Edit tour

Windows Analysis Report
https://signdocument.businessinnovate.us/oLtgR?e=

Overview

General Information

Sample URL:	https://signdocument.businessinnovate.us/oLtgR?e=
Analysis ID:	1597461
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

Invalid T&C link found

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3008 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1984,i,6679373086653346039,12527572626937385398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3220 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://signdocument.businessinnovate.us/oLtgR?e=" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.4.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3555sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-type: application/x-www-form-urlencodedCF-Chl-RetryAttempt: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36CF-Challenge: bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfbsec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 23 Jan 2025 08:58:09 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvQE2LbmPG6f%2BvmGGQktSf27k4zHU7NEIUZ3G99wKTIaoRHwTTNbQKBBszSyaCzYZynxHBJyZezAi4wcUSu8hxbp5O4Bmoljco7GkfVhTW1cxQLvWvOTPn06UtOGycxgBw6YMlnBsssyCkTv7HPthEpwow%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 906694921ef0de9b-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1629&min_rtt=1628&rtt_var=613&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1253&delivery_rate=1781574&cwnd=217&unsent_bytes=0&cid=b40a1a9aa2b6e17d&ts=301&x=0"

Source: chromecache_102.2.dr, chromecache_101.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_98.2.dr, chromecache_105.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_92.2.dr, chromecache_91.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_98.2.dr, chromecache_105.2.dr, chromecache_92.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_98.2.dr, chromecache_105.2.dr, chromecache_92.2.dr, chromecache_91.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50048 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50010
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50020
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50047
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50048
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443

Source: classification engine

Classification label: mal64.phis.win@18/46@42/17

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1984,i,6679373086653346039,12527572626937385398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://signdocument.businessinnovate.us/oLtgR?e="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=1984,i,6679373086653346039,12527572626937385398,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://signdocument.businessinnovate.us/oLtgR?e=	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://signdocument.businessinnovate.us/favicon.ico	0%	Avira URL Cloud	safe
https://2043758164-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://2043758164.cloudhostbuilder.com/next.php	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
cos.sa-saopaulo.myqcloud.com	43.135.205.15	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	2.23.209.17	true	false	high
code.jquery.com	151.101.2.137	true	false	high
2043758164.cloudhostbuilder.com	162.241.125.28	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
www.google.com	172.217.23.100	true	false	high
signdocument.businessinnovate.us	104.21.67.3	true	true	unknown
2043758164-1323985617.cos.sa-saopaulo.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/90669484efcb0f7b/1737622689215/b9f97b8f7fcbebdafeb33fa5977d90c44ab32f93e3f71772d7edd76c0a8a938b/26WOMOT9AhsxM5L	false		high
https://2043758164-1323985617.cos.sa-saopaulo.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/g/672eb098a9f3/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/90669484efcb0f7b/1737622689221/G9hZzXQ80Tmcq9N	false		high
https://2043758164.cloudhostbuilder.com/next.php	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://signdocument.businessinnovate.us/oLtgR?e=	false		unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://signdocument.businessinnovate.us/favicon.ico	false	Avira URL Cloud: safe	unknown
https://signdocument.businessinnovate.us/oLtgR/?e=	true		unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90669484efcb0f7b&lang=auto	false		high
https://a.nel.cloudflare.com/report/v4?s=%2BvQE2LbmPG6f%2BvmGGQktSf27k4zHU7NEIUZ3G99wKTIaoRHwTTNbQKBBszSyaCzYZynxHBJyZezAi4wcUSu8hxbp5O4Bmoljco7GkfVhTW1cxQLvWvOTPn06UtOGycxgBw6YMlnBsssyCkTv7HPthEpwow%3D%3D	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_98.2.dr, chromecache_105.2.dr, chromecache_92.2.dr, chromecache_91.2.dr	false	high
https://getbootstrap.com)	chromecache_98.2.dr, chromecache_105.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_98.2.dr, chromecache_105.2.dr, chromecache_92.2.dr, chromecache_91.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_102.2.dr, chromecache_101.2.dr	false	high
https://getbootstrap.com/)	chromecache_92.2.dr, chromecache_91.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.67.3	signdocument.businessinnovate.us	United States	13335	CLOUDFLARENETUS	true
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
2.23.209.34	unknown	European Union	1273	CWVodafoneGroupPLCEU	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
2.23.209.17	e329293.dscd.akamaiedge.net	European Union	1273	CWVodafoneGroupPLCEU	false
162.241.125.28	2043758164.cloudhostbuilder.com	United States	46606	UNIFIEDLAYER-AS-1US	false
43.135.205.241	unknown	Japan	4249	LILLY-ASUS	false
43.135.205.15	cos.sa-saopaulo.myqcloud.com	Japan	4249	LILLY-ASUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.217.23.100	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1597461
Start date and time:	2025-01-23 09:57:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://signdocument.businessinnovate.us/oLtgR?e=
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@18/46@42/17

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.67, 142.250.186.78, 173.194.76.84, 216.58.206.78, 142.250.185.174, 199.232.210.172, 2.23.77.188, 142.250.186.110, 142.250.186.142, 142.250.184.202, 142.250.185.138, 142.250.185.234, 142.250.185.202, 216.58.206.74, 142.250.186.74, 142.250.181.234, 142.250.186.170, 142.250.74.202, 142.250.186.42, 172.217.16.202, 216.58.206.42, 142.250.186.106, 172.217.16.138, 142.250.185.170, 172.217.18.10, 142.250.185.78, 142.250.184.238, 142.250.185.206, 142.250.185.227, 184.28.90.27, 13.107.246.45, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://signdocument.businessinnovate.us/oLtgR?e=

Input	Output
URL: https://signdocument.businessinnovate.us Model: Joe Sandbox AI	```json{ "brand": "DocuSign", "brand_classification": "wellknown", "legit_url": "https://www.docusign.com", "similarity": 5, "spoofed": 4, "reasoning": "The URL 'signdocument.businessinnovate.us' uses the term 'sign document', which is conceptually related to DocuSign, a well-known brand for electronic signatures. However, the domain 'businessinnovate.us' does not closely resemble 'docusign.com' and could suggest a different legitimate purpose, such as a business innovation service. The use of '.us' as a top-level domain is not inherently deceptive. The similarity score is moderate due to the conceptual link, but the likelihood of typosquatting is low because the domain structure does not strongly mimic the legitimate brand's URL."}
URL: https://signdocument.businessinnovate.us
URL: https://signdocument.businessinnovate.us/oLtgR/?e=... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a simple function that submits the first form on the page. This behavior is relatively low-risk, as it does not exhibit any high-risk indicators like dynamic code execution, data exfiltration, or obfuscation. However, the lack of context around the purpose and usage of this function warrants a medium-risk score due to the potential for abuse or unintended consequences." }
function DuskRay() { document.forms[0].submit(); }
URL: https://signdocument.businessinnovate.us/oLtgR/?e=... Model: Joe Sandbox AI	{ "risk_score": 7, "reasoning": "The script demonstrates several high-risk behaviors, including dynamic code execution through the use of `atob()` to decode a potentially malicious string, and the presence of obfuscated code and URLs. While the script may have a legitimate purpose, the overall behavior is highly suspicious and requires further investigation." }
const adverb = (name) => { name = name.replace(/[\[]/, '\\[').replace(/[\]]/, '\\]'); var regex = new RegExp('[\\?&]' + name + '=([^&#]*)'); var results = regex.exec(location.search); // Minim in shank laborum pork chop dolore turducken bresaola qui buffalo ribeye. Velit proident consectetur tempor. Turkey strip steak ut consequat meatloaf filet mignon ipsum. Shankle ut tri-tip, ball tip shank cupim commodo jerky landjaeger pork chop veniam culpa tempor hamburger. Cillum boudin qui est quis filet mignon sint kielbasa deserunt ham hock. Salami fugiat excepteur, deserunt cupim duis capicola short ribs. Sirloin tempor occaecat bacon venison. Alcatra fatback jerky, jowl frankfurter ground round cow qui landjaeger velit. In landjaeger velit, flank turducken tail non doner pork chop laboris labore t-bone. Leberkas do ut, t-bone turducken ut commodo eu swine eiusmod. Cupidatat magna kielbasa bresaola ut minim jerky flank tenderloin reprehenderit velit id fugiat tempor shank. Ipsum shank elit flank ut. Shank nostrud tri-tip fugiat landjaeger, irure shoulder meatball ex picanha t-bone dolore. Minim et leberkas lorem. Turducken duis kielbasa, porchetta beef picanha rump meatball ullamco in. return results === null ? '' : decodeURIComponent(results[1].replace(/\+/g, ' ')); } // Dolor sausage cillum quis, ham hock fugiat sint ipsum ullamco consectetur voluptate short loin. Nisi biltong aliqua rump andouille. Ut salami id incididunt. Leberkas beef ribs brisket shoulder, aliquip qui pig pork belly commodo meatloaf tail ham. Short loin venison pastrami, shankle ground round incididunt cow veniam. Cupim consequat nostrud proident drumstick. Pork chop anim ut, elit qui short ribs shoulder beef. Pig cow laboris, tempor cupidatat qui shank swine eiusmod excepteur minim nisi. Ground round proident nulla dolore pork laborum esse buffalo pancetta commodo ut anim irure. Brisket non labore eu proident adipisicing aute aliqua excepteur duis. Burgdoggen leberkas qui ex. Salami strip steak doner, boudin filet mignon capicola bresaola. Aliqua pork chop leberkas venison ball tip consequat. Ham alcatra ipsum, ut et aute beef tenderloin. Eiusmod fatback pancetta, tenderloin aliquip velit ut culpa jowl. rh13z8jemt = adverb('e') == '' ? rh13z8jemt : adverb('e'); rh13z8jemt = atob(rh13z8jemt);
URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://businessinnovate.us Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 2, "spoofed": 1, "reasoning": "The URL 'businessinnovate.us' does not closely resemble any specific well-known brand. There are no obvious character substitutions or visual similarities to a known brand's URL. The domain uses a '.us' extension, which is a legitimate country code top-level domain for the United States and does not inherently suggest typosquatting. The name 'businessinnovate' is generic and could be used for a variety of legitimate purposes, such as a business consultancy or innovation platform, without implying a connection to a specific brand. The structure of the URL does not suggest an attempt to confuse users into thinking they are visiting a different, well-known site."}
URL: https://businessinnovate.us
URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Next", "text_input_field_labels": [ "bejtm1@yxhw.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "We couldn't find an account with that username. Try another account.", "prominent_button_name": "next", "text_input_field_labels": [ "beyjm1@yxhw.org" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'signdocument.businessinnovate.us' does not match the legitimate domain for Microsoft.", "The domain 'businessinnovate.us' is not associated with Microsoft and appears to be a generic or unrelated domain.", "The use of a subdomain 'signdocument' could be an attempt to mimic legitimate document signing services, which is a common phishing tactic.", "The email domain 'yxhw.org' does not appear to be associated with Microsoft, which raises further suspicion." ], "riskscore": 9} Google indexed: False
URL: signdocument.businessinnovate.us Brands: Microsoft Input Fields: bejtm1@yxhw.org
URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://signdocument.businessinnovate.us/oLtgR/?e= Model: Joe Sandbox AI	```json{ "legit_domain": "microsoft.com", "classification": "wellknown", "reasons": [ "The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'.", "The URL 'signdocument.businessinnovate.us' does not match the legitimate domain for Microsoft.", "The domain 'businessinnovate.us' is not associated with Microsoft and appears to be a generic business-related domain.", "The use of 'signdocument' as a subdomain is suspicious and could be attempting to mimic legitimate document signing services.", "The email domain 'yxhw.org' does not appear to be associated with Microsoft, which raises further suspicion." ], "riskscore": 9} Google indexed: False
URL: signdocument.businessinnovate.us Brands: Microsoft Input Fields: beyjm1@yxhw.org

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 23 07:57:59 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9776645293308626
Encrypted:	false
SSDEEP:	48:8hdTTb/tH7idAKZdA19ehwiZUklqehSy+3:8PPr1y
MD5:	277F0CF65ADF9C48DB241DDEDFCC38CA
SHA1:	B9AE7369DA17B39C36D815921A333729595776C6
SHA-256:	60296E229FCFEF30857503A287785283490142E9CD7309167A6333C59E2DF39D
SHA-512:	EE17B47DF44187621226453231E14559C38F3A3E1BCB78DFC41AFF69C0FB7222596DB739E3DD82985B2DB548B7A8D871392BEDC51BB6AA8C2752D2A97CBC8C0B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...."...tm..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I7Z<G....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V7Z<G....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V7Z<G....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V7Z<G..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V7Z@G...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............;.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Source: https://signdocument.businessinnovate.us/oLtgR/?e=	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'signdocument.businessinnovate.us' does not match the legitimate domain for Microsoft., The domain 'businessinnovate.us' is not associated with Microsoft and appears to be a generic or unrelated domain., The use of a subdomain 'signdocument' could be an attempt to mimic legitimate document signing services, which is a common phishing tactic., The email domain 'yxhw.org' does not appear to be associated with Microsoft, which raises further suspicion. DOM: 1.3.pages.csv
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'signdocument.businessinnovate.us' does not match the legitimate domain for Microsoft., The domain 'businessinnovate.us' is not associated with Microsoft and appears to be a generic business-related domain., The use of 'signdocument' as a subdomain is suspicious and could be attempting to mimic legitimate document signing services., The email domain 'yxhw.org' does not appear to be associated with Microsoft, which raises further suspicion. DOM: 1.4.pages.csv

Source: Yara match	File source: 1.4.pages.csv, type: HTML
Source: Yara match	File source: 1.3.pages.csv, type: HTML

Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: Invalid link: Privacy statement
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: Invalid link: Privacy statement

Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No favicon
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No favicon
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No favicon
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No favicon

Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No <meta name="author".. found
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No <meta name="author".. found

Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No <meta name="copyright".. found
Source: https://signdocument.businessinnovate.us/oLtgR/?e=	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /oLtgR?e= HTTP/1.1Host: signdocument.businessinnovate.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /oLtgR/?e= HTTP/1.1Host: signdocument.businessinnovate.usConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90669484efcb0f7b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90669484efcb0f7b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: signdocument.businessinnovate.usConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signdocument.businessinnovate.us/oLtgR/?e=Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=ncm51thmik2sucrkf45jjn3bvj
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/90669484efcb0f7b/1737622689215/b9f97b8f7fcbebdafeb33fa5977d90c44ab32f93e3f71772d7edd76c0a8a938b/26WOMOT9AhsxM5L HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/90669484efcb0f7b/1737622689221/G9hZzXQ80Tmcq9N HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/90669484efcb0f7b/1737622689221/G9hZzXQ80Tmcq9N HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signdocument.businessinnovate.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signdocument.businessinnovate.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://signdocument.businessinnovate.ussec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 2043758164.cloudhostbuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://signdocument.businessinnovate.us/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 2043758164.cloudhostbuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 2043758164.cloudhostbuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /next.php HTTP/1.1Host: 2043758164.cloudhostbuilder.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: signdocument.businessinnovate.us
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 2043758164-1323985617.cos.sa-saopaulo.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 2043758164.cloudhostbuilder.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 23, 2025 09:57:58.348191977 CET	53	58555	1.1.1.1	192.168.2.5
Jan 23, 2025 09:57:58.492614031 CET	53	58828	1.1.1.1	192.168.2.5
Jan 23, 2025 09:57:59.475644112 CET	53	61035	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:02.667355061 CET	51298	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:02.667484999 CET	58891	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:02.674242020 CET	53	51298	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:02.674797058 CET	53	58891	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:03.687566996 CET	50746	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:03.688235998 CET	61765	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:03.703087091 CET	53	61765	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:03.705039024 CET	53	50746	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:05.002877951 CET	58003	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:05.003077984 CET	56695	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:05.016825914 CET	53	56695	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:05.022407055 CET	53	58003	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:05.373636007 CET	53445	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:05.373795986 CET	55132	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:05.381208897 CET	53	55132	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:05.381252050 CET	53	53445	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:06.901540041 CET	55283	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:06.901751995 CET	52209	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:06.905668974 CET	56755	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:06.906059980 CET	60190	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:06.908715963 CET	53	55283	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:06.909061909 CET	53	52209	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:06.912570953 CET	53	56755	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:06.913074017 CET	53	60190	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:09.845793009 CET	52362	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:09.845957994 CET	57414	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:09.852766991 CET	53	52362	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:09.852834940 CET	53	57414	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:16.551723003 CET	53	55821	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.008099079 CET	54394	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.008403063 CET	51022	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.008776903 CET	50860	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.008904934 CET	64183	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.009756088 CET	53495	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.010026932 CET	54166	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.011581898 CET	63470	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.011825085 CET	60235	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.012270927 CET	54354	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.012583971 CET	57090	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.015217066 CET	53	51022	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.015439987 CET	53	54394	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.015450001 CET	53	50860	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.015794039 CET	53	64183	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.016686916 CET	53	53495	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.016710997 CET	53	54166	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.017610073 CET	53	49531	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.018542051 CET	53	63470	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.019104004 CET	53	60235	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.397680044 CET	53	54354	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.466408014 CET	53	57090	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.712140083 CET	61363	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.712372065 CET	55645	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.713291883 CET	49253	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.713445902 CET	62011	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.718894958 CET	53	61363	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.719455957 CET	53	55645	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.720040083 CET	53	62011	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.720103979 CET	53	49253	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.792428970 CET	60198	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.792588949 CET	61500	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.799014091 CET	53	60198	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.800617933 CET	53	61500	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.886132956 CET	52142	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.886271000 CET	51447	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:23.892950058 CET	53	52142	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:23.893146038 CET	53	51447	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:24.238755941 CET	53	59469	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:25.311218977 CET	59874	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:25.311484098 CET	50716	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:25.321217060 CET	62906	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:25.324012995 CET	50795	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:25.328397989 CET	53	62906	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:25.503217936 CET	53	50795	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:25.522442102 CET	53	59874	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:25.577178955 CET	53	50716	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:26.513811111 CET	64373	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:26.513973951 CET	56766	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:26.776134968 CET	53	64373	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:26.778532982 CET	53	56766	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:29.581104040 CET	55490	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:29.581490993 CET	63477	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:29.588953018 CET	53	63477	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:29.588990927 CET	53	55490	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:29.694417953 CET	53	59570	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:30.383121014 CET	53	56744	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:30.540946007 CET	57443	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:30.541240931 CET	52084	53	192.168.2.5	1.1.1.1
Jan 23, 2025 09:58:30.547753096 CET	53	57443	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:30.548041105 CET	53	52084	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:35.564636946 CET	53	63212	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:52.955457926 CET	53	61313	1.1.1.1	192.168.2.5
Jan 23, 2025 09:58:58.004304886 CET	53	53082	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Jan 23, 2025 09:58:05.022510052 CET	192.168.2.5	1.1.1.1	c217	(Port unreachable)	Destination Unreachable
Jan 23, 2025 09:58:23.466520071 CET	192.168.2.5	1.1.1.1	c243	(Port unreachable)	Destination Unreachable
Jan 23, 2025 09:58:25.577238083 CET	192.168.2.5	1.1.1.1	c24b	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:04 UTC	683	OUT	GET /oLtgR?e= HTTP/1.1 Host: signdocument.businessinnovate.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:04 UTC	897	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 23 Jan 2025 08:58:04 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://signdocument.businessinnovate.us/oLtgR/?e= cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sotEiYQ8wjmXjrGaDlbGc4PAK77OWB29L%2Fikh5NsWBcZrhqW3KfRhmGK%2F6YDdLgrbr6Ql3EwitLrNSGVhZ8W25iWwiOEJPnLHdBdsLqhEeJabf72DhDZ%2BvVUQ%2B0h0Oy0jCSX6jypoCnKQlwMN6YuvwD36A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90669473aa8f4310-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=3869&min_rtt=3869&rtt_var=1934&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4236&recv_bytes=1261&delivery_rate=209109&cwnd=242&unsent_bytes=0&cid=fbeaf258d3d6ade8&ts=366&x=0"
2025-01-23 08:58:04 UTC	265	IN	Data Raw: 31 30 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 64 6f 63 75 6d 65 6e 74 2e 62 75 73 69 6e 65 73 73 69 6e 6e 6f 76 61 74 65 2e 75 73 2f 6f 4c 74 67 52 2f 3f 65 3d 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e Data Ascii: 102<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://signdocument.businessinnovate.us/oLtgR/?e=">here</a>.</p></body>
2025-01-23 08:58:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:05 UTC	684	OUT	GET /oLtgR/?e= HTTP/1.1 Host: signdocument.businessinnovate.us Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:05 UTC	1010	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=ncm51thmik2sucrkf45jjn3bvj; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GZdqkjxKMZ5pB417oYm0xp47g05A0ULjtAML63ossxfGr43aGknMf2kZb%2FiWHGRzM8nGiAuIZtqm7Ain%2BGNfCdcy2jePD4FPhywWuWWZw2nAEhpH2Y%2Fcd49KeAuVf%2B1dY3sHwkpiD5DYQVhdVWG7l6ZbKQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90669475bb1242ce-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=4238&min_rtt=4238&rtt_var=2119&sent=6&recv=7&lost=0&retrans=1&sent_bytes=4238&recv_bytes=1262&delivery_rate=233245&cwnd=235&unsent_bytes=0&cid=055c57a5f78adfe3&ts=667&x=0"
2025-01-23 08:58:05 UTC	359	IN	Data Raw: 62 37 32 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 5a 65 6e 69 74 68 54 6f 6e 65 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 49 6e 6e 6f 76 61 74 6f 72 73 20 62 72 61 69 6e 73 74 6f 72 6d 65 64 20 66 72 65 73 68 20 63 6f 6e 63 65 70 74 73 20 61 69 6d 69 6e 67 20 74 6f 77 61 72 64 20 64 69 73 72 75 70 74 69 76 65 20 74 65 63 68 6e 6f 6c 6f 67 69 63 61 6c 20 61 64 76 61 6e 63 65 6d 65 6e 74 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f Data Ascii: b72 <html lang="en"> <head> <meta charset="UTF-8"> <title>ZenithTone</title> ... <span>Innovators brainstormed fresh concepts aiming toward disruptive technological advancements.</span> --> <meta name="robots" co
2025-01-23 08:58:05 UTC	1369	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 49 6e 6e 6f 76 61 74 6f 72 73 20 62 72 61 69 6e 73 74 6f 72 6d 65 64 20 66 72 65 73 68 20 63 6f 6e 63 65 70 74 73 20 61 69 6d 69 6e 67 20 74 6f 77 61 72 64 20 64 69 73 72 75 70 74 69 76 65 20 74 65 63 68 6e 6f 6c 6f 67 69 63 61 6c 20 61 64 76 61 6e 63 65 6d 65 6e 74 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: > <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>Innovators brainstormed fresh concepts aiming toward disruptive technological advancements.</p> --> <style> body {
2025-01-23 08:58:05 UTC	1209	IN	Data Raw: 65 6e 73 75 72 69 6e 67 20 6f 70 74 69 6d 61 6c 20 70 65 72 66 6f 72 6d 61 6e 63 65 20 74 68 72 6f 75 67 68 6f 75 74 20 6f 70 65 72 61 74 69 6f 6e 73 2e 3c 2f 70 3e 20 2d 2d 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 6d 65 74 68 6f 64 3d 22 50 4f 53 54 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 35 64 7a 41 61 56 37 45 63 66 4e 34 36 72 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 44 75 73 6b 52 61 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: ensuring optimal performance throughout operations.</p> --> <form method="POST"> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA5dzAaV7EcfN46r" data-callback="DuskRay"> </
2025-01-23 08:58:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:05 UTC	560	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signdocument.businessinnovate.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:05 UTC	386	IN	HTTP/1.1 302 Found Date: Thu, 23 Jan 2025 08:58:05 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/672eb098a9f3/api.js Server: cloudflare CF-RAY: 9066947b2be5de93-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:06 UTC	575	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://signdocument.businessinnovate.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:06 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:06 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9066947f092dc45c-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:06 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-23 08:58:06 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:07 UTC	383	OUT	GET /turnstile/v0/g/672eb098a9f3/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:07 UTC	471	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Wed, 15 Jan 2025 14:50:44 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90669484acc742bc-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 7a 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 67 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 67 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 67 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function zt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,g,h;try{for(a=a.call(e);!(c=(g=a.next()).done)&&(o.push(g.value),!(t&&o.length===t));c=!0)
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 67 26 26 28 67 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;g&&(g=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 29 29 3b 76 61 72 20 48 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 2c 65 2e 4c 49 47 48 54 3d 22 6c 69 67 68 74 22 2c 65 2e 44 41 52 4b 3d 22 64 61 72 6b 22 7d 29 28 48 65 7c 7c 28 48 65 3d 7b 7d 29 29 3b 76 61 72 20 4f 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 45 52 49 46 59 49 4e 47 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 45 52 49 46 59 49 4e 47 5f 4f 56 45 52 52 55 4e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 41 49 4c 55 52 45 5f 57 4f 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 3d 22 66 61 69 Data Ascii: ));var He;(function(e){e.AUTO="auto",e.LIGHT="light",e.DARK="dark"})(He\|\|(He={}));var Oe;(function(e){e.VERIFYING="verifying",e.VERIFYING_HAVING_TROUBLES="verifying-having-troubles",e.VERIFYING_OVERRUN="verifying-overrun",e.FAILURE_WO_HAVING_TROUBLES="fai
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 53 74 61 6c 65 45 78 65 63 75 74 65 3d 22 73 74 61 6c 65 5f 65 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 Data Ascii: StaleExecute="stale_execute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_mi
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 7b 76 61 72 20 74 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f Data Ascii: {var t=new URLSearchParams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearance_level!=="default"&&t.set("clearance_
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 3d 4f 65 2e 46 41 49 4c 55 52 45 5f 46 45 45 44 42 41 43 4b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 4f 65 2e 46 41 49 4c 55 52 45 5f 48 41 56 49 4e 47 5f 54 52 4f 55 42 4c 45 53 2c 6c 2c 67 3d 4d 28 4c 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c 68 2c 73 3d 4d 28 4d 72 2c 28 68 3d 28 61 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 61 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c Data Ascii: =Oe.FAILURE_FEEDBACK\|\|e.state===Oe.FAILURE_HAVING_TROUBLES,l,g=M(Lr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),h,s=M(Mr,(h=(a=e.displayLanguage)===null\|\|a===void 0?void 0:a.toLowerCase())!==null
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 2c 61 29 7b 72 65 74 75 72 6e 20 7a 65 28 29 3f 43 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 43 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 67 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 67 26 26 74 65 28 70 2c 67 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 43 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 66 75 6e 63 74 69 6f 6e 20 6c 65 28 65 29 7b 72 65 74 75 72 6e 20 6c 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3a 66 75 6e 63 Data Ascii: ,a){return ze()?Ce=Reflect.construct:Ce=function(c,l,g){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return g&&te(p,g.prototype),p},Ce.apply(null,arguments)}function le(e){return le=Object.setPrototypeOf?Object.getPrototypeOf:func
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 6a 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 6a 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 6a 65 29 2e 63 6f 6e 63 61 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 49 74 28 29 7b 76 61 72 20 65 3d 2f 5c 2f 74 75 72 6e 73 74 69 6c 65 5c 2f 76 30 28 5c 2f 2e 2a 29 3f 5c 2f 61 70 69 5c 2e 6a 73 2f 2c 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b Data Ascii: }function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(je)?e.substring(je.length):null}function $(e){return"".concat(je).concat(e)}function It(){var e=/\/turnstile\/v0(\/.*)?\/api\.js/,t=document.currentScript;
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 63 61 6c 41 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 2c 70 2e 73 74 79 6c 65 2e 77 69 64 74 68 3d 22 31 30 30 76 77 22 2c 70 2e 73 74 79 6c 65 2e 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 3b 76 61 72 20 5f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 Data Ascii: ter",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verticalAlign="middle",p.style.width="100vw",p.style.height="100vh";var _=document.creat

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:07 UTC	816	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://signdocument.businessinnovate.us/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:07 UTC	1362	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:07 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27003 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: frame-src https://challenges.cloudflare.com/; base-uri 'self' cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA referrer-policy: same-origin document-policy: js-profiling
2025-01-23 08:58:07 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 36 36 39 34 38 34 65 66 63 62 30 66 37 62 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 90669484efcb0f7b-EWRalt-svc: h3=":443"; ma=86400
2025-01-23 08:58:07 UTC	1294	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 3e 0a Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="X-UA-Compatible" content="IE=Edge,chrome=1"> <meta name="robots" content="noindex, nofollow" /> <meta name="viewport" content="width=device-width, initial-scale=1, maximum-scale=1">
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 61 69 6e 2d 77 72 61 70 70 65 72 2c 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 73 79 73 74 65 6d 2d 75 69 2c 62 6c 69 6e 6b 6d 61 63 73 79 73 74 65 6d 66 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 72 6f 62 6f 74 6f 2c 6f 78 79 67 65 6e 2c 75 62 75 6e 74 75 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 Data Ascii: dding:0;width:100%}.main-wrapper,body{background-color:#fff;color:#232323;font-family:-apple-system,system-ui,blinkmacsystemfont,Segoe UI,roboto,oxygen,ubuntu,Helvetica Neue,arial,sans-serif;font-size:14px;font-weight:400;-webkit-font-smoothing:antialiase
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 61 6e 69 6d 61 74 69 6f 6e 3a 66 69 72 65 77 6f 72 6b 20 2e 33 73 20 65 61 73 65 2d 6f 75 74 20 31 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 31 3b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 33 32 20 33 32 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 2d 38 7d 23 73 75 63 63 65 73 73 2d 74 65 78 74 7b 61 6e 69 6d 61 74 69 6f 6e 3a 66 61 64 65 2d 69 6e 20 31 73 20 66 6f 72 77 61 72 64 73 3b 6f 70 61 63 69 74 79 3a 30 7d 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 30 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 30 33 38 31 32 37 3b 66 69 6c 6c 3a 23 Data Ascii: stroke:#038127;animation:firework .3s ease-out 1;stroke-width:1;stroke-dasharray:32 32;stroke-dashoffset:-8}#success-text{animation:fade-in 1s forwards;opacity:0}.success-circle{stroke-dashoffset:0;stroke-width:2;stroke-miterlimit:10;stroke:#038127;fill:#
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 6f 76 65 72 6c 61 79 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 20 61 3a 68 6f 76 65 72 2c 2e 74 68 65 6d 65 2d 64 61 72 Data Ascii: e-dark #challenge-overlay a,.theme-dark #challenge-overlay a:link,.theme-dark #challenge-overlay a:visited{color:#bbb}.theme-dark #challenge-error-text a:active,.theme-dark #challenge-error-text a:focus,.theme-dark #challenge-error-text a:hover,.theme-dar
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 32 30 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6c 6f 67 6f 2d 74 65 78 74 7b 66 69 6c 6c 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 65 6c 70 65 72 2d 6c 6f 6f 70 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 66 72 2d 68 Data Ascii: 20}.theme-dark .logo-text{fill:#fff}.theme-dark #fr-helper-loop-link,.theme-dark #fr-helper-loop-link:link,.theme-dark #fr-helper-loop-link:visited{color:#bbb}.theme-dark #fr-helper-loop-link:active,.theme-dark #fr-helper-loop-link:focus,.theme-dark #fr-h
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 64 65 31 33 30 33 3b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 61 6e 69 6d 61 74 69 6f 6e 3a 73 74 72 6f 6b 65 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 66 61 69 6c 75 72 65 2d 63 72 6f 73 73 7b 66 69 6c 6c 3a 23 66 66 66 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 62 6f 74 74 6f 6d 20 63 65 6e 74 65 72 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 64 65 2d 69 6e 2e 61 6e 69 6d 61 74 69 6f 6e 7b 30 25 7b 66 69 6c 6c 3a 23 64 65 31 33 30 33 3b 73 74 72 6f 6b 65 3a 23 64 65 31 Data Ascii: ;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#de1303;fill:#de1303;animation:stroke .6s cubic-bezier(.65,0,.45,1) forwards}.failure-cross{fill:#fff;transform-origin:bottom center}@keyframes fade-in.animation{0%{fill:#de1303;stroke:#de1
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 66 6c 6f 77 3a 63 6f 6c 75 6d 6e 20 6e 6f 77 72 61 70 3b 67 61 70 3a 30 3b 68 65 69 67 68 74 3a 31 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 30 3b 70 6c 61 63 65 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 33 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 63 62 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 73 69 7a 65 2d 63 6f 6d Data Ascii: ay:flex;flex-flow:column nowrap;gap:0;height:140px;padding:12px 0;place-content:space-between}.size-compact .link-spacer{margin-left:3px;margin-right:3px}.size-compact .cb-c{margin:0 12px;text-align:left}.size-compact .cb-container{margin:0 12px}.size-com
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 69 7b 6c 65 66 74 3a 32 35 35 70 78 7d 2e 72 74 6c 20 23 66 72 2d 68 65 6c 70 65 72 2c 2e 72 74 6c 20 23 66 72 2d 6f 76 65 72 72 75 6e 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2e 32 35 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 7b 6d 61 72 67 69 6e 3a 30 20 30 20 30 20 31 36 70 78 3b 77 69 64 74 68 3a 39 30 70 78 7d 2e 72 74 6c 20 23 62 72 61 6e 64 69 6e 67 2c 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 72 74 6c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 62 72 61 6e 64 69 6e 67 7b 61 6c 69 67 6e 2d 73 65 6c 66 3a 66 6c 65 Data Ascii: i{left:255px}.rtl #fr-helper,.rtl #fr-overrun{margin-left:.25em;margin-right:0}.rtl #branding{margin:0 0 0 16px;width:90px}.rtl #branding,.rtl.size-compact #branding{padding-left:0;padding-right:0;text-align:left}.rtl.size-compact #branding{align-self:fle
2025-01-23 08:58:07 UTC	1369	IN	Data Raw: 6f 6c 6f 72 3a 23 31 36 36 33 37 39 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 7d 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 2e 69 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 75 6e 73 70 75 6e 20 2e 63 69 72 63 6c 65 7b 61 6e 69 6d 61 74 69 6f 6e 3a 75 6e 73 70 69 6e 20 2e 37 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 36 35 2c 30 2c 2e 34 35 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 2e 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 77 69 64 74 68 Data Ascii: olor:#166379;text-decoration:underline}#challenge-error-title a:link,#challenge-error-title a:visited{color:#232323}#challenge-error-title .i-wrapper{display:none}.unspun .circle{animation:unspin .7s cubic-bezier(.65,0,.45,1) forwards}.circle{stroke-width

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:08 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90669484efcb0f7b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:08 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118974 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 906694893e53c457-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:08 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4b 4d 72 57 68 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.KMrWh3={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"http
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 25 32 30 6d 75 73 74 25 32 30 62 65 25 32 30 65 6d 62 65 64 64 65 64 25 32 30 69 6e 74 6f 25 32 30 61 25 32 30 70 61 72 65 6e 74 25 32 30 70 61 67 65 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 6f 75 74 64 61 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f 66 25 32 30 64 61 74 65 2e 25 32 Data Ascii: %20must%20be%20embedded%20into%20a%20parent%20page.","invalid_sitekey":"Invalid%20sitekey.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_refresh":"Refresh","outdated_browser":"Your%20browser%20is%20out%20of%20date.%2
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 2c 66 55 2c 66 59 2c 66 5a 2c 67 30 2c 67 31 2c 67 34 2c 67 35 2c 67 42 2c 67 32 2c 67 33 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 38 35 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 38 36 32 29 29 2f 32 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 38 30 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 37 36 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 36 39 34 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 37 33 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 33 29 29 2f 37 2a 28 2d 70 61 72 73 65 49 6e 74 28 Data Ascii: ,fU,fY,fZ,g0,g1,g4,g5,gB,g2,g3){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(585))/1(parseInt(gI(862))/2)+-parseInt(gI(1380))/3+-parseInt(gI(376))/4(parseInt(gI(1694))/5)+parseInt(gI(1273))/6+-parseInt(gI(1413))/7*(-parseInt(
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 5d 5d 26 26 55 5b 6b 5b 67 4d 28 31 35 33 37 29 5d 5d 5b 67 4d 28 31 31 31 37 29 5d 28 7b 27 73 6f 75 72 63 65 27 3a 67 4d 28 36 36 35 29 2c 27 77 69 64 67 65 74 49 64 27 3a 56 5b 67 4d 28 31 34 37 39 29 5d 5b 67 4d 28 31 32 38 31 29 5d 2c 27 65 76 65 6e 74 27 3a 6b 5b 67 4d 28 33 31 30 29 5d 7d 2c 27 2a 27 29 2c 4e 5b 67 4d 28 31 34 37 39 29 5d 5b 67 4d 28 31 31 35 31 29 5d 21 3d 3d 67 4d 28 31 32 33 33 29 26 26 28 57 5b 67 4d 28 38 31 39 29 5d 5b 67 4d 28 31 33 39 34 29 5d 28 29 2c 58 5b 67 4d 28 38 31 39 29 5d 5b 67 4d 28 39 34 39 29 5d 28 29 2c 59 5b 67 4d 28 38 31 39 29 5d 5b 67 4d 28 31 32 34 36 29 5d 28 29 2c 5a 5b 67 4d 28 38 31 39 29 5d 5b 67 4d 28 34 31 36 29 5d 28 29 2c 61 30 28 29 2c 61 31 5b 67 4d 28 38 31 39 29 5d 5b 67 4d 28 31 31 33 30 29 Data Ascii: ]]&&U[k[gM(1537)]][gM(1117)]({'source':gM(665),'widgetId':V[gM(1479)][gM(1281)],'event':k[gM(310)]},'*'),N[gM(1479)][gM(1151)]!==gM(1233)&&(W[gM(819)][gM(1394)](),X[gM(819)][gM(949)](),Y[gM(819)][gM(1246)](),Z[gM(819)][gM(416)](),a0(),a1[gM(819)][gM(1130)
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 2c 65 4d 5b 67 4d 28 31 34 37 39 29 5d 5b 67 4d 28 37 31 33 29 5d 29 2b 27 2f 27 2b 65 4d 5b 67 4d 28 31 34 37 39 29 5d 2e 63 48 2b 27 2f 27 2c 65 4d 5b 67 4d 28 31 34 37 39 29 5d 5b 67 4d 28 31 34 30 39 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 35 27 3a 78 5b 67 4d 28 36 34 31 29 5d 28 46 2c 48 2c 21 21 5b 5d 29 3b 63 6f 6e 74 69 6e 75 65 7d 62 72 65 61 6b 7d 7d 63 61 74 63 68 28 4a 29 7b 7d 7d 2c 65 4d 5b 67 4a 28 31 34 38 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 67 4e 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 29 7b 28 67 4e 3d 67 4a 2c 66 3d 7b 7d 2c 66 5b 67 4e 28 33 39 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 76 7d 2c 66 5b 67 4e 28 33 36 34 Data Ascii: ,eM[gM(1479)][gM(713)])+'/'+eM[gM(1479)].cH+'/',eM[gM(1479)][gM(1409)]);continue;case'15':x[gM(641)](F,H,!![]);continue}break}}catch(J){}},eM[gJ(1483)]=function(e,gN,f,g,h,i,j,k,l,m,n,o){(gN=gJ,f={},f[gN(393)]=function(s,v){return s instanceof v},f[gN(364
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 36 26 32 35 35 5e 31 32 35 2e 34 2c 78 3d 74 68 69 73 2e 68 5b 6b 5b 67 50 28 37 33 32 29 5d 28 31 36 38 2c 74 68 69 73 2e 67 29 5d 5b 67 50 28 31 34 36 36 29 5d 28 29 2c 78 5b 30 5d 3d 6b 5b 67 50 28 36 31 39 29 5d 28 6b 5b 67 50 28 31 30 31 31 29 5d 28 6b 5b 67 50 28 31 32 36 39 29 5d 28 74 68 69 73 2e 68 5b 6b 5b 67 50 28 31 36 37 32 29 5d 28 31 36 38 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 6b 5b 67 50 28 37 39 35 29 5d 28 74 68 69 73 2e 68 5b 31 36 38 5e 74 68 69 73 2e 67 5d 5b 31 5d 5b 67 50 28 31 33 35 36 29 5d 28 74 68 69 73 2e 68 5b 31 36 38 5e 74 68 69 73 2e 67 5d 5b 30 5d 2b 2b 29 2d 31 37 35 2c 32 35 36 29 26 32 35 35 2c 31 36 29 2c 28 74 68 69 73 2e 68 5b 6b 5b 67 50 28 31 30 33 34 29 5d 28 31 36 38 2c 74 68 69 73 2e 67 29 5d 5b 33 5d 5e 38 31 Data Ascii: 6&255^125.4,x=this.h[k[gP(732)](168,this.g)][gP(1466)](),x[0]=k[gP(619)](k[gP(1011)](k[gP(1269)](this.h[k[gP(1672)](168,this.g)][3]^k[gP(795)](this.h[168^this.g][1][gP(1356)](this.h[168^this.g][0]++)-175,256)&255,16),(this.h[k[gP(1034)](168,this.g)][3]^81
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 4f 45 27 3a 68 48 28 36 36 35 29 2c 27 63 53 7a 78 55 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 29 7b 72 65 74 75 72 6e 20 66 28 67 2c 68 29 7d 2c 27 4e 79 41 64 49 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 2c 27 41 64 6c 62 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 66 2c 67 29 7b 72 65 74 75 72 6e 20 66 3d 3d 3d 67 7d 7d 2c 65 3d 63 5b 68 48 28 31 31 39 38 29 5d 2c 65 26 26 65 5b 68 48 28 38 38 31 29 5d 3d 3d 3d 64 5b 68 48 28 31 33 35 33 29 5d 26 26 65 5b 68 48 28 31 35 32 33 29 5d 3d 3d 3d 68 48 28 31 32 31 35 29 3f 66 72 3d 64 5b 68 48 28 31 36 39 38 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 68 49 29 7b 68 49 3d 68 48 2c 64 5b 68 49 28 31 30 39 34 29 5d 28 66 52 29 7d 2c 31 65 Data Ascii: OE':hH(665),'cSzxU':function(f,g,h){return f(g,h)},'NyAdI':function(f,g){return f===g},'Adlbm':function(f,g){return f===g}},e=c[hH(1198)],e&&e[hH(881)]===d[hH(1353)]&&e[hH(1523)]===hH(1215)?fr=d[hH(1698)](setInterval,function(hI){hI=hH,d[hI(1094)](fR)},1e
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 48 3d 3d 3d 47 7d 2c 27 55 69 45 53 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 2c 27 43 77 4c 54 66 27 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 48 29 7b 72 65 74 75 72 6e 20 47 2b 48 7d 7d 2c 68 3d 3d 3d 6e 75 6c 6c 7c 7c 76 6f 69 64 20 30 3d 3d 3d 68 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 6f 5b 69 6c 28 37 39 37 29 5d 28 66 58 2c 68 29 2c 67 5b 69 6c 28 33 31 35 29 5d 5b 69 6c 28 31 33 36 31 29 5d 26 26 28 78 3d 78 5b 69 6c 28 39 33 37 29 5d 28 67 5b 69 6c 28 33 31 35 29 5d 5b 69 6c 28 31 33 36 31 29 5d 28 68 29 29 29 2c 78 3d 67 5b 69 6c 28 31 30 31 39 29 5d 5b 69 6c 28 33 32 35 29 5d 26 26 67 5b 69 6c 28 31 31 30 37 29 5d 3f 67 5b 69 6c 28 31 30 31 39 29 5d 5b 69 6c 28 33 32 35 29 5d 28 Data Ascii: return H===G},'UiESm':function(G,H){return G+H},'CwLTf':function(G,H){return G+H}},h===null\|\|void 0===h)return j;for(x=o[il(797)](fX,h),g[il(315)][il(1361)]&&(x=x[il(937)](g[il(315)][il(1361)](h))),x=g[il(1019)][il(325)]&&g[il(1107)]?g[il(1019)][il(325)](
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 2b 29 3b 7d 65 6c 73 65 20 68 5b 6e 5d 3d 69 5b 6c 5b 6d 5d 5d 5b 69 70 28 33 30 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 76 29 7b 72 65 74 75 72 6e 27 6f 2e 27 2b 76 7d 29 7d 2c 67 30 3d 66 75 6e 63 74 69 6f 6e 28 69 71 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 71 3d 67 4a 2c 64 3d 7b 27 49 57 55 52 64 27 3a 69 71 28 31 35 35 30 29 2c 27 62 68 77 77 54 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 61 43 6d 42 6a 27 3a 69 71 28 36 38 37 29 2c 27 41 73 6d 57 6d 27 3a 69 71 28 32 34 38 29 2c 27 6b 66 46 5a 51 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 2c 27 66 70 42 43 44 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6c 48 Data Ascii: +);}else h[n]=i[l[m]][ip(307)](function(v){return'o.'+v})},g0=function(iq,d,e,f,g){return iq=gJ,d={'IWURd':iq(1550),'bhwwT':function(h,i){return i===h},'aCmBj':iq(687),'AsmWm':iq(248),'kfFZQ':function(h,i){return h+i},'fpBCD':function(h,i){return h-i},'lH
2025-01-23 08:58:08 UTC	1369	IN	Data Raw: 68 7d 2c 27 77 56 52 64 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 43 6e 41 6b 61 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 2c 27 63 72 5a 72 41 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2b 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 71 28 31 34 37 33 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 72 29 7b 72 65 74 75 72 6e 20 69 72 3d 62 2c 69 72 28 31 30 34 36 29 5b 69 72 28 34 34 30 29 5d 28 69 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6f 2c 73 2c 69 73 2c 78 2c 42 2c 43 2c 44 2c 45 Data Ascii: h},'wVRdq':function(h,i){return h(i)},'CnAka':function(h,i){return h===i},'crZrA':function(h,i){return h+i}},e=String[iq(1473)],f={'h':function(h){return null==h?'':f.g(h,6,function(i,ir){return ir=b,ir(1046)[ir(440)](i)})},'g':function(j,o,s,is,x,B,C,D,E

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:08 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:08 UTC	240	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:08 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 90669489989542f2-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:08 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:09 UTC	433	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90669484efcb0f7b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:09 UTC	331	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:09 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 112755 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9066948eebc27d16-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:09 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 4f 3d 66 61 6c 73 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 4b 4d 72 57 68 33 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 Data Ascii: window._cf_chl_opt.uaO=false;window._cf_chl_opt.KMrWh3={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.privacy_link":"htt
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 25 32 30 69 6e 66 6f 72 6d 61 74 69 6f 6e 25 33 43 25 32 46 61 25 33 45 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 30 41 64 6d 69 6e 69 73 74 72 61 74 6f 72 25 32 30 69 66 25 32 30 74 68 69 73 25 32 30 70 72 6f 62 6c 65 6d 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 76 65 72 69 66 79 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 2e 2e 2e 22 2c 22 69 6e 76 61 6c 69 64 5f 73 69 74 65 6b 65 79 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 73 69 74 65 6b 65 79 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 Data Ascii: %20information%3C%2Fa%3E","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%20Administrator%20if%20this%20problem%20persists.","turnstile_success":"Success%21","turnstile_verifying":"Verifying...","invalid_sitekey":"Invalid%20sitekey.%20Contact%2
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 2c 66 58 2c 67 30 2c 67 31 2c 67 78 2c 67 42 2c 67 43 2c 67 47 2c 67 48 2c 66 59 2c 66 5a 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 35 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 33 35 32 29 29 2f 32 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 35 35 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 34 31 36 29 29 2f 34 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 38 30 30 29 29 2f 35 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 33 35 36 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 31 31 29 29 2f 37 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 Data Ascii: ,fX,g0,g1,gx,gB,gC,gG,gH,fY,fZ){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(135))/1+-parseInt(gI(352))/2+-parseInt(gI(1055))/3+-parseInt(gI(416))/4(parseInt(gI(800))/5)+parseInt(gI(356))/6+-parseInt(gI(1411))/7(parseInt(gI(1
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 4f 68 4a 61 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 4c 57 57 68 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 58 6f 5a 49 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 46 41 6a 70 52 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 57 50 56 52 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 3d 68 7d 2c 27 6f 78 69 4d 50 27 3a 67 4d 28 38 36 38 29 2c 27 6b 64 6b 77 78 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 66 70 Data Ascii: ':function(h,i){return i&h},'OhJab':function(h,i){return h>i},'LWWhl':function(h,i){return h<i},'XoZIj':function(h,i){return h-i},'FAjpR':function(h,i){return h<<i},'WPVRe':function(h,i){return i===h},'oxiMP':gM(868),'kdkwx':function(h,i){return h<<i},'fp
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 73 3c 46 3b 48 3d 64 5b 67 50 28 32 32 31 29 5d 28 48 3c 3c 31 2e 33 33 2c 4d 29 2c 64 5b 67 50 28 31 34 38 39 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 50 28 31 34 31 32 29 5d 28 64 5b 67 50 28 32 33 34 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 50 28 36 30 32 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 50 28 31 30 35 30 29 5d 28 31 36 2c 73 29 3b 48 3d 64 5b 67 50 28 34 38 39 29 5d 28 48 3c 3c 31 2e 33 2c 64 5b 67 50 28 31 31 33 32 29 5d 28 4d 2c 31 29 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 50 28 31 34 31 32 29 5d 28 6f 28 48 29 29 2c 48 Data Ascii: (o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0;s<F;H=d[gP(221)](H<<1.33,M),d[gP(1489)](I,j-1)?(I=0,G[gP(1412)](d[gP(234)](o,H)),H=0):I++,M=0,s++);for(M=C[gP(602)](0),s=0;d[gP(1050)](16,s);H=d[gP(489)](H<<1.3,d[gP(1132)](M,1)),j-1==I?(I=0,G[gP(1412)](o(H)),H
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 28 31 34 31 32 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 29 7b 47 5b 67 50 28 31 34 31 32 29 5d 28 64 5b 67 50 28 31 33 30 29 5d 28 6f 2c 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 50 28 31 32 36 30 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 51 29 7b 72 65 74 75 72 6e 20 67 51 3d 67 4d 2c 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 64 5b 67 51 28 36 37 31 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 67 51 28 35 30 34 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 67 52 2c 6a 29 7b 69 66 28 67 52 3d 67 51 2c 6a 3d 7b 27 54 64 6d 49 4c 27 3a 66 75 6e 63 74 69 Data Ascii: (1412)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==j-1){G[gP(1412)](d[gP(130)](o,H));break}else I++;return G[gP(1260)]('')},'j':function(h,gQ){return gQ=gM,null==h?'':d[gQ(671)]('',h)?null:f.i(h[gQ(504)],32768,function(i,gR,j){if(gR=gQ,j={'TdmIL':functi
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 37 30 29 5d 28 30 2c 4c 29 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4d 3d 64 5b 67 54 28 37 36 37 29 5d 28 42 2c 31 29 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 20 44 5b 67 54 28 31 32 36 30 29 5d 28 27 27 29 7d 69 66 28 78 3d 3d 30 26 26 28 78 3d 4d 61 74 68 5b 67 54 28 31 34 30 29 5d 28 32 2c 43 29 2c 43 2b 2b 29 2c 73 5b 4d 5d 29 4d 3d 73 5b 4d 5d 3b 65 6c 73 65 20 69 66 28 4d 3d 3d 3d 42 29 4d 3d 45 2b 45 5b 67 54 28 32 37 30 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 44 5b 67 54 28 31 34 31 32 29 5d 28 4d 29 2c 73 5b 42 2b 2b 5d 3d 64 5b 67 54 28 37 38 38 29 5d 28 45 2c 4d 5b 67 54 28 32 37 30 29 5d 28 30 29 29 2c 78 2d 2d 2c 45 3d 4d 2c 30 3d 3d 78 26 26 Data Ascii: 70)](0,L)?1:0)*F,F<<=1);s[B++]=e(J),M=d[gT(767)](B,1),x--;break;case 2:return D[gT(1260)]('')}if(x==0&&(x=Math[gT(140)](2,C),C++),s[M])M=s[M];else if(M===B)M=E+E[gT(270)](0);else return null;D[gT(1412)](M),s[B++]=d[gT(788)](E,M[gT(270)](0)),x--,E=M,0==x&&
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 29 2c 67 5b 68 38 28 37 36 33 29 5d 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 3f 6b 5b 68 38 28 33 38 31 29 5d 28 6b 5b 68 38 28 31 32 39 37 29 5d 2c 68 38 28 31 30 38 31 29 29 3f 44 3d 67 5b 68 38 28 39 36 30 29 5d 28 6b 5b 68 38 28 31 30 37 32 29 5d 2c 6b 5b 68 38 28 31 33 31 33 29 5d 2b 68 2b 6b 5b 68 38 28 33 32 35 29 5d 29 3a 67 5b 68 38 28 37 36 33 29 5d 3d 4a 53 4f 4e 5b 68 38 28 34 36 38 29 5d 28 67 5b 68 38 28 37 36 33 29 5d 2c 4f 62 6a 65 63 74 5b 68 38 28 31 34 34 37 29 5d 28 67 5b 68 38 28 37 36 33 29 5d 29 29 3a 67 5b 68 38 28 37 36 33 29 5d 3d 4a 53 4f 4e 5b 68 38 28 34 36 38 29 5d 28 67 5b 68 38 28 37 36 33 29 5d 29 2c 6d 3d 69 7c 7c 6b 5b 68 38 28 31 35 31 31 29 5d 2c 6e 3d 65 4d 5b 68 38 28 36 39 38 29 5d 5b 68 38 28 36 34 36 29 5d Data Ascii: ),g[h8(763)]instanceof Error?k[h8(381)](k[h8(1297)],h8(1081))?D=g[h8(960)](k[h8(1072)],k[h8(1313)]+h+k[h8(325)]):g[h8(763)]=JSON[h8(468)](g[h8(763)],Object[h8(1447)](g[h8(763)])):g[h8(763)]=JSON[h8(468)](g[h8(763)]),m=i\|\|k[h8(1511)],n=eM[h8(698)][h8(646)]
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 28 2e 2b 29 3a 28 5c 64 2b 29 3a 28 5c 64 2b 29 2f 2c 6c 3d 6a 5b 31 5d 5b 68 39 28 31 36 31 29 5d 28 6b 29 2c 6c 26 26 28 67 3d 6c 5b 31 5d 2c 68 3d 70 61 72 73 65 49 6e 74 28 6c 5b 32 5d 2c 31 30 29 2c 69 3d 65 5b 68 39 28 32 32 36 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 29 29 3a 66 3d 4a 53 4f 4e 5b 68 39 28 34 36 38 29 5d 28 64 29 3b 72 65 74 75 72 6e 20 6d 3d 7b 7d 2c 6d 5b 68 39 28 35 32 30 29 5d 3d 66 2c 6d 5b 68 39 28 38 36 31 29 5d 3d 67 2c 6d 5b 68 39 28 31 32 39 32 29 5d 3d 68 2c 6d 5b 68 39 28 37 36 39 29 5d 3d 69 2c 6d 5b 68 39 28 37 36 33 29 5d 3d 64 2c 6d 7d 2c 65 4d 5b 67 4a 28 31 33 31 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 2c 67 2c 68 2c 68 62 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 28 68 62 3d 67 4a 2c Data Ascii: (.+):(\d+):(\d+)/,l=j[1][h9(161)](k),l&&(g=l[1],h=parseInt(l[2],10),i=e[h9(226)](parseInt,l[3],10)))):f=JSON[h9(468)](d);return m={},m[h9(520)]=f,m[h9(861)]=g,m[h9(1292)]=h,m[h9(769)]=i,m[h9(763)]=d,m},eM[gJ(1310)]=function(d,e,f,g,h,hb,i,j,k,l,m){(hb=gJ,
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 21 65 5a 28 67 4a 28 35 34 38 29 29 26 26 28 66 57 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 69 79 2c 63 2c 64 2c 65 29 7b 69 79 3d 67 4a 2c 63 3d 7b 27 5a 58 4b 6d 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 56 57 4b 49 50 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 7d 2c 64 3d 65 4d 5b 69 79 28 36 39 38 29 5d 5b 69 79 28 31 30 30 31 29 5d 7c 7c 31 65 34 2c 65 3d 66 55 28 29 2c 21 65 4d 5b 69 79 28 31 34 33 34 29 5d 26 26 21 63 5b 69 79 28 31 32 33 38 29 5d 28 66 7a 29 26 26 21 65 4d 5b 69 79 28 39 34 30 29 5d 5b 69 79 28 31 30 30 34 29 5d 26 26 65 2d 66 54 3e 64 3f 63 5b 69 79 28 38 32 30 29 5d 28 66 66 29 3a 66 67 28 29 7d 2c 31 65 33 29 29 2c 66 58 3d Data Ascii: !eZ(gJ(548))&&(fW(),setInterval(function(iy,c,d,e){iy=gJ,c={'ZXKmN':function(f){return f()},'VWKIP':function(f){return f()}},d=eM[iy(698)][iy(1001)]\|\|1e4,e=fU(),!eM[iy(1434)]&&!c[iy(1238)](fz)&&!eM[iy(940)][iy(1004)]&&e-fT>d?c[iy(820)](ff):fg()},1e3)),fX=

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://signdocument.businessinnovate.us/oLtgR?e=

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Windows Analysis Report
https://signdocument.businessinnovate.us/oLtgR?e=

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:09 UTC	1175	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3555 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:09 UTC	3555	OUT	Data Raw: 76 5f 39 30 36 36 39 34 38 34 65 66 63 62 30 66 37 62 3d 4e 6a 33 75 6b 75 2d 75 32 75 76 75 65 75 46 6b 63 6d 6b 63 76 42 75 59 52 50 44 75 63 6a 4b 32 6f 63 70 35 63 46 2d 75 55 67 63 31 43 63 6d 47 6c 37 38 46 56 6c 33 63 68 75 67 44 75 46 6f 63 24 4b 75 63 56 65 67 44 4f 63 52 43 52 25 32 62 63 78 2b 63 7a 66 36 76 55 65 63 37 52 38 57 42 63 62 4f 56 63 45 6d 71 36 5a 63 6d 62 52 2d 64 63 48 75 46 64 63 37 44 53 51 37 4e 4b 74 76 57 34 59 63 39 4e 38 38 55 62 4f 63 59 78 63 49 75 46 2b 79 4e 2d 44 44 63 59 4a 63 4e 52 55 58 47 6b 63 57 65 6f 76 79 63 46 76 63 47 43 4f 78 6b 4b 4b 37 63 78 68 50 63 59 30 30 75 62 4e 55 65 55 63 63 78 2d 63 24 4f 65 6d 33 75 62 48 31 75 63 34 41 65 42 6a 63 65 31 42 69 67 59 4d 31 4d 52 77 41 51 63 63 4f 4a 38 63 73 61 Data Ascii: v_90669484efcb0f7b=Nj3uku-u2uvueuFkcmkcvBuYRPDucjK2ocp5cF-uUgc1CcmGl78FVl3chugDuFoc$KucVegDOcRCR%2bcx+czf6vUec7R8WBcbOVcEmq6ZcmbR-dcHuFdc7DSQ7NKtvW4Yc9N88UbOcYxcIuF+yN-DDcYJcNRUXGkcWeovycFvcGCOxkKK7cxhPcY00ubNUeUccx-c$Oem3ubH1uc4AeBjce1BigYM1MRwAQccOJ8csa
2025-01-23 08:58:09 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:09 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 159856 Connection: close cf-chl-gen: ItgiAOXYfTQXXR3cjuXYSnpJrcXXDH8bmsu7p4eQPueyPJlfFgGjMU2aFdJoZ+InythhuLd3t+Tbe8WqqTC9vnoOf8j4Tdc0Yfdupom9u53aX4eLWUnXXW/iJ4C4+EOcXodlDrJHXVCHl6UyWuMp0VYdIQLsWG6p0kyj/AmmmIXfpFAfntM4JLjMXQhNmVz43UvCcj7dAIeXHHUdIVWPXZXu9TqG7Yt30/p+82DS+zHbF5jDexfFie9VEPh9pzg4pyGsIxZ7QkG3J3av5w+Fu8j89/Yf59ta9j/m2BFFWdXsZVRqxh8dOmJ03uySKF59RJYBwRlehFrggnciHXs2oCRp5ZxBNRS56139fpWE74wZqTHYjBdQ8KnX55bXRQGGOfo6g7d8EZNgrXSzaeyCtUMObZyPmliokrhKmc/nKGXIwgjjzUhWFyAQrnqTw5uZjPRR8AWEgzoKVbg9MVwb1QMohJYHFCRdcmp/eBonyFquwrwKQaLcAyq351JpqOT6$FJR6lLGjpGuv2MHDNzXrVA== Server: cloudflare CF-RAY: 9066948f8aeb4379-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:09 UTC	598	IN	Data Raw: 74 62 6d 68 71 33 75 6b 78 5a 57 34 70 36 4b 72 78 36 53 44 72 62 36 76 76 49 53 2b 6f 34 36 6a 74 4d 54 4b 6b 4e 71 58 78 62 6a 4a 79 4c 65 78 77 4e 62 44 32 37 36 6a 31 72 36 6f 71 36 62 74 71 38 6d 39 76 2b 7a 6c 70 38 6a 34 34 64 6a 6e 75 64 53 38 79 2f 6a 62 73 39 4d 45 78 4c 76 69 78 4e 44 6e 42 65 4c 48 39 75 62 47 44 63 76 75 30 51 44 77 39 63 37 75 37 65 63 55 48 73 2f 71 48 51 33 77 46 79 45 52 39 42 33 6c 2b 2b 4d 6d 34 67 49 47 2b 79 59 4d 34 77 50 75 49 65 38 7a 37 69 58 7a 4e 66 59 37 48 43 30 58 2b 7a 63 50 2f 51 55 68 4f 43 41 7a 47 54 63 47 4e 55 68 43 48 7a 34 49 4a 54 4d 70 53 79 52 54 4a 67 77 54 50 54 77 65 4b 6a 45 37 59 46 34 30 56 43 56 68 4b 44 4e 59 59 44 68 58 54 46 78 59 61 6d 31 71 54 56 42 52 63 47 4a 53 62 6b 78 59 57 6e 68 Data Ascii: tbmhq3ukxZW4p6Krx6SDrb6vvIS+o46jtMTKkNqXxbjJyLexwNbD276j1r6oq6btq8m9v+zlp8j44djnudS8y/jbs9MExLvixNDnBeLH9ubGDcvu0QDw9c7u7ecUHs/qHQ3wFyER9B3l++Mm4gIG+yYM4wPuIe8z7iXzNfY7HC0X+zcP/QUhOCAzGTcGNUhCHz4IJTMpSyRTJgwTPTweKjE7YF40VCVhKDNYYDhXTFxYam1qTVBRcGJSbkxYWnh
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 6c 52 62 44 35 76 51 6c 56 6c 58 45 53 41 64 6b 52 4f 65 49 4a 52 63 47 32 4d 53 32 69 4b 5a 57 32 57 56 6c 52 2b 66 56 39 79 62 58 74 37 67 33 68 77 66 48 43 55 70 35 61 74 6e 34 2b 4c 72 5a 78 79 68 70 39 77 73 5a 4b 54 64 4c 65 59 72 71 70 31 73 62 79 55 6e 48 36 31 76 61 4b 6a 79 49 65 37 71 4c 2b 36 68 63 57 70 6e 70 75 39 7a 71 57 4e 6f 4a 47 5a 6c 4c 47 31 30 4c 69 66 34 5a 33 64 30 4e 4f 64 70 72 72 48 6f 37 2f 59 33 71 6d 6b 7a 4f 4c 65 71 64 33 71 78 76 62 50 36 73 6e 36 75 50 50 57 32 64 4c 38 2b 38 33 6b 30 39 72 47 34 66 76 63 41 38 54 56 36 74 7a 4f 7a 64 38 51 79 76 4c 65 79 4f 4d 58 37 68 54 53 31 66 6b 41 2b 78 34 4e 39 74 6b 54 34 50 76 2b 46 65 48 39 2b 67 33 6c 37 6a 45 4e 42 4f 67 42 2f 51 44 2b 38 51 45 6d 45 6a 49 34 47 77 73 33 4b Data Ascii: lRbD5vQlVlXESAdkROeIJRcG2MS2iKZW2WVlR+fV9ybXt7g3hwfHCUp5atn4+LrZxyhp9wsZKTdLeYrqp1sbyUnH61vaKjyIe7qL+6hcWpnpu9zqWNoJGZlLG10Lif4Z3d0NOdprrHo7/Y3qmkzOLeqd3qxvbP6sn6uPPW2dL8+83k09rG4fvcA8TV6tzOzd8QyvLeyOMX7hTS1fkA+x4N9tkT4Pv+FeH9+g3l7jENBOgB/QD+8QEmEjI4Gws3K
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 63 53 56 36 45 64 59 78 36 54 48 71 48 5a 34 78 6d 6c 57 6c 6c 54 35 6d 4c 68 34 53 47 6d 5a 56 39 64 5a 74 69 64 5a 4f 6a 63 57 53 6e 6d 33 68 6f 71 36 43 74 72 33 2b 51 6e 6f 31 39 6a 33 4b 59 63 4a 65 31 6e 4b 79 70 69 34 6d 51 73 61 4b 64 70 72 57 45 6c 5a 57 64 70 34 62 4b 6d 36 6e 45 6f 6f 2b 71 6f 64 57 52 73 37 44 48 71 62 6d 72 79 4a 71 74 76 4c 53 63 75 74 4f 63 6d 4d 4b 30 6f 61 72 6f 78 36 66 61 78 75 4b 76 35 63 57 39 34 37 2f 4d 77 2f 72 59 37 37 6a 65 32 4f 6a 34 31 76 6e 2b 32 4d 33 34 2b 74 7a 33 32 75 72 73 36 4d 66 36 37 2b 58 72 2b 78 4c 48 43 77 50 69 2b 75 62 6c 45 4e 7a 70 2f 64 72 32 37 2f 45 42 2b 4f 41 68 45 53 55 42 47 66 37 2b 48 41 30 6c 48 7a 51 49 4d 41 49 41 41 44 51 47 4b 68 51 59 45 53 38 71 47 67 38 4e 4c 6a 51 44 52 78 Data Ascii: cSV6EdYx6THqHZ4xmlWllT5mLh4SGmZV9dZtidZOjcWSnm3hoq6Ctr3+Qno19j3KYcJe1nKypi4mQsaKdprWElZWdp4bKm6nEoo+qodWRs7DHqbmryJqtvLScutOcmMK0oarox6faxuKv5cW947/Mw/rY77je2Oj41vn+2M34+tz32urs6Mf67+Xr+xLHCwPi+ublENzp/dr27/EB+OAhESUBGf7+HA0lHzQIMAIAADQGKhQYES8qGg8NLjQDRx
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 52 55 70 73 68 45 74 47 64 49 4e 4e 61 6e 64 52 61 59 56 50 6c 6c 75 42 6e 6e 65 54 67 58 68 2b 58 6e 56 67 6d 49 79 4c 70 47 74 6d 5a 71 5a 72 73 59 64 30 6a 70 57 4a 75 4b 4f 55 74 62 69 62 66 33 61 63 69 35 65 65 6d 4a 69 36 6c 5a 36 66 6f 34 53 73 69 49 2b 66 70 4a 79 39 30 4b 58 55 6b 74 50 52 74 72 65 54 6c 4c 6d 38 7a 63 36 5a 76 39 4f 34 77 4f 58 44 75 2b 71 6d 77 73 44 57 34 72 33 47 78 72 4b 73 31 4c 43 33 79 73 6e 35 79 39 62 51 31 39 48 33 32 74 33 65 41 65 2f 66 2b 39 6e 6c 35 77 62 6b 2f 4f 66 5a 78 78 48 51 41 65 30 4f 38 4e 63 61 31 41 62 79 44 78 33 7a 44 51 72 59 34 74 30 57 34 66 7a 6a 41 78 67 4c 44 51 6f 6a 47 65 63 6f 4c 68 45 51 4b 66 49 6f 49 43 49 56 4f 50 72 7a 47 51 38 4b 44 76 6f 50 42 44 6f 6a 53 42 51 6e 51 77 46 44 51 69 5a Data Ascii: RUpshEtGdINNandRaYVPlluBnneTgXh+XnVgmIyLpGtmZqZrsYd0jpWJuKOUtbibf3aci5eemJi6lZ6fo4SsiI+fpJy90KXUktPRtreTlLm8zc6Zv9O4wOXDu+qmwsDW4r3GxrKs1LC3ysn5y9bQ19H32t3eAe/f+9nl5wbk/OfZxxHQAe0O8Nca1AbyDx3zDQrY4t0W4fzjAxgLDQojGecoLhEQKfIoICIVOPrzGQ8KDvoPBDojSBQnQwFDQiZ
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 70 53 4d 59 48 65 4c 62 6c 4f 64 6d 6d 6d 53 61 35 46 62 6c 6d 2b 56 70 70 70 7a 6d 61 56 35 61 36 57 76 6e 6d 71 73 72 49 53 76 6e 35 4b 4b 6a 6e 5a 78 6a 70 53 7a 6a 62 43 4d 67 72 61 4f 76 35 32 38 6b 70 32 70 77 4a 61 6f 6e 63 53 61 72 4d 4f 66 77 4c 61 57 70 63 47 53 31 61 6a 51 71 4a 6d 70 74 70 71 66 6f 73 47 34 76 70 36 7a 33 63 72 6a 75 65 4b 6e 34 39 36 71 36 38 53 72 39 66 4c 42 36 73 50 70 73 2b 37 48 37 66 37 79 79 2f 48 39 30 63 50 39 43 50 62 43 42 51 58 63 43 50 66 71 34 75 59 52 34 50 4c 6b 39 65 59 43 43 78 6e 6c 39 42 6b 5a 44 4e 72 2b 38 2b 49 68 48 77 66 30 49 42 4d 73 49 68 58 6a 43 42 41 41 37 41 37 37 37 54 48 74 49 78 49 79 46 66 76 7a 2b 44 6f 58 4b 76 73 76 4c 53 42 41 4d 6a 6b 6f 42 43 41 6b 54 41 70 47 49 42 34 63 44 68 49 65 Data Ascii: pSMYHeLblOdmmmSa5Fblm+VpppzmaV5a6WvnmqsrISvn5KKjnZxjpSzjbCMgraOv528kp2pwJaoncSarMOfwLaWpcGS1ajQqJmptpqfosG4vp6z3crjueKn496q68Sr9fLB6sPps+7H7f7yy/H90cP9CPbCBQXcCPfq4uYR4PLk9eYCCxnl9BkZDNr+8+IhHwf0IBMsIhXjCBAA7A777THtIxIyFfvz+DoXKvsvLSBAMjkoBCAkTApGIB4cDhIe
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 6c 35 65 4a 4a 75 64 46 53 68 58 49 61 57 6e 6e 32 42 63 35 70 36 72 5a 75 43 72 61 79 51 6c 47 71 4f 74 72 57 70 6a 4b 71 58 6d 49 2b 4b 69 48 6d 32 66 4a 32 76 70 62 6c 35 75 35 72 47 77 59 75 4b 71 71 2b 50 6a 36 57 62 6a 64 44 58 32 4c 54 51 74 4d 66 4f 33 4d 6a 62 72 4b 79 67 34 4e 66 5a 7a 2b 4c 6e 75 63 48 49 32 64 71 6c 79 2b 4c 45 7a 4c 2f 50 78 2f 62 4c 39 4d 62 47 78 4c 54 73 75 4d 33 5a 39 4d 7a 44 42 62 7a 79 32 75 4d 4c 76 4f 62 6e 43 4d 34 52 36 38 72 53 36 67 48 52 37 66 51 4e 42 39 45 61 45 75 38 66 2f 67 72 32 45 66 54 31 41 51 63 45 43 69 62 6b 2b 79 44 74 44 52 41 6b 49 42 51 78 44 41 34 48 39 54 51 43 45 79 6b 55 45 42 50 34 4f 76 72 35 50 2f 59 34 45 78 55 5a 50 41 63 59 4a 78 59 36 48 7a 46 48 43 52 34 66 56 45 59 6b 52 43 77 79 52 Data Ascii: l5eJJudFShXIaWnn2Bc5p6rZuCrayQlGqOtrWpjKqXmI+KiHm2fJ2vpbl5u5rGwYuKqq+Pj6WbjdDX2LTQtMfO3MjbrKyg4NfZz+LnucHI2dqly+LEzL/Px/bL9MbGxLTsuM3Z9MzDBbzy2uMLvObnCM4R68rS6gHR7fQNB9EaEu8f/gr2EfT1AQcECibk+yDtDRAkIBQxDA4H9TQCEykUEBP4Ovr5P/Y4ExUZPAcYJxY6HzFHCR4fVEYkRCwyR
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 77 67 49 36 6e 6e 59 64 78 70 34 4f 59 61 59 4b 43 62 61 56 2b 63 4b 53 50 71 6f 47 46 6f 59 5a 79 66 4c 79 6e 66 59 32 34 6f 4c 75 43 73 35 57 77 67 72 4f 47 6d 61 6d 67 69 4b 36 78 69 4a 47 65 6e 59 37 4f 6a 61 66 54 6b 73 32 6b 6e 4d 62 63 6d 4d 43 66 31 74 4b 65 33 38 43 66 36 65 62 42 33 72 66 65 77 4f 4b 37 34 72 7a 6d 76 2b 57 76 36 73 50 70 2b 75 37 48 37 66 6e 4e 76 2f 6b 45 38 72 34 42 41 64 67 45 38 2b 62 65 34 73 33 38 43 66 41 4b 33 77 55 48 7a 67 76 69 46 50 45 52 35 76 48 39 46 65 72 38 38 52 6e 75 41 53 44 32 48 52 38 44 43 41 72 70 43 53 66 75 4d 41 49 50 37 69 41 32 45 69 77 4c 39 79 51 47 47 77 33 2b 2b 67 74 41 4d 68 55 53 49 52 4d 33 53 45 68 41 4c 43 6c 48 49 53 4d 78 44 6a 46 4c 4d 54 49 50 53 42 4a 4a 4b 55 5a 65 53 31 77 2b 57 56 Data Ascii: wgI6nnYdxp4OYaYKCbaV+cKSPqoGFoYZyfLynfY24oLuCs5WwgrOGmamgiK6xiJGenY7OjafTks2knMbcmMCf1tKe38Cf6ebB3rfewOK74rzmv+Wv6sPp+u7H7fnNv/kE8r4BAdgE8+be4s38CfAK3wUHzgviFPER5vH9Fer88RnuASD2HR8DCArpCSfuMAIP7iA2EiwL9yQGGw3++gtAMhUSIRM3SEhALClHISMxDjFLMTIPSBJJKUZeS1w+WV
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 66 48 61 55 72 61 69 66 72 36 79 47 71 57 36 49 63 62 42 71 73 36 4b 4c 6b 33 61 61 6b 62 35 7a 72 4a 50 44 73 62 43 59 6e 4c 57 30 6e 4b 4c 48 75 72 65 37 6d 71 75 79 78 36 66 4c 31 4b 44 45 73 63 62 64 71 72 43 37 31 64 6a 59 73 4d 44 4f 35 39 32 34 75 2b 66 47 36 36 69 74 77 71 7a 6b 71 62 44 6b 7a 2b 6d 70 78 65 48 47 73 72 75 36 2b 64 2f 4a 33 38 48 34 2f 66 6a 75 34 75 4c 30 2b 63 4c 59 44 67 49 4b 2f 74 45 49 41 63 30 4a 36 4f 38 4f 45 65 72 6f 46 41 63 67 44 64 66 67 45 52 72 78 37 69 50 2b 38 74 73 4d 49 69 6f 6b 49 53 63 65 36 78 73 78 38 43 4d 75 4c 7a 63 58 46 53 6f 53 38 77 30 61 45 7a 45 72 4a 54 77 38 48 45 42 4a 4e 52 39 46 4f 30 55 58 52 6a 77 7a 47 30 6f 2f 48 30 4d 56 4f 6c 41 77 56 54 42 4a 4d 31 6c 4a 47 7a 49 78 48 47 5a 59 55 7a 5a Data Ascii: fHaUraifr6yGqW6IcbBqs6KLk3aakb5zrJPDsbCYnLW0nKLHure7mquyx6fL1KDEscbdqrC71djYsMDO5924u+fG66itwqzkqbDkz+mpxeHGsru6+d/J38H4/fju4uL0+cLYDgIK/tEIAc0J6O8OEeroFAcgDdfgERrx7iP+8tsMIiokISce6xsx8CMuLzcXFSoS8w0aEzErJTw8HEBJNR9FO0UXRjwzG0o/H0MVOlAwVTBJM1lJGzIxHGZYUzZ
2025-01-23 08:58:09 UTC	1369	IN	Data Raw: 57 6c 6b 6a 57 78 73 61 4a 47 35 63 37 61 57 72 48 56 2b 6c 71 2b 72 6a 61 75 45 6e 6f 4b 6b 6d 59 4b 7a 78 71 6d 73 69 63 7a 45 6e 37 2f 48 79 38 2b 76 31 36 7a 4a 74 38 6d 63 74 70 79 36 31 4b 43 37 31 37 58 64 6f 73 58 57 34 63 54 54 7a 4d 69 6e 32 73 2f 46 79 39 48 78 74 63 54 41 30 39 6e 74 33 4f 66 64 38 66 72 58 34 50 58 51 33 38 54 52 37 38 4c 64 77 74 6e 70 34 4d 6a 6d 37 63 6a 45 37 52 62 50 45 2f 49 4a 30 64 72 79 44 41 6a 6f 30 64 4c 31 34 64 33 35 34 78 49 55 38 4f 45 6e 39 75 58 32 35 42 6f 4b 4a 51 33 7a 36 2f 41 4d 44 79 6e 78 4e 76 55 74 39 76 33 31 4c 66 67 75 47 55 4d 5a 42 51 4e 4b 4a 69 77 73 53 6a 38 37 4c 79 77 4a 54 6b 6b 30 45 69 6f 33 4e 42 59 75 4d 30 6b 61 4e 54 4e 41 47 52 55 77 58 6a 51 7a 51 44 67 31 59 30 4d 6c 4e 6a 63 74 Data Ascii: WlkjWxsaJG5c7aWrHV+lq+rjauEnoKkmYKzxqmsiczEn7/Hy8+v16zJt8mctpy61KC717XdosXW4cTTzMin2s/Fy9HxtcTA09nt3Ofd8frX4PXQ38TR78Ldwtnp4Mjm7cjE7RbPE/IJ0dryDAjo0dL14d354xIU8OEn9uX25BoKJQ3z6/AMDynxNvUt9v31LfguGUMZBQNKJiwsSj87LywJTkk0Eio3NBYuM0kaNTNAGRUwXjQzQDg1Y0MlNjct

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:09 UTC	675	OUT	GET /favicon.ico HTTP/1.1 Host: signdocument.businessinnovate.us Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://signdocument.businessinnovate.us/oLtgR/?e= Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=ncm51thmik2sucrkf45jjn3bvj
2025-01-23 08:58:09 UTC	854	IN	HTTP/1.1 404 Not Found Date: Thu, 23 Jan 2025 08:58:09 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BvQE2LbmPG6f%2BvmGGQktSf27k4zHU7NEIUZ3G99wKTIaoRHwTTNbQKBBszSyaCzYZynxHBJyZezAi4wcUSu8hxbp5O4Bmoljco7GkfVhTW1cxQLvWvOTPn06UtOGycxgBw6YMlnBsssyCkTv7HPthEpwow%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 906694921ef0de9b-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1629&min_rtt=1628&rtt_var=613&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1253&delivery_rate=1781574&cwnd=217&unsent_bytes=0&cid=b40a1a9aa2b6e17d&ts=301&x=0"
2025-01-23 08:58:09 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-01-23 08:58:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:10 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:10 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 Jan 2025 08:58:10 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: CV2o+NyPdhneeGr4mmc4yk1oGM6Z1ld7YNdOX1uvF4CD2B3ftuE/l1PT3tcaprtuvo+VvZWa2c/9Vs/Cg7tTsA==$Y4nVXLADD+4zuQHu8jNOMg== Server: cloudflare CF-RAY: 90669495efe15e70-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:10 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:10 UTC	577	OUT	OPTIONS /report/v4?s=%2BvQE2LbmPG6f%2BvmGGQktSf27k4zHU7NEIUZ3G99wKTIaoRHwTTNbQKBBszSyaCzYZynxHBJyZezAi4wcUSu8hxbp5O4Bmoljco7GkfVhTW1cxQLvWvOTPn06UtOGycxgBw6YMlnBsssyCkTv7HPthEpwow%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://signdocument.businessinnovate.us Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:10 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 23 Jan 2025 08:58:10 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:10 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/90669484efcb0f7b/1737622689215/b9f97b8f7fcbebdafeb33fa5977d90c44ab32f93e3f71772d7edd76c0a8a938b/26WOMOT9AhsxM5L HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:10 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Thu, 23 Jan 2025 08:58:10 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-01-23 08:58:10 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 75 66 6c 37 6a 33 5f 4c 36 39 72 2d 73 7a 2d 6c 6c 33 32 51 78 45 71 7a 4c 35 50 6a 39 78 64 79 31 2d 33 58 62 41 71 4b 6b 34 73 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gufl7j3_L69r-sz-ll32QxEqzL5Pj9xdy1-3XbAqKk4sAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-01-23 08:58:10 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:11 UTC	502	OUT	POST /report/v4?s=%2BvQE2LbmPG6f%2BvmGGQktSf27k4zHU7NEIUZ3G99wKTIaoRHwTTNbQKBBszSyaCzYZynxHBJyZezAi4wcUSu8hxbp5O4Bmoljco7GkfVhTW1cxQLvWvOTPn06UtOGycxgBw6YMlnBsssyCkTv7HPthEpwow%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 462 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:11 UTC	462	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 39 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 73 69 67 6e 64 6f 63 75 6d 65 6e 74 2e 62 75 73 69 6e 65 73 73 69 6e 6e 6f 76 61 74 65 2e 75 73 2f 6f 4c 74 67 52 2f 3f 65 3d 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 36 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 Data Ascii: [{"age":0,"body":{"elapsed_time":1299,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://signdocument.businessinnovate.us/oLtgR/?e=","sampling_fraction":1.0,"server_ip":"104.21.67.3","status_code":404,"type":"http.error"},"type
2025-01-23 08:58:11 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 23 Jan 2025 08:58:11 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:11 UTC	786	OUT	GET /cdn-cgi/challenge-platform/h/g/d/90669484efcb0f7b/1737622689221/G9hZzXQ80Tmcq9N HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:12 UTC	200	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:11 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 906694a0dd57c35d-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 5f 00 00 00 36 08 02 00 00 00 2e d5 d2 30 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR_6.0IDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:12 UTC	1176	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 33323 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:12 UTC	16384	OUT	Data Raw: 76 5f 39 30 36 36 39 34 38 34 65 66 63 62 30 66 37 62 3d 4e 6a 33 75 24 4b 55 4a 38 59 6a 67 6a 78 25 32 62 63 35 63 47 63 42 65 78 4a 63 67 63 71 63 52 24 63 56 76 46 53 63 45 75 4b 44 2b 63 61 57 63 4d 75 4e 76 55 67 53 68 63 41 59 31 63 46 2d 75 55 37 68 63 77 52 31 2d 2d 73 63 37 76 55 45 51 35 63 63 6f 63 4f 2d 4b 49 63 4e 2d 63 4a 43 61 2d 78 56 63 77 70 38 4b 31 52 30 63 55 73 46 50 63 46 33 55 51 63 50 33 55 4d 63 67 51 4b 54 50 63 59 76 55 39 63 59 33 63 39 64 6f 66 75 75 63 46 65 63 63 6f 71 47 35 62 71 76 63 6d 75 63 32 54 45 2d 4c 62 43 47 56 63 67 44 54 63 4b 73 77 56 79 78 47 37 59 47 54 70 44 62 6b 54 6b 47 78 4f 4b 6a 31 56 70 4f 53 6f 55 49 6f 76 70 53 32 4f 2b 6a 53 76 75 64 68 77 53 7a 4d 4a 44 79 7a 76 45 6d 34 24 4a 6f 65 58 32 37 6b Data Ascii: v_90669484efcb0f7b=Nj3u$KUJ8Yjgjx%2bc5cGcBexJcgcqcR$cVvFScEuKD+caWcMuNvUgShcAY1cF-uU7hcwR1--sc7vUEQ5ccocO-KIcN-cJCa-xVcwp8K1R0cUsFPcF3UQcP3UMcgQKTPcYvU9cY3c9dofuucFeccoqG5bqvcmuc2TE-LbCGVcgDTcKswVyxG7YGTpDbkTkGxOKj1VpOSoUIovpS2O+jSvudhwSzMJDyzvEm4$JoeX27k
2025-01-23 08:58:12 UTC	16384	OUT	Data Raw: 77 2d 63 63 75 62 6a 6d 38 59 52 55 38 6b 45 2b 68 35 56 2d 6d 74 69 41 57 6f 75 38 63 32 63 78 2d 55 64 63 76 2d 4b 52 55 46 63 4e 63 46 24 6a 35 63 53 52 78 35 63 64 63 74 63 4b 4a 55 68 63 79 63 78 35 63 33 63 43 63 46 46 75 67 63 4e 66 2b 78 55 2d 63 68 2d 55 6f 6b 6c 63 73 2d 55 68 63 2d 63 4f 2d 55 54 63 70 63 74 2d 4b 75 55 7a 33 79 4a 46 56 63 71 63 67 52 63 4a 55 24 73 73 65 65 6a 63 54 2d 78 63 46 2b 55 33 75 4c 66 4b 54 55 74 67 59 4a 55 2d 44 76 52 53 33 55 75 46 72 75 47 53 65 54 63 65 63 53 6a 62 71 6b 67 44 56 67 63 36 6a 54 33 77 33 62 52 55 46 75 59 6a 63 38 63 71 64 62 75 6d 46 75 47 63 78 75 65 55 4d 46 63 63 63 4b 34 70 75 74 76 4b 2d 46 48 63 74 63 4b 33 55 62 42 67 75 63 52 6b 49 63 6d 2b 55 4d 55 6c 63 42 24 4d 30 63 4d 63 56 63 63 Data Ascii: w-ccubjm8YRU8kE+h5V-mtiAWou8c2cx-Udcv-KRUFcNcF$j5cSRx5cdctcKJUhcycx5c3cCcFFugcNf+xU-ch-Uoklcs-Uhc-cO-UTcpct-KuUz3yJFVcqcgRcJU$sseejcT-xcF+U3uLfKTUtgYJU-DvRS3UuFruGSeTcecSjbqkgDVgc6jT3w3bRUFuYjc8cqdbumFuGcxueUMFcccK4putvK-FHctcK3UbBgucRkIcm+UMUlcB$M0cMcVcc
2025-01-23 08:58:12 UTC	555	OUT	Data Raw: 4d 33 31 50 78 75 4a 78 66 66 75 6c 2d 78 45 4a 59 37 53 2d 64 38 56 33 36 69 63 52 50 52 66 64 71 69 65 63 65 56 63 5a 63 4d 4c 55 4a 63 70 63 53 63 65 35 41 4c 6b 57 2b 74 5a 62 37 74 50 31 5a 35 59 64 75 48 6a 51 56 37 70 63 61 46 51 37 45 31 65 41 52 4b 67 68 6f 66 34 51 70 24 32 49 47 38 39 58 53 55 6d 68 31 37 46 70 68 4c 33 59 54 46 59 5a 58 76 67 63 78 68 77 62 53 52 63 50 69 68 6f 64 75 33 31 76 6b 71 2d 47 52 46 6a 33 4d 63 47 62 4a 52 55 71 63 65 4b 47 66 63 36 63 79 2d 62 4b 63 39 63 4d 63 46 58 42 69 57 45 49 4e 69 4b 31 2d 24 4b 65 58 38 76 6d 30 6a 38 56 4f 47 78 52 52 63 69 79 38 59 4e 4f 61 67 68 4a 31 6b 63 55 42 55 46 41 56 50 24 4a 63 34 33 32 49 59 6d 31 4c 2d 7a 42 33 36 6b 50 68 69 75 4b 63 50 37 75 76 30 62 37 24 77 6d 75 6a 47 45 Data Ascii: M31PxuJxfful-xEJY7S-d8V36icRPRfdqieceVcZcMLUJcpcSce5ALkW+tZb7tP1Z5YduHjQV7pcaFQ7E1eARKghof4Qp$2IG89XSUmh17FphL3YTFYZXvgcxhwbSRcPihodu31vkq-GRFj3McGbJRUqceKGfc6cy-bKc9cMcFXBiWEINiK1-$KeX8vm0j8VOGxRRciy8YNOaghJ1kcUBUFAVP$Jc432IYm1L-zB36kPhiuKcP7uv0b7$wmujGE
2025-01-23 08:58:12 UTC	322	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:12 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27168 Connection: close cf-chl-gen: FXksvji1H42FFBYBfQPwRqAgeiBZtTdcJRTAf1MHzGlIpZMDYEaL0Qk8WWEIyLTE$w7Kpfo6Daa1TYx7tbFCb6A== Server: cloudflare CF-RAY: 906694a5390c434b-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:12 UTC	1047	IN	Data Raw: 74 62 6d 68 71 33 70 2f 75 4d 65 78 76 62 6a 4a 75 36 6e 42 69 70 71 51 71 38 32 39 73 37 33 52 77 62 66 49 6d 64 53 37 6c 71 62 4f 72 63 44 59 6d 61 50 51 35 64 71 35 75 39 2f 6b 35 4d 71 37 35 76 47 6a 76 36 2f 4b 72 2b 57 75 71 76 62 72 75 66 66 56 79 2f 6a 78 73 39 53 37 77 74 6a 69 41 74 48 6c 31 77 58 6e 76 39 2f 4b 44 63 73 46 79 78 50 7a 45 65 37 54 45 2b 38 58 43 4e 4d 61 36 68 38 41 48 50 72 66 45 2f 72 6b 35 2b 49 71 35 77 62 35 2b 79 59 4d 34 77 58 77 4c 2b 38 72 4d 7a 67 47 43 44 49 49 37 77 72 32 4c 52 6b 66 50 78 73 7a 51 41 50 36 42 43 59 45 47 52 30 59 43 6b 77 4c 54 43 55 75 45 41 31 59 54 46 73 73 57 30 59 33 54 56 73 2f 50 78 6b 38 5a 55 4a 68 4f 30 4d 36 57 44 39 45 52 6d 56 42 63 45 46 41 61 53 35 75 4e 57 42 56 56 6a 49 35 4e 30 70 Data Ascii: tbmhq3p/uMexvbjJu6nBipqQq829s73RwbfImdS7lqbOrcDYmaPQ5dq5u9/k5Mq75vGjv6/Kr+WuqvbruffVy/jxs9S7wtjiAtHl1wXnv9/KDcsFyxPzEe7TE+8XCNMa6h8AHPrfE/rk5+Iq5wb5+yYM4wXwL+8rMzgGCDII7wr2LRkfPxszQAP6BCYEGR0YCkwLTCUuEA1YTFssW0Y3TVs/Pxk8ZUJhO0M6WD9ERmVBcEFAaS5uNWBVVjI5N0p
2025-01-23 08:58:12 UTC	1369	IN	Data Raw: 4c 70 62 36 70 31 62 47 71 74 63 36 54 71 5a 6a 66 73 61 71 39 76 35 2b 63 76 70 36 6a 6f 4d 66 48 31 38 50 48 75 36 65 70 77 73 6d 30 70 37 62 6d 78 76 44 4e 74 66 43 36 2f 4f 69 35 73 2b 7a 4f 33 72 2f 66 76 39 59 42 33 63 58 31 2f 4d 72 6c 34 2f 44 4d 44 2f 50 30 7a 68 51 44 45 39 6f 4e 30 74 54 70 43 67 45 4e 36 2f 6a 6a 46 76 34 45 34 41 41 41 39 77 49 45 42 50 77 4f 41 51 34 6d 44 67 73 4d 45 67 45 4c 4b 44 6b 64 46 7a 67 77 41 66 68 43 47 52 77 38 41 78 73 67 4e 67 49 33 42 79 6f 47 41 69 4a 51 4b 43 67 69 4b 69 46 42 51 56 63 7a 4e 54 77 2f 46 52 39 4e 55 31 78 63 4d 32 46 65 4f 6a 35 54 52 45 4d 73 4a 55 70 51 4f 6c 30 38 58 7a 52 78 62 6c 45 72 4d 45 51 31 66 47 39 6f 64 46 35 65 61 30 78 50 55 46 42 6e 56 32 4e 38 6a 45 31 49 53 57 56 6f 66 6b Data Ascii: Lpb6p1bGqtc6TqZjfsaq9v5+cvp6joMfH18PHu6epwsm0p7bmxvDNtfC6/Oi5s+zO3r/fv9YB3cX1/Mrl4/DMD/P0zhQDE9oN0tTpCgEN6/jjFv4E4AAA9wIEBPwOAQ4mDgsMEgELKDkdFzgwAfhCGRw8AxsgNgI3ByoGAiJQKCgiKiFBQVczNTw/FR9NU1xcM2FeOj5TREMsJUpQOl08XzRxblErMEQ1fG9odF5ea0xPUFBnV2N8jE1ISWVofk
2025-01-23 08:58:12 UTC	1369	IN	Data Raw: 30 72 57 63 6d 74 72 61 7a 64 58 66 34 38 44 6b 6f 74 36 77 74 73 62 4a 7a 4d 54 63 77 4d 2f 6b 71 4c 4c 4b 36 65 2f 4a 73 64 62 69 75 4c 58 35 39 4c 76 53 32 2b 43 36 77 72 76 62 30 77 58 52 2b 65 76 74 2b 4d 54 4f 41 39 6e 77 42 65 66 4d 46 78 54 69 44 4f 51 4c 31 42 44 6f 44 79 41 55 37 42 4d 66 38 75 51 66 4b 52 6a 6a 4a 69 62 39 4b 52 6b 4d 42 41 6a 78 2f 65 37 2b 4d 75 38 55 4d 50 51 76 43 43 6b 54 43 54 38 63 52 54 51 66 4f 6a 67 4a 42 77 55 33 4b 44 73 47 55 42 31 4c 45 69 41 74 4a 53 4a 48 45 78 42 62 4e 43 5a 47 4f 6a 63 38 4e 42 77 6a 52 47 4a 63 4f 6a 52 53 61 32 5a 64 62 57 70 45 5a 79 77 75 59 45 5a 55 61 31 52 4c 64 79 31 6d 54 58 78 72 61 6c 47 42 62 32 35 57 57 6e 4e 79 57 6d 42 33 64 6c 35 64 54 6c 70 52 59 57 6c 68 59 33 52 71 55 70 4b Data Ascii: 0rWcmtrazdXf48Dkot6wtsbJzMTcwM/kqLLK6e/JsdbiuLX59LvS2+C6wrvb0wXR+evt+MTOA9nwBefMFxTiDOQL1BDoDyAU7BMf8uQfKRjjJib9KRkMBAjx/e7+Mu8UMPQvCCkTCT8cRTQfOjgJBwU3KDsGUB1LEiAtJSJHExBbNCZGOjc8NBwjRGJcOjRSa2ZdbWpEZywuYEZUa1RLdy1mTXxralGBb25WWnNyWmB3dl5dTlpRYWlhY3RqUpK
2025-01-23 08:58:12 UTC	1369	IN	Data Raw: 36 72 50 78 4a 33 43 76 36 54 4a 77 73 76 5a 6e 72 58 68 32 71 2f 70 33 72 33 6e 77 73 7a 4e 36 72 48 5a 74 62 7a 50 30 65 32 2f 39 64 48 44 30 2b 37 61 7a 39 58 66 35 51 6a 6a 78 63 54 75 41 67 37 45 36 50 4d 4c 7a 2b 45 52 43 75 37 32 42 68 37 73 48 64 63 5a 44 2f 30 42 47 69 48 67 42 66 6b 66 4c 66 6a 33 43 67 77 78 2b 53 49 52 37 75 73 51 45 41 49 69 45 44 6b 59 45 50 6f 6f 47 52 51 55 45 68 30 59 46 77 45 68 48 42 74 41 4a 53 41 66 48 69 6b 6b 49 6a 49 74 4b 43 59 6d 4d 53 77 70 57 6a 78 61 56 44 49 73 53 6d 4e 65 56 57 56 69 50 46 38 6b 59 6c 73 71 5a 6c 42 64 51 69 68 4e 56 45 68 30 63 32 4a 4a 65 57 64 6d 54 6c 4a 72 61 6c 4a 59 66 58 42 74 63 56 42 68 61 48 31 64 67 59 70 57 65 6d 64 38 6b 32 42 6d 63 59 75 4f 6a 6d 5a 32 68 4a 31 35 65 47 75 65 Data Ascii: 6rPxJ3Cv6TJwsvZnrXh2q/p3r3nwszN6rHZtbzP0e2/9dHD0+7az9Xf5QjjxcTuAg7E6PMLz+ERCu72Bh7sHdcZD/0BGiHgBfkfLfj3Cgwx+SIR7usQEAIiEDkYEPooGRQUEh0YFwEhHBtAJSAfHikkIjItKCYmMSwpWjxaVDIsSmNeVWViPF8kYlsqZlBdQihNVEh0c2JJeWdmTlJralJYfXBtcVBhaH1dgYpWemd8k2BmcYuOjmZ2hJ15eGue
2025-01-23 08:58:12 UTC	1369	IN	Data Raw: 61 67 32 37 54 61 36 39 2b 34 33 75 71 2b 73 4f 72 30 34 36 2f 78 38 63 6e 30 35 4e 66 50 30 37 79 35 32 39 4d 41 39 73 2f 76 43 66 33 54 33 74 6f 43 31 2b 4c 75 42 74 76 74 34 67 72 66 37 78 6e 6b 2b 76 76 54 36 4f 62 74 48 52 62 36 41 64 6b 5a 38 68 6f 55 45 74 38 72 46 41 63 62 49 67 48 6d 2b 52 34 68 49 4f 77 70 47 52 45 33 4a 76 6e 35 50 76 6b 35 47 43 45 55 4f 51 33 2b 52 43 4d 79 48 30 73 69 42 30 41 36 47 7a 4a 46 4a 44 30 55 4a 7a 67 6c 47 54 59 36 57 69 59 58 48 78 6f 33 4f 31 59 75 4a 53 4e 69 59 57 45 6f 4a 31 78 4b 62 45 52 5a 4c 43 74 4e 5a 47 73 2b 4d 32 52 71 54 33 70 4e 5a 32 70 48 61 47 70 36 57 31 46 6b 65 54 31 48 66 58 79 41 53 47 64 37 6a 56 39 73 54 48 31 51 59 32 31 71 55 70 46 54 6c 35 57 61 6b 6e 42 2f 61 56 71 67 62 33 4a 2f 6d Data Ascii: ag27Ta69+43uq+sOr046/x8cn05NfP07y529MA9s/vCf3T3toC1+LuBtvt4grf7xnk+vvT6ObtHRb6AdkZ8hoUEt8rFAcbIgHm+R4hIOwpGRE3Jvn5Pvk5GCEUOQ3+RCMyH0siB0A6GzJFJD0UJzglGTY6WiYXHxo3O1YuJSNiYWEoJ1xKbERZLCtNZGs+M2RqT3pNZ2pHaGp6W1FkeT1HfXyASGd7jV9sTH1QY21qUpFTl5WaknB/aVqgb3J/m
2025-01-23 08:58:12 UTC	1369	IN	Data Raw: 4e 33 37 79 37 77 63 75 6d 72 65 58 75 31 2b 58 4d 38 50 54 47 33 4f 6a 50 2b 76 58 6b 37 73 54 58 41 2f 33 46 2b 77 77 48 32 65 59 4e 32 4f 59 52 35 2f 55 58 39 76 55 45 31 77 58 31 31 68 66 31 39 66 77 4f 48 65 44 63 4a 66 45 66 49 2b 49 57 39 2b 51 43 48 69 58 6e 45 79 2f 75 2f 43 6e 32 46 68 62 76 45 54 73 64 4b 77 73 38 43 52 4d 57 48 41 51 6b 2f 54 4e 44 4b 77 59 57 48 55 51 62 50 6b 59 71 44 45 73 68 56 44 56 42 4a 54 63 56 57 52 4d 72 53 43 39 5a 4e 6c 49 31 50 6b 5a 46 58 45 56 44 51 46 39 70 4a 55 64 64 4f 56 4e 63 4c 46 52 69 4c 54 64 4f 62 57 52 4c 52 31 31 6f 50 54 70 33 59 46 46 38 65 56 4e 6a 61 6e 4f 47 57 46 79 4d 58 58 42 4e 62 30 32 52 53 32 46 34 64 70 6d 51 6b 32 79 5a 62 35 64 74 6b 49 71 45 66 58 46 66 68 57 61 43 63 32 70 31 6f 59 Data Ascii: N37y7wcumreXu1+XM8PTG3OjP+vXk7sTXA/3F+wwH2eYN2OYR5/UX9vUE1wX11hf19fwOHeDcJfEfI+IW9+QCHiXnEy/u/Cn2FhbvETsdKws8CRMWHAQk/TNDKwYWHUQbPkYqDEshVDVBJTcVWRMrSC9ZNlI1PkZFXEVDQF9pJUddOVNcLFRiLTdObWRLR11oPTp3YFF8eVNjanOGWFyMXXBNb02RS2F4dpmQk2yZb5dtkIqEfXFfhWaCc2p1oY
2025-01-23 08:58:12 UTC	1369	IN	Data Raw: 36 39 4c 56 39 4e 62 61 73 39 58 79 33 2f 48 41 33 4f 76 32 38 2f 72 6b 36 4e 72 36 2f 64 7a 69 35 77 67 45 32 75 38 48 7a 41 55 4b 43 64 54 56 43 51 37 74 43 52 6b 59 46 42 45 4b 44 50 4c 6b 47 78 73 4a 45 52 63 64 49 50 62 33 44 65 6b 6b 43 51 37 71 39 42 51 54 46 51 34 55 47 41 6b 47 48 69 67 4d 41 53 49 67 2b 7a 41 69 4a 42 55 6d 4a 69 67 59 44 55 67 72 4c 52 6f 75 4d 41 77 69 4d 44 4d 31 4d 6a 63 32 46 56 77 33 50 42 67 79 4f 54 38 78 4c 6b 56 44 49 45 5a 44 56 44 6c 59 54 45 6f 6f 58 46 4a 51 55 44 56 55 55 31 5a 34 55 56 63 30 52 6c 35 63 4f 46 35 61 59 44 78 77 58 33 42 56 57 6d 5a 6e 52 46 70 73 61 32 31 6d 62 33 42 68 68 4a 42 7a 69 34 68 33 64 32 6c 36 66 48 74 39 63 6e 78 2b 58 61 52 2f 68 4a 74 36 68 6f 65 4a 6e 49 57 4c 66 61 43 4b 6e 49 47 Data Ascii: 69LV9Nbas9Xy3/HA3Ov28/rk6Nr6/dzi5wgE2u8HzAUKCdTVCQ7tCRkYFBEKDPLkGxsJERcdIPb3DekkCQ7q9BQTFQ4UGAkGHigMASIg+zAiJBUmJigYDUgrLRouMAwiMDM1Mjc2FVw3PBgyOT8xLkVDIEZDVDlYTEooXFJQUDVUU1Z4UVc0Rl5cOF5aYDxwX3BVWmZnRFpsa21mb3BhhJBzi4h3d2l6fHt9cnx+XaR/hJt6hoeJnIWLfaCKnIG

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:13 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:13 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Thu, 23 Jan 2025 08:58:13 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: GmVUD4uWqpPlH5praxoyD0G5bUatrrURAqzInK6/MZuEC4dPG5rC2/RkzNy2U+eGZoSLWNeQaLLUDLCiq/QnyQ==$NvVrWThZnkWppB37RxTFvQ== Server: cloudflare CF-RAY: 906694aac8ee32dc-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 08:58:13 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 33 30 7d Data Ascii: {"err":100230}

Timestamp	Bytes transferred	Direction	Data
2025-01-23 08:58:20 UTC	1176	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2118309094:1737620946:xsjpST98yZgqR4cc5Pbb00pmRDRlyYd_K-tvKvqDOmM/90669484efcb0f7b/bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35693 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-type: application/x-www-form-urlencoded CF-Chl-RetryAttempt: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 CF-Challenge: bkiv12vMCEfBUgYnoo_y3rNxCFP3bSekXFG3a.uqPKw-1737622687-1.1.1.1-HdMJFqqzwNFz9VX2XvPt9NCfUXFKzJ4h8eWd7e8TdhgtX9fVgPBHVmcKaPI6YDfb sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/8mmyt/0x4AAAAAAA5dzAaV7EcfN46r/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 08:58:20 UTC	16384	OUT	Data Raw: 76 5f 39 30 36 36 39 34 38 34 65 66 63 62 30 66 37 62 3d 4e 6a 33 75 24 4b 55 4a 38 59 6a 67 6a 78 25 32 62 63 35 63 47 63 42 65 78 4a 63 67 63 71 63 52 24 63 56 76 46 53 63 45 75 4b 44 2b 63 61 57 63 4d 75 4e 76 55 67 53 68 63 41 59 31 63 46 2d 75 55 37 68 63 77 52 31 2d 2d 73 63 37 76 55 45 51 35 63 63 6f 63 4f 2d 4b 49 63 4e 2d 63 4a 43 61 2d 78 56 63 77 70 38 4b 31 52 30 63 55 73 46 50 63 46 33 55 51 63 50 33 55 4d 63 67 51 4b 54 50 63 59 76 55 39 63 59 33 63 39 64 6f 66 75 75 63 46 65 63 63 6f 71 47 35 62 71 76 63 6d 75 63 32 54 45 2d 4c 62 43 47 56 63 67 44 54 63 4b 73 77 56 79 78 47 37 59 47 54 70 44 62 6b 54 6b 47 78 4f 4b 6a 31 56 70 4f 53 6f 55 49 6f 76 70 53 32 4f 2b 6a 53 76 75 64 68 77 53 7a 4d 4a 44 79 7a 76 45 6d 34 24 4a 6f 65 58 32 37 6b Data Ascii: v_90669484efcb0f7b=Nj3u$KUJ8Yjgjx%2bc5cGcBexJcgcqcR$cVvFScEuKD+caWcMuNvUgShcAY1cF-uU7hcwR1--sc7vUEQ5ccocO-KIcN-cJCa-xVcwp8K1R0cUsFPcF3UQcP3UMcgQKTPcYvU9cY3c9dofuucFeccoqG5bqvcmuc2TE-LbCGVcgDTcKswVyxG7YGTpDbkTkGxOKj1VpOSoUIovpS2O+jSvudhwSzMJDyzvEm4$JoeX27k
2025-01-23 08:58:20 UTC	16384	OUT	Data Raw: 77 2d 63 63 75 62 6a 6d 38 59 52 55 38 6b 45 2b 68 35 56 2d 6d 74 69 41 57 6f 75 38 63 32 63 78 2d 55 64 63 76 2d 4b 52 55 46 63 4e 63 46 24 6a 35 63 53 52 78 35 63 64 63 74 63 4b 4a 55 68 63 79 63 78 35 63 33 63 43 63 46 46 75 67 63 4e 66 2b 78 55 2d 63 68 2d 55 6f 6b 6c 63 73 2d 55 68 63 2d 63 4f 2d 55 54 63 70 63 74 2d 4b 75 55 7a 33 79 4a 46 56 63 71 63 67 52 63 4a 55 24 73 73 65 65 6a 63 54 2d 78 63 46 2b 55 33 75 4c 66 4b 54 55 74 67 59 4a 55 2d 44 76 52 53 33 55 75 46 72 75 47 53 65 54 63 65 63 53 6a 62 71 6b 67 44 56 67 63 36 6a 54 33 77 33 62 52 55 46 75 59 6a 63 38 63 71 64 62 75 6d 46 75 47 63 78 75 65 55 4d 46 63 63 63 4b 34 70 75 74 76 4b 2d 46 48 63 74 63 4b 33 55 62 42 67 75 63 52 6b 49 63 6d 2b 55 4d 55 6c 63 42 24 4d 30 63 4d 63 56 63 63 Data Ascii: w-ccubjm8YRU8kE+h5V-mtiAWou8c2cx-Udcv-KRUFcNcF$j5cSRx5cdctcKJUhcycx5c3cCcFFugcNf+xU-ch-Uoklcs-Uhc-cO-UTcpct-KuUz3yJFVcqcgRcJU$sseejcT-xcF+U3uLfKTUtgYJU-DvRS3UuFruGSeTcecSjbqkgDVgc6jT3w3bRUFuYjc8cqdbumFuGcxueUMFcccK4putvK-FHctcK3UbBgucRkIcm+UMUlcB$M0cMcVcc
2025-01-23 08:58:20 UTC	2925	OUT	Data Raw: 67 4f 58 63 54 5a 74 6f 76 53 5a 63 4f 67 56 58 48 4a 63 79 4a 65 54 55 62 6b 31 52 55 59 24 48 63 47 50 42 46 75 6d 77 4a 52 4b 49 6b 72 6b 58 68 37 4e 59 57 42 31 42 4e 6a 55 47 2d 4e 63 55 45 55 34 6c 2b 75 78 35 6f 38 6a 74 47 48 54 63 39 56 4c 33 31 47 46 43 57 59 57 24 75 42 47 52 39 5a 72 63 31 52 6a 4f 7a 4a 48 46 39 75 5a 57 71 56 66 55 46 45 37 68 48 72 4d 51 4d 32 33 2d 55 57 78 52 2b 50 58 4b 7a 52 4e 35 5a 39 46 48 52 77 33 55 66 55 46 63 67 75 46 41 63 35 4e 57 66 62 7a 46 70 75 51 63 46 54 53 6f 72 55 75 63 31 41 76 52 55 32 6c 4a 63 6f 64 38 56 4c 50 31 33 47 71 77 6d 4f 5a 54 2d 6a 38 65 2d 76 64 63 6d 62 4c 38 55 4f 75 61 52 63 4d 59 43 51 4d 7a 30 66 55 38 5a 73 77 4e 52 63 47 63 79 2d 63 32 79 49 63 65 4a 46 43 63 75 33 65 63 62 59 39 Data Ascii: gOXcTZtovSZcOgVXHJcyJeTUbk1RUY$HcGPBFumwJRKIkrkXh7NYWB1BNjUG-NcUEU4l+ux5o8jtGHTc9VL31GFCWYW$uBGR9Zrc1RjOzJHF9uZWqVfUFE7hHrMQM23-UWxR+PXKzRN5Z9FHRw3UfUFcguFAc5NWfbzFpuQcFTSorUuc1AvRU2lJcod8VLP13GqwmOZT-j8e-vdcmbL8UOuaRcMYCQMz0fU8ZswNRcGcy-c2yIceJFCcu3ecbY9
2025-01-23 08:58:21 UTC	1328	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 08:58:21 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4924 Connection: close cf-chl-out-s: oi3sjAxcm1+gg4tOhNA2iedYby5rTWLc0QFSLDIFz4Q1X6OhZId3nEJPgRl2nF92fJ1F8T4kGXmOiJacy5aFW12VKgh8R0datdwiq0Ig6loWAtKr6VqpbykgZ56/cHztDjFaxbzikRrPSK0eyW/sQcuEP8q1xKMeOxHW8iI+6cJOWTUpoeeT8wXwZ4l50BBXf6VxcB03EeMHrlfT+UuWcH/dG+aaoXNeRF7i0A0VbrwYFly5Wr2bMw9rxNY80xRpiBgWed9nO2twsrQL/ko2NH1nqbgA4k6PWICoh5b0g5YzbyuZ1XMw9lcb4b7bGWN7eVNKG/DO2lNXmCoX4D0CFuPAf67ydgLi9sTHfIwE+U68FqICUhrMW30RPQe+bDkiKIFEJGBKpSI/wJxGSrz49B07uJavLmNdjQeXpTkbFVlUTuLZ4cGK31FBmb8qWd3Aupjl27wY0OPgStWrm0U9+8R7odGz99G0QspaPwyeltI4+tGuVAUXtKcn4E+IPbFk0QxXUZxjmsIQHmN15wuEbQqHY02ZcmjfsyN+GZmDdIzE0HOl8396AIkxbWPr4mxNh7JQfcO2ZuUqMxtuHKfFLgOlca3J25mtxpU0kkjtTSE17OX8AfMr4e7FWNKrtIClORK/RNVs8pYXxd0Att1eJCrTW/IED9zb3+bJ2wxhUk8t9mw3nV80BabMPr0R9RhbmEdWIlz6lhn9qOY1lTEWbz/Cl7yYYmRbIxlh1K3ZqJ3IQJYScIAjFC9qtFxOpHeg/Z40Ly1Ic1jGkqAsHY2O6Q6cOIhv8UVJKT3NmD5UKT9B+sTmS2yPFPHT0C04cAUAM7nNQugQpgpk7q/LX/QYvkyDdV0wjq/FqTEIvJrLTo0d2Dg5boz8ysjv7toGL4jzdeqorbzxc/XTCvf8YYzIsQlU3WheHu6VmQPfu4ISyf/aaXaohXP2jXXwp2wFzabgWlwO7voXAMrerVZvBg0Vgw/xoRRDJC13hljqfG7b0QSLFPZ84p [TRUNCATED]
2025-01-23 08:58:21 UTC	229	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 32 70 70 42 59 74 62 54 53 47 4a 71 49 50 51 44 35 36 4e 44 6a 6f 75 71 38 4a 30 48 36 79 66 78 39 4c 76 76 47 56 69 4a 43 4a 32 69 56 6a 49 58 36 46 62 38 6e 31 2b 37 4f 76 32 53 41 62 77 49 46 43 42 56 56 6c 2b 6b 77 5a 71 54 56 2f 41 4f 65 71 56 56 41 73 4f 2f 37 5a 59 55 35 77 64 59 6c 78 2b 6f 4b 71 6b 30 37 67 51 3d 24 78 30 69 35 33 62 63 57 50 62 47 56 62 6d 38 46 73 4e 37 51 73 41 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 30 36 36 39 34 64 37 62 63 65 34 37 32 38 37 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: 2ppBYtbTSGJqIPQD56NDjouq8J0H6yfx9LvvGViJCJ2iVjIX6Fb8n1+7Ov2SAbwIFCBVVl+kwZqTV/AOeqVVAsO/7ZYU5wdYlx+oKqk07gQ=$x0i53bcWPbGVbm8FsN7QsA==Server: cloudflareCF-RAY: 906694d7bce47287-EWRalt-svc: h3=":443"; ma=86400
2025-01-23 08:58:21 UTC	1181	IN	Data Raw: 74 62 6d 68 71 33 70 2f 75 4d 65 78 76 62 6a 4a 75 36 6e 42 69 70 71 51 79 61 48 4a 79 71 2f 45 73 4c 57 34 30 4a 47 62 79 62 62 55 6e 4c 50 54 33 4e 75 2b 73 39 37 70 6d 37 62 6f 32 4c 7a 69 37 4e 7a 41 36 4c 48 48 72 2f 47 75 7a 64 48 48 39 4f 32 76 79 37 66 73 37 76 53 2f 38 4e 7a 69 42 37 72 68 31 77 58 6e 76 2b 44 48 35 73 73 4b 7a 73 62 51 34 78 48 6a 79 2b 6e 53 43 64 66 35 31 68 33 77 46 4f 77 4e 49 4e 77 57 36 50 67 63 34 77 41 4a 4a 4f 7a 69 43 53 37 71 39 41 34 45 4c 68 54 72 42 2f 49 54 39 78 6a 33 46 54 38 30 2b 6a 41 56 4e 41 51 31 48 68 68 43 47 41 41 68 43 78 45 37 52 42 4a 51 4d 42 39 42 46 45 55 57 54 6a 34 2b 58 45 78 61 4d 55 35 64 4a 55 4a 57 4a 6c 77 30 4e 46 74 63 4c 6a 70 78 54 32 34 74 50 6c 39 41 64 6d 42 36 51 6e 68 56 66 6d 31 Data Ascii: tbmhq3p/uMexvbjJu6nBipqQyaHJyq/EsLW40JGbybbUnLPT3Nu+s97pm7bo2Lzi7NzA6LHHr/GuzdHH9O2vy7fs7vS/8NziB7rh1wXnv+DH5ssKzsbQ4xHjy+nSCdf51h3wFOwNINwW6Pgc4wAJJOziCS7q9A4ELhTrB/IT9xj3FT80+jAVNAQ1HhhCGAAhCxE7RBJQMB9BFEUWTj4+XExaMU5dJUJWJlw0NFtcLjpxT24tPl9AdmB6QnhVfm1
2025-01-23 08:58:21 UTC	1369	IN	Data Raw: 77 6b 75 42 53 6f 79 47 66 63 4b 47 54 55 52 44 53 38 65 2f 52 41 59 4b 42 73 43 50 67 63 4f 51 44 6f 72 43 7a 38 31 4d 69 4a 44 4a 53 6f 54 53 6c 34 32 4b 56 6f 67 4d 69 4a 6a 55 6a 34 6e 4d 56 5a 70 49 78 35 6e 56 69 59 34 63 6b 77 6c 50 46 52 53 51 56 46 76 52 45 31 38 53 56 6f 31 66 6d 39 68 51 33 4a 64 58 54 35 7a 58 49 74 57 56 57 42 48 57 58 70 51 59 56 79 45 66 6d 31 70 62 32 6d 4a 5a 33 61 48 6a 6d 2b 67 6b 33 52 62 66 46 78 36 5a 34 47 46 6c 33 36 47 6e 34 46 6c 6e 57 65 77 68 49 6d 4d 63 58 61 34 69 4a 68 35 75 6f 32 4f 69 4a 71 59 67 6e 79 62 65 36 4b 55 74 48 2f 49 6c 61 61 74 6e 49 37 4f 71 62 2b 46 71 36 7a 56 6a 38 65 70 71 71 76 58 74 62 75 65 34 4c 33 57 73 37 32 31 73 4b 62 56 71 4f 4b 71 74 4b 53 38 75 73 58 52 7a 4c 2f 79 31 65 72 47 Data Ascii: wkuBSoyGfcKGTURDS8e/RAYKBsCPgcOQDorCz81MiJDJSoTSl42KVogMiJjUj4nMVZpIx5nViY4ckwlPFRSQVFvRE18SVo1fm9hQ3JdXT5zXItWVWBHWXpQYVyEfm1pb2mJZ3aHjm+gk3RbfFx6Z4GFl36Gn4FlnWewhImMcXa4iJh5uo2OiJqYgnybe6KUtH/IlaatnI7Oqb+Fq6zVj8epqqvXtbue4L3Ws721sKbVqOKqtKS8usXRzL/y1erG
2025-01-23 08:58:21 UTC	1369	IN	Data Raw: 55 56 4f 68 52 44 46 78 50 38 52 7a 6b 30 48 68 78 44 48 6a 6b 47 51 77 4e 4a 47 30 6b 64 45 6c 56 4a 4a 68 5a 5a 54 6c 31 64 54 55 45 65 54 57 52 66 4f 53 38 76 56 6a 35 62 4e 6a 73 74 4b 46 39 43 51 46 41 78 4d 6d 30 2f 5a 44 52 30 64 31 78 58 57 6e 46 53 61 48 52 4b 56 33 43 42 68 46 6f 2f 63 30 56 6e 62 57 32 4c 65 34 74 67 62 49 35 6f 5a 59 68 58 64 6e 57 56 6b 33 68 6c 6e 56 78 65 61 56 74 38 70 5a 61 43 6e 4b 68 6d 6e 35 6d 4a 6a 71 75 45 72 32 64 71 67 37 4f 56 6e 33 4b 30 74 72 69 55 68 4b 65 55 73 34 32 69 74 36 47 58 6e 62 50 41 75 4c 4f 54 71 4d 43 4d 69 35 75 39 79 6f 53 69 30 4b 7a 50 6c 71 53 78 71 61 62 54 7a 4c 58 41 6d 4e 47 5a 74 4e 7a 50 33 72 58 63 34 36 44 69 32 4b 66 44 37 65 2f 66 30 50 48 43 70 38 58 6a 77 64 50 74 7a 4c 6e 30 35 Data Ascii: UVOhRDFxP8Rzk0HhxDHjkGQwNJG0kdElVJJhZZTl1dTUEeTWRfOS8vVj5bNjstKF9CQFAxMm0/ZDR0d1xXWnFSaHRKV3CBhFo/c0VnbW2Le4tgbI5oZYhXdnWVk3hlnVxeaVt8pZaCnKhmn5mJjquEr2dqg7OVn3K0triUhKeUs42it6GXnbPAuLOTqMCMi5u9yoSi0KzPlqSxqabTzLXAmNGZtNzP3rXc46Di2KfD7e/f0PHCp8XjwdPtzLn05
2025-01-23 08:58:21 UTC	1005	IN	Data Raw: 62 2f 6a 63 52 46 77 45 35 4b 55 4d 47 4b 69 56 4b 4a 43 77 2b 4c 52 39 48 4f 42 51 6d 4d 55 70 63 4b 44 63 70 50 57 52 6a 4d 56 34 76 5a 6a 6b 2b 50 6b 59 6e 62 54 78 65 52 57 6c 45 50 6b 77 76 52 31 49 77 53 7a 73 79 52 56 68 50 57 46 53 42 4f 6b 31 67 51 31 6c 63 50 30 52 59 65 6e 64 68 59 48 70 48 63 47 4b 53 62 57 56 55 6c 34 4e 7a 62 5a 78 31 63 56 64 71 6d 6f 4a 73 62 48 6d 61 65 4a 65 46 69 48 79 6f 62 4b 6c 6e 65 5a 35 71 67 4c 4b 6e 6c 49 6d 53 6a 5a 52 79 6b 33 53 53 64 5a 69 52 6b 5a 57 45 73 35 47 59 74 36 44 44 69 48 37 48 78 36 44 41 76 74 4b 53 72 4d 61 76 6c 73 58 48 7a 4b 37 4a 6c 37 61 65 7a 74 75 33 73 38 2f 50 76 62 43 2f 75 4d 47 32 77 64 71 75 70 73 58 42 30 4c 7a 79 33 74 43 31 39 74 48 6e 79 2f 6e 4d 2f 4c 62 5a 7a 66 6d 36 32 2b Data Ascii: b/jcRFwE5KUMGKiVKJCw+LR9HOBQmMUpcKDcpPWRjMV4vZjk+PkYnbTxeRWlEPkwvR1IwSzsyRVhPWFSBOk1gQ1lcP0RYendhYHpHcGKSbWVUl4NzbZx1cVdqmoJsbHmaeJeFiHyobKlneZ5qgLKnlImSjZRyk3SSdZiRkZWEs5GYt6DDiH7Hx6DAvtKSrMavlsXHzK7Jl7aeztu3s8/PvbC/uMG2wdqupsXB0Lzy3tC19tHny/nM/LbZzfm62+