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:18 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 91082 Content-Type: application/javascript Content-MD5: pVfY18P2NEUAWQLuAkh25g== Last-Modified: Wed, 11 Dec 2024 04:47:51 GMT Accept-Ranges: bytes ETag: "0x8DD199EF84E84EC" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 3593d9a9-401e-002a-4693-4b8821000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:18 GMT Date: Sun, 19 Jan 2025 06:55:18 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:18 UTC	15790	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 36 31 36 5d 2c 7b 39 35 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3b 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 36 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 Data Ascii: (self.webpackChunk=self.webpackChunk\|\|[]).push([[616],{95616:function(e,t){var n;/! jQuery JavaScript Library v3.6.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright OpenJS Foundation and other contributors *
2025-01-19 06:55:18 UTC	16384	IN	Data Raw: 74 28 6e 29 26 26 28 74 3d 61 28 6e 2c 21 30 29 29 26 26 28 74 3d 6e 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 6e 2e 6c 65 6e 67 74 68 2d 74 29 2d 6e 2e 6c 65 6e 67 74 68 29 26 26 28 65 5b 30 5d 3d 65 5b 30 5d 2e 73 6c 69 63 65 28 30 2c 74 29 2c 65 5b 32 5d 3d 6e 2e 73 6c 69 63 65 28 30 2c 74 29 29 2c 65 2e 73 6c 69 63 65 28 30 2c 33 29 29 7d 7d 2c 66 69 6c 74 65 72 3a 7b 54 41 47 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 72 65 70 6c 61 63 65 28 6e 65 2c 72 65 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 2a 22 3d 3d 3d 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 30 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 4e 61 6d 65 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 Data Ascii: t(n)&&(t=a(n,!0))&&(t=n.indexOf(")",n.length-t)-n.length)&&(e[0]=e[0].slice(0,t),e[2]=n.slice(0,t)),e.slice(0,3))}},filter:{TAG:function(e){var t=e.replace(ne,re).toLowerCase();return"*"===e?function(){return!0}:function(e){return e.nodeName&&e.nodeName.t
2025-01-19 06:55:18 UTC	1900	IN	Data Raw: 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 2c 6f 3d 6b 2e 44 65 66 65 72 72 65 64 28 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 5b 65 5d 3d 74 68 69 73 2c 69 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 3f 75 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 29 3a 6e 2c 2d 2d 74 7c 7c 6f 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 72 2c 69 29 7d 7d 3b 69 66 28 74 3c 3d 31 26 26 28 5f 28 65 2c 6f 2e 64 6f 6e 65 28 61 28 6e 29 29 2e 72 65 73 6f 6c 76 65 2c 6f 2e 72 65 6a 65 63 74 2c 21 74 29 2c 22 70 65 6e 64 69 6e 67 22 3d 3d 3d 6f 2e 73 74 61 74 65 28 29 7c 7c 6d 28 69 5b 6e 5d 26 26 69 5b 6e 5d 2e 74 68 65 6e 29 29 29 72 65 74 75 72 6e 20 6f 2e 74 68 65 6e 28 29 3b 66 6f 72 Data Ascii: .call(arguments),o=k.Deferred(),a=function(e){return function(n){r[e]=this,i[e]=arguments.length>1?u.call(arguments):n,--t\|\|o.resolveWith(r,i)}};if(t<=1&&(_(e,o.done(a(n)).resolve,o.reject,!t),"pending"===o.state()\|\|m(i[n]&&i[n].then)))return o.then();for
2025-01-19 06:55:18 UTC	16384	IN	Data Raw: 74 68 69 73 2e 63 61 63 68 65 28 65 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 69 5b 4a 28 74 29 5d 3d 6e 3b 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 74 29 69 5b 4a 28 72 29 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 69 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 3f 74 68 69 73 2e 63 61 63 68 65 28 65 29 3a 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 26 26 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 5b 4a 28 74 29 5d 7d 2c 61 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 74 7c 7c 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 76 6f 69 64 20 30 3d 3d 3d 6e 3f 74 68 69 73 Data Ascii: this.cache(e);if("string"==typeof t)i[J(t)]=n;else for(r in t)i[J(r)]=t[r];return i},get:function(e,t){return void 0===t?this.cache(e):e[this.expando]&&e[this.expando][J(t)]},access:function(e,t,n){return void 0===t\|\|t&&"string"==typeof t&&void 0===n?this
2025-01-19 06:55:18 UTC	16384	IN	Data Raw: 6e 5b 65 65 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 6e 5b 74 65 2e 65 78 70 61 6e 64 6f 5d 26 26 28 6e 5b 74 65 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 6b 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 65 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 65 29 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 3f 6b 2e 74 65 78 74 28 74 68 69 73 29 3a 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 65 61 63 68 28 28 66 75 6e 63 74 69 Data Ascii: n[ee.expando]=void 0}n[te.expando]&&(n[te.expando]=void 0)}}}),k.fn.extend({detach:function(e){return $e(this,e,!0)},remove:function(e){return $e(this,e)},text:function(e){return V(this,(function(e){return void 0===e?k.text(this):this.empty().each((functi
2025-01-19 06:55:18 UTC	7952	IN	Data Raw: 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 6b 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 6b 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 6b 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 6b 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 76 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 6b 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 Data Ascii: pe;if(3!==o&&8!==o&&2!==o)return void 0===e.getAttribute?k.prop(e,t,n):(1===o&&k.isXMLDoc(e)\|\|(i=k.attrHooks[t.toLowerCase()]\|\|(k.expr.match.bool.test(t)?vt:void 0)),void 0!==n?null===n?void k.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.s
2025-01-19 06:55:18 UTC	16288	IN	Data Raw: 65 6e 74 28 65 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6e 75 6c 6c 3d 3d 6e 3f 22 22 3a 6e 29 7d 3b 69 66 28 6e 75 6c 6c 3d 3d 65 29 72 65 74 75 72 6e 22 22 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 7c 7c 65 2e 6a 71 75 65 72 79 26 26 21 6b 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 65 29 29 6b 2e 65 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 28 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 76 61 6c 75 65 29 7d 29 29 3b 65 6c 73 65 20 66 6f 72 28 6e 20 69 6e 20 65 29 48 74 28 6e 2c 65 5b 6e 5d 2c 74 2c 69 29 3b 72 65 74 75 72 6e 20 72 2e 6a 6f 69 6e 28 22 26 22 29 7d 2c 6b 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 73 65 72 69 61 6c 69 7a 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e Data Ascii: ent(e)+"="+encodeURIComponent(null==n?"":n)};if(null==e)return"";if(Array.isArray(e)\|\|e.jquery&&!k.isPlainObject(e))k.each(e,(function(){i(this.name,this.value)}));else for(n in e)Ht(n,e[n],t,i);return r.join("&")},k.fn.extend({serialize:function(){return

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:18 UTC	593	OUT	GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:19 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 106767 Content-Type: application/javascript Content-MD5: JCEF1gqYudftxaGob85mRA== Last-Modified: Fri, 17 Jan 2025 04:52:48 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA4AB720" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 69df9143-901e-0064-5c8f-69a6a9000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:19 GMT Date: Sun, 19 Jan 2025 06:55:19 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:19 UTC	1125	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 5d 2c 7b 39 30 31 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 7b 76 65 72 73 69 6f 6e 3a 7b 6d 61 6a 6f 72 3a 34 2c 6d 69 6e 6f 72 3a 30 2c 62 75 69 6c 64 3a 31 7d 7d 3b 6e 2e 75 74 69 6c 73 3d 72 28 39 37 32 34 31 29 2c 6e 2e 78 6d 6c 3d 72 28 38 32 30 30 39 29 2c 6e 2e 6f 44 61 74 61 3d 72 28 33 37 39 32 39 29 2c 6e 2e 75 74 69 6c 73 2e 69 6e 42 72 6f 77 73 65 72 28 29 26 26 28 77 69 6e 64 6f 77 2e 6f 64 61 74 61 6a 73 3d 6e 29 2c 6e 2e 6e 6f 64 65 3d 22 6e 6f 64 65 22 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 33 37 39 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 Data Ascii: (self.webpackChunk=self.webpackChunk\|\|[]).push([[96],{90116:function(e,t,r){var n={version:{major:4,minor:0,build:1}};n.utils=r(97241),n.xml=r(82009),n.oData=r(37929),n.utils.inBrowser()&&(window.odatajs=n),n.node="node",e.exports=n},37929:function(e,t,r)
2025-01-19 06:55:19 UTC	16384	IN	Data Raw: 2c 72 2c 6e 2c 61 2c 6f 2c 69 29 7d 2c 74 2e 72 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 6f 2c 69 2c 6c 2c 63 29 7b 72 3d 72 7c 7c 74 2e 64 65 66 61 75 6c 74 53 75 63 63 65 73 73 2c 6f 3d 6f 7c 7c 74 2e 64 65 66 61 75 6c 74 45 72 72 6f 72 2c 69 3d 69 7c 7c 74 2e 64 65 66 61 75 6c 74 48 61 6e 64 6c 65 72 2c 6c 3d 6c 7c 7c 73 2e 64 65 66 61 75 6c 74 48 74 74 70 43 6c 69 65 6e 74 2c 63 3d 63 7c 7c 74 2e 64 65 66 61 75 6c 74 4d 65 74 61 64 61 74 61 2c 65 2e 72 65 63 6f 67 6e 69 7a 65 44 61 74 65 73 3d 6e 2e 64 65 66 69 6e 65 64 28 65 2e 72 65 63 6f 67 6e 69 7a 65 44 61 74 65 73 2c 75 2e 6a 73 6f 6e 48 61 6e 64 6c 65 72 2e 72 65 63 6f 67 6e 69 7a 65 44 61 74 65 73 29 2c 65 2e 63 61 6c 6c 62 61 63 6b 50 61 72 61 6d 65 74 65 72 4e 61 6d 65 3d Data Ascii: ,r,n,a,o,i)},t.request=function(e,r,o,i,l,c){r=r\|\|t.defaultSuccess,o=o\|\|t.defaultError,i=i\|\|t.defaultHandler,l=l\|\|s.defaultHttpClient,c=c\|\|t.defaultMetadata,e.recognizeDates=n.defined(e.recognizeDates,u.jsonHandler.recognizeDates),e.callbackParameterName=
2025-01-19 06:55:19 UTC	16384	IN	Data Raw: 6e 49 6d 70 6f 72 74 3a 4e 28 5b 22 4e 61 6d 65 22 2c 22 46 75 6e 63 74 69 6f 6e 22 2c 22 45 6e 74 69 74 79 53 65 74 22 2c 22 49 6e 63 6c 75 64 65 49 6e 53 65 72 76 69 63 65 44 6f 63 75 6d 65 6e 74 22 2c 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 47 75 69 64 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 49 66 3a 4e 28 6e 75 6c 6c 2c 5b 22 50 61 74 68 2a 22 2c 22 53 74 72 69 6e 67 2a 22 2c 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 49 6e 74 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 49 73 4f 66 3a 4e 28 5b 22 54 79 70 65 22 2c 22 4d 61 78 4c 65 6e 67 74 68 22 2c 22 50 72 65 63 69 73 69 6f 6e 22 2c 22 53 63 61 6c 65 22 2c 22 55 6e 69 63 6f 64 65 22 2c 22 53 52 49 44 22 2c 22 44 65 66 61 75 6c 74 56 61 6c 75 65 22 2c 22 41 6e 6e 6f 74 Data Ascii: nImport:N(["Name","Function","EntitySet","IncludeInServiceDocument","Annotation"]),Guid:N(null,null,!0),If:N(null,["Path","String","Annotation"]),Int:N(null,null,!0),IsOf:N(["Type","MaxLength","Precision","Scale","Unicode","SRID","DefaultValue","Annot
2025-01-19 06:55:19 UTC	5698	IN	Data Raw: 69 66 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 6c 61 74 69 6f 6e 73 68 69 70 2c 61 3d 57 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 72 2c 61 3d 75 65 28 65 2e 6e 61 6d 65 73 70 61 63 65 2c 6e 29 2c 6f 3d 65 2e 61 73 73 6f 63 69 61 74 69 6f 6e 3b 69 66 28 61 26 26 6f 29 66 6f 72 28 74 3d 30 2c 72 3d 6f 2e 6c 65 6e 67 74 68 3b 74 3c 72 3b 74 2b 2b 29 69 66 28 6f 5b 74 5d 2e 6e 61 6d 65 3d 3d 3d 61 29 72 65 74 75 72 6e 20 6f 5b 74 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 29 29 3b 69 66 28 61 29 7b 76 61 72 20 6f 3d 61 2e 65 6e 64 5b 30 5d 3b 6f 2e 72 6f 6c 65 21 3d 3d 65 2e 74 6f 52 6f 6c 65 26 26 28 6f 3d 61 2e 65 6e 64 5b 31 5d 29 2c 72 3d 6f 2e 74 79 70 65 7d 7d 72 65 74 75 72 6e 20 72 7d 2c 74 2e 6c 6f 6f 6b 75 70 4e 61 76 69 67 Data Ascii: if(e){var n=e.relationship,a=W(t,(function(e){var t,r,a=ue(e.namespace,n),o=e.association;if(a&&o)for(t=0,r=o.length;t<r;t++)if(o[t].name===a)return o[t];return null}));if(a){var o=a.end[0];o.role!==e.toRole&&(o=a.end[1]),r=o.type}}return r},t.lookupNavig
2025-01-19 06:55:19 UTC	16384	IN	Data Raw: 66 28 22 2f 2e 2e 22 29 3f 28 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 5c 2e 2e 5c 2f 3f 2f 67 2c 22 2f 22 29 2c 74 3d 72 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 2f 22 29 2c 72 3d 2d 31 3d 3d 3d 74 3f 22 22 3a 72 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 74 29 29 3a 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 2e 22 29 3f 65 3d 65 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 5c 2e 5c 2f 3f 2f 67 2c 22 2f 22 29 3a 28 6e 3d 65 2c 2d 31 21 3d 3d 28 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 2f 22 2c 31 29 29 26 26 28 6e 3d 65 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 74 29 29 2c 72 2b 3d 6e 2c 65 3d 65 2e 72 65 70 6c 61 63 65 28 6e 2c 22 22 29 29 3b 72 65 74 75 72 6e 20 72 7d 28 6e 29 2c 6c 2e 73 63 68 65 6d 65 3d 61 2e 73 63 68 65 6d 65 2c 6c 2e 66 72 61 67 6d Data Ascii: f("/..")?(e=e.replace(/^\/\..\/?/g,"/"),t=r.lastIndexOf("/"),r=-1===t?"":r.substring(0,t)):0===e.indexOf("/.")?e=e.replace(/^\/\.\/?/g,"/"):(n=e,-1!==(t=e.indexOf("/",1))&&(n=e.substring(0,t)),r+=n,e=e.replace(n,""));return r}(n),l.scheme=a.scheme,l.fragm
2025-01-19 06:55:19 UTC	16384	IN	Data Raw: 20 6f 72 20 74 65 78 74 20 69 6e 20 66 72 61 67 6d 65 6e 74 22 29 3b 69 66 28 31 3d 3d 3d 69 2e 6c 65 6e 67 74 68 26 26 21 24 28 65 2c 72 29 29 74 68 72 6f 77 20 6e 65 77 20 43 28 53 2c 22 45 6c 65 6d 65 6e 74 20 69 6e 20 66 72 61 67 6d 65 6e 74 20 63 61 6e 20 6e 6f 74 20 62 65 20 69 6e 73 65 72 74 65 64 20 62 65 66 6f 72 65 20 64 6f 63 74 79 70 65 22 29 7d 69 66 28 58 28 74 29 26 26 21 24 28 65 2c 72 29 29 74 68 72 6f 77 20 6e 65 77 20 43 28 53 2c 22 4f 6e 6c 79 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 63 61 6e 20 62 65 20 61 64 64 65 64 20 61 6e 64 20 6f 6e 6c 79 20 61 66 74 65 72 20 64 6f 63 74 79 70 65 22 29 3b 69 66 28 7a 28 74 29 29 7b 69 66 28 61 28 6e 2c 7a 29 29 74 68 72 6f 77 20 6e 65 77 20 43 28 53 2c 22 4f 6e 6c 79 20 6f 6e 65 20 64 6f 63 74 79 Data Ascii: or text in fragment");if(1===i.length&&!$(e,r))throw new C(S,"Element in fragment can not be inserted before doctype")}if(X(t)&&!$(e,r))throw new C(S,"Only one element can be added and only after doctype");if(z(t)){if(a(n,z))throw new C(S,"Only one docty
2025-01-19 06:55:19 UTC	7952	IN	Data Raw: 4c 3a 22 e2 95 9b 22 2c 62 6f 78 75 6c 3a 22 e2 94 98 22 2c 62 6f 78 55 52 3a 22 e2 95 9a 22 2c 62 6f 78 55 72 3a 22 e2 95 99 22 2c 62 6f 78 75 52 3a 22 e2 95 98 22 2c 62 6f 78 75 72 3a 22 e2 94 94 22 2c 62 6f 78 56 3a 22 e2 95 91 22 2c 62 6f 78 76 3a 22 e2 94 82 22 2c 62 6f 78 56 48 3a 22 e2 95 ac 22 2c 62 6f 78 56 68 3a 22 e2 95 ab 22 2c 62 6f 78 76 48 3a 22 e2 95 aa 22 2c 62 6f 78 76 68 3a 22 e2 94 bc 22 2c 62 6f 78 56 4c 3a 22 e2 95 a3 22 2c 62 6f 78 56 6c 3a 22 e2 95 a2 22 2c 62 6f 78 76 4c 3a 22 e2 95 a1 22 2c 62 6f 78 76 6c 3a 22 e2 94 a4 22 2c 62 6f 78 56 52 3a 22 e2 95 a0 22 2c 62 6f 78 56 72 3a 22 e2 95 9f 22 2c 62 6f 78 76 52 3a 22 e2 95 9e 22 2c 62 6f 78 76 72 3a 22 e2 94 9c 22 2c 62 70 72 69 6d 65 3a 22 e2 80 b5 22 2c 42 72 65 76 65 3a 22 cb Data Ascii: L:"",boxul:"",boxUR:"",boxUr:"",boxuR:"",boxur:"",boxV:"",boxv:"",boxVH:"",boxVh:"",boxvH:"",boxvh:"",boxVL:"",boxVl:"",boxvL:"",boxvl:"",boxVR:"",boxVr:"",boxvR:"",boxvr:"",bprime:"",Breve:"
2025-01-19 06:55:19 UTC	16384	IN	Data Raw: 92 be 22 2c 69 73 69 6e 3a 22 e2 88 88 22 2c 69 73 69 6e 64 6f 74 3a 22 e2 8b b5 22 2c 69 73 69 6e 45 3a 22 e2 8b b9 22 2c 69 73 69 6e 73 3a 22 e2 8b b4 22 2c 69 73 69 6e 73 76 3a 22 e2 8b b3 22 2c 69 73 69 6e 76 3a 22 e2 88 88 22 2c 69 74 3a 22 e2 81 a2 22 2c 49 74 69 6c 64 65 3a 22 c4 a8 22 2c 69 74 69 6c 64 65 3a 22 c4 a9 22 2c 49 75 6b 63 79 3a 22 d0 86 22 2c 69 75 6b 63 79 3a 22 d1 96 22 2c 49 75 6d 6c 3a 22 c3 8f 22 2c 69 75 6d 6c 3a 22 c3 af 22 2c 4a 63 69 72 63 3a 22 c4 b4 22 2c 6a 63 69 72 63 3a 22 c4 b5 22 2c 4a 63 79 3a 22 d0 99 22 2c 6a 63 79 3a 22 d0 b9 22 2c 4a 66 72 3a 22 f0 9d 94 8d 22 2c 6a 66 72 3a 22 f0 9d 94 a7 22 2c 6a 6d 61 74 68 3a 22 c8 b7 22 2c 4a 6f 70 66 3a 22 f0 9d 95 81 22 2c 6a 6f 70 66 3a 22 f0 9d 95 9b 22 2c 4a 73 63 72 3a Data Ascii: ",isin:"",isindot:"",isinE:"",isins:"",isinsv:"",isinv:"",it:"",Itilde:"",itilde:"",Iukcy:"",iukcy:"",Iuml:"",iuml:"",Jcirc:"",jcirc:"",Jcy:"",jcy:"",Jfr:"",jfr:"",jmath:"",Jopf:"",jopf:"",Jscr:

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:20 UTC	625	OUT	GET /forms/scripts/dists/response-page-pro.chunk.vendors.aa37695.js?cache-bust=true&retry-attempt=1 HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:20 UTC	595	IN	HTTP/1.1 200 OK Content-Length: 106767 Content-Type: application/javascript Content-MD5: JCEF1gqYudftxaGob85mRA== Last-Modified: Fri, 17 Jan 2025 04:52:48 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA4AB720" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 69df9143-901e-0064-5c8f-69a6a9000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:20 GMT Date: Sun, 19 Jan 2025 06:55:20 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:20 UTC	15789	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 36 5d 2c 7b 39 30 31 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 3d 7b 76 65 72 73 69 6f 6e 3a 7b 6d 61 6a 6f 72 3a 34 2c 6d 69 6e 6f 72 3a 30 2c 62 75 69 6c 64 3a 31 7d 7d 3b 6e 2e 75 74 69 6c 73 3d 72 28 39 37 32 34 31 29 2c 6e 2e 78 6d 6c 3d 72 28 38 32 30 30 39 29 2c 6e 2e 6f 44 61 74 61 3d 72 28 33 37 39 32 39 29 2c 6e 2e 75 74 69 6c 73 2e 69 6e 42 72 6f 77 73 65 72 28 29 26 26 28 77 69 6e 64 6f 77 2e 6f 64 61 74 61 6a 73 3d 6e 29 2c 6e 2e 6e 6f 64 65 3d 22 6e 6f 64 65 22 2c 65 2e 65 78 70 6f 72 74 73 3d 6e 7d 2c 33 37 39 32 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 Data Ascii: (self.webpackChunk=self.webpackChunk\|\|[]).push([[96],{90116:function(e,t,r){var n={version:{major:4,minor:0,build:1}};n.utils=r(97241),n.xml=r(82009),n.oData=r(37929),n.utils.inBrowser()&&(window.odatajs=n),n.node="node",e.exports=n},37929:function(e,t,r)
2025-01-19 06:55:20 UTC	16384	IN	Data Raw: 4c 61 62 65 6c 65 64 45 6c 65 6d 65 6e 74 2a 22 2c 22 4c 61 62 65 6c 65 64 45 6c 65 6d 65 6e 74 52 65 66 65 72 65 6e 63 65 2a 22 2c 22 4e 75 6c 6c 2a 22 2c 22 4e 61 76 69 67 61 74 69 6f 6e 50 72 6f 70 65 72 74 79 50 61 74 68 2a 22 2c 22 50 61 74 68 2a 22 2c 22 50 72 6f 70 65 72 74 79 50 61 74 68 2a 22 2c 22 52 65 63 6f 72 64 2a 22 2c 22 55 72 6c 52 65 66 2a 22 2c 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 41 6e 6e 6f 74 61 74 69 6f 6e 50 61 74 68 3a 4e 28 6e 75 6c 6c 2c 6e 75 6c 6c 2c 21 30 29 2c 41 6e 6e 6f 74 61 74 69 6f 6e 73 3a 4e 28 5b 22 54 61 72 67 65 74 22 2c 22 51 75 61 6c 69 66 69 65 72 22 5d 2c 5b 22 41 6e 6e 6f 74 61 74 69 6f 6e 2a 22 5d 29 2c 41 70 70 6c 79 3a 4e 28 5b 22 46 75 6e 63 74 69 6f 6e 22 5d 2c 5b 22 53 74 72 69 6e 67 2a 22 2c Data Ascii: LabeledElement","LabeledElementReference","Null","NavigationPropertyPath","Path","PropertyPath","Record","UrlRef","Annotation"]),AnnotationPath:N(null,null,!0),Annotations:N(["Target","Qualifier"],["Annotation"]),Apply:N(["Function"],["String*",
2025-01-19 06:55:20 UTC	3346	IN	Data Raw: 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 74 3d 65 2e 69 6e 64 65 78 4f 66 28 22 29 22 2c 31 30 29 3b 69 66 28 30 3d 3d 3d 65 2e 69 6e 64 65 78 4f 66 28 22 43 6f 6c 6c 65 63 74 69 6f 6e 28 22 29 26 26 74 3e 30 29 72 65 74 75 72 6e 20 65 2e 73 75 62 73 74 72 69 6e 67 28 31 31 2c 74 29 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 74 2e 69 6e 76 6f 6b 65 52 65 71 75 65 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 2c 6e 2c 61 2c 6f 29 7b 72 65 74 75 72 6e 20 61 2e 72 65 71 75 65 73 74 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 72 79 7b 61 2e 68 65 61 64 65 72 73 26 26 70 65 28 61 2e 68 65 61 64 65 72 73 29 2c 76 6f 69 64 20 30 3d 3d 3d 61 2e 64 61 74 61 26 26 32 30 34 21 3d 3d 61 2e 73 74 61 74 75 Data Ascii: (e){if("string"==typeof e){var t=e.indexOf(")",10);if(0===e.indexOf("Collection(")&&t>0)return e.substring(11,t)}return null},t.invokeRequest=function(e,t,r,n,a,o){return a.request(e,(function(a){try{a.headers&&pe(a.headers),void 0===a.data&&204!==a.statu
2025-01-19 06:55:20 UTC	16384	IN	Data Raw: 38 5d 29 3a 6e 75 6c 6c 3b 69 66 28 21 6e 7c 7c 21 74 26 26 22 5a 22 21 3d 3d 61 29 7b 69 66 28 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 72 6f 77 7b 6d 65 73 73 61 67 65 3a 22 49 6e 76 61 6c 69 64 20 64 61 74 65 2f 74 69 6d 65 20 76 61 6c 75 65 22 7d 7d 76 61 72 20 6f 3d 63 28 6e 5b 31 5d 29 3b 6f 3c 3d 30 26 26 6f 2b 2b 3b 76 61 72 20 69 3d 6e 5b 37 5d 2c 6c 3d 30 3b 69 66 28 69 29 7b 69 66 28 69 2e 6c 65 6e 67 74 68 3e 37 29 7b 69 66 28 72 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 68 72 6f 77 7b 6d 65 73 73 61 67 65 3a 22 43 61 6e 6e 6f 74 20 70 61 72 73 65 20 64 61 74 65 2f 74 69 6d 65 20 76 61 6c 75 65 20 74 6f 20 67 69 76 65 6e 20 70 72 65 63 69 73 69 6f 6e 2e 22 7d 7d 6c 3d 5a 28 69 2e 73 75 62 73 74 72 69 6e 67 28 33 29 2c 34 2c 21 30 29 2c Data Ascii: 8]):null;if(!n\|\|!t&&"Z"!==a){if(r)return null;throw{message:"Invalid date/time value"}}var o=c(n[1]);o<=0&&o++;var i=n[7],l=0;if(i){if(i.length>7){if(r)return null;throw{message:"Cannot parse date/time value to given precision."}}l=Z(i.substring(3),4,!0),
2025-01-19 06:55:20 UTC	16384	IN	Data Raw: 21 3d 65 26 26 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 26 26 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 22 75 6e 6b 6e 6f 77 6e 20 43 6c 61 73 73 3a 22 2b 65 29 2c 72 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 29 7d 76 61 72 20 64 3d 7b 7d 2c 70 3d 64 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 3d 31 2c 66 3d 64 2e 41 54 54 52 49 42 55 54 45 5f 4e 4f 44 45 3d 32 2c 6d 3d 64 2e 54 45 58 54 5f 4e 4f 44 45 3d 33 2c 68 3d 64 2e 43 44 41 54 41 5f 53 45 43 54 49 4f 4e 5f 4e 4f 44 45 3d 34 2c 67 3d 64 2e 45 4e 54 49 54 59 5f 52 45 46 45 52 45 4e 43 45 5f 4e 4f 44 45 3d 35 2c 79 3d 64 2e 45 4e 54 49 54 59 5f 4e 4f 44 45 3d 36 2c 76 3d 64 2e 50 52 4f 43 45 53 53 49 4e 47 5f 49 4e 53 54 52 55 43 54 49 4f 4e 5f 4e 4f 44 45 3d 37 2c 62 3d 64 2e 43 4f Data Ascii: !=e&&("function"!=typeof e&&console.error("unknown Class:"+e),r.constructor=e)}var d={},p=d.ELEMENT_NODE=1,f=d.ATTRIBUTE_NODE=2,m=d.TEXT_NODE=3,h=d.CDATA_SECTION_NODE=4,g=d.ENTITY_REFERENCE_NODE=5,y=d.ENTITY_NODE=6,v=d.PROCESSING_INSTRUCTION_NODE=7,b=d.CO
2025-01-19 06:55:20 UTC	7952	IN	Data Raw: 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 72 65 70 6c 61 63 65 44 61 74 61 28 65 2c 30 2c 74 29 7d 2c 61 70 70 65 6e 64 43 68 69 6c 64 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 78 5b 53 5d 29 7d 2c 64 65 6c 65 74 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 72 65 70 6c 61 63 65 44 61 74 61 28 65 2c 74 2c 22 22 29 7d 2c 72 65 70 6c 61 63 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 72 3d 74 68 69 73 2e 64 61 74 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 65 29 2b 72 2b 74 68 69 73 2e 64 61 74 61 2e 73 75 62 73 74 72 69 6e 67 28 65 2b 74 29 2c 74 68 69 73 2e 6e 6f 64 65 56 61 6c 75 65 3d 74 68 69 73 2e 64 61 74 61 3d 72 2c 74 68 69 73 2e 6c 65 6e 67 74 68 3d 72 Data Ascii: tion(e,t){this.replaceData(e,0,t)},appendChild:function(e){throw new Error(x[S])},deleteData:function(e,t){this.replaceData(e,t,"")},replaceData:function(e,t,r){r=this.data.substring(0,e)+r+this.data.substring(e+t),this.nodeValue=this.data=r,this.length=r
2025-01-19 06:55:20 UTC	16384	IN	Data Raw: 22 2c 44 53 63 79 3a 22 d0 85 22 2c 64 73 63 79 3a 22 d1 95 22 2c 64 73 6f 6c 3a 22 e2 a7 b6 22 2c 44 73 74 72 6f 6b 3a 22 c4 90 22 2c 64 73 74 72 6f 6b 3a 22 c4 91 22 2c 64 74 64 6f 74 3a 22 e2 8b b1 22 2c 64 74 72 69 3a 22 e2 96 bf 22 2c 64 74 72 69 66 3a 22 e2 96 be 22 2c 64 75 61 72 72 3a 22 e2 87 b5 22 2c 64 75 68 61 72 3a 22 e2 a5 af 22 2c 64 77 61 6e 67 6c 65 3a 22 e2 a6 a6 22 2c 44 5a 63 79 3a 22 d0 8f 22 2c 64 7a 63 79 3a 22 d1 9f 22 2c 64 7a 69 67 72 61 72 72 3a 22 e2 9f bf 22 2c 45 61 63 75 74 65 3a 22 c3 89 22 2c 65 61 63 75 74 65 3a 22 c3 a9 22 2c 65 61 73 74 65 72 3a 22 e2 a9 ae 22 2c 45 63 61 72 6f 6e 3a 22 c4 9a 22 2c 65 63 61 72 6f 6e 3a 22 c4 9b 22 2c 65 63 69 72 3a 22 e2 89 96 22 2c 45 63 69 72 63 3a 22 c3 8a 22 2c 65 63 69 72 63 3a 22 Data Ascii: ",DScy:"",dscy:"",dsol:"",Dstrok:"",dstrok:"",dtdot:"",dtri:"",dtrif:"",duarr:"",duhar:"",dwangle:"",DZcy:"",dzcy:"",dzigrarr:"",Eacute:"",eacute:"",easter:"",Ecaron:"",ecaron:"",ecir:"",Ecirc:"",ecirc:"
2025-01-19 06:55:20 UTC	14144	IN	Data Raw: 79 3a 22 d0 a1 22 2c 73 63 79 3a 22 d1 81 22 2c 73 64 6f 74 3a 22 e2 8b 85 22 2c 73 64 6f 74 62 3a 22 e2 8a a1 22 2c 73 64 6f 74 65 3a 22 e2 a9 a6 22 2c 73 65 61 72 68 6b 3a 22 e2 a4 a5 22 2c 73 65 41 72 72 3a 22 e2 87 98 22 2c 73 65 61 72 72 3a 22 e2 86 98 22 2c 73 65 61 72 72 6f 77 3a 22 e2 86 98 22 2c 73 65 63 74 3a 22 c2 a7 22 2c 73 65 6d 69 3a 22 3b 22 2c 73 65 73 77 61 72 3a 22 e2 a4 a9 22 2c 73 65 74 6d 69 6e 75 73 3a 22 e2 88 96 22 2c 73 65 74 6d 6e 3a 22 e2 88 96 22 2c 73 65 78 74 3a 22 e2 9c b6 22 2c 53 66 72 3a 22 f0 9d 94 96 22 2c 73 66 72 3a 22 f0 9d 94 b0 22 2c 73 66 72 6f 77 6e 3a 22 e2 8c a2 22 2c 73 68 61 72 70 3a 22 e2 99 af 22 2c 53 48 43 48 63 79 3a 22 d0 a9 22 2c 73 68 63 68 63 79 3a 22 d1 89 22 2c 53 48 63 79 3a 22 d0 a8 22 2c 73 68 Data Ascii: y:"",scy:"",sdot:"",sdotb:"",sdote:"",searhk:"",seArr:"",searr:"",searrow:"",sect:"",semi:";",seswar:"",setminus:"",setmn:"",sext:"",Sfr:"",sfr:"",sfrown:"",sharp:"",SHCHcy:"",shchcy:"",SHcy:"",sh

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:21 UTC	635	OUT	GET /forms/images/customervoice/customervoice.ico HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:21 UTC	583	IN	HTTP/1.1 200 OK Content-Length: 4286 Content-Type: image/x-icon Content-MD5: 7is1f6X7ppryOBaOOhon4Q== Last-Modified: Wed, 11 Dec 2024 04:47:02 GMT Accept-Ranges: bytes ETag: "0x8DD199EDABF3C9B" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 80812f3d-101e-007a-7992-4b4a71000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:21 GMT Date: Sun, 19 Jan 2025 06:55:21 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:21 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf df 70 10 d3 df 7b 40 d6 e3 7c 6f d4 df 78 90 d4 e2 78 9f d3 Data Ascii: ( @ p{@\|oxx

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:22 UTC	388	OUT	GET /forms/images/customervoice/customervoice.ico HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:22 UTC	649	IN	HTTP/1.1 200 OK Content-Length: 4286 Content-Type: image/x-icon Content-MD5: 7is1f6X7ppryOBaOOhon4Q== Last-Modified: Wed, 11 Dec 2024 04:41:47 GMT ETag: 0x8DD199E1F4E51B5 Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 9d15e5d5-c01e-0076-2992-4b2d45000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob Access-Control-Expose-Headers: x-ms-request-id,x-ms-version,x-ms-lease-status,x-ms-blob-type Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:22 GMT Date: Sun, 19 Jan 2025 06:55:22 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:22 UTC	4286	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 13 0b 00 00 13 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 cf df 70 10 d3 df 7b 40 d6 e3 7c 6f d4 df 78 90 d4 e2 78 9f d3 Data Ascii: ( @ p{@\|oxx

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:23 UTC	588	OUT	GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:23 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 13904 Content-Type: application/javascript Content-MD5: srEPVG3mvngIQHftZF3dUQ== Last-Modified: Tue, 17 Dec 2024 04:50:48 GMT Accept-Ranges: bytes ETag: "0x8DD1E566007AEC7" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 471de73e-d01e-0065-7f5f-50f975000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:23 GMT Date: Sun, 19 Jan 2025 06:55:23 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:23 UTC	1126	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 32 5d 2c 7b 33 37 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 54 69 74 6c 65 4f 76 65 72 66 6c 6f 77 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 34 36 32 39 29 2c 72 3d 6e 28 34 31 35 39 34 29 2c 69 3d 6e 28 35 33 30 31 33 29 2c 73 3d 6e 28 31 36 30 33 38 29 2c 75 3d 6e 28 35 39 31 39 38 29 2c 61 3d 6e 28 33 33 35 38 39 29 2c 6c 3d 6e 28 33 39 39 36 32 29 2c 70 3d 6e 28 39 37 34 31 30 29 2c 63 3d 6e 28 33 33 33 33 30 29 2c 64 3d 6e 28 32 32 32 32 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[902],{3750:function(e,t,n){n.r(t),n.d(t,{TitleOverflowMenu:function(){return I}});var o=n(34629),r=n(41594),i=n(53013),s=n(16038),u=n(59198),a=n(33589),l=n(39962),p=n(97410),c=n(33330),d=n(2222
2025-01-19 06:55:23 UTC	12778	IN	Data Raw: 3d 6e 2e 63 6f 6c 6c 61 70 73 65 4d 65 6e 75 2e 62 69 6e 64 28 6e 29 2c 6e 7d 72 65 74 75 72 6e 28 30 2c 6f 2e 43 36 29 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 52 65 63 65 69 76 65 50 72 6f 70 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 73 65 74 26 26 28 74 68 69 73 2e 73 65 74 53 74 61 74 65 28 7b 4d 65 6e 75 45 78 70 61 6e 64 65 64 3a 21 31 7d 29 2c 65 2e 6f 6e 4d 65 6e 75 52 65 73 65 74 26 26 65 2e 6f 6e 4d 65 6e 75 52 65 73 65 74 28 29 2c 74 68 69 73 2e 66 6f 63 75 73 28 29 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 4d 6f 75 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 72 65 73 69 Data Ascii: =n.collapseMenu.bind(n),n}return(0,o.C6)(t,e),t.prototype.componentWillReceiveProps=function(e){e.Reset&&(this.setState({MenuExpanded:!1}),e.onMenuReset&&e.onMenuReset(),this.focus())},t.prototype.componentDidMount=function(){window.addEventListener("resi

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:24 UTC	401	OUT	GET /forms/scripts/dists/response-page-pro.chunk.ir.96ce202.js HTTP/1.1 Host: cdn.forms.office.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:24 UTC	594	IN	HTTP/1.1 200 OK Content-Length: 13904 Content-Type: application/javascript Content-MD5: 1MbsdjUwadDctpVuXUy+kQ== Last-Modified: Fri, 17 Jan 2025 04:52:48 GMT Accept-Ranges: bytes ETag: "0x8DD36B2CA355D76" Server: Windows-Azure-Web/1.0 Microsoft-HTTPAPI/2.0 x-ms-request-id: 76c8ecd9-401e-0067-77b9-6947cd000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: max-age=31536000 Expires: Mon, 19 Jan 2026 06:55:24 GMT Date: Sun, 19 Jan 2025 06:55:24 GMT Connection: close Timing-Allow-Origin: *
2025-01-19 06:55:24 UTC	13904	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 39 30 32 5d 2c 7b 33 37 35 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 72 28 74 29 2c 6e 2e 64 28 74 2c 7b 54 69 74 6c 65 4f 76 65 72 66 6c 6f 77 4d 65 6e 75 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 7d 7d 29 3b 76 61 72 20 6f 3d 6e 28 33 34 36 32 39 29 2c 72 3d 6e 28 34 31 35 39 34 29 2c 69 3d 6e 28 35 33 30 31 33 29 2c 73 3d 6e 28 31 36 30 33 38 29 2c 75 3d 6e 28 35 39 31 39 38 29 2c 61 3d 6e 28 33 33 35 38 39 29 2c 6c 3d 6e 28 33 39 39 36 32 29 2c 70 3d 6e 28 39 37 34 31 30 29 2c 63 3d 6e 28 33 33 33 33 30 29 2c 64 3d 6e 28 32 32 32 32 Data Ascii: "use strict";(self.webpackChunk=self.webpackChunk\|\|[]).push([[902],{3750:function(e,t,n){n.r(t),n.d(t,{TitleOverflowMenu:function(){return I}});var o=n(34629),r=n(41594),i=n(53013),s=n(16038),u=n(59198),a=n(33589),l=n(39962),p=n(97410),c=n(33330),d=n(2222

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:37 UTC	727	OUT	GET /WeQiU HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://customervoice.microsoft.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:37 UTC	881	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 19 Jan 2025 06:55:37 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://tdn.docshostingservice.com/WeQiU/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bpBLDMgzimoq7LN2irF4aizMwmb%2FvgtXLpsghTHDnDnVD79F210hMoHFqvgqnk5u81ZpG%2BuT43GtJ%2Bu98gadKXmne1IHl5IaBPjunR0wMFaAa7xBybKd2wHd4KEX9zrx%2BKkw178riAj8pSf%2FiQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9044eb94fba76ff7-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7491&min_rtt=7480&rtt_var=2827&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2855&recv_bytes=1305&delivery_rate=385835&cwnd=32&unsent_bytes=0&cid=e4c15ba5ed6fdad6&ts=324&x=0"
2025-01-19 06:55:37 UTC	255	IN	Data Raw: 66 39 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 64 6e 2e 64 6f 63 73 68 6f 73 74 69 6e 67 73 65 72 76 69 63 65 2e 63 6f 6d 2f 57 65 51 69 55 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f9<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://tdn.docshostingservice.com/WeQiU/">here</a>.</p></body></html>
2025-01-19 06:55:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:38 UTC	681	OUT	GET /WeQiU/ HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:38 UTC	1006	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:38 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=7t3hf7o6f64os7cu3e34b8nj4t; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NnO29W9kSgPy45sW2xfJanz%2BNiW42f6iudECSLXfrJPHW20PpF8aPJlSQ3xj7SSk8XuroVhaN3X20%2FmpVau7cmDTNtfTKUBOnJdWJxa3sbR0x7n1ST%2Fa3nrufl%2FgmRw8FjW%2FgEJzx9ULFwvQrA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9044eb9a4a7deb06-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=38257&min_rtt=38252&rtt_var=14355&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1259&delivery_rate=76250&cwnd=32&unsent_bytes=0&cid=abdb6ed0e5a98ee5&ts=1078&x=0"
2025-01-19 06:55:38 UTC	363	IN	Data Raw: 61 63 66 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4f 63 65 61 6e 53 70 61 72 6b 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 73 6b 69 6c 6c 65 64 20 6d 75 73 69 63 69 61 6e 20 70 65 72 66 6f 72 6d 65 64 20 61 20 63 61 70 74 69 76 61 74 69 6e 67 20 73 6f 6c 6f 20 64 75 72 69 6e 67 20 74 68 65 20 67 72 61 6e 64 20 63 6f 6e 63 65 72 74 20 66 69 6e 61 6c 65 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e Data Ascii: acf <html lang="en"> <head> <meta charset="UTF-8"> <title>OceanSpark</title> ... <span>A skilled musician performed a captivating solo during the grand concert finale.</span> --> <meta name="robots" content="noin
2025-01-19 06:55:38 UTC	1369	IN	Data Raw: 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 20 77 69 73 65 20 6f 77 6c 20 77 61 74 63 68 65 64 20 73 69 6c 65 6e 74 6c 79 20 66 72 6f 6d 20 74 68 65 20 62 72 61 6e 63 68 20 6f 66 20 61 6e 20 61 6e 63 69 65 6e 74 20 6f 61 6b 20 74 72 65 65 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 0a 20 20 20 20 20 20 20 20 Data Ascii: pt src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>A wise owl watched silently from the branch of an ancient oak tree.</p> --> <style> body { font-family: Arial, sans-serif
2025-01-19 06:55:38 UTC	1042	IN	Data Raw: 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 34 30 36 35 71 59 53 6f 32 45 77 53 6c 4a 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 52 6f 73 65 46 6c 61 72 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 67 72 6f 75 70 20 6f 66 20 64 61 6e 63 65 72 73 20 72 65 68 65 61 72 73 65 64 20 74 69 72 65 6c 65 73 73 6c 79 20 74 6f 20 70 65 72 66 65 63 74 20 74 Data Ascii: "> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA4065qYSo2EwSlJ" data-callback="RoseFlare"> </span> </form>... <span>A group of dancers rehearsed tirelessly to perfect t
2025-01-19 06:55:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:39 UTC	554	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tdn.docshostingservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:39 UTC	386	IN	HTTP/1.1 302 Found Date: Sun, 19 Jan 2025 06:55:39 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/672eb098a9f3/api.js Server: cloudflare CF-RAY: 9044eba18f95c34b-EWR alt-svc: h3=":443"; ma=86400

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://nam.dcv.ms/TgEkOrA6UC

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Windows Analysis Report
https://nam.dcv.ms/TgEkOrA6UC

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:40 UTC	569	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tdn.docshostingservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:40 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:40 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9044eba548b37ca5-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:40 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-19 06:55:40 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:41 UTC	383	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:41 UTC	471	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9044eba9dc7ac468-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function zt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,g,h;try{for(a=a.call(e);!(c=(g=a.next()).done)&&(o.push(g.value),!(t&&o.length===t));c=!0)
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 48 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 48 65 7c 7c 28 48 65 3d 7b 7d 29 29 3b 76 61 72 20 4f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var He;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(He\|\|(He={}));var Oe;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 53 74 61 6c 65 45 78 65 63 75 74 65 3d 22 73 74 61 6c 65 5f 65 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 Data Ascii: StaleExecute="stale_execute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_mi
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f Data Ascii: {var t=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&t.set("clearance_
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 3d 4f 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 4f 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 4c 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 73 3d 4d 28 4d 72 2c 28 68 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c Data Ascii: =Oe.FAILURE_FEEDBACK\|\|e.state===Oe.FAILURE_HAVING_TROUBLES,l,g=M(Lr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),h,s=M(Mr,(h=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 2c 61 29 7b 72 65 74 75 72 6e 20 7a 65 28 29 3f 43 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 43 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 67 26 26 74 65 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 43 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 6c 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 Data Ascii: ,a){return ze()?Ce=Reflect.construct:Ce=function(c,l,g){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return g&&te(p,g.prototype),p},Ce.apply(null,arguments)}function le(e){return le=Object.setPrototypeOf?Object.getPrototypeOf:func
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 6a 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 6a 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6a 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b Data Ascii: }function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(je)?e.substring(je.length):null}function $(e){return"".concat(je).concat(e)}function It(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,t=document.currentScript;
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 5f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: ter",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var _=document.creat

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:41 UTC	810	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://tdn.docshostingservice.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:41 UTC	1362	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:41 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27003 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-19 06:55:41 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 34 34 65 62 61 39 66 39 39 61 64 65 39 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 9044eba9f99ade96-EWRalt-svc: h3=":443"; ma=86400
2025-01-19 06:55:41 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:41 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9044eba9f99ade96&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:41 UTC	331	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:41 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 120031 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9044ebae39cd0f46-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:41 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4b 4d 72 57 68 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.KMrWh3={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 70 65 63 74 65 64 2e 25 32 30 43 68 65 63 6b 25 32 30 79 6f 75 72 25 32 30 49 6e 74 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 22 3a 22 59 6f 75 72 25 32 30 64 65 76 69 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 Data Ascii: pected.%20Check%20your%20Internet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","turnstile_success":"Success%21","time_check_cached_warning":"Your%20device%20clock%20is%20set%20to%2
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 2c 66 4e 2c 66 4f 2c 66 50 2c 66 5a 2c 67 61 2c 67 65 2c 67 68 2c 67 69 2c 67 66 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 36 39 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 35 36 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 38 37 31 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 38 37 29 29 2f 34 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 37 35 29 29 2f 35 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 31 32 29 29 2f 36 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 38 31 29 29 2f 37 2b 70 61 72 73 65 49 6e 74 28 67 49 Data Ascii: ,fN,fO,fP,fZ,ga,ge,gh,gi,gf,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1269))/1(parseInt(gI(1456))/2)+parseInt(gI(871))/3+-parseInt(gI(587))/4+parseInt(gI(1675))/5(-parseInt(gI(1612))/6)+-parseInt(gI(1081))/7+parseInt(gI
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 72 6e 20 69 3d 3d 3d 68 7d 2c 27 74 72 76 73 48 27 3a 67 4b 28 31 37 30 34 29 2c 27 68 71 56 70 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 2a 68 7d 2c 27 52 45 70 62 77 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 66 7a 6b 50 42 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 78 6c 65 79 76 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 6f 5a 7a 55 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 21 3d 69 7d 2c 27 56 71 69 67 58 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 68 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 67 4b 28 31 39 30 35 29 5d 2c 66 Data Ascii: rn i===h},'trvsH':gK(1704),'hqVpK':function(h,i){return i*h},'REpbw':function(h,i){return i&h},'fzkPB':function(h,i){return h(i)},'xleyv':function(h,i){return h<i},'oZzUb':function(h,i){return h!=i},'VqigX':function(h,i){return i!=h}},e=String[gK(1905)],f
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 35 34 35 29 5d 28 48 2c 31 29 2c 31 2e 31 31 26 4d 29 2c 49 3d 3d 64 5b 67 4e 28 31 35 37 37 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4e 28 38 33 33 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 43 3d 28 44 2d 2d 2c 64 5b 67 4e 28 31 37 36 37 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 67 4e 28 31 30 39 36 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 67 4e 28 37 30 31 29 5d 5b 67 4e 28 31 37 30 36 29 5d 5b 67 4e 28 31 30 36 36 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 67 4e 28 31 65 33 29 5d 28 32 35 36 2c 43 5b 67 4e 28 31 32 35 34 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c Data Ascii: 545)](H,1),1.11&M),I==d[gN(1577)](j,1)?(I=0,G[gN(833)](o(H)),H=0):I++,M>>=1,s++);C=(D--,d[gN(1767)](0,D)&&(D=Math[gN(1096)](2,F),F++),x[L]=E++,String(K))}if(''!==C){if(Object[gN(701)][gN(1706)][gN(1066)](B,C)){if(d[gN(1e3)](256,C[gN(1254)](0))){for(s=0;s<
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 27 52 59 67 5a 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 4f 2c 67 51 29 7b 72 65 74 75 72 6e 20 67 51 3d 62 2c 64 5b 67 51 28 31 35 38 35 29 5d 28 4f 29 7d 7d 2c 78 3d 5b 5d 2c 42 3d 34 2c 43 3d 34 2c 44 3d 33 2c 45 3d 5b 5d 2c 48 3d 64 5b 67 52 28 31 35 36 35 29 5d 28 6f 2c 30 29 2c 49 3d 6a 2c 4a 3d 31 2c 46 3d 30 3b 64 5b 67 52 28 31 65 33 29 5d 28 33 2c 46 29 3b 78 5b 46 5d 3d 46 2c 46 2b 3d 31 29 3b 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 67 52 28 31 30 39 36 29 5d 28 32 2c 32 29 2c 47 3d 31 3b 4c 21 3d 47 3b 64 5b 67 52 28 38 36 32 29 5d 28 64 5b 67 52 28 37 35 33 29 5d 2c 64 5b 67 52 28 37 35 33 29 5d 29 3f 28 4d 3d 49 26 48 2c 49 3e 3e 3d 31 2c 30 3d 3d 49 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 64 5b 67 52 28 38 34 31 29 5d 28 Data Ascii: 'RYgZj':function(O,gQ){return gQ=b,d[gQ(1585)](O)}},x=[],B=4,C=4,D=3,E=[],H=d[gR(1565)](o,0),I=j,J=1,F=0;d[gR(1e3)](3,F);x[F]=F,F+=1);for(K=0,L=Math[gR(1096)](2,2),G=1;L!=G;d[gR(862)](d[gR(753)],d[gR(753)])?(M=I&H,I>>=1,0==I&&(I=j,H=o(J++)),K\|=d[gR(841)](
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 46 3d 4e 2c 42 3d 3d 30 26 26 28 42 3d 4d 61 74 68 5b 67 52 28 31 30 39 36 29 5d 28 32 2c 44 29 2c 44 2b 2b 29 7d 7d 7d 2c 67 3d 7b 7d 2c 67 5b 67 4b 28 39 30 36 29 5d 3d 66 2e 68 2c 67 7d 28 29 2c 65 50 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 67 54 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 29 7b 66 6f 72 28 67 54 3d 67 4a 2c 66 3d 7b 27 63 6c 51 45 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 3d 3d 3d 6d 7d 2c 27 53 58 49 49 44 27 3a 67 54 28 31 35 30 33 29 2c 27 56 49 6b 6f 51 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 2b 6d 7d 2c 27 69 5a 46 69 47 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 2c 27 4a 45 62 4c 50 27 3a 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 72 65 Data Ascii: F=N,B==0&&(B=Math[gR(1096)](2,D),D++)}}},g={},g[gK(906)]=f.h,g}(),eP=function(c,gT,f,g,h,i,j,k){for(gT=gJ,f={'clQEO':function(l,m){return l===m},'SXIID':gT(1503),'VIkoQ':function(l,m){return l+m},'iZFiG':function(l,m){return l(m)},'JEbLP':function(l,m){re
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 5b 28 67 5a 28 38 38 37 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 68 30 2c 48 29 7b 66 6f 72 28 68 30 3d 67 5a 2c 47 5b 68 30 28 35 39 31 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 68 30 28 31 31 33 35 29 5d 3b 47 5b 48 5d 3d 3d 3d 47 5b 6f 5b 68 30 28 36 39 30 29 5d 28 48 2c 31 29 5d 3f 47 5b 68 30 28 31 31 30 36 29 5d 28 48 2b 31 2c 31 29 3a 48 2b 3d 31 29 3b 72 65 74 75 72 6e 20 47 7d 28 78 29 2c 42 3d 27 6e 41 73 41 61 41 62 27 2e 73 70 6c 69 74 28 27 41 27 29 2c 42 3d 42 5b 67 5a 28 31 31 33 36 29 5d 5b 67 5a 28 31 37 32 31 29 5d 28 42 29 2c 43 3d 30 3b 43 3c 78 5b 67 5a 28 31 31 33 35 29 5d 3b 44 3d 78 5b 43 5d 2c 45 3d 6f 5b 67 5a 28 31 36 33 32 29 5d 28 65 54 2c 67 2c 68 2c 44 29 2c 6f 5b 67 5a 28 31 33 37 32 29 5d 28 42 2c 45 29 3f 28 Data Ascii: [(gZ(887))](x)):function(G,h0,H){for(h0=gZ,G[h0(591)](),H=0;H<G[h0(1135)];G[H]===G[o[h0(690)](H,1)]?G[h0(1106)](H+1,1):H+=1);return G}(x),B='nAsAaAb'.split('A'),B=B[gZ(1136)][gZ(1721)](B),C=0;C<x[gZ(1135)];D=x[C],E=o[gZ(1632)](eT,g,h,D),o[gZ(1372)](B,E)?(
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 72 6e 20 67 28 68 29 7d 7d 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 65 5b 68 4d 28 31 33 38 32 29 5d 28 66 39 2c 63 29 7d 63 61 74 63 68 28 67 29 7b 69 66 28 68 4d 28 31 33 30 31 29 21 3d 3d 65 5b 68 4d 28 31 30 37 35 29 5d 29 72 65 74 75 72 6e 20 66 37 28 65 5b 68 4d 28 31 32 36 36 29 5d 28 66 38 2c 63 29 29 3b 65 6c 73 65 20 65 28 65 5b 68 4d 28 35 38 39 29 5d 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 68 4e 29 7b 68 4e 3d 68 4d 2c 69 5b 68 4e 28 31 35 35 31 29 5d 5b 68 4e 28 31 38 36 36 29 5d 28 68 4e 28 36 36 39 29 29 7d 29 2c 63 28 68 4d 28 31 33 35 31 29 29 7d 7d 2c 65 4d 5b 67 4a 28 31 34 35 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 68 4f 2c 64 2c 65 2c 66 2c 67 29 7b 68 4f 3d 67 4a 2c 64 3d 7b 7d 2c 64 5b 68 4f 28 31 38 37 33 29 5d 3d 68 4f 28 34 39 39 29 2c Data Ascii: rn g(h)}});try{return e[hM(1382)](f9,c)}catch(g){if(hM(1301)!==e[hM(1075)])return f7(e[hM(1266)](f8,c));else e(e[hM(589)],function(i,hN){hN=hM,i[hN(1551)][hN(1866)](hN(669))}),c(hM(1351))}},eM[gJ(1458)]=function(hO,d,e,f,g){hO=gJ,d={},d[hO(1873)]=hO(499),
2025-01-19 06:55:41 UTC	1369	IN	Data Raw: 32 29 5d 5b 68 51 28 38 30 37 29 5d 28 29 2c 46 5b 68 51 28 39 34 37 29 5d 28 68 51 28 37 36 34 29 2c 66 75 6e 63 74 69 6f 6e 28 68 52 2c 61 32 29 7b 28 68 52 3d 68 51 2c 46 5b 68 52 28 36 38 32 29 5d 5b 68 52 28 31 36 38 33 29 5d 28 29 2c 51 5b 68 52 28 36 38 32 29 5d 5b 68 52 28 31 30 35 36 29 5d 28 29 2c 52 5b 68 52 28 36 38 32 29 5d 5b 68 52 28 38 37 38 29 5d 28 29 2c 53 5b 68 52 28 36 38 32 29 5d 5b 68 52 28 38 31 38 29 5d 28 29 2c 54 5b 68 52 28 36 38 32 29 5d 5b 68 52 28 31 32 30 34 29 5d 28 29 2c 55 5b 68 52 28 31 34 36 34 29 5d 29 26 26 28 61 32 3d 7b 7d 2c 61 32 5b 68 52 28 31 32 36 30 29 5d 3d 68 52 28 34 39 39 29 2c 61 32 5b 68 52 28 36 35 33 29 5d 3d 5a 5b 68 52 28 31 36 35 34 29 5d 5b 68 52 28 31 33 31 37 29 5d 2c 61 32 5b 68 52 28 31 32 32 Data Ascii: 2)][hQ(807)](),F[hQ(947)](hQ(764),function(hR,a2){(hR=hQ,F[hR(682)][hR(1683)](),Q[hR(682)][hR(1056)](),R[hR(682)][hR(878)](),S[hR(682)][hR(818)](),T[hR(682)][hR(1204)](),U[hR(1464)])&&(a2={},a2[hR(1260)]=hR(499),a2[hR(653)]=Z[hR(1654)][hR(1317)],a2[hR(122

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:41 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:41 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:41 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9044ebaeab6278db-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:41 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:42 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:42 UTC	240	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:42 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9044ebb27f2b42f2-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:42 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:42 UTC	1175	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3496 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:42 UTC	3496	OUT	Data Raw: 76 5f 39 30 34 34 65 62 61 39 66 39 39 61 64 65 39 36 3d 78 77 56 35 4b 35 45 35 44 35 24 35 38 35 6c 4b 76 57 4b 76 24 30 35 73 6e 39 66 35 76 77 65 44 55 76 49 6b 76 6c 45 35 47 33 76 68 74 76 57 4d 72 6f 69 6c 67 72 56 76 54 35 33 66 35 6c 55 76 63 65 35 76 67 38 33 66 52 76 6e 74 6e 64 76 61 64 76 32 58 50 24 47 38 76 6f 6e 69 6d 76 38 35 47 75 65 45 7a 79 34 37 6d 76 42 31 4e 76 55 76 61 6e 4e 76 42 35 6c 4e 76 6f 66 62 24 31 78 30 6a 25 32 62 37 33 74 57 56 76 56 37 24 76 6e 35 38 4e 76 33 4e 67 34 65 74 64 76 59 6e 76 50 76 4c 61 74 61 65 78 74 45 30 67 52 76 61 72 63 76 45 69 76 52 68 54 76 2b 75 68 76 5a 75 61 4e 61 76 47 51 76 47 61 77 4c 56 47 78 67 73 70 6b 42 51 68 76 6c 52 47 71 52 76 76 43 45 55 4e 56 6a 75 71 41 6a 4d 35 30 76 47 5a 76 4e Data Ascii: v_9044eba9f99ade96=xwV5K5E5D5$585lKvWKv$05sn9f5vweDUvIkvlE5G3vhtvWMroilgrVvT53f5lUvce5vg83fRvntndvadv2XP$G8vonimv85GueEzy47mvB1NvUvanNvB5lNvofb$1x0j%2b73tWVvV7$vn58Nv3Ng4etdvYnvPvLataextE0gRvarcvEivRhTv+uhvZuaNavGQvGawLVGxgspkBQhvlRGqRvvCEUNVjuqAjM50vGZvN
2025-01-19 06:55:42 UTC	771	IN	HTTP/1.1 200 OK Date: Sun, 19 Jan 2025 06:55:42 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 159640 Connection: close cf-chl-gen: 4ZZEFUq1kslc8jdy2Z5ryCwg6HcHqS0AuT1g8Jl8hDLerib7DwzHM9izQBBpyzUYW/GU6P5amsy7NBldrDm2A53viWu+6ZaaGGctrwg0vlvt/mxh2GffgTmLzr95wdlkjTnMsC+9YAwAm/1V0CZE9oZpenCzfQm2bo7PWdQ9JKbpjktX4/9+Vl8w8o62xr5fclQ41fCZL4eS9jKFFN071d3gSr7UBsjSAVRI1tqfAFy40xvq8CXRpS1aWMsFeEkzDaf8vfRMtx9lMUp5aBMc2mbTanlc0RAisfsLZQdv8ojYaNa2iOZ+8fc87SHniQI0uosWAWpYfb1Tn7kGyipAhHEV0fu+dHZ04gbCrbr2Tfu6r1GQAMYsKB6MWVFYnAa030AWHMfr4pFFOgDvKNXMRhLpxUeB46J7wBubr1WcoEmQ+UYU2WNo8gVH5c2s1395lQ2M32dSq0+vELt8+16f0KpjuF9ZWMI3JxqNiXsH0Jj25a4LIBLjKlxzrZIqyI2T$n1mCq0Dfsov4mCd5FJloiA== Server: cloudflare CF-RAY: 9044ebb4884f7cb2-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:42 UTC	598	IN	Data Raw: 5a 6b 46 44 50 6d 78 6e 56 32 74 63 61 34 46 78 62 59 56 76 6c 34 5a 54 6a 70 4b 47 6b 6f 70 57 69 56 6d 65 59 59 4f 6e 68 33 70 37 67 35 5a 33 68 70 35 2b 6d 6d 36 47 6b 62 53 6e 6e 34 31 79 71 58 71 6e 6b 36 36 52 70 35 36 4a 72 72 69 6a 67 4b 61 30 73 38 43 72 79 34 71 48 75 38 54 45 6d 63 43 71 6b 34 7a 53 77 4b 54 58 30 72 71 6b 31 4d 69 70 6e 75 43 30 6c 64 76 67 78 37 48 67 6f 70 79 68 6f 36 61 67 70 65 53 75 37 66 44 74 71 2b 54 4b 37 63 66 71 74 74 54 59 32 76 4c 53 34 4e 37 32 32 4f 47 39 35 50 7a 71 32 74 2f 34 35 65 6a 4b 30 41 2f 69 37 51 6b 4e 37 73 34 4d 47 74 51 55 43 2f 6a 32 31 68 76 76 38 2f 6b 65 47 2f 6b 67 46 75 45 58 39 68 6a 6d 4b 69 30 66 37 67 6b 50 4a 6a 59 6a 42 67 6b 6b 4e 52 51 49 45 43 34 6f 4d 43 34 65 4e 30 4d 55 48 44 39 Data Ascii: ZkFDPmxnV2tca4FxbYVvl4ZTjpKGkopWiVmeYYOnh3p7g5Z3hp5+mm6GkbSnn41yqXqnk66Rp56JrrijgKa0s8Cry4qHu8TEmcCqk4zSwKTX0rqk1MipnuC0ldvgx7Hgopyho6agpeSu7fDtq+TK7cfqttTY2vLS4N722OG95Pzq2t/45ejK0A/i7QkN7s4MGtQUC/j21hvv8/keG/kgFuEX9hjmKi0f7gkPJjYjBgkkNRQIEC4oMC4eN0MUHD9
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 41 39 49 41 59 5a 47 77 4e 49 51 6b 77 30 44 52 51 4b 55 68 6b 5a 52 46 41 30 56 43 41 54 56 6c 67 74 49 46 6b 33 57 6b 46 63 52 79 4d 70 50 30 78 6a 4b 45 49 74 50 43 73 6f 64 6c 42 4d 62 45 4e 6d 56 7a 68 36 55 7a 35 43 66 6c 65 41 57 57 39 36 65 32 42 57 5a 45 68 64 5a 6e 75 53 68 6e 35 68 6b 5a 43 48 6b 4a 4a 57 54 57 52 30 6e 46 74 65 58 6c 2b 4d 6a 47 2b 62 58 6e 35 6e 66 61 47 69 6d 5a 6d 65 61 32 36 42 70 49 53 68 71 4b 70 7a 6d 49 4f 79 6b 49 78 37 63 61 31 2f 64 48 6d 78 74 70 57 65 74 36 4f 59 69 73 53 49 72 73 53 6e 6d 63 48 54 6e 6f 79 72 6f 62 4c 58 72 72 69 71 6e 61 37 4e 75 64 76 51 77 4c 58 43 32 63 62 44 33 39 54 43 34 65 44 6d 31 2b 58 50 75 74 37 6e 38 63 44 6c 31 37 57 7a 31 2f 44 71 31 63 33 74 77 4e 66 61 38 4d 44 68 42 2b 48 79 79 Data Ascii: A9IAYZGwNIQkw0DRQKUhkZRFA0VCATVlgtIFk3WkFcRyMpP0xjKEItPCsodlBMbENmVzh6Uz5CfleAWW96e2BWZEhdZnuShn5hkZCHkJJWTWR0nFteXl+MjG+bXn5nfaGimZmea26BpIShqKpzmIOykIx7ca1/dHmxtpWet6OYisSIrsSnmcHTnoyrobLXrriqna7NudvQwLXC2cbD39TC4eDm1+XPut7n8cDl17Wz1/Dq1c3twNfa8MDhB+Hyy
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 36 4d 67 70 44 50 79 5a 44 51 69 30 76 52 56 51 38 53 44 55 63 55 32 49 73 4c 6b 4d 5a 61 55 55 67 4e 6c 64 49 50 33 42 76 52 55 55 6c 54 31 55 32 56 7a 56 4a 54 57 67 32 54 6d 35 31 63 6e 42 55 64 6c 4e 44 59 6d 39 67 67 49 4b 4a 58 33 68 4e 67 59 78 79 61 30 6d 4a 6b 5a 46 30 59 35 64 69 62 56 79 55 6e 6c 78 74 59 47 35 2f 64 48 52 34 67 4a 78 67 6f 58 5a 32 5a 57 79 51 6a 35 4b 51 6e 5a 4a 74 71 61 42 79 6c 6e 4f 6c 68 62 75 31 6b 70 47 75 65 4d 43 66 66 63 43 39 67 4a 66 41 75 4d 33 4c 77 38 4b 64 77 70 36 76 6a 4b 32 49 72 62 6d 78 73 71 79 54 6c 64 71 36 7a 38 75 55 74 4c 43 75 31 63 58 6a 30 38 4f 7a 31 75 69 73 7a 65 58 6f 76 4d 47 2f 79 64 44 59 31 4d 66 76 36 39 44 4d 41 4c 2f 39 36 67 53 31 32 2f 37 43 78 39 37 44 78 4c 30 4a 78 77 51 4b 2f 50 Data Ascii: 6MgpDPyZDQi0vRVQ8SDUcU2IsLkMZaUUgNldIP3BvRUUlT1U2VzVJTWg2Tm51cnBUdlNDYm9ggIKJX3hNgYxya0mJkZF0Y5dibVyUnlxtYG5/dHR4gJxgoXZ2ZWyQj5KQnZJtqaBylnOlhbu1kpGueMCffcC9gJfAuM3Lw8Kdwp6vjK2IrbmxsqyTldq6z8uUtLCu1cXj08Oz1uiszeXovMG/ydDY1Mfv69DMAL/96gS12/7Cx97DxL0JxwQK/P
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 51 78 55 59 4e 42 63 59 47 55 6c 67 54 6c 55 34 4e 6a 74 51 50 69 4e 71 5a 6b 4e 73 59 54 77 69 62 6e 4e 70 50 44 42 67 5a 45 52 48 63 47 74 4f 64 6e 30 2f 4d 6e 35 7a 63 33 31 6d 54 31 46 6c 55 6f 68 6e 66 46 6c 38 57 59 47 4c 62 47 71 4e 66 57 39 51 62 34 70 33 6b 5a 4e 57 6b 4a 4f 4b 65 35 4f 64 59 4a 32 61 65 6f 47 65 63 71 46 2f 71 6d 52 68 5a 71 71 78 5a 61 47 32 6f 47 6c 33 74 4b 71 6b 75 4b 36 74 72 35 4b 78 6b 73 4f 76 74 71 5a 2b 69 4c 65 56 6e 62 75 31 76 72 75 72 78 4e 43 68 71 63 7a 55 32 4c 69 71 6f 73 75 6b 32 39 2f 4d 76 72 4b 63 74 37 2b 6b 35 4c 4f 7a 34 36 54 43 37 63 6e 72 77 37 76 61 78 4b 57 71 35 63 58 4f 31 72 6a 46 38 75 2b 30 76 4c 6e 75 33 74 7a 73 32 4c 7a 6d 76 66 62 41 34 50 72 65 39 2f 6f 47 43 67 51 41 36 39 37 65 34 77 4c Data Ascii: QxUYNBcYGUlgTlU4NjtQPiNqZkNsYTwibnNpPDBgZERHcGtOdn0/Mn5zc31mT1FlUohnfFl8WYGLbGqNfW9Qb4p3kZNWkJOKe5OdYJ2aeoGecqF/qmRhZqqxZaG2oGl3tKqkuK6tr5KxksOvtqZ+iLeVnbu1vrurxNChqczU2Liqosuk29/MvrKct7+k5LOz46TC7cnrw7vaxKWq5cXO1rjF8u+0vLnu3tzs2LzmvfbA4Pre9/oGCgQA697e4wL
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 68 77 7a 51 52 77 63 5a 53 4e 56 61 45 45 31 51 53 70 73 53 32 55 6e 54 46 35 42 63 33 59 77 50 32 4a 79 57 56 4a 6f 4f 46 68 58 56 48 64 52 57 31 52 66 65 34 4a 6e 68 56 4e 63 50 6f 61 50 56 32 74 49 53 6f 64 4d 68 49 4e 56 63 32 47 52 68 46 6c 64 6c 4a 53 4f 61 6f 32 69 66 6e 71 56 63 59 6d 43 59 4a 61 58 6f 32 43 46 62 36 71 66 71 57 75 51 70 6f 57 33 75 6e 69 54 64 5a 64 2b 71 33 72 42 6f 4b 4e 2f 6e 37 4f 37 6f 70 6d 68 68 36 65 32 74 6f 79 63 70 49 69 68 6f 64 58 53 79 61 2b 69 72 39 53 53 79 72 79 66 31 35 37 57 32 38 7a 4f 33 4c 37 67 74 4b 6e 4b 71 71 7a 6f 75 4f 44 63 33 74 4c 6e 39 50 62 69 30 2f 4c 32 73 73 2f 33 31 72 6e 79 75 2f 7a 62 37 77 44 2b 33 4d 48 4a 2b 38 58 69 78 67 67 4e 37 2b 6e 2b 45 65 77 4d 34 39 55 4f 46 78 49 55 31 52 45 64 Data Ascii: hwzQRwcZSNVaEE1QSpsS2UnTF5Bc3YwP2JyWVJoOFhXVHdRW1Rfe4JnhVNcPoaPV2tISodMhINVc2GRhFldlJSOao2ifnqVcYmCYJaXo2CFb6qfqWuQpoW3uniTdZd+q3rBoKN/n7O7opmhh6e2toycpIihodXSya+ir9SSyryf157W28zO3L7gtKnKqqzouODc3tLn9Pbi0/L2ss/31rnyu/zb7wD+3MHJ+8XixggN7+n+EewM49UOFxIU1REd
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 31 59 4a 45 64 55 59 69 68 44 52 32 42 41 62 55 35 71 4d 47 56 53 5a 6a 52 35 54 47 31 64 5a 56 6c 37 64 6e 31 67 64 6d 51 33 58 33 6c 2b 51 6c 69 45 58 49 35 33 53 49 70 50 61 30 75 50 62 49 56 66 6b 31 64 6c 6c 48 4f 63 69 59 39 61 62 35 53 57 64 33 6c 36 59 6e 4f 65 66 57 69 59 61 34 5a 74 62 34 4f 6d 72 5a 79 31 73 4a 69 72 6c 71 69 56 70 4c 71 58 6a 35 79 70 6d 4c 6e 46 77 73 47 52 66 72 36 7a 6e 62 31 2f 6d 61 43 59 6f 5a 44 51 6f 64 48 48 73 4b 32 51 77 36 71 7a 76 71 6e 41 73 35 4f 65 75 39 53 62 73 37 54 6c 34 72 71 6d 32 36 79 70 33 4c 72 48 79 38 36 72 30 38 6e 51 36 72 69 36 77 2b 6e 78 36 2b 44 4e 2f 50 6e 38 31 72 38 49 32 37 6f 4c 35 74 67 4d 79 50 76 76 36 41 4d 54 36 38 76 56 39 77 4d 4d 39 51 54 6c 44 41 67 52 37 67 34 58 48 69 4c 69 41 Data Ascii: 1YJEdUYihDR2BAbU5qMGVSZjR5TG1dZVl7dn1gdmQ3X3l+QliEXI53SIpPa0uPbIVfk1dllHOciY9ab5SWd3l6YnOefWiYa4Ztb4OmrZy1sJirlqiVpLqXj5ypmLnFwsGRfr6znb1/maCYoZDQodHHsK2Qw6qzvqnAs5Oeu9Sbs7Tl4rqm26yp3LrHy86r08nQ6ri6w+nx6+DN/Pn81r8I27oL5tgMyPvv6AMT68vV9wMM9QTlDAgR7g4XHiLiA
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 6b 59 30 34 34 5a 45 68 72 61 58 42 67 52 30 78 7a 4e 31 52 49 54 32 5a 61 65 48 67 2b 50 6c 68 35 55 32 53 42 65 45 71 45 66 6b 5a 62 62 49 6d 4d 55 6f 79 48 62 32 4e 30 6b 59 31 51 5a 6d 56 38 56 47 31 33 6f 6e 42 32 65 6f 46 66 6b 36 43 56 59 70 64 6e 65 61 4e 73 72 59 56 37 69 6f 2b 54 6e 35 57 46 62 37 57 50 68 72 43 37 75 48 32 2b 6f 35 47 7a 66 70 48 43 6f 73 4f 33 6c 38 62 42 70 4e 43 6f 6b 4a 2b 73 72 5a 57 50 78 37 6e 4d 75 38 66 4e 71 63 32 64 79 5a 33 4b 31 73 37 46 32 36 58 52 70 64 6a 65 31 73 33 68 72 64 6d 74 34 2b 62 65 31 66 44 4b 72 76 72 75 78 76 72 75 39 39 4b 39 38 4e 62 75 39 51 65 2b 2f 67 55 43 39 77 7a 69 39 75 6e 2b 7a 42 4c 38 42 77 76 48 35 41 7a 55 47 75 30 50 43 65 38 51 2b 51 6f 69 2f 52 76 34 39 78 6a 67 2f 64 38 4a 35 52 Data Ascii: kY044ZEhraXBgR0xzN1RIT2ZaeHg+Plh5U2SBeEqEfkZbbImMUoyHb2N0kY1QZmV8VG13onB2eoFfk6CVYpdneaNsrYV7io+Tn5WFb7WPhrC7uH2+o5GzfpHCosO3l8bBpNCokJ+srZWPx7nMu8fNqc2dyZ3K1s7F26XRpdje1s3hrdmt4+be1fDKrvruxvru99K98Nbu9Qe+/gUC9wzi9un+zBL8BwvH5AzUGu0PCe8Q+Qoi/Rv49xjg/d8J5R
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 55 43 31 4b 52 45 39 71 57 32 34 37 4e 44 68 74 54 54 30 30 57 58 52 46 55 46 35 42 51 46 74 64 56 59 56 2f 68 6c 42 63 5a 6b 70 2f 55 57 5a 77 62 49 32 4d 5a 31 4f 48 6e 47 71 51 59 5a 79 4e 58 5a 79 6c 6c 6e 61 58 5a 34 42 6c 64 61 43 51 73 4b 6c 75 61 5a 57 73 61 4c 42 71 62 33 4e 7a 72 6e 53 32 6b 4b 36 4e 73 4b 75 50 76 73 4f 57 67 73 4b 43 70 36 47 6f 78 34 69 39 79 72 37 49 79 39 47 6b 7a 5a 53 33 77 38 75 74 6c 72 44 67 32 73 48 4e 6f 62 2f 43 34 4e 75 6a 33 2b 61 6a 32 71 7a 67 79 65 4c 73 35 64 2f 45 37 2f 54 6b 39 65 7a 57 73 74 4c 6e 31 39 4c 75 2b 4e 54 65 76 64 62 56 34 2b 54 4a 2f 4f 58 70 79 50 62 63 30 4e 33 53 33 64 4c 7a 2f 68 58 75 47 4f 4c 58 30 76 6e 70 31 52 30 57 48 2f 55 53 35 41 44 6a 34 79 73 57 4b 2b 6a 70 4c 68 38 43 36 6a 50 Data Ascii: UC1KRE9qW247NDhtTT00WXRFUF5BQFtdVYV/hlBcZkp/UWZwbI2MZ1OHnGqQYZyNXZyllnaXZ4BldaCQsKluaZWsaLBqb3NzrnS2kK6NsKuPvsOWgsKCp6Gox4i9yr7Iy9GkzZS3w8utlrDg2sHNob/C4Nuj3+aj2qzgyeLs5d/E7/Tk9ezWstLn19Lu+NTevdbV4+TJ/OXpyPbc0N3S3dLz/hXuGOLX0vnp1R0WH/US5ADj4ysWK+jpLh8C6jP
2025-01-19 06:55:42 UTC	1369	IN	Data Raw: 30 39 34 55 45 39 6e 55 6e 77 2b 57 6c 4e 61 59 49 52 78 59 47 4e 43 66 49 43 48 5a 31 78 65 63 57 31 2b 6b 30 68 6e 57 47 32 51 57 35 64 2b 65 4a 4a 2b 69 33 35 34 6f 58 6d 58 65 59 4e 39 67 6e 36 66 67 71 69 61 66 4c 43 53 6a 6d 75 41 73 4a 69 45 75 72 53 4e 70 48 4f 36 72 6e 32 32 64 4c 43 73 77 72 2f 46 6f 73 71 70 79 36 71 4c 75 73 57 49 6e 72 47 68 30 39 61 54 72 35 47 30 70 63 65 57 33 62 75 2f 6d 37 76 4f 31 37 36 31 76 71 50 44 30 73 75 36 31 71 6a 75 76 37 37 70 35 39 4f 2b 30 4f 72 52 77 76 6e 4b 33 4c 65 76 2b 76 44 36 2b 75 2b 36 2f 72 66 78 42 2f 57 2f 2f 66 72 47 79 65 6b 52 34 2b 51 52 36 52 44 31 34 64 58 77 43 2f 6a 73 44 64 7a 58 45 78 51 4e 45 66 49 42 45 42 54 6d 46 75 6a 33 4a 69 49 4d 4a 66 63 65 36 53 77 66 46 75 77 42 4a 77 73 36 Data Ascii: 094UE9nUnw+WlNaYIRxYGNCfICHZ1xecW1+k0hnWG2QW5d+eJJ+i354oXmXeYN9gn6fgqiafLCSjmuAsJiEurSNpHO6rn22dLCswr/Fosqpy6qLusWInrGh09aTr5G0pceW3bu/m7vO1761vqPD0su61qjuv77p59O+0OrRwvnK3Lev+vD6+u+6/rfxB/W//frGyekR4+QR6RD14dXwC/jsDdzXExQNEfIBEBTmFuj3JiIMJfce6SwfFuwBJws6

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:43 UTC	660	OUT	GET /favicon.ico HTTP/1.1 Host: tdn.docshostingservice.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tdn.docshostingservice.com/WeQiU/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=7t3hf7o6f64os7cu3e34b8nj4t
2025-01-19 06:55:43 UTC	849	IN	HTTP/1.1 404 Not Found Date: Sun, 19 Jan 2025 06:55:43 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2TpChXTD6Qu13XLZuHadyenH6qIuU6cu76yg4e%2BAOcPzefWuTsIze1I0JBsRThqq53v9HR7FtaxgAGC5QklVGs1CZ5%2FFiHnvNhfPyK88w7YYh19nlPD4Wodbhfw2538hWlzd0IkZ26u%2B1OdhYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9044ebb7cc45eab9-DFW alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=38238&min_rtt=38084&rtt_var=14589&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2856&recv_bytes=1238&delivery_rate=74268&cwnd=32&unsent_bytes=0&cid=3c2f230e16266bb1&ts=340&x=0"
2025-01-19 06:55:43 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-19 06:55:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:43 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1340206480:1737267088:-AZAzW0Qtllg5SRQ48vPXbinjHI7MRqOC_JQWfQ12E4/9044eba9f99ade96/MZkzi7CU2ISKhgb1BEFHZD1O2fqei74jNB.YRNvpIsY-1737269741-1.1.1.1-On5bsY2Z1UZ6kixrA7QOERzRsgcoRaJtHhnFCMh7qw0Hq3q68JVA3.Gi0MYNQl9M HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:43 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Sun, 19 Jan 2025 06:55:43 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: FnQrQ+61tu55xApYQ0SY6GZCXwr0AGwVWGl+i5e4m4iizBzthOux/qPmoAWqy/p6Bvg/KnhZ4/t6o7dFnMrmPA==$dDh6Tl+AprAuM6zMFKHvaw== Server: cloudflare CF-RAY: 9044ebba58857c6c-EWR alt-svc: h3=":443"; ma=86400
2025-01-19 06:55:43 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Timestamp	Bytes transferred	Direction	Data
2025-01-19 06:55:43 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/9044eba9f99ade96/1737269742816/d971aa3269afe4aa4cc5713fa04394edce874b1d7bf3c4b24d76188715d4e524/VlDglZQNc8V-LCZ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/uq5eu/0x4AAAAAAA4065qYSo2EwSlJ/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-19 06:55:44 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Sun, 19 Jan 2025 06:55:44 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-19 06:55:44 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 32 58 47 71 4d 6d 6d 76 35 4b 70 4d 78 58 45 5f 6f 45 4f 55 37 63 36 48 53 78 31 37 38 38 53 79 54 58 59 59 68 78 58 55 35 53 51 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g2XGqMmmv5KpMxXE_oEOU7c6HSx1788SyTXYYhxXU5SQAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-19 06:55:44 UTC	1	IN	Data Raw: 4a Data Ascii: J