Edit tour

Windows Analysis Report
Asipurch Algoma-Assessment 56242.pdf

Overview

General Information

Sample name:	Asipurch Algoma-Assessment 56242.pdf
Analysis ID:	1618155
MD5:	b04361e2a44aef9393790b5c8d406d6c
SHA1:	9c62e2684bc1930be7963420f1e6f8befbe498ce
SHA256:	b203e5a595ca5571fa563b0535c47665dd3face42c8133f6af4f09d269e0fe35
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

HTML page contains suspicious base64 encoded javascript

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Internet Provider seen in connection with other malware

Invalid T&C link found

Classification

Process Tree

System is w10x64

Acrobat.exe (PID: 7544 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Asipurch Algoma-Assessment 56242.pdf" MD5: 24EAD1C46A47022347DC0F05F6EFBB8C)

AcroCEF.exe (PID: 7712 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

AcroCEF.exe (PID: 7924 cmdline: "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1572,i,13085769487490983324,2332813964479212151,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8 MD5: 9B38E8E8B6DD9622D24B53E095C5D9BE)

chrome.exe (PID: 2140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1996,i,15354008732918574012,5950415436970812726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
2.11.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary
• Hooking and other Techniques for Hiding and Protection

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://0-dir.ip-ddns.com/?ufktjoft

Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'quickview-documents.com' does not match the legitimate domain for Microsoft., The domain 'quickview-documents.com' contains no direct association with Microsoft, which is suspicious., The presence of an input field asking for an email address is a common tactic used in phishing sites to collect sensitive information., The domain name 'quickview-documents.com' could be attempting to impersonate a legitimate service by using generic terms like 'quickview' and 'documents'. DOM: 2.11.pages.csv

Yara detected HtmlPhish10

Source: Yara match

File source: 2.11.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: PDF document

Joe Sandbox AI: PDF document contains QR code

AI detected suspicious URL

Source: https://viewdocu.online

Joe Sandbox AI: The URL 'viewdocu.online' appears to be attempting to mimic 'DocuSign', a well-known brand associated with document signing and management. The similarity is primarily due to the use of 'docu', which is a common abbreviation for 'document' and closely associated with 'DocuSign'. The use of the '.online' domain extension could be an attempt to suggest an online service related to document viewing, which aligns with DocuSign's services. The prefix 'view' could imply a service related to viewing documents, which is a core function of DocuSign. The structural similarity and the context of document-related services increase the likelihood of user confusion, suggesting a potential typosquatting attempt. However, without more context, it's possible that 'viewdocu.online' could be a legitimate service unrelated to DocuSign, but the likelihood of confusion remains high.

HTML page contains suspicious base64 encoded javascript

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: Base64 decoded: <script>

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: Number of links: 0

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: Total embedded image size: 34197

Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: Title: OneDrive does not match URL

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: Invalid link: Privacy & Cookies

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: <input type="password" .../> found

Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon
Source: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	HTTP Parser: No favicon

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: No <meta name="author".. found

Source: https://quickview-documents.com/__//kfgpvkva/nqikp

HTTP Parser: No <meta name="copyright".. found

Source: global traffic

TCP traffic: 192.168.2.4:64597 -> 1.1.1.1:53

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: viewdocu.online to https://0-dir.ip-ddns.com/?ufktjoft
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: 0-dir.ip-ddns.com to https://quickview-documents.com/?dataxx0=eyjhbgcioijiuzi1niisinr5cci6ikpxvcj9.eyj1cmwioijodhrwczovl3f1awnrdmlldy1kb2n1bwvudhmuy29tlyisimrvbwfpbii6inf1awnrdmlldy1kb2n1bwvudhmuy29tiiwia2v5ijoizzmybgs1mvhkcgzqiiwicxjjijpudwxslcjpyxqioje3mzk4otczmjusimv4cci6mtczotg5nzq0nx0.zstbsjze5vmh-1fcip24zwiqcqyl4z1g6enqnqtruvq

Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 104.18.95.41 104.18.95.41
Source: Joe Sandbox View	IP Address: 2.19.105.127 2.19.105.127
Source: Joe Sandbox View	IP Address: 2.19.105.127 2.19.105.127

Source: Joe Sandbox View

ASN Name: DATAHOPDatahop-SixDegreesGB DATAHOPDatahop-SixDegreesGB

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1Host: viewdocu.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dc8f916e635 HTTP/1.1Host: viewdocu.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft&__cf_chl_rt_tk=ok5lWynhKehsML0JcLtkiGC3z99PLghPm710ORxI9SQ-1739897166-1.0.1.1-U9T4M_Ru7hN1BTak5qElxc48cMicKIAeZzQNUiu1zT8Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/0e3e6804b971/api.js?onload=UhLpB4&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://viewdocu.onlinesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dc8f916e635 HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoftAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/0e3e6804b971/api.js?onload=UhLpB4&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dda1b1cc346 HTTP/1.1Host: viewdocu.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft&__cf_chl_rt_tk=Yfo8m4n3wQJAGlbRIgZcRxFIYoZGHiZ07benFBzHR.A-1739897168-1.0.1.1-xDX6OkQs__2e84OkqJnGTEdV6jztVKYUvF1bEJLY.wMAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: viewdocu.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoftAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dda1b1cc346 HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/37947894:1739895332:8SkyouDDYqU_J4zUQn65EZ81cEzXM6nnuwTiV2PICGk/913f7dda1b1cc346/HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9 HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=913f7decea075e7d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=913f7decea075e7d&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/831013738:1739895392:BzJzdlvns21gp9n5UKIGaiQVUa4zGLjH9uRhC5rjuCg/913f7decea075e7d/_CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/913f7decea075e7d/1739897174116/0aWcUDM_zAlL-dc HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/913f7decea075e7d/1739897174116/0aWcUDM_zAlL-dc HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/913f7decea075e7d/1739897174118/931b0766704ae9794eb343c0b56efe9535922c2b0976b927fd96d9f3aaa8ae18/1MzrLQUZwXmdaz1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/831013738:1739895392:BzJzdlvns21gp9n5UKIGaiQVUa4zGLjH9uRhC5rjuCg/913f7decea075e7d/_CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/37947894:1739895332:8SkyouDDYqU_J4zUQn65EZ81cEzXM6nnuwTiV2PICGk/913f7dda1b1cc346/HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9 HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoftAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_rc_m=1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f81202dbfe60c HTTP/1.1Host: viewdocu.onlineConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft&__cf_chl_rt_tk=sIvBff40DLDwNZxHi95m2575VQBP.uHzu3AZSOOEauY-1739897303-1.0.1.1-NQsa_IinkVB_8imyumdrbzqdlG5p67gm1xfqDyV1O.kAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cf_chl_rc_m=1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f81202dbfe60c HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1ngqu/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1978390883:1739895213:an9SEAOdFNTW1i5hAIBuVmJQL4iKIHeDrWg9qp-Cktg/913f81202dbfe60c/XLr4qevDj6mUwQoE8uyYfxcvRQzQKb1zCAar.._EGMQ-1739897303-1.2.1.1-mgqx2AxYbHJiK6X8W_NITapv7pBtt6t9eFzjgIZlpbVN0L8oTctieRGE6IRWYXZ5 HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=913f8130aca243b6&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1ngqu/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=913f8130aca243b6&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2096889097:1739895300:yqNlL7SN9qnONGe2YCVUTAiQwTeCgL-0hs2TwEuiuNI/913f8130aca243b6/mcG7dajg_tDPSHhDk1f68IpP2nn.23M4ZozQbZ4u5Y8-1739897305-1.1.1.1-LrzMlc6OdwVd.SXwd05.LNLxt7SZMr08v5PGWWhaFMncr6xNQKgZxXzwXq5p.obd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/913f8130aca243b6/1739897307475/49u909yuhWPfWBq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1ngqu/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/913f8130aca243b6/1739897307475/49u909yuhWPfWBq HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/913f8130aca243b6/1739897307477/48d6aecc68a40b8dc9bf46ca6163bad37f32927bc446cb12f4ed8ab2cceeee7e/aeg8NH2pKMF-RTE HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1ngqu/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2096889097:1739895300:yqNlL7SN9qnONGe2YCVUTAiQwTeCgL-0hs2TwEuiuNI/913f8130aca243b6/mcG7dajg_tDPSHhDk1f68IpP2nn.23M4ZozQbZ4u5Y8-1739897305-1.1.1.1-LrzMlc6OdwVd.SXwd05.LNLxt7SZMr08v5PGWWhaFMncr6xNQKgZxXzwXq5p.obd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2096889097:1739895300:yqNlL7SN9qnONGe2YCVUTAiQwTeCgL-0hs2TwEuiuNI/913f8130aca243b6/mcG7dajg_tDPSHhDk1f68IpP2nn.23M4ZozQbZ4u5Y8-1739897305-1.1.1.1-LrzMlc6OdwVd.SXwd05.LNLxt7SZMr08v5PGWWhaFMncr6xNQKgZxXzwXq5p.obd HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1978390883:1739895213:an9SEAOdFNTW1i5hAIBuVmJQL4iKIHeDrWg9qp-Cktg/913f81202dbfe60c/XLr4qevDj6mUwQoE8uyYfxcvRQzQKb1zCAar.._EGMQ-1739897303-1.2.1.1-mgqx2AxYbHJiK6X8W_NITapv7pBtt6t9eFzjgIZlpbVN0L8oTctieRGE6IRWYXZ5 HTTP/1.1Host: viewdocu.onlineConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ufktjoft HTTP/1.1Host: 0-dir.ip-ddns.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3F1aWNrdmlldy1kb2N1bWVudHMuY29tLyIsImRvbWFpbiI6InF1aWNrdmlldy1kb2N1bWVudHMuY29tIiwia2V5IjoiZzMybGs1MVhKcGZQIiwicXJjIjpudWxsLCJpYXQiOjE3Mzk4OTczMjUsImV4cCI6MTczOTg5NzQ0NX0.ZStbSjZE5vmh-1fcIp24zWiqCQYL4Z1G6eNqNqtruVQ HTTP/1.1Host: quickview-documents.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /__//kfgpvkva/nqikp HTTP/1.1Host: quickview-documents.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: qPdM=g32lk51XJpfP; qPdM.sig=b5IJZIGRcO5c_4bfaV_0YKIjL8Q
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Microsoft-CryptoAPI/10.0Host: x1.i.lencr.org

Source: global traffic	DNS traffic detected: DNS query: viewdocu.online
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: x1.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 0-dir.ip-ddns.com
Source: global traffic	DNS traffic detected: DNS query: quickview-documents.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=MN3AehcSzNyzaQiXWeixDr6Eh98Tlbf2SU5%2FDiXgLvOOkE9sKv5XuxRs0d6SFdGY38ozbq9fe7NgUsyD8l%2FSFZlnbHVIjNmiUM%2F0ag08NXo4DvBzJcRlbm1gy%2FwXDCrOs2I%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 437Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 18 Feb 2025 16:46:04 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originx-content-options: nosniffx-frame-options: SAMEORIGINcf-mitigated: challengeserver-timing: chlray;desc="913f7dc01c6a6fcd"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 18 Feb 2025 16:46:06 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originx-content-options: nosniffx-frame-options: SAMEORIGINcf-mitigated: challengeserver-timing: chlray;desc="913f7dc8f916e635"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 18 Feb 2025 16:46:09 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originx-content-options: nosniffx-frame-options: SAMEORIGINcf-mitigated: challengeserver-timing: chlray;desc="913f7dda1b1cc346"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 18 Feb 2025 16:46:11 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=drHExYN1WSm5UiJGMU1F4gHHP0Q9HKKWoM2aX7h99%2BY053Q%2FlJbgqUWAENUCjMF1ZRoU%2FCEELCf4YDsoCWpHB%2BMckSt20kKoUjRlF%2B0iR975nSYb%2FawfuZFE3DptO27j3%2BI%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 913f7de7d806e5f7-IADalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=8212&min_rtt=8190&rtt_var=3087&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1487&delivery_rate=356532&cwnd=32&unsent_bytes=0&cid=9ae6d7854d5c6950&ts=535&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 18 Feb 2025 16:48:23 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originx-content-options: nosniffx-frame-options: SAMEORIGINcf-mitigated: challengeserver-timing: chlray;desc="913f81202dbfe60c"

Source: 77EC63BDA74BD0D0E0426DC8F80085060.1.dr	String found in binary or memory: http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
Source: chromecache_168.5.dr	String found in binary or memory: http://localhost/fonts/mask_icon.svg
Source: Asipurch Algoma-Assessment 56242.pdf	String found in binary or memory: http://www.reportlab.com
Source: Asipurch Algoma-Assessment 56242.pdf	String found in binary or memory: http://www.reportlab.com)
Source: 2D85F72862B55C4EADD9E66E06947F3D0.1.dr	String found in binary or memory: http://x1.i.lencr.org/
Source: Asipurch Algoma-Assessment 56242.pdf	String found in binary or memory: https://github.com/xhtml2pdf/xhtml2pdf/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 64889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64908
Source: unknown	Network traffic detected: HTTP traffic on port 64877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64900
Source: unknown	Network traffic detected: HTTP traffic on port 64903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64902
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64906
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64880
Source: unknown	Network traffic detected: HTTP traffic on port 64672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64878
Source: unknown	Network traffic detected: HTTP traffic on port 64893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64872
Source: unknown	Network traffic detected: HTTP traffic on port 64887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64876
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64890
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64889
Source: unknown	Network traffic detected: HTTP traffic on port 64896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64885
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 64882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 64876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64893
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64894
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64897
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64671
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 64878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64677
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 64881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64691
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 64671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal76.phis.winPDF@33/55@25/11

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SharedDataEvents-journal

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

File created: C:\Users\user\AppData\Local\Temp\acrobat_sbx\NGL\NGLClient_AcrobatReader123.6.20320.6 2025-02-18 11-46-00-782.log

Jump to behavior

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates\CA

Jump to behavior

Source: unknown	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe" "C:\Users\user\Desktop\Asipurch Algoma-Assessment 56242.pdf"
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1572,i,13085769487490983324,2332813964479212151,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1996,i,15354008732918574012,5950415436970812726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --backgroundcolor=16777215	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe "C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --log-severity=disable --user-agent-product="ReaderServices/23.6.20320 Chrome/105.0.0.0" --lang=en-US --user-data-dir="C:\Users\user\AppData\Local\CEF\User Data" --log-file="C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\debug.log" --mojo-platform-channel-handle=2104 --field-trial-handle=1572,i,13085769487490983324,2332813964479212151,131072 --disable-features=BackForwardCache,CalculateNativeWinOcclusion,WinUseBrowserSpellChecker /prefetch:8	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2536 --field-trial-handle=1996,i,15354008732918574012,5950415436970812726,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: Asipurch Algoma-Assessment 56242.pdf	Initial sample: PDF keyword /JS count = 0
Source: Asipurch Algoma-Assessment 56242.pdf	Initial sample: PDF keyword /JavaScript count = 0

Source: Asipurch Algoma-Assessment 56242.pdf

Initial sample: PDF keyword /EmbeddedFile count = 0

Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\Acrobat.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	1 System Information Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/flow/ov1/37947894:1739895332:8SkyouDDYqU_J4zUQn65EZ81cEzXM6nnuwTiV2PICGk/913f7dda1b1cc346/HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9	0%	Avira URL Cloud	safe
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dda1b1cc346	0%	Avira URL Cloud	safe
https://quickview-documents.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3F1aWNrdmlldy1kb2N1bWVudHMuY29tLyIsImRvbWFpbiI6InF1aWNrdmlldy1kb2N1bWVudHMuY29tIiwia2V5IjoiZzMybGs1MVhKcGZQIiwicXJjIjpudWxsLCJpYXQiOjE3Mzk4OTczMjUsImV4cCI6MTczOTg5NzQ0NX0.ZStbSjZE5vmh-1fcIp24zWiqCQYL4Z1G6eNqNqtruVQ	0%	Avira URL Cloud	safe
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f81202dbfe60c	0%	Avira URL Cloud	safe
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/flow/ov1/1978390883:1739895213:an9SEAOdFNTW1i5hAIBuVmJQL4iKIHeDrWg9qp-Cktg/913f81202dbfe60c/XLr4qevDj6mUwQoE8uyYfxcvRQzQKb1zCAar.._EGMQ-1739897303-1.2.1.1-mgqx2AxYbHJiK6X8W_NITapv7pBtt6t9eFzjgIZlpbVN0L8oTctieRGE6IRWYXZ5	0%	Avira URL Cloud	safe
http://localhost/fonts/mask_icon.svg	0%	Avira URL Cloud	safe
https://viewdocu.online/favicon.ico	0%	Avira URL Cloud	safe
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/flow/ov1/17001289:1739895326:8GqevqinnKtZejdv3W_uuyOXdPnn9R-O6w9lv_AsSH0/913f7dc8f916e635/hyXtWEG9S3_uQl0e7wNPz0HKHHKZxWrE5_uRrSsVVeI-1739897166-1.2.1.1-kSveRcDMItGXNX5B51nmCMP_Z.5PuYUydurSvpXajgi8XJAragffw3cCZsrAt8YF	0%	Avira URL Cloud	safe
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dc8f916e635	0%	Avira URL Cloud	safe
http://www.reportlab.com	0%	Avira URL Cloud	safe
http://www.reportlab.com)	0%	Avira URL Cloud	safe
https://0-dir.ip-ddns.com/?ufktjoft	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
e8652.dscx.akamaiedge.net	2.19.105.127	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
viewdocu.online	188.114.97.3	true	true	unknown
www.google.com	172.217.16.196	true	false	high
quickview-documents.com	77.239.124.62	true	true	unknown
0-dir.ip-ddns.com	77.239.124.62	true	false	unknown
x1.i.lencr.org	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=1w6h9kfjTfXC8XiMdtwu8JSC%2FKH%2B%2F19GMxArVlcOwU9FYARDxi2X7TWc0RQDPCbCwc%2BHZXwPAx1vve%2FSm41e%2FvO7HSdIptrhtdqOM7kWcbIxzRayoj%2FehIXH0n5%2F0i3XVPY%3D	false		high
https://quickview-documents.com/?dataXX0=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ1cmwiOiJodHRwczovL3F1aWNrdmlldy1kb2N1bWVudHMuY29tLyIsImRvbWFpbiI6InF1aWNrdmlldy1kb2N1bWVudHMuY29tIiwia2V5IjoiZzMybGs1MVhKcGZQIiwicXJjIjpudWxsLCJpYXQiOjE3Mzk4OTczMjUsImV4cCI6MTczOTg5NzQ0NX0.ZStbSjZE5vmh-1fcIp24zWiqCQYL4Z1G6eNqNqtruVQ	false	Avira URL Cloud: safe	unknown
https://quickview-documents.com/__//kfgpvkva/nqikp	true		unknown
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f81202dbfe60c	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=MN3AehcSzNyzaQiXWeixDr6Eh98Tlbf2SU5%2FDiXgLvOOkE9sKv5XuxRs0d6SFdGY38ozbq9fe7NgUsyD8l%2FSFZlnbHVIjNmiUM%2F0ag08NXo4DvBzJcRlbm1gy%2FwXDCrOs2I%3D	false		high
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/flow/ov1/1978390883:1739895213:an9SEAOdFNTW1i5hAIBuVmJQL4iKIHeDrWg9qp-Cktg/913f81202dbfe60c/XLr4qevDj6mUwQoE8uyYfxcvRQzQKb1zCAar.._EGMQ-1739897303-1.2.1.1-mgqx2AxYbHJiK6X8W_NITapv7pBtt6t9eFzjgIZlpbVN0L8oTctieRGE6IRWYXZ5	true	Avira URL Cloud: safe	unknown
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/flow/ov1/37947894:1739895332:8SkyouDDYqU_J4zUQn65EZ81cEzXM6nnuwTiV2PICGk/913f7dda1b1cc346/HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9	true	Avira URL Cloud: safe	unknown
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dda1b1cc346	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/913f7decea075e7d/1739897174116/0aWcUDM_zAlL-dc	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/	false		high
https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=913f8130aca243b6&lang=auto	false		high
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/flow/ov1/17001289:1739895326:8GqevqinnKtZejdv3W_uuyOXdPnn9R-O6w9lv_AsSH0/913f7dc8f916e635/hyXtWEG9S3_uQl0e7wNPz0HKHHKZxWrE5_uRrSsVVeI-1739897166-1.2.1.1-kSveRcDMItGXNX5B51nmCMP_Z.5PuYUydurSvpXajgi8XJAragffw3cCZsrAt8YF	true	Avira URL Cloud: safe	unknown
https://viewdocu.online/favicon.ico	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=i1ByR6IqyYyJY4EGL51Hx5wHNEZBENW9rDAg%2B5H7pgJchFNHF0Tt2Tip4m3kMgBvryGb6fc4%2B63T2bJS9ha8UimkBUCzIoLFrrh7o61XBo16OfHlTLOzgoj0WU4kpdjbvpE%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/913f8130aca243b6/1739897307477/48d6aecc68a40b8dc9bf46ca6163bad37f32927bc446cb12f4ed8ab2cceeee7e/aeg8NH2pKMF-RTE	false		high
https://a.nel.cloudflare.com/report/v4?s=drHExYN1WSm5UiJGMU1F4gHHP0Q9HKKWoM2aX7h99%2BY053Q%2FlJbgqUWAENUCjMF1ZRoU%2FCEELCf4YDsoCWpHB%2BMckSt20kKoUjRlF%2B0iR975nSYb%2FawfuZFE3DptO27j3%2BI%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2096889097:1739895300:yqNlL7SN9qnONGe2YCVUTAiQwTeCgL-0hs2TwEuiuNI/913f8130aca243b6/mcG7dajg_tDPSHhDk1f68IpP2nn.23M4ZozQbZ4u5Y8-1739897305-1.1.1.1-LrzMlc6OdwVd.SXwd05.LNLxt7SZMr08v5PGWWhaFMncr6xNQKgZxXzwXq5p.obd	false		high
https://viewdocu.online/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dc8f916e635	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/913f8130aca243b6/1739897307475/49u909yuhWPfWBq	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/913f7decea075e7d/1739897174118/931b0766704ae9794eb343c0b56efe9535922c2b0976b927fd96d9f3aaa8ae18/1MzrLQUZwXmdaz1	false		high
https://0-dir.ip-ddns.com/?ufktjoft	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=913f7decea075e7d&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/1ngqu/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://github.com/xhtml2pdf/xhtml2pdf/	Asipurch Algoma-Assessment 56242.pdf	false		high
http://x1.i.lencr.org/	2D85F72862B55C4EADD9E66E06947F3D0.1.dr	false		high
http://localhost/fonts/mask_icon.svg	chromecache_168.5.dr	false	Avira URL Cloud: safe	unknown
http://www.reportlab.com	Asipurch Algoma-Assessment 56242.pdf	false	Avira URL Cloud: safe	unknown
http://www.reportlab.com)	Asipurch Algoma-Assessment 56242.pdf	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
77.239.124.62	quickview-documents.com	United Kingdom	6908	DATAHOPDatahop-SixDegreesGB	true
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
2.19.105.127	e8652.dscx.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	viewdocu.online	European Union	13335	CLOUDFLARENETUS	true
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.23
192.168.2.25

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1618155
Start date and time:	2025-02-18 17:45:04 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 31s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowspdfcookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Asipurch Algoma-Assessment 56242.pdf
Detection:	MAL
Classification:	mal76.phis.winPDF@33/55@25/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .pdf Found PDF document Close Viewer

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, WmiPrvSE.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.195, 172.217.18.14, 142.250.110.84, 2.19.104.203, 162.159.61.3, 172.64.41.3, 172.217.16.206, 2.19.11.122, 2.19.11.121, 142.250.185.110, 199.232.210.172, 142.250.186.174, 2.23.77.188, 2.22.242.136, 2.22.242.128, 142.250.184.206, 172.217.16.142, 142.250.81.238, 173.194.7.38, 142.250.185.163, 142.250.185.170, 142.250.185.106, 216.58.212.170, 172.217.18.10, 142.250.74.202, 216.58.206.42, 142.250.185.74, 142.250.185.138, 142.250.185.202, 172.217.23.106, 216.58.212.138, 142.250.185.234, 172.217.16.202, 142.250.181.234, 172.217.16.138, 216.58.206.74, 92.123.18.162, 18.213.11.84, 23.56.162.204, 4.175.87.197, 13.107.246.45
Excluded domains from analysis (whitelisted): e4578.dscg.akamaiedge.net, chrome.cloudflare-dns.com, slscr.update.microsoft.com, clientservices.googleapis.com, acroipm2.adobe.com, clients2.google.com, ocsp.digicert.com, redirector.gvt1.com, ssl-delivery.adobe.com.edgekey.net, r1---sn-p5qddn76.gvt1.com, a122.dscd.akamai.net, update.googleapis.com, wu-b-net.trafficmanager.net, clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, otelrules.azureedge.net, acroipm2.adobe.com.edgesuite.net, ctldl.windowsupdate.com.delivery.microsoft.com, ctldl.windowsupdate.com, p13n.adobe.io, fe3cr.delivery.mp.microsoft.com, edgedl.me.gvt1.com, r1.sn-p5qddn76.gvt1.com, armmf.adobe.com, clients.l.google.com, geo2.adobe.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

Time	Type	Description
11:46:07	API Interceptor	3x Sleep call for process: AcroCEF.exe modified

QR Codes

Source	URL
Screenshot	https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft

Joe Sandbox View / Context

IPs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
2.19.105.127	https://execed-hc-edu.jmailroute.net/x/d?c=44822760&l=1fea749d-3c2d-4b43-9010-433f621cd061&r=bfa9dbc8-0eef-4ecd-9e7c-a8ebf7d1b28b	Get hash	malicious	Unknown	Browse	x1.i.lencr.org/
	Office TR.pdf	Get hash	malicious	Unknown	Browse	x1.i.lencr.org/
	424#U0413.js	Get hash	malicious	SmokeLoader	Browse	x1.i.lencr.org/
	#U0414#U043e#U0433#U043e#U0432i#U0440_#U043f#U043e#U0441#U0442#U0430#U0432#U043a#U0438.js	Get hash	malicious	SmokeLoader	Browse	x1.i.lencr.org/
	suspect-file.txt	Get hash	malicious	HTMLPhisher	Browse	x1.c.lencr.org/
	https://ad.doubleclick.net/pcs/click?xai=AKAOjssa5qdtNwt-8FkxzmyVojeg4fHj0qJahhfOWsAWJISZSxzMQYsKaZ89WonrTmj4Fr0MrPR2f_cj5hDtx29gY_lZpH1-3GlMXwP1XGhfdyGKYHFFjGlrNiqUvVYNxVw5xJzi-xb6JXAsuurdkf3bPTE3e0wqE50X7QQh5aIOW0mRYLS1e9dSmDiHezQ_qCVgTsSyS_k9qfC3KkSRCiPaHo7b8-JhzyYhecCX23CTCFbnttTo6Q9vKkHbFXzJLPUPxVDvzFPinZU2l0NA46LahpBlIoRWyu694_KmrOLfEQrgFOit4nVTEg8MieBxyNra_9QfYI5t3YqNIXL1GtbFekXChMml1mR32p4Fr_Z7LJ7LwQ3DsqrO2KxJXs_CxbKjfpCdlENLfMLLmomBa1HhztisEIPKwJ_J07m4h4cL1oUMMGNKSILqjiJwMr23y9K8cQPYFZnk86xEdFgrGbXn-mV4aXks-jV6QvVNkbXIHHOzV6AqUuThlQNNQBBu4JrrBb4aq-Qz8Ud2qZKfWC8nA2OHuCyf-BYTwjd-iiIQ7DgkFTYfhvJwKMvmaYLJWcZXBPlaewGZ4y5XY-AKgX9gBH5TvZ-zCbSL6r5v3BEYmZZv2ggg9RkMTeklS8sYJWJLIFAGaujTkNxd_zwmW63QypgumqQ5nyKcrLL1MOAGMjTF5IinY2mEgWR1wz8jhpvfU-xGDahvmal4N9Dy6FZMZqDlloUKQqHXUIeNrRf2eog5Lg76IAaLaXSLriaTPCMuCdMIJ-kQiuU_C6wExWnEl2KDx9tKi42Qx7dpJVPI49UJ3ZorF-sXWeMhVSc763wVxvZCnyXWN9sKYYEStI0sXDF4lIHNWx5YhqFJO2IPsQMIjrre3k-UxwLqfrjN0dZ06KgX4v9-yY4Cx-J-vWunMej8uVHo1vQIk40aG2mYYYaVyvkbWI49stTH_jNz-JAQSKWLmHz895AGmOXwKukLI_YHIfIeaEE2Rele3BkbOtJbVt5epi2-BAwdu2FESDBu0CsFG1fBbOIC_LsxGQSgrBhBG8BdKYxypszmYHWt8GYZ9FNthq_WQZVEDFJ4hSjNm0fZ9ybHKaN04j26wLjH4LrrqDjiXC3UQAhff0feAbgLXONdGT5l92vYi0-mbSvpOfcBFOebSWxwhBTtsvGuCELT4z413IrrFO_O0HV9dS5HyAWbulGB_VUKcleqlBhNSL9In7C1RJrZ5BZCiPNFYBFYgaql5zI6RHruKibCSa7FnAismzbZbnoeerRjULrpr_UJ--LPgI0y4nHrQu1AMvId32dTqOZjZhdJAJJOfFIL&sai=AMfl-YR8N4HV-bfWPyBT1RBZhJCWPNG9fo3UVuLo2mJzipODfSfAByzodiZBvMUOvH73PF6hLofWkEUZwQUZ3UAuOoJ5GFvOjovlaD71kqY5sfM0QbBLDT0mP4cInpGnR_GzFxCzWtP4cBjgdf-u7Jv8iGSyoHP-GZAo6aVNlBTmNYD9Iizsqzh1zu9AyKi0SHEHkG_kwClhsRYEOD4BpOA8mgwoHkJDuHNGCjqBAlBM_KaiTzVJp8ZexNhEue_2IbtBeBmlXRbLu6w7GgUE1VGGzC5UrlMUGOI&sig=Cg0ArKJSzB0ass8dlbuM&fbs_aeid=%5Bgw_fbsaeid%5D&crd=aHR0cHM6Ly9tb3Rvcm9sYS5jb20&urlfix=1&nx=116&ny=34&dim=300x250&adurl=https://troyhousing-my.sharepoint.com/:f:/g/personal/cherelle_willett_troyhousing_org/EqsKDpDOcVVCqArI7nc9xpEB5c6olb2CJUWqYOpUZdMFFA?e=OSL8R2	Get hash	malicious	Unknown	Browse	x1.i.lencr.org/
104.18.94.41	https://online.fliphtml5.com/kwdwp/ndgl/	Get hash	malicious	HTMLPhisher	Browse
	https://drive.proton.me/urls/CY62P42XZG#wZ2U4Kuf90J6	Get hash	malicious	HTMLPhisher	Browse
	c3f8604d.msg	Get hash	malicious	HTMLPhisher	Browse
	REC-Play_2172025Integral-ag.htm	Get hash	malicious	HTMLPhisher	Browse
	https://notifications.google.com/g/p/ANiao5rdjmKDR8JzehcAm6SkEomHyUC9FcOJcLaNAljVsTh_7y7GPHabSUxjarmclBuNUOroPWAEevR_J8SHFG4A0r7ZjB9DO_wG3FKCGK3dnoeR_KDPpklJRFBsEWgvb_vtwzfPefraHWyONYTBlbPANZelBDXqtgdr73yy_Xuk5rUXAgTZ8QJkulDNKBkK64JgvThc7IxOJ7UIaTA	Get hash	malicious	Unknown	Browse
	https://notifications.google.com/g/p/ANiao5rdjmKDR8JzehcAm6SkEomHyUC9FcOJcLaNAljVsTh_7y7GPHabSUxjarmclBuNUOroPWAEevR_J8SHFG4A0r7ZjB9DO_wG3FKCGK3dnoeR_KDPpklJRFBsEWgvb_vtwzfPefraHWyONYTBlbPANZelBDXqtgdr73yy_Xuk5rUXAgTZ8QJkulDNKBkK64JgvThc7IxOJ7UIaTA	Get hash	malicious	Unknown	Browse
	http://dappfix-web.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://protect.checkpoint.com/v2/r01/___https:/taibaubiquitousecosystem.com/Bu-nshqzijxdoxdovzjwDdzndithzxnls.myrq___.YzJ1OmthbnNhc2Nvcm5ncm93ZXJzYXNzb2NpYXRpb246YzpvOjU5ZDk3OWIwMjIyNGRiOTA2NWViY2M5MzNkOWIyOWZjOjc6MTk4MTphNWMyNzAwM2Y3YmNhM2I4ODM2YjUyZmMwNTY0NDY0OTI4ZWYyMDU2M2Q0MjExNDcwN2UzYTNjODQxZDMxZTAxOmg6VDpU	Get hash	malicious	Unknown	Browse
	https://untag-smd.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	https://webmailbhutanfootbal.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
104.18.95.41	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse
	evidence.pdf	Get hash	malicious	Unknown	Browse
	c3f8604d.msg	Get hash	malicious	HTMLPhisher	Browse
	https://ifTk.tiousinst.ru/lcvH/#Aerika.smakula@spglobal.com	Get hash	malicious	HTMLPhisher	Browse
	https://brandpad.io/lamb-building/	Get hash	malicious	Unknown	Browse
	Scan-VM.docx	Get hash	malicious	HTMLPhisher	Browse
	REC-Play_2172025Integral-ag.htm	Get hash	malicious	HTMLPhisher	Browse
	https://notifications.google.com/g/p/ANiao5rdjmKDR8JzehcAm6SkEomHyUC9FcOJcLaNAljVsTh_7y7GPHabSUxjarmclBuNUOroPWAEevR_J8SHFG4A0r7ZjB9DO_wG3FKCGK3dnoeR_KDPpklJRFBsEWgvb_vtwzfPefraHWyONYTBlbPANZelBDXqtgdr73yy_Xuk5rUXAgTZ8QJkulDNKBkK64JgvThc7IxOJ7UIaTA	Get hash	malicious	Unknown	Browse
	https://notifications.google.com/g/p/ANiao5rdjmKDR8JzehcAm6SkEomHyUC9FcOJcLaNAljVsTh_7y7GPHabSUxjarmclBuNUOroPWAEevR_J8SHFG4A0r7ZjB9DO_wG3FKCGK3dnoeR_KDPpklJRFBsEWgvb_vtwzfPefraHWyONYTBlbPANZelBDXqtgdr73yy_Xuk5rUXAgTZ8QJkulDNKBkK64JgvThc7IxOJ7UIaTA	Get hash	malicious	Unknown	Browse
	http://webmailuzzgora.pages.dev/	Get hash	malicious	HTMLPhisher	Browse

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
challenges.cloudflare.com	https://online.fliphtml5.com/kwdwp/ndgl/	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	https://drive.proton.me/urls/CY62P42XZG#wZ2U4Kuf90J6	Get hash	malicious	HTMLPhisher	Browse	104.18.94.41
	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	evidence.pdf	Get hash	malicious	Unknown	Browse	104.18.95.41
	c3f8604d.msg	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://ifTk.tiousinst.ru/lcvH/#Aerika.smakula@spglobal.com	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://brandpad.io/lamb-building/	Get hash	malicious	Unknown	Browse	104.18.95.41
	Scan-VM.docx	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	REC-Play_2172025Integral-ag.htm	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
	https://notifications.google.com/g/p/ANiao5rdjmKDR8JzehcAm6SkEomHyUC9FcOJcLaNAljVsTh_7y7GPHabSUxjarmclBuNUOroPWAEevR_J8SHFG4A0r7ZjB9DO_wG3FKCGK3dnoeR_KDPpklJRFBsEWgvb_vtwzfPefraHWyONYTBlbPANZelBDXqtgdr73yy_Xuk5rUXAgTZ8QJkulDNKBkK64JgvThc7IxOJ7UIaTA	Get hash	malicious	Unknown	Browse	104.18.95.41
e8652.dscx.akamaiedge.net	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse	23.209.209.135
	evidence.pdf	Get hash	malicious	Unknown	Browse	23.209.209.135
	Monday+February+17+2025.pdf	Get hash	malicious	Unknown	Browse	72.246.169.163
	Jim.flanigan Open annual plan_Catalinamarketing.pdf	Get hash	malicious	HTMLPhisher	Browse	23.209.209.135
	2025 Q1 Staff Pay Adjustment-Handbook.pdf	Get hash	malicious	HTMLPhisher	Browse	23.209.209.135
	S-1-5-21-1518469996-3191111335-45363088-1001.tar	Get hash	malicious	Unknown	Browse	23.209.213.129
	S-1-5-21-2450103661-3784623554-249139738-1001.tar	Get hash	malicious	Unknown	Browse	72.246.169.163
	Attach2.pdf	Get hash	malicious	HTMLPhisher	Browse	23.209.213.129
	Final Call Smart Manufacturing Excellence Munich (196Mo).msg	Get hash	malicious	Unknown	Browse	23.209.209.135
	2025 Q1 Staff Pay Adjustment-Handbook.pdf	Get hash	malicious	HTMLPhisher	Browse	2.19.245.44
bg.microsoft.map.fastly.net	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse	199.232.210.172
	evidence.pdf	Get hash	malicious	Unknown	Browse	199.232.214.172
	Purchase Order.xla.xlsx	Get hash	malicious	Unknown	Browse	199.232.210.172
	Purchase Order.xla.xlsx	Get hash	malicious	Unknown	Browse	199.232.210.172
	0805#U007e1.EXE.exe	Get hash	malicious	LummaC Stealer	Browse	199.232.210.172
	overdue invoices.doc	Get hash	malicious	Unknown	Browse	199.232.214.172
	pdfskills.exe	Get hash	malicious	Unknown	Browse	199.232.210.172
	Update.Client.exe	Get hash	malicious	ScreenConnect Tool	Browse	199.232.210.172
	Quotation.xls	Get hash	malicious	Unknown	Browse	199.232.210.172
	Quotation.xls	Get hash	malicious	Unknown	Browse	199.232.214.172

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
DATAHOPDatahop-SixDegreesGB	armv5l.elf	Get hash	malicious	Unknown	Browse	130.4.206.124
	SecuriteInfo.com.Win32.Malware-gen.26093.20806.exe	Get hash	malicious	Vidar	Browse	77.239.117.222
	res.mpsl.elf	Get hash	malicious	Unknown	Browse	130.147.32.96
	N11R7lRasm.exe	Get hash	malicious	Vidar	Browse	77.239.117.222
	res.sh4.elf	Get hash	malicious	Unknown	Browse	130.147.32.77
	botnet.arm.elf	Get hash	malicious	Mirai, Moobot	Browse	130.148.117.105
	botnet.m68k.elf	Get hash	malicious	Mirai, Moobot	Browse	185.119.68.150
	MyPayload.bat	Get hash	malicious	Unknown	Browse	77.239.105.113
	mips.elf	Get hash	malicious	Mirai, Moobot	Browse	130.7.75.248
	random.exe	Get hash	malicious	Amadey, AsyncRAT, LummaC Stealer, PureLog Stealer, RedLine, Stealc, Vidar	Browse	77.239.105.113
CLOUDFLARENETUS	https://us.content.exclaimer.net/?url=https%3A%2F%2Fmc6gzuhbb.cc.rs6.net%2Ftn.jsp%3Ff%3D001nUW8gKRp2TTUkqvduuVvMwLcZiWFr17IOLWsghQ8WoO1Wd6wh3z0vEJLw8JOm9xAg9_zls5edNvwMnPZ_dP7ohJ4lpzmoYMdHlCZhafLr1F_oDtAiHorZGIzVzIpG3RzGQhnq5EOoDNmKTofcWlyaw4FvdaZ1f6b7lCRma1Q7ZUSNermq0AYSpZroBCwR61iFfnaLiZApFTgt9xbzO_nN8oASrnyD36RNm2XJFh6vK9W9N85IRUYHNSi3LPSZelkhxQ7eTR58yQ%3D%26c%3D%26ch%3D&tenantid=VZNe8uzOEe-QywAiSCk5gQ&templateid=cbf3da90cfecef1190cb002248293981&excomponenttype=SocialMediaIcon&signature=CdvrDnuCsb5dstNKflN6p2b6CcqnSow6lWkKqUagvyt5nbsaPGCnpeMCZcWU0sf6QHjpNCxghX6GsOFOKEf3q6VKVybFMoKUTYrj3PiI8WE05sK8kALb958P8hUEJYb39qTMOSMvAvoC-88a_d5seVXwxUyKklRGitKp02ahi1lZxRB0t3-XIaXp-hlj35ECMBVMSJTg2HoG9qcKMRJ8wOPUPnNR4oOSm9Y9f7kpbuDYDKgArqpM1pGyeDqC8RwrHQ93GsYnukg52j2n3g1Y_qKMx_kV1uZvp1bkfcuJ4qS1TcjUn69MFAQiFzAdHcnwWlN29N0KRylEm6okK7Zn_A&v=1&imprintMessageId=ba1d5a18-a528-45ba-a0b5-1c25108bbf0d	Get hash	malicious	Unknown	Browse	104.18.35.178
	https://ssl.perquisite.net/rewardcentre/login?eid=d545e4f3-3a81-40b9-8e09-5592acd3e41e	Get hash	malicious	Unknown	Browse	104.18.4.158
	https://online.fliphtml5.com/kwdwp/ndgl/	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	https://drive.proton.me/urls/CY62P42XZG#wZ2U4Kuf90J6	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://bimediakit.com/	Get hash	malicious	Unknown	Browse	162.247.243.39
	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse	188.114.97.3
	mnogoso.exe	Get hash	malicious	LummaC Stealer	Browse	188.114.96.3
	rDlVVqet8gxlhLhd.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.32.1
	https://inf-human.com/cf/verify/7362731/check	Get hash	malicious	CAPTCHA Scam ClickFix, LummaC Stealer	Browse	104.16.123.96
	https://discover-travel-agency.pro/walking.mp3	Get hash	malicious	Unknown	Browse	172.67.170.66
CLOUDFLARENETUS	https://us.content.exclaimer.net/?url=https%3A%2F%2Fmc6gzuhbb.cc.rs6.net%2Ftn.jsp%3Ff%3D001nUW8gKRp2TTUkqvduuVvMwLcZiWFr17IOLWsghQ8WoO1Wd6wh3z0vEJLw8JOm9xAg9_zls5edNvwMnPZ_dP7ohJ4lpzmoYMdHlCZhafLr1F_oDtAiHorZGIzVzIpG3RzGQhnq5EOoDNmKTofcWlyaw4FvdaZ1f6b7lCRma1Q7ZUSNermq0AYSpZroBCwR61iFfnaLiZApFTgt9xbzO_nN8oASrnyD36RNm2XJFh6vK9W9N85IRUYHNSi3LPSZelkhxQ7eTR58yQ%3D%26c%3D%26ch%3D&tenantid=VZNe8uzOEe-QywAiSCk5gQ&templateid=cbf3da90cfecef1190cb002248293981&excomponenttype=SocialMediaIcon&signature=CdvrDnuCsb5dstNKflN6p2b6CcqnSow6lWkKqUagvyt5nbsaPGCnpeMCZcWU0sf6QHjpNCxghX6GsOFOKEf3q6VKVybFMoKUTYrj3PiI8WE05sK8kALb958P8hUEJYb39qTMOSMvAvoC-88a_d5seVXwxUyKklRGitKp02ahi1lZxRB0t3-XIaXp-hlj35ECMBVMSJTg2HoG9qcKMRJ8wOPUPnNR4oOSm9Y9f7kpbuDYDKgArqpM1pGyeDqC8RwrHQ93GsYnukg52j2n3g1Y_qKMx_kV1uZvp1bkfcuJ4qS1TcjUn69MFAQiFzAdHcnwWlN29N0KRylEm6okK7Zn_A&v=1&imprintMessageId=ba1d5a18-a528-45ba-a0b5-1c25108bbf0d	Get hash	malicious	Unknown	Browse	104.18.35.178
	https://ssl.perquisite.net/rewardcentre/login?eid=d545e4f3-3a81-40b9-8e09-5592acd3e41e	Get hash	malicious	Unknown	Browse	104.18.4.158
	https://online.fliphtml5.com/kwdwp/ndgl/	Get hash	malicious	HTMLPhisher	Browse	1.1.1.1
	https://drive.proton.me/urls/CY62P42XZG#wZ2U4Kuf90J6	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://bimediakit.com/	Get hash	malicious	Unknown	Browse	162.247.243.39
	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse	188.114.97.3
	mnogoso.exe	Get hash	malicious	LummaC Stealer	Browse	188.114.96.3
	rDlVVqet8gxlhLhd.exe	Get hash	malicious	MassLogger RAT	Browse	104.21.32.1
	https://inf-human.com/cf/verify/7362731/check	Get hash	malicious	CAPTCHA Scam ClickFix, LummaC Stealer	Browse	104.16.123.96
	https://discover-travel-agency.pro/walking.mp3	Get hash	malicious	Unknown	Browse	172.67.170.66
AKAMAI-ASUS	https://bimediakit.com/	Get hash	malicious	Unknown	Browse	104.102.43.106
	Fd-Employee-Handbook.pdf	Get hash	malicious	Unknown	Browse	104.78.188.188
	https://inf-human.com/cf/verify/7362731/check	Get hash	malicious	CAPTCHA Scam ClickFix, LummaC Stealer	Browse	92.123.18.162
	https://sourdline92700-my.sharepoint.com/:o:/g/personal/candy_p_sourdline_com/EuLbumqXqKlNrdO_dC4ToNQBjU8u8ArI7nekyzRD4pwAqQ?e=zVkpV4	Get hash	malicious	Unknown	Browse	92.123.18.8
	https://kiomet.com/	Get hash	malicious	Unknown	Browse	104.119.110.47
	New Po Copy.docx	Get hash	malicious	Unknown	Browse	2.19.106.160
	newp.html	Get hash	malicious	HTMLPhisher	Browse	92.123.12.9
	10_feb	Get hash	malicious	Unknown	Browse	23.57.23.9
	c3f8604d.msg	Get hash	malicious	HTMLPhisher	Browse	92.123.18.162
	https://steamescommnunity.com/s/10429109537	Get hash	malicious	Unknown	Browse	23.55.224.97

Process:	C:\Program Files\Adobe\Acrobat DC\Acrobat\acrocef_1\AcroCEF.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	292
Entropy (8bit):	5.251290153842018
Encrypted:	false
SSDEEP:	6:iOXU5SIq2Pwkn2nKuAl9OmbnIFUtFU5sZmw7U5MkwOwkn2nKuAl9OmbjLJ:7E5zvYfHAahFUtu5s/45M5JfHAaSJ
MD5:	E89FF936C605B09FC0EEEA5B1C07F561
SHA1:	79C8E3C584BEED69BB615DBFC92DB98085475947
SHA-256:	E8BA32675F0C8016CBA536128AF11055A0AF8FB3D206AA599B8B836DCD47D5CC
SHA-512:	A48F7A590F76B5990FADF7617A35DBBA30913451580D06DBEB35241C4E21170520B0CBCD20755D8575F93A5C78C0EB780502636AFBCCD1284611984BEDC48BCB
Malicious:	false
Reputation:	low
Preview:	2025/02/18-11:45:58.696 1e44 Reusing MANIFEST C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/MANIFEST-000001.2025/02/18-11:45:58.698 1e44 Recovering log #3.2025/02/18-11:45:58.698 1e44 Reusing old log C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache/000003.log .

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (49812)
Category:	downloaded
Size (bytes):	463460
Entropy (8bit):	5.826012881210844
Encrypted:	false
SSDEEP:	12288:fSuDL7p/DOT+499F/oXLVoHr3cMtaPo+4VmHDy3UVzeb9W/nDCp6RTMBh2dN0TZ3:tRTBN+Z3
MD5:	99C17FEE2633785756EDEEBBA93A04D9
SHA1:	A952F4A40E41A88A2D9C4B16F8174A946492FCDE
SHA-256:	37F9D4BB5DE13C9A05B055E431C0385389E221CA7381C59855E74B2DD9FFBA1C
SHA-512:	8CAB771B2234EFFCFF65084309A7AE29ACACE85A4AFDA5048C5B6CAAE772C962BAD2282A85327A5977C4F024D5B32DED958E4EA5A0AFCDF2B53BB4C486290E49
Malicious:	false
URL:	https://quickview-documents.com/__//kfgpvkva/nqikp
Preview:	<!DOCTYPE html><html lang="en" dir="ltr" xml:lang="en" xmlns="http://www.w3.org/1999/xhtml" class="responsive"><head>. <meta http-equiv="Content-Type" content="text/html;charset=utf-8">. <meta name="msapplication-tap-highlight" content="no">. <meta name="referrer" content="origin-when-cross-origin">. <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0, minimum-scale=1.0, user-scalable=no">. <meta name="format-detection" content="telephone=no">. <style type="text/css">. body {. display: block !important;. }. </style>.. <title>OneDrive</title>. <link rel="icon" href="data:image/vnd.microsoft.icon;base64,AAABAAMAICAAAAEAIACoEAAANgAAABgYAAABACAAiAkAAN4QAAAQEAAAAQAgAGgEAABmGgAAKAAAACAAAABAAAAAAQAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA

File type:	PDF document, version 1.4, 1 pages
Entropy (8bit):	6.390685148336672
TrID:	Adobe Portable Document Format (5005/1) 100.00%
File name:	Asipurch Algoma-Assessment 56242.pdf
File size:	7'447 bytes
MD5:	b04361e2a44aef9393790b5c8d406d6c
SHA1:	9c62e2684bc1930be7963420f1e6f8befbe498ce
SHA256:	b203e5a595ca5571fa563b0535c47665dd3face42c8133f6af4f09d269e0fe35
SHA512:	086ec6595471c61b887ec30edcc80f073750b6650f46fdab503090d92107c2d95084378c61e43eeb65b02fb086423c8f1cf41f0d8d83a029ef673cc668609118
SSDEEP:	96:1bwptYzs6y9zpvqu46TD4ORlTsmSPFvGGGGS+L1wlQy+l0JYcPiEKLLkeWkBIUUe:aptYszzAN6TD/T7SQJGy+ldcveWNP+N
TLSH:	5AE16B50EE4CCD5CD4C19992AB8EB7C6515A30364BC039C0623B7FC9A456B4EBA623E7
File Content Preview:	%PDF-1.4.%.... ReportLab Generated PDF document http://www.reportlab.com.1 0 obj.<<./F1 2 0 R /F2 3 0 R /F3 4 0 R.>>.endobj.2 0 obj.<<./BaseFont /Helvetica /Encoding /WinAnsiEncoding /Name /F1 /Subtype /Type1 /Type /Font.>>.endobj.3 0 obj.<<./BaseFont /Ti

General
Header:	%PDF-1.4
Total Entropy:	6.390685
Total Bytes:	7447
Stream Entropy:	6.400267
Stream Bytes:	5590
Entropy outside Streams:	5.216472
Bytes outside Streams:	1857
Number of EOF found:	1
Bytes after EOF:

Name	Count
obj	10
endobj	10
stream	2
endstream	2
xref	1
trailer	1
startxref	1
/Page	1
/Encrypt	0
/ObjStm	0
/URI	0
/JS	0
/JavaScript	0
/AA	0
/OpenAction	0
/AcroForm	0
/JBIG2Decode	0
/RichMedia	0
/Launch	0
/EmbeddedFile	0

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 18, 2025 17:46:03.199423075 CET	53	57418	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:03.211988926 CET	49947	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:03.212321043 CET	62663	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:03.220112085 CET	53	59098	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:03.225889921 CET	53	62663	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:03.247380972 CET	53	49947	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:04.768058062 CET	53	49332	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:04.962105036 CET	51159	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:04.962465048 CET	62020	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:04.969769001 CET	53	51159	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:04.969980001 CET	53	62020	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:06.968183041 CET	52578	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:06.976089001 CET	53	52578	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:07.409697056 CET	53935	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:07.409826994 CET	59870	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:07.417222023 CET	53	53935	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:07.417319059 CET	53	59870	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:07.881584883 CET	50128	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:07.881824970 CET	54990	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:07.888725042 CET	53	50128	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:07.888794899 CET	53	54990	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:07.995472908 CET	58712	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:07.995726109 CET	51879	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:08.011687994 CET	53	58712	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:08.023988962 CET	53	51879	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:08.605988979 CET	62244	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:08.606122017 CET	57229	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:08.613100052 CET	53	62244	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:08.613816977 CET	53	57229	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:11.416846037 CET	49307	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:11.417002916 CET	51238	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:46:11.424046993 CET	53	51238	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:11.424258947 CET	53	49307	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:17.149499893 CET	138	138	192.168.2.4	192.168.2.255
Feb 18, 2025 17:46:21.914609909 CET	53	54233	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:40.712042093 CET	53	51352	1.1.1.1	192.168.2.4
Feb 18, 2025 17:46:45.757771015 CET	53	56436	1.1.1.1	192.168.2.4
Feb 18, 2025 17:47:02.563488960 CET	53	52453	1.1.1.1	192.168.2.4
Feb 18, 2025 17:47:04.954689026 CET	59637	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:47:04.954842091 CET	56265	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:47:04.961822987 CET	53	56265	1.1.1.1	192.168.2.4
Feb 18, 2025 17:47:04.962363958 CET	53	59637	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:25.148235083 CET	57277	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:25.148432970 CET	54104	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:25.155957937 CET	53	57277	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:25.156148911 CET	53	54104	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:26.739974022 CET	60162	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:26.740098953 CET	63034	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:26.747693062 CET	53	60162	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:26.748435974 CET	53	63034	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:44.862251043 CET	56846	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:44.863234043 CET	63269	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:45.054960966 CET	53	63269	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:45.065016985 CET	53	56846	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:46.083760023 CET	61990	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:46.084172964 CET	51722	53	192.168.2.4	1.1.1.1
Feb 18, 2025 17:48:46.119484901 CET	53	61990	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:46.119529009 CET	53	51722	1.1.1.1	192.168.2.4
Feb 18, 2025 17:48:49.354523897 CET	53	53327	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Feb 18, 2025 17:46:06.989025116 CET	115	OUT	GET / HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Microsoft-CryptoAPI/10.0 Host: x1.i.lencr.org
Feb 18, 2025 17:46:07.616761923 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/pkix-cert Last-Modified: Fri, 04 Aug 2023 20:57:56 GMT ETag: "64cd6654-56f" Content-Disposition: attachment; filename="ISRG Root X1.der" Cache-Control: max-age=62849 Expires: Wed, 19 Feb 2025 10:13:36 GMT Date: Tue, 18 Feb 2025 16:46:07 GMT Content-Length: 1391 Connection: keep-alive Data Raw: 30 82 05 6b 30 82 03 53 a0 03 02 01 02 02 11 00 82 10 cf b0 d2 40 e3 59 44 63 e0 bb 63 82 8b 00 30 0d 06 09 2a 86 48 86 f7 0d 01 01 0b 05 00 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 1e 17 0d 31 35 30 36 30 34 31 31 30 34 33 38 5a 17 0d 33 35 30 36 30 34 31 31 30 34 33 38 5a 30 4f 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 29 30 27 06 03 55 04 0a 13 20 49 6e 74 65 72 6e 65 74 20 53 65 63 75 72 69 74 79 20 52 65 73 65 61 72 63 68 20 47 72 6f 75 70 31 15 30 13 06 03 55 04 03 13 0c 49 53 52 47 20 52 6f 6f 74 20 58 31 30 82 02 22 30 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 82 02 0f 00 30 82 02 0a 02 82 02 01 00 ad e8 24 73 f4 14 37 f3 9b 9e 2b 57 28 1c 87 be dc b7 df 38 90 8c 6e 3c e6 57 a0 78 f7 75 c2 a2 fe f5 6a 6e f6 00 4f 28 db de 68 86 6c 44 93 b6 b1 63 fd 14 12 6b bf 1f d2 ea 31 9b 21 7e d1 33 [TRUNCATED] Data Ascii: 0k0S@YDcc0H0O10UUS1)0'U Internet Security Research Group10UISRG Root X10150604110438Z350604110438Z0O10UUS1)0'U Internet Security Research Group10UISRG Root X10"0H0$s7+W(8n<WxujnO(hlDck1!~3<Hy!KqiJffl~<p)"K~G\|H#S8Oo.IWt/8{p!u0<cOK~w.{JL%p)S$J?aQcq.o[\4ylv;by/&676urIAv5/(ldwnG7Y^hrA)>Y>&$ZL@F:Qn;}rxY>Qx/>{JKsP\|Ctt0[q600\H;}`)A\|;FHvvj=8d+(B"']ypN:'Qnd3COB0@0U0U00UyY{sXn0*HUX
Feb 18, 2025 17:46:07.616780043 CET	509	IN	Data Raw: a9 bc b2 a8 50 d0 0c b1 d8 1a 69 20 27 29 08 ac 61 75 5c 8a 6e f8 82 e5 69 2f d5 f6 56 4b b9 b8 73 10 59 d3 21 97 7e e7 4c 71 fb b2 d2 60 ad 39 a8 0b ea 17 21 56 85 f1 50 0e 59 eb ce e0 59 e9 ba c9 15 ef 86 9d 8f 84 80 f6 e4 e9 91 90 dc 17 9b 62 Data Ascii: Pi ')au\ni/VKsY!~Lq`9!VPYYbEf\|o;'}~"+"4[XT&3L-<W,N;1"ss993#L<U)"k;W:pMMl]+NEJ&rj

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:04 UTC	709	OUT	GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1 Host: viewdocu.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:04 UTC	1332	IN	HTTP/1.1 403 Forbidden Date: Tue, 18 Feb 2025 16:46:04 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-content-options: nosniff x-frame-options: SAMEORIGIN cf-mitigated: challenge server-timing: chlray;desc="913f7dc01c6a6fcd"
2025-02-18 16:46:04 UTC	908	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 58 7a 39 52 49 58 79 4f 64 44 41 30 33 31 57 61 51 77 41 49 50 4a 65 4c 43 55 50 42 38 34 6b 75 62 6d 47 4c 41 74 6e 65 30 31 47 63 77 4c 77 70 70 55 47 61 4d 66 73 54 45 78 6f 5a 6e 2b 70 4a 35 74 41 50 2f 57 59 6e 64 2b 41 75 32 47 61 56 75 6a 2b 41 71 45 6b 4e 39 2b 4e 4a 4f 79 6f 66 42 6a 79 35 68 5a 41 46 2f 67 4d 3d 24 2f 6f 42 53 72 6b 58 71 31 67 6e 34 6b 68 73 2b 61 72 45 5a 32 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: Xz9RIXyOdDA031WaQwAIPJeLCUPB84kubmGLAtne01GcwLwppUGaMfsTExoZn+pJ5tAP/WYnd+Au2GaVuj+AqEkN9+NJOyofBjy5hZAF/gM=$/oBSrkXq1gn4khs+arEZ2A==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-02-18 16:46:04 UTC	498	IN	Data Raw: 32 33 34 35 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 2345<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-02-18 16:46:04 UTC	1369	IN	Data Raw: 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f 6c 2c 4e 6f 74 6f 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 7d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 Data Ascii: Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbol,Noto Color Emoji}body{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (wi
2025-02-18 16:46:04 UTC	1369	IN	Data Raw: 70 61 6e 20 69 64 3d 22 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 65 78 74 22 3e 45 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 61 6e 64 20 63 6f 6f 6b 69 65 73 20 74 6f 20 63 6f 6e 74 69 6e 75 65 3c 2f 73 70 61 6e 3e 3c 2f 64 69 76 3e 3c 2f 6e 6f 73 63 72 69 70 74 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 73 63 72 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 76 69 65 77 64 6f 63 75 2e 6f 6e 6c 69 6e 65 22 2c 63 54 79 70 65 3a 20 27 6d 61 6e 61 67 65 64 27 2c 63 52 61 79 3a 20 27 39 31 33 66 37 64 63 30 31 63 36 61 36 66 63 64 27 2c 63 48 3a 20 27 65 4a 66 4b 47 56 64 39 75 5f 2e 57 44 6b 7a 67 7a 33 33 59 43 69 57 76 6d 4d Data Ascii: pan id="challenge-error-text">Enable JavaScript and cookies to continue</span></div></noscript></div></div><script>(function(){window._cf_chl_opt={cvId: '3',cZone: "viewdocu.online",cType: 'managed',cRay: '913f7dc01c6a6fcd',cH: 'eJfKGVd9u_.WDkzgz33YCiWvmM
2025-02-18 16:46:04 UTC	1369	IN	Data Raw: 67 53 77 35 30 5f 52 76 65 46 45 63 6c 63 41 56 68 30 59 6c 4e 47 77 68 5f 4d 4d 58 54 6f 55 30 44 43 42 34 73 33 7a 46 42 69 71 67 50 4c 42 58 69 36 76 35 47 49 78 4a 76 6d 69 4d 65 5f 5f 6c 4f 32 4e 2e 69 5a 54 6c 65 47 4e 54 52 30 30 58 68 58 39 59 63 34 59 52 2e 76 47 4c 4a 43 42 38 72 38 6c 61 5a 75 49 61 38 72 33 43 36 54 61 42 54 75 45 76 54 6e 35 73 57 4a 33 4e 30 30 70 43 73 77 43 62 61 69 42 54 44 74 4c 42 49 50 36 59 51 56 6d 45 71 46 30 6b 7a 46 42 51 5f 69 65 35 68 36 54 32 70 45 59 36 48 37 45 61 46 4f 59 53 4e 52 69 32 7a 47 67 59 46 6c 4b 55 61 71 79 33 4b 49 6c 62 30 65 49 44 6e 39 45 76 70 48 78 6b 63 38 38 61 71 33 33 2e 69 62 79 45 73 48 36 46 7a 6e 4d 51 78 5a 79 6d 52 63 43 31 73 4b 47 69 57 55 6c 69 76 32 69 77 69 62 71 4f 42 58 69 Data Ascii: gSw50_RveFEclcAVh0YlNGwh_MMXToU0DCB4s3zFBiqgPLBXi6v5GIxJvmiMe__lO2N.iZTleGNTR00XhX9Yc4YR.vGLJCB8r8laZuIa8r3C6TaBTuEvTn5sWJ3N00pCswCbaiBTDtLBIP6YQVmEqF0kzFBQ_ie5h6T2pEY6H7EaFOYSNRi2zGgYFlKUaqy3KIlb0eIDn9EvpHxkc88aq33.ibyEsH6FznMQxZymRcC1sKGiWUliv2iwibqOBXi
2025-02-18 16:46:04 UTC	1369	IN	Data Raw: 48 2e 4c 4b 67 45 46 75 55 6f 6b 78 43 45 35 6a 65 30 57 62 48 4b 66 34 39 61 45 66 64 77 39 72 56 70 56 6c 2e 50 4b 63 58 4b 4c 49 42 63 70 68 43 67 54 7a 59 66 42 63 53 4c 67 36 56 42 74 74 47 50 6c 7a 6d 6e 6a 70 32 70 43 4d 56 65 55 49 6e 41 59 51 36 55 70 67 44 66 4d 48 31 42 77 32 57 55 44 66 6c 68 54 4e 5f 71 63 42 30 4e 47 63 46 76 53 74 34 4d 42 39 74 55 36 63 52 56 2e 6a 59 45 55 49 32 5a 6f 77 65 56 34 4d 31 70 37 61 6a 73 48 6f 37 35 32 4f 52 57 34 78 65 74 36 63 72 6e 47 62 61 66 5f 78 4b 56 39 38 54 43 4e 48 4c 38 70 33 57 59 63 4d 48 6a 79 4c 6f 4a 52 51 51 6e 59 68 5a 4a 41 6c 4a 2e 34 78 33 37 4e 5a 46 69 2e 6c 59 31 4d 32 62 2e 4f 30 73 77 37 52 5f 38 47 75 59 66 6c 58 47 6d 56 69 6b 53 42 6d 51 55 48 58 71 58 71 33 6f 6d 2e 69 64 62 49 Data Ascii: H.LKgEFuUokxCE5je0WbHKf49aEfdw9rVpVl.PKcXKLIBcphCgTzYfBcSLg6VBttGPlzmnjp2pCMVeUInAYQ6UpgDfMH1Bw2WUDflhTN_qcB0NGcFvSt4MB9tU6cRV.jYEUI2ZoweV4M1p7ajsHo752ORW4xet6crnGbaf_xKV98TCNHL8p3WYcMHjyLoJRQQnYhZJAlJ.4x37NZFi.lY1M2b.O0sw7R_8GuYflXGmVikSBmQUHXqXq3om.idbI
2025-02-18 16:46:04 UTC	1369	IN	Data Raw: 73 7a 51 6c 50 70 6b 73 32 4a 44 4a 76 45 39 73 79 6a 39 39 35 50 65 47 38 56 34 4e 50 6a 61 66 4c 41 5a 41 4b 69 45 65 57 51 53 70 69 36 4f 73 31 37 76 33 75 75 6a 59 6b 6f 62 5a 4f 74 69 57 36 63 55 59 2e 54 72 58 57 33 5f 5f 53 48 38 36 5f 75 4c 4b 68 67 6c 69 6b 6d 30 66 69 72 59 30 42 6d 49 4f 32 59 4c 65 64 4e 54 58 6c 62 52 36 52 44 49 69 39 4a 2e 57 58 6a 41 6d 38 41 74 68 43 74 37 36 30 54 34 41 31 6e 75 61 30 54 58 44 68 56 50 43 64 74 4c 39 67 48 47 36 42 49 4f 36 63 49 49 38 32 6a 6c 39 34 30 33 51 45 79 2e 4f 61 61 35 6e 37 41 47 38 45 4b 77 41 4f 58 6b 72 6f 4a 70 43 67 4a 43 47 72 34 33 64 31 6a 71 6e 70 36 41 47 61 59 71 54 39 65 50 4c 79 58 6d 4f 32 56 63 4d 73 79 45 70 4b 53 53 33 30 4c 4e 65 73 64 78 68 54 45 4b 6e 79 70 6c 35 47 4d 67 Data Ascii: szQlPpks2JDJvE9syj995PeG8V4NPjafLAZAKiEeWQSpi6Os17v3uujYkobZOtiW6cUY.TrXW3__SH86_uLKhglikm0firY0BmIO2YLedNTXlbR6RDIi9J.WXjAm8AthCt760T4A1nua0TXDhVPCdtL9gHG6BIO6cII82jl9403QEy.Oaa5n7AG8EKwAOXkroJpCgJCGr43d1jqnp6AGaYqT9ePLyXmO2VcMsyEpKSS30LNesdxhTEKnypl5GMg
2025-02-18 16:46:04 UTC	1369	IN	Data Raw: 64 56 36 53 36 51 66 31 47 39 46 72 31 5a 53 71 68 66 5f 4c 5a 4d 41 4b 4c 69 4e 62 72 38 7a 58 55 44 5f 33 72 4c 44 69 75 56 74 64 6c 36 4b 45 56 70 6d 37 46 63 55 76 42 79 67 75 43 6a 5a 39 39 36 58 68 31 56 52 4e 33 48 56 71 44 4e 6c 44 37 37 43 55 68 6a 5f 6e 43 38 53 68 5f 54 54 33 76 58 49 71 53 61 61 70 6b 50 2e 51 4b 55 71 61 6e 61 6b 4d 79 50 45 63 77 6b 6c 50 65 63 68 39 74 71 66 4e 4b 4c 58 33 63 61 65 5f 71 67 59 43 4f 36 6a 45 71 6f 79 66 5a 62 4e 77 50 72 54 33 4e 55 74 6c 74 35 79 66 79 51 6b 35 44 41 42 79 7a 58 39 44 5a 59 41 44 77 36 42 46 42 46 59 52 42 61 63 42 72 2e 61 44 4a 59 75 4b 74 41 38 38 74 6f 72 63 61 6c 2e 54 5f 72 4d 64 37 4d 77 75 75 56 43 33 45 44 34 62 61 62 76 78 6c 35 4e 6a 67 42 41 46 6f 6f 71 4a 4f 47 75 53 41 73 33 Data Ascii: dV6S6Qf1G9Fr1ZSqhf_LZMAKLiNbr8zXUD_3rLDiuVtdl6KEVpm7FcUvByguCjZ996Xh1VRN3HVqDNlD77CUhj_nC8Sh_TT3vXIqSaapkP.QKUqanakMyPEcwklPech9tqfNKLX3cae_qgYCO6jEqoyfZbNwPrT3NUtlt5yfyQk5DAByzX9DZYADw6BFBFYRBacBr.aDJYuKtA88torcal.T_rMd7MwuuVC3ED4babvxl5NjgBAFooqJOGuSAs3
2025-02-18 16:46:04 UTC	325	IN	Data Raw: 6e 73 2e 63 6f 6d 5c 2f 3f 75 66 6b 74 6a 6f 66 74 26 5f 5f 63 66 5f 63 68 6c 5f 72 74 5f 74 6b 3d 30 37 4a 6b 43 4a 2e 46 6a 67 6e 58 48 57 39 76 35 41 48 34 62 5a 4d 72 48 55 36 32 66 4b 5a 4b 6f 4e 56 4b 58 72 2e 73 56 44 67 2d 31 37 33 39 38 39 37 31 36 34 2d 31 2e 30 2e 31 2e 31 2d 39 6c 77 72 50 4e 70 70 66 37 58 71 51 49 50 44 77 71 49 51 37 47 46 57 4e 4e 76 70 70 55 55 6f 71 59 56 67 58 4f 2e 38 72 47 77 22 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: ns.com\/?ufktjoft&__cf_chl_rt_tk=07JkCJ.FjgnXHW9v5AH4bZMrHU62fKZKoNVKXr.sVDg-1739897164-1.0.1.1-9lwrPNppf7XqQIPDwqIQ7GFWNNvppUUoqYVgXO.8rGw" + window._cf_chl_opt.cOgUHash);cpo.onload = function() {history.replaceState(null, null, ogU);}}document.getElemen
2025-02-18 16:46:04 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:05 UTC	538	OUT	OPTIONS /report/v4?s=MN3AehcSzNyzaQiXWeixDr6Eh98Tlbf2SU5%2FDiXgLvOOkE9sKv5XuxRs0d6SFdGY38ozbq9fe7NgUsyD8l%2FSFZlnbHVIjNmiUM%2F0ag08NXo4DvBzJcRlbm1gy%2FwXDCrOs2I%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://viewdocu.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:05 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 18 Feb 2025 16:46:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:06 UTC	981	OUT	GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1 Host: viewdocu.online Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:06 UTC	1332	IN	HTTP/1.1 403 Forbidden Date: Tue, 18 Feb 2025 16:46:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-content-options: nosniff x-frame-options: SAMEORIGIN cf-mitigated: challenge server-timing: chlray;desc="913f7dc8f916e635"
2025-02-18 16:46:06 UTC	906	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 30 4a 62 30 72 77 70 71 41 4d 46 38 6e 69 64 4c 74 2f 4a 5a 67 45 31 7a 37 33 6a 37 31 4d 68 32 45 78 41 69 54 5a 70 6d 4e 30 35 69 50 43 59 32 45 65 36 46 6b 30 68 74 37 53 7a 34 35 51 5a 4a 6c 37 50 69 38 41 33 39 57 4c 53 68 50 64 36 49 32 4a 4c 44 4d 58 56 6c 37 35 50 78 36 54 50 39 48 69 42 65 6b 2b 56 39 38 34 45 3d 24 61 74 4f 33 45 65 6e 71 4c 76 70 67 69 2f 7a 67 41 37 33 78 42 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: 0Jb0rwpqAMF8nidLt/JZgE1z73j71Mh2ExAiTZpmN05iPCY2Ee6Fk0ht7Sz45QZJl7Pi8A39WLShPd6I2JLDMXVl75Px6TP9HiBek+V984E=$atO3EenqLvpgi/zgA73xBw==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-02-18 16:46:06 UTC	1369	IN	Data Raw: 32 33 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 23da<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-02-18 16:46:06 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-02-18 16:46:06 UTC	1369	IN	Data Raw: 75 4a 6b 4c 59 6f 4f 59 6a 6a 69 56 67 38 69 32 76 4d 39 5a 43 32 54 6d 4e 70 4d 72 52 73 4c 34 6b 2d 31 37 33 39 38 39 37 31 36 36 2d 31 2e 32 2e 31 2e 31 2d 67 37 41 63 73 4e 71 44 74 72 56 71 73 66 59 76 4a 44 4f 53 30 37 37 52 67 53 2e 72 65 52 4f 32 44 48 6e 45 38 51 6e 63 45 2e 47 77 6a 54 64 65 69 50 66 50 39 63 4f 35 42 72 31 7a 4a 4f 5a 32 37 5f 75 45 41 46 41 36 63 77 48 32 30 2e 33 4a 4a 6b 5f 4a 6d 6c 38 73 32 65 79 73 65 32 38 46 31 54 72 43 59 64 54 56 5a 6b 4b 39 63 6b 64 6d 6d 57 41 63 45 56 6b 6d 42 6a 36 48 65 79 52 4a 32 51 74 48 33 4f 49 62 4f 36 51 48 48 46 75 6d 67 7a 71 59 7a 75 68 41 52 55 53 6a 52 35 5a 6f 31 54 70 44 45 75 54 71 63 46 77 44 4b 47 54 73 44 66 35 52 66 47 53 66 4c 37 78 69 41 69 56 64 66 30 71 61 67 62 5a 44 33 4e Data Ascii: uJkLYoOYjjiVg8i2vM9ZC2TmNpMrRsL4k-1739897166-1.2.1.1-g7AcsNqDtrVqsfYvJDOS077RgS.reRO2DHnE8QncE.GwjTdeiPfP9cO5Br1zJOZ27_uEAFA6cwH20.3JJk_Jml8s2eyse28F1TrCYdTVZkK9ckdmmWAcEVkmBj6HeyRJ2QtH3OIbO6QHHFumgzqYzuhARUSjR5Zo1TpDEuTqcFwDKGTsDf5RfGSfL7xiAiVdf0qagbZD3N
2025-02-18 16:46:06 UTC	1369	IN	Data Raw: 6b 76 54 39 32 34 67 79 62 6f 4c 66 59 37 56 4b 36 53 49 46 64 51 45 64 66 70 5f 46 39 4e 52 34 70 50 35 32 75 48 76 43 36 6f 65 58 55 2e 55 57 62 61 39 68 73 37 46 57 38 4f 4a 58 68 65 46 5f 56 5f 5f 49 56 4e 45 65 6c 7a 42 65 73 55 78 6a 45 71 48 73 6a 54 4c 75 49 56 78 32 35 4d 2e 61 44 63 4f 4f 69 61 69 47 75 5a 39 45 5a 66 50 4f 57 33 65 30 45 4b 61 67 61 30 4e 70 63 63 67 4d 52 6f 34 73 77 33 4e 4f 6b 2e 50 73 34 35 61 5f 6a 57 56 55 4d 48 41 42 36 54 64 38 4f 4f 58 34 6c 57 54 38 49 42 79 6c 73 6d 45 6f 65 66 47 38 37 32 65 77 56 6b 79 64 71 34 7a 4a 33 74 31 7a 6e 70 30 4b 72 36 76 6e 37 48 5f 5a 5f 6a 71 66 72 44 6c 6f 56 67 31 44 72 6d 36 39 4f 78 4d 6c 4a 76 33 47 37 72 38 6d 39 7a 50 4e 79 62 6f 58 37 75 36 77 48 54 35 5a 32 45 5f 54 59 37 61 Data Ascii: kvT924gyboLfY7VK6SIFdQEdfp_F9NR4pP52uHvC6oeXU.UWba9hs7FW8OJXheF_V__IVNEelzBesUxjEqHsjTLuIVx25M.aDcOOiaiGuZ9EZfPOW3e0EKaga0NpccgMRo4sw3NOk.Ps45a_jWVUMHAB6Td8OOX4lWT8IBylsmEoefG872ewVkydq4zJ3t1znp0Kr6vn7H_Z_jqfrDloVg1Drm69OxMlJv3G7r8m9zPNyboX7u6wHT5Z2E_TY7a
2025-02-18 16:46:06 UTC	1369	IN	Data Raw: 4e 49 58 46 69 4e 30 4b 50 6a 35 46 73 6b 56 31 37 77 36 70 63 51 6f 61 55 45 74 6e 2e 4d 6d 5f 57 45 4e 6b 5a 4d 51 56 6a 53 66 34 35 4c 70 55 74 36 45 5f 76 39 4a 33 36 35 53 59 66 77 4f 73 6f 47 76 4f 46 33 6a 4e 55 37 6f 35 62 79 75 78 66 69 62 49 61 66 38 55 75 38 46 75 50 35 48 56 5a 48 61 6b 75 61 31 59 56 58 31 36 4e 4d 6f 57 72 64 78 73 37 67 43 58 36 39 5f 6d 5a 50 36 66 4e 65 2e 63 73 69 6c 78 6d 74 5f 63 48 62 56 74 5a 41 56 45 38 4f 66 53 63 48 47 73 37 37 5f 42 49 6a 64 45 76 75 68 58 74 35 41 30 39 31 6d 6c 34 55 6d 76 69 38 49 47 68 5a 45 61 64 56 59 6b 72 79 78 59 49 6b 6a 64 52 6e 68 34 79 33 59 6b 50 37 51 67 58 41 51 41 53 79 2e 6e 75 33 79 48 50 65 70 6e 4d 4c 54 42 71 54 52 6f 33 53 32 79 58 68 58 79 56 48 78 46 64 45 6c 46 43 7a 7a Data Ascii: NIXFiN0KPj5FskV17w6pcQoaUEtn.Mm_WENkZMQVjSf45LpUt6E_v9J365SYfwOsoGvOF3jNU7o5byuxfibIaf8Uu8FuP5HVZHakua1YVX16NMoWrdxs7gCX69_mZP6fNe.csilxmt_cHbVtZAVE8OfScHGs77_BIjdEvuhXt5A091ml4Umvi8IGhZEadVYkryxYIkjdRnh4y3YkP7QgXAQASy.nu3yHPepnMLTBqTRo3S2yXhXyVHxFdElFCzz
2025-02-18 16:46:06 UTC	1369	IN	Data Raw: 55 77 46 54 52 38 50 2e 61 79 4e 75 61 75 64 5f 4b 64 6e 31 35 6f 52 63 62 70 55 34 51 53 37 37 4c 55 56 4c 53 58 6f 41 77 50 41 75 36 50 4e 75 68 36 53 6c 37 4a 76 76 49 46 69 64 68 70 68 5a 5a 34 74 35 32 71 67 58 68 50 63 63 35 49 31 63 36 47 66 77 2e 4e 34 2e 7a 76 39 76 53 46 33 62 6b 36 59 42 54 4a 55 33 6e 55 71 35 69 54 5f 4b 33 4b 35 55 73 34 77 58 76 5a 67 70 55 71 64 6c 53 44 69 62 64 43 58 73 31 42 57 61 6c 35 30 35 30 43 47 72 74 43 7a 58 39 58 6c 4e 42 59 38 59 35 66 4a 71 34 63 6e 50 4b 2e 41 69 46 58 34 39 4a 6e 45 75 49 67 67 38 69 33 4e 66 35 75 61 6c 68 68 78 49 35 35 50 73 58 65 51 46 56 59 64 75 46 52 63 58 41 77 74 6e 47 63 78 46 6a 66 50 65 45 41 65 4e 38 30 59 6c 30 63 6e 63 44 58 68 75 55 7a 4a 54 5a 78 72 68 58 4e 39 73 56 77 76 Data Ascii: UwFTR8P.ayNuaud_Kdn15oRcbpU4QS77LUVLSXoAwPAu6PNuh6Sl7JvvIFidhphZZ4t52qgXhPcc5I1c6Gfw.N4.zv9vSF3bk6YBTJU3nUq5iT_K3K5Us4wXvZgpUqdlSDibdCXs1BWal5050CGrtCzX9XlNBY8Y5fJq4cnPK.AiFX49JnEuIgg8i3Nf5ualhhxI55PsXeQFVYduFRcXAwtnGcxFjfPeEAeN80Yl0cncDXhuUzJTZxrhXN9sVwv
2025-02-18 16:46:06 UTC	972	IN	Data Raw: 6a 33 76 59 22 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 39 31 33 66 37 64 63 38 66 39 31 36 65 36 33 35 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 20 3d 3d 3d 20 27 27 20 26 26 20 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2e 69 6e 64 65 78 4f 66 28 27 23 27 29 20 21 3d 3d 20 2d 31 20 3f 20 27 23 27 20 3a 20 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 77 69 6e 64 6f 77 Data Ascii: j3vY"};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dc8f916e635';window._cf_chl_opt.cOgUHash = location.hash === '' && location.href.indexOf('#') !== -1 ? '#' : location.hash;window
2025-02-18 16:46:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:06 UTC	480	OUT	POST /report/v4?s=MN3AehcSzNyzaQiXWeixDr6Eh98Tlbf2SU5%2FDiXgLvOOkE9sKv5XuxRs0d6SFdGY38ozbq9fe7NgUsyD8l%2FSFZlnbHVIjNmiUM%2F0ag08NXo4DvBzJcRlbm1gy%2FwXDCrOs2I%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 437 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:06 UTC	437	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 38 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 37 33 37 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 76 69 65 77 64 6f 63 75 2e 6f 6e 6c 69 6e 65 Data Ascii: [{"age":18,"body":{"elapsed_time":1737,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","url":"https://viewdocu.online
2025-02-18 16:46:06 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 18 Feb 2025 16:46:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:07 UTC	1035	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dc8f916e635 HTTP/1.1 Host: viewdocu.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft&__cf_chl_rt_tk=ok5lWynhKehsML0JcLtkiGC3z99PLghPm710ORxI9SQ-1739897166-1.0.1.1-U9T4M_Ru7hN1BTak5qElxc48cMicKIAeZzQNUiu1zT8 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:07 UTC	871	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:07 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 95095 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbIZo5YzzMC1VfO1tWgeDHg9Kix6frOgromWFM1bYg8xvn8a13g78HTXmAW%2Bfb1%2BQO1Qtfs0hywhLc8dIrTNnnRNSnf%2FIbpwfPkTKiv1t%2FXK2JZpuCCZf8CtjB7mB8y9Jr4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 913f7dd15fd3c346-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1698&min_rtt=1695&rtt_var=642&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1635&delivery_rate=1695702&cwnd=195&unsent_bytes=0&cid=1d6fbfe8e2625a38&ts=159&x=0"
2025-02-18 16:46:07 UTC	498	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 75 61 53 52 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 42 4b 6e 5a 71 30 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 7d 2c 22 74 72 61 6e 73 6c 61 74 69 6f 6e 73 22 3a 7b 22 69 6e 74 65 72 61 63 74 69 76 65 Data Ascii: window._cf_chl_opt.uaSR=true;window._cf_chl_opt.BKnZq0={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support"},"translations":{"interactive
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 73 65 73 25 32 30 61 25 32 30 73 65 63 75 72 69 74 79 25 32 30 73 65 72 76 69 63 65 25 32 30 74 6f 25 32 30 70 72 6f 74 65 63 74 25 32 30 61 67 61 69 6e 73 74 25 32 30 6d 61 6c 69 63 69 6f 75 73 25 32 30 62 6f 74 73 2e 25 32 30 59 6f 75 25 32 30 6d 61 79 25 32 30 73 65 65 25 32 30 74 68 69 73 25 32 30 70 61 67 65 25 32 30 77 68 69 6c 65 25 32 30 74 68 65 25 32 30 73 69 74 65 25 32 30 76 65 72 69 66 69 65 73 25 32 30 79 6f 75 25 32 37 72 65 25 32 30 6e 6f 74 25 32 30 61 25 32 30 62 6f 74 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 3a 22 25 32 35 25 37 42 70 6c 61 63 65 68 6f 6c 64 65 72 2e 63 6f 6d 25 37 44 25 32 30 6e Data Ascii: ses%20a%20security%20service%20to%20protect%20against%20malicious%20bots.%20You%20may%20see%20this%20page%20while%20the%20site%20verifies%20you%27re%20not%20a%20bot.","turnstile_timeout":"Timed%20out","js_cookies_missing_aux":"%25%7Bplaceholder.com%7D%20n
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 63 65 25 32 30 63 6c 6f 63 6b 25 32 30 69 73 25 32 30 73 65 74 25 32 30 74 6f 25 32 30 61 25 32 30 77 72 6f 6e 67 25 32 30 74 69 6d 65 25 32 30 6f 72 25 32 30 74 68 69 73 25 32 30 63 68 61 6c 6c 65 6e 67 65 25 32 30 70 61 67 65 25 32 30 77 61 73 25 32 30 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 63 68 61 6c 6c 65 6e 67 65 5f 72 75 6e 6e 69 6e 67 22 3a 22 56 65 72 69 66 79 69 6e 67 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 2e 25 32 30 54 68 69 73 25 32 30 6d 61 79 25 32 30 74 61 6b 65 25 32 30 61 25 32 30 66 65 77 25 32 30 73 Data Ascii: ce%20clock%20is%20set%20to%20a%20wrong%20time%20or%20this%20challenge%20page%20was%20accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","challenge_running":"Verifying%20you%20are%20human.%20This%20may%20take%20a%20few%20s
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 65 72 6e 65 74 25 32 30 63 6f 6e 6e 65 63 74 69 6f 6e 25 32 30 61 6e 64 25 32 30 25 33 43 61 25 32 30 63 6c 61 73 73 25 33 44 25 32 32 72 65 66 72 65 73 68 5f 6c 69 6e 6b 25 32 32 25 33 45 72 65 66 72 65 73 68 25 32 30 74 68 65 25 32 30 70 61 67 65 25 33 43 25 32 46 61 25 33 45 25 32 30 69 66 25 32 30 74 68 65 25 32 30 69 73 73 75 65 25 32 30 70 65 72 73 69 73 74 73 2e 22 2c 22 70 61 67 65 5f 74 69 74 6c 65 22 3a 22 4a 75 73 74 25 32 30 61 25 32 30 6d 6f 6d 65 6e 74 2e 2e 2e 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 Data Ascii: ernet%20connection%20and%20%3Ca%20class%3D%22refresh_link%22%3Erefresh%20the%20page%3C%2Fa%3E%20if%20the%20issue%20persists.","page_title":"Just%20a%20moment...","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_feedback_descripti
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 75 72 6e 73 74 69 6c 65 5f 6f 76 65 72 72 75 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 46 2c 65 4d 2c 65 4e 2c 65 52 2c 65 59 2c 66 30 2c 66 61 2c 66 64 2c 66 66 2c 66 67 2c 66 68 2c 66 75 2c 66 43 2c 66 49 2c Data Ascii: urnstile_timeout":false,"turnstile_feedback_description":false,"turnstile_overrun_description":false,"testing_only_always_pass":false,"feedback_report_output_subtitle":false},"rtl":false,"lang":"en-us"};~function(gF,eM,eN,eR,eY,f0,fa,fd,ff,fg,fh,fu,fC,fI,
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 67 52 28 38 39 36 29 5b 67 52 28 35 35 39 29 5d 28 27 7c 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6a 5b 6b 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6a 3d 6b 5b 67 52 28 38 34 33 29 5d 28 32 2c 68 5b 67 52 28 31 32 36 32 29 5d 28 68 5b 67 52 28 38 33 31 29 5d 28 44 26 32 35 35 2e 38 2c 34 29 7c 6e 3e 3e 34 2c 31 30 32 33 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6c 3d 31 2b 28 6d 2f 3d 32 29 2a 28 68 5b 67 52 28 31 30 38 31 29 5d 28 6e 2c 33 29 26 31 2e 37 34 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6c 2b 3d 28 6d 2f 3d 32 29 2a 68 5b 67 52 28 31 32 34 38 29 5d 28 68 5b 67 52 28 31 32 35 36 29 5d 28 6e 2c 32 29 2c 31 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 6d 3d 31 3b 63 6f 6e 74 69 6e Data Ascii: gR(896)[gR(559)]('\|'),k=0;!![];){switch(j[k++]){case'0':j=k[gR(843)](2,h[gR(1262)](h[gR(831)](D&255.8,4)\|n>>4,1023));continue;case'1':l=1+(m/=2)(h[gR(1081)](n,3)&1.74);continue;case'2':l+=(m/=2)h[gR(1248)](h[gR(1256)](n,2),1);continue;case'3':m=1;contin
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 26 69 7d 2c 27 6e 57 6a 6a 69 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 72 44 52 69 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 6c 52 53 73 45 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 70 63 6f 62 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 21 3d 3d 68 7d 2c 27 79 51 55 53 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 3d 3d 68 7d 2c 27 47 64 48 70 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 72 45 4a 57 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 Data Ascii: h,i){return h&i},'nWjji':function(h,i){return h-i},'rDRid':function(h,i){return i==h},'lRSsE':function(h,i){return h==i},'pcobU':function(h,i){return i!==h},'yQUSK':function(h,i){return i==h},'GdHpU':function(h,i){return i\|h},'rEJWM':function(h,i){return
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 32 35 36 3e 43 5b 67 55 28 31 30 35 30 29 5d 28 30 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 55 28 36 37 33 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 55 28 38 36 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 55 28 31 30 35 30 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 55 28 31 32 32 34 29 5d 28 38 2c 73 29 3b 48 3d 48 3c 3c 31 2e 36 31 7c 4d 26 31 2e 36 33 2c 64 5b 67 55 28 31 30 36 37 29 5d 28 49 2c 64 5b 67 55 28 33 33 36 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 67 55 28 38 36 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 Data Ascii: 1)](B,C)){if(256>C[gU(1050)](0)){for(s=0;s<F;H<<=1,I==d[gU(673)](j,1)?(I=0,G[gU(868)](o(H)),H=0):I++,s++);for(M=C[gU(1050)](0),s=0;d[gU(1224)](8,s);H=H<<1.61\|M&1.63,d[gU(1067)](I,d[gU(336)](j,1))?(I=0,G[gU(868)](o(H)),H=0):I++,M>>=1,s++);}else{for(M=1,s=0
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 2c 46 29 3b 48 3d 48 3c 3c 31 7c 64 5b 67 55 28 32 37 39 29 5d 28 4d 2c 31 29 2c 64 5b 67 55 28 33 39 36 29 5d 28 49 2c 6a 2d 31 29 3f 28 49 3d 30 2c 47 5b 67 55 28 38 36 38 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 44 2d 2d 2c 30 3d 3d 44 26 26 46 2b 2b 7d 66 6f 72 28 4d 3d 32 2c 73 3d 30 3b 64 5b 67 55 28 39 36 33 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 55 28 39 38 32 29 5d 28 48 3c 3c 31 2e 32 35 2c 4d 26 31 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 55 28 38 36 38 29 5d 28 64 5b 67 55 28 33 31 33 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 29 7b 47 5b 67 55 28 38 36 38 29 5d 28 6f 28 48 29 29 Data Ascii: ,F);H=H<<1\|d[gU(279)](M,1),d[gU(396)](I,j-1)?(I=0,G[gU(868)](o(H)),H=0):I++,M>>=1,s++);D--,0==D&&F++}for(M=2,s=0;d[gU(963)](s,F);H=d[gU(982)](H<<1.25,M&1),j-1==I?(I=0,G[gU(868)](d[gU(313)](o,H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==j-1){G[gU(868)](o(H))
2025-02-18 16:46:07 UTC	1369	IN	Data Raw: 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 64 5b 67 58 28 34 39 37 29 5d 28 6f 2c 49 2b 2b 29 29 2c 4a 7c 3d 64 5b 67 58 28 37 31 38 29 5d 28 30 3c 4e 3f 31 3a 30 2c 46 29 2c 46 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4f 3d 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 58 28 38 34 33 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 67 58 28 34 32 32 29 5d 28 46 2c 4b 29 3b 4e 3d 64 5b 67 58 28 38 33 39 29 5d 28 47 2c 48 29 2c 48 3e 3e 3d 31 2c 48 3d 3d 30 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4e 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 3b 73 5b 42 2b 2b 5d 3d 65 28 4a 29 2c 4f 3d 42 2d 31 2c 78 2d 2d 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 67 58 28 38 34 33 29 Data Ascii: ,H)&&(H=j,G=d[gX(497)](o,I++)),J\|=d[gX(718)](0<N?1:0,F),F<<=1);switch(O=J){case 0:for(J=0,K=Math[gX(843)](2,8),F=1;d[gX(422)](F,K);N=d[gX(839)](G,H),H>>=1,H==0&&(H=j,G=o(I++)),J\|=(0<N?1:0)*F,F<<=1);s[B++]=e(J),O=B-1,x--;break;case 1:for(J=0,K=Math[gX(843)

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:08 UTC	583	OUT	GET /turnstile/v0/g/0e3e6804b971/api.js?onload=UhLpB4&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://viewdocu.online sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:08 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48264 Connection: close accept-ranges: bytes last-modified: Fri, 14 Feb 2025 14:12:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 913f7dd6be6ac328-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:08 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 6e 2c 6f 2c 63 2c 6c 2c 67 29 7b 74 72 79 7b 76 61 72 20 79 3d 65 5b 6c 5d 28 67 29 2c 73 3d 79 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 6e 28 70 29 3b 72 65 74 75 72 6e 7d 79 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 6e 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 6e 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,n,o,c,l,g){try{var y=e[l](g),s=y.value}catch(p){n(p);return}y.done?t(s):Promise.resolve(s).then(o,c)}function jt(e){return function(){var t=this,n=arguments;return new Promise(function(o,c){var l=e.apply(t,n);funct
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 53 72 28 65 2c 74 29 7b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 6e 2e 70 75 73 68 2e 61 70 70 6c 79 28 6e 2c 6f 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Sr(e,t){var n=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),n.push.apply(n,o)}return n}function it(e,t){return t=t!=nu
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 6e 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 53 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 71 74 28 65 29 7c 7c 7a 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 56 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(n))return ot(e,t)}}function Se(e,t){return qt(e)\|\|zt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Ve(e,t){var n={label:0,sent:function(){if(l[0
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 50 65 3d 33 30 30 30 33 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 31 3b 76 61 72 20 6a 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var Pe=300030;var We=300031;var j;(fu
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 45 56 45 52 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 41 4e 55 41 4c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 55 54 4f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 4c 57 41 59 53 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 58 45 43 55 54 45 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 4e 54 45 52 41 43 54 49 4f 4e 5f 4f 4e 4c 59 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 Data Ascii: e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ee\|\|(ee={}));var ce;(function(e){e.NEVER="never",e.MANUAL="manual",e.AUTO="auto"})(ce\|\|(ce={}));var Q;(function(e){e.ALWAYS="always",e.EXECUTE="execute",e.INTERACTION_ONLY="interaction-only"})(Q\|\|(Q={}));v
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 6f 66 20 65 3d 3d 22 73 74 72 69 6e 67 22 26 26 4e 72 2e 74 65 73 74 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 4c 2e 4e 4f 52 4d 41 4c 2c 4c 2e 43 4f 4d 50 41 43 54 2c 4c 2e 49 4e 56 49 53 49 42 4c 45 2c 4c 2e 46 4c 45 58 49 42 4c 45 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4d 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 6b 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 Data Ascii: of e=="string"&&Nr.test(e)}function pt(e){return M([L.NORMAL,L.COMPACT,L.INVISIBLE,L.FLEXIBLE],e)}function vt(e){return M(["auto","manual","never"],e)}function mt(e){return M(["auto","manual","never"],e)}var kr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 22 6e 62 2d 6e 6f 22 2c 22 6e 6c 2d 6e 6c 22 2c 22 70 6c 2d 70 6c 22 2c 22 70 74 2d 62 72 22 2c 22 74 68 2d 74 68 22 2c 22 74 72 2d 74 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 6e 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 6e 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 6e 2c 6f 2c 63 2c 6c 2c 67 2c 79 29 7b 76 61 72 20 73 3d 54 74 28 6e 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 68 3d 79 3f 22 3f Data Ascii: "nb-no","nl-nl","pl-pl","pt-br","th-th","tr-tr","ro-ro"];function Tt(e,t){var n="https://challenges.cloudflare.com";if(t){var o;n=(o=e["base-url"])!==null&&o!==void 0?o:n}return n}function Rt(e,t,n,o,c,l,g,y){var s=Tt(n,c),p=l?"h/".concat(l,"/"):"",h=y?"?
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 74 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 65 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 Data Ascii: s as a function")}function te(e,t){return te=Object.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Obje
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 63 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 31 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 71 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 7a 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c Data Ascii: ,{constructor:{value:c,enumerable:!1,writable:!0,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:qe(e)}function dr(e){var t=ze();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Refl
2025-02-18 16:46:08 UTC	1369	IN	Data Raw: 72 6d 61 6e 63 65 2e 6e 6f 77 3f 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 67 2c 79 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 6c 3d 74 2e 70 61 72 61 6d 73 2e Data Ascii: rmance.now?performance.now():Date.now()}var St=function(e,t,n){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,g,y="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((l=t.params.

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:08 UTC	1080	OUT	GET /assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft HTTP/1.1 Host: viewdocu.online Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-arch: "x86" sec-ch-ua-platform: "Windows" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:09 UTC	1332	IN	HTTP/1.1 403 Forbidden Date: Tue, 18 Feb 2025 16:46:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin x-content-options: nosniff x-frame-options: SAMEORIGIN cf-mitigated: challenge server-timing: chlray;desc="913f7dda1b1cc346"
2025-02-18 16:46:09 UTC	907	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 67 34 30 68 6d 55 53 4f 2f 6b 51 63 66 41 46 47 4b 70 59 74 45 33 4c 59 6c 74 54 6c 6d 44 6f 44 48 48 65 2f 55 77 68 7a 6c 64 52 46 67 6b 67 43 71 75 2b 51 61 63 7a 51 37 62 2b 62 45 32 58 79 33 2b 71 66 78 70 6d 79 70 59 63 57 5a 73 63 58 66 67 31 55 5a 65 45 56 70 32 74 67 43 4c 5a 58 34 74 59 4d 59 32 5a 35 52 32 63 3d 24 68 56 71 49 57 56 30 47 6b 57 46 44 45 50 30 62 4a 6d 69 75 48 41 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 6c 69 64 61 74 65 2c 20 70 6f 73 74 2d 63 68 65 63 6b 3d 30 2c 20 70 72 65 2d 63 68 65 63 6b 3d 30 0d 0a 45 78 70 69 72 65 73 3a 20 Data Ascii: cf-chl-out: g40hmUSO/kQcfAFGKpYtE3LYltTlmDoDHHe/UwhzldRFgkgCqu+QaczQ7b+bE2Xy3+qfxpmypYcWZscXfg1UZeEVp2tgCLZX4tYMY2Z5R2c=$hVqIWV0GkWFDEP0bJmiuHA==Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Expires:
2025-02-18 16:46:09 UTC	1369	IN	Data Raw: 32 34 32 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d Data Ascii: 242f<!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name=
2025-02-18 16:46:09 UTC	1369	IN	Data Raw: 75 4d 7a 67 34 4c 6a 51 77 4e 79 34 7a 4f 44 6b 75 4e 44 41 33 4c 6a 6b 35 4e 43 41 77 49 43 34 31 4f 54 59 74 4c 6a 51 77 4e 79 34 35 4f 44 51 74 4c 6a 4d 35 4e 79 34 7a 4f 53 30 78 4c 6a 41 31 4e 79 34 7a 4f 44 6b 74 4c 6a 59 31 49 44 41 74 4d 53 34 77 4e 54 59 74 4c 6a 4d 34 4f 53 30 75 4d 7a 6b 34 4c 53 34 7a 4f 44 6b 74 4c 6a 4d 35 4f 43 30 75 4f 54 67 30 49 44 41 74 4c 6a 55 35 4e 79 34 7a 4f 54 67 74 4c 6a 6b 34 4e 53 34 30 4d 44 59 74 4c 6a 4d 35 4e 79 41 78 4c 6a 41 31 4e 69 30 75 4d 7a 6b 33 49 69 38 2b 50 43 39 7a 64 6d 63 2b 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 6e 74 61 69 6e 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 34 70 78 7d 40 6d Data Ascii: uMzg4LjQwNy4zODkuNDA3Ljk5NCAwIC41OTYtLjQwNy45ODQtLjM5Ny4zOS0xLjA1Ny4zODktLjY1IDAtMS4wNTYtLjM4OS0uMzk4LS4zODktLjM5OC0uOTg0IDAtLjU5Ny4zOTgtLjk4NS40MDYtLjM5NyAxLjA1Ni0uMzk3Ii8+PC9zdmc+);background-repeat:no-repeat;background-size:contain;padding-left:34px}@m
2025-02-18 16:46:09 UTC	1369	IN	Data Raw: 4b 75 65 77 4c 54 79 31 79 50 46 76 69 6a 78 6e 75 4c 5a 72 36 63 30 67 46 77 68 2e 73 63 75 6b 77 2d 31 37 33 39 38 39 37 31 36 38 2d 31 2e 32 2e 31 2e 31 2d 63 48 66 68 74 4e 7a 68 4b 69 77 6e 7a 72 50 4b 30 72 66 6b 76 49 46 6b 4e 5f 6c 43 51 43 61 44 53 62 58 6c 75 73 71 66 43 47 63 61 67 63 48 4e 6b 61 56 71 7a 46 47 39 75 32 71 54 36 5f 63 4a 55 59 6c 2e 46 53 4a 43 6c 6d 38 66 2e 6d 70 4b 35 79 47 31 72 75 57 2e 2e 31 49 4b 7a 4c 30 41 6d 41 4d 63 5f 56 36 31 55 5f 56 43 41 39 70 53 44 44 33 46 65 74 36 38 66 4c 48 6a 73 6d 5f 66 65 76 66 6d 72 48 50 75 6d 44 75 55 4f 63 54 62 41 37 44 4c 41 72 59 55 58 5f 64 71 45 41 68 51 30 33 38 70 59 68 64 42 78 70 47 33 54 31 72 50 61 72 75 57 5f 62 69 66 34 56 68 56 43 48 46 69 5f 34 6b 52 4c 41 38 33 4a 78 Data Ascii: KuewLTy1yPFvijxnuLZr6c0gFwh.scukw-1739897168-1.2.1.1-cHfhtNzhKiwnzrPK0rfkvIFkN_lCQCaDSbXlusqfCGcagcHNkaVqzFG9u2qT6_cJUYl.FSJClm8f.mpK5yG1ruW..1IKzL0AmAMc_V61U_VCA9pSDD3Fet68fLHjsm_fevfmrHPumDuUOcTbA7DLArYUX_dqEAhQ038pYhdBxpG3T1rParuW_bif4VhVCHFi_4kRLA83Jx
2025-02-18 16:46:09 UTC	1369	IN	Data Raw: 53 71 38 66 65 78 70 47 68 56 6b 42 39 4e 64 51 71 5a 4b 62 34 64 78 44 47 33 79 48 44 66 68 45 53 4a 72 49 53 34 6f 71 57 32 65 64 4e 32 6d 79 38 6d 6f 5f 6c 6e 4c 66 6e 57 4e 73 49 76 68 53 70 6a 31 66 31 35 4e 6e 65 6c 6b 75 7a 71 35 70 36 37 69 2e 65 66 72 34 48 6a 52 74 5a 6a 48 53 6e 6b 4b 69 78 63 41 5f 66 74 74 4e 6b 57 66 39 79 50 5f 52 33 4f 6d 55 72 57 46 50 54 4c 50 4e 4d 5f 54 77 62 70 71 5a 36 7a 76 75 74 31 62 62 7a 73 61 4c 6a 6d 4b 4a 38 6b 34 75 52 58 76 4f 37 75 71 45 38 61 6f 57 62 33 78 34 49 6e 58 36 51 70 63 33 4d 4f 34 45 70 6a 77 4c 4d 33 47 51 64 6d 7a 7a 4b 35 67 44 48 44 74 43 6b 46 6b 6e 5a 4c 77 71 48 5a 57 7a 39 76 62 64 35 7a 66 4c 43 48 78 45 50 66 73 65 5a 4e 72 50 39 54 54 4f 56 69 34 4c 78 39 79 73 55 4a 55 2e 38 4f 50 Data Ascii: Sq8fexpGhVkB9NdQqZKb4dxDG3yHDfhESJrIS4oqW2edN2my8mo_lnLfnWNsIvhSpj1f15Nnelkuzq5p67i.efr4HjRtZjHSnkKixcA_fttNkWf9yP_R3OmUrWFPTLPNM_TwbpqZ6zvut1bbzsaLjmKJ8k4uRXvO7uqE8aoWb3x4InX6Qpc3MO4EpjwLM3GQdmzzK5gDHDtCkFknZLwqHZWz9vbd5zfLCHxEPfseZNrP9TTOVi4Lx9ysUJU.8OP
2025-02-18 16:46:09 UTC	1369	IN	Data Raw: 5f 45 47 73 2e 6e 35 63 45 76 6f 66 2e 43 58 69 4b 33 72 57 33 66 6a 32 58 49 78 61 35 6b 4c 69 38 31 33 65 49 56 4a 79 35 47 65 63 6a 66 31 54 33 4d 4a 7a 42 4a 64 75 62 62 53 50 67 75 44 48 45 54 45 56 62 39 79 4a 71 63 57 2e 69 73 38 67 38 53 32 33 34 49 62 2e 47 71 42 36 58 2e 6a 72 46 53 69 72 31 73 39 4d 30 4a 6e 79 71 49 37 77 65 64 38 54 6d 57 5f 6a 76 51 55 4b 4b 59 5a 36 73 56 6c 32 5f 52 48 7a 4e 48 66 6f 32 68 55 38 75 62 47 6d 47 65 43 75 4e 45 37 75 53 65 37 63 6c 76 53 68 55 67 67 79 6e 7a 5f 62 47 76 53 69 6c 47 4f 44 35 39 41 63 6d 6e 6f 76 4f 68 58 78 36 48 38 46 70 37 41 51 5a 39 7a 44 4a 6c 79 74 4b 46 75 39 6b 31 52 31 49 4c 34 51 6f 4d 70 42 79 5f 48 6a 37 4b 69 53 4a 42 63 5f 57 4a 5f 6a 45 42 44 71 66 77 76 53 49 53 75 41 47 58 58 Data Ascii: _EGs.n5cEvof.CXiK3rW3fj2XIxa5kLi813eIVJy5Gecjf1T3MJzBJdubbSPguDHETEVb9yJqcW.is8g8S234Ib.GqB6X.jrFSir1s9M0JnyqI7wed8TmW_jvQUKKYZ6sVl2_RHzNHfo2hU8ubGmGeCuNE7uSe7clvShUggynz_bGvSilGOD59AcmnovOhXx6H8Fp7AQZ9zDJlytKFu9k1R1IL4QoMpBy_Hj7KiSJBc_WJ_jEBDqfwvSISuAGXX
2025-02-18 16:46:09 UTC	1369	IN	Data Raw: 4b 56 31 56 36 6f 38 69 55 56 4c 71 36 61 56 77 31 68 62 5a 58 54 6f 37 4d 73 67 58 73 51 36 49 6b 34 4b 79 58 6b 66 35 44 6b 54 45 76 48 37 75 30 76 56 38 4d 67 56 52 6f 74 6e 72 79 4a 73 75 5a 4e 39 51 7a 36 64 66 6f 6f 47 57 61 6f 57 66 45 67 75 66 56 31 43 53 47 4c 58 55 2e 49 58 4f 42 6c 52 5a 66 51 49 55 74 56 4e 5f 58 50 74 55 79 4b 32 43 57 6f 4f 5a 78 33 43 32 47 31 4f 2e 68 4d 69 75 5f 5f 6a 66 58 5f 6b 69 6b 50 72 58 65 48 77 43 33 77 56 65 37 37 35 49 55 6c 31 31 30 66 55 2e 6c 78 54 42 33 7a 58 5a 53 36 65 59 4d 4b 76 51 63 5a 55 50 39 77 49 34 61 71 56 2e 33 44 62 6e 44 47 61 52 30 4f 73 4f 72 50 62 66 49 2e 56 56 53 74 68 70 6e 61 55 48 59 6a 4a 6d 47 52 5a 76 66 30 46 4e 38 4e 49 41 59 33 30 58 35 4b 34 4c 68 4a 44 55 31 32 36 57 62 2e 50 Data Ascii: KV1V6o8iUVLq6aVw1hbZXTo7MsgXsQ6Ik4KyXkf5DkTEvH7u0vV8MgVRotnryJsuZN9Qz6dfooGWaoWfEgufV1CSGLXU.IXOBlRZfQIUtVN_XPtUyK2CWoOZx3C2G1O.hMiu__jfX_kikPrXeHwC3wVe775IUl110fU.lxTB3zXZS6eYMKvQcZUP9wI4aqV.3DbnDGaR0OsOrPbfI.VVSthpnaUHYjJmGRZvf0FN8NIAY30X5K4LhJDU126Wb.P
2025-02-18 16:46:09 UTC	1057	IN	Data Raw: 4d 4a 73 49 63 50 4d 6f 62 64 52 58 61 6e 7a 48 77 46 4d 33 4b 5a 55 35 33 75 73 77 55 73 54 4d 34 68 37 2e 52 79 76 45 6b 37 2e 35 5f 6c 35 48 51 50 50 6b 46 4f 41 6f 49 66 45 55 55 46 45 61 53 53 59 69 73 64 39 71 46 75 6e 39 71 49 78 79 44 62 63 72 36 72 2e 4d 74 22 7d 3b 76 61 72 20 63 70 6f 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 73 63 72 69 70 74 27 29 3b 63 70 6f 2e 73 72 63 20 3d 20 27 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 67 2f 6f 72 63 68 65 73 74 72 61 74 65 2f 63 68 6c 5f 70 61 67 65 2f 76 31 3f 72 61 79 3d 39 31 33 66 37 64 64 61 31 62 31 63 63 33 34 36 27 3b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 20 3d 20 6c Data Ascii: MJsIcPMobdRXanzHwFM3KZU53uswUsTM4h7.RyvEk7.5_l5HQPPkFOAoIfEUUFEaSSYisd9qFun9qIxyDbcr6r.Mt"};var cpo = document.createElement('script');cpo.src = '/cdn-cgi/challenge-platform/h/g/orchestrate/chl_page/v1?ray=913f7dda1b1cc346';window._cf_chl_opt.cOgUHash = l
2025-02-18 16:46:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:08 UTC	1329	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/17001289:1739895326:8GqevqinnKtZejdv3W_uuyOXdPnn9R-O6w9lv_AsSH0/913f7dc8f916e635/hyXtWEG9S3_uQl0e7wNPz0HKHHKZxWrE5_uRrSsVVeI-1739897166-1.2.1.1-kSveRcDMItGXNX5B51nmCMP_Z.5PuYUydurSvpXajgi8XJAragffw3cCZsrAt8YF HTTP/1.1 Host: viewdocu.online Connection: keep-alive Content-Length: 3966 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" cf-chl: hyXtWEG9S3_uQl0e7wNPz0HKHHKZxWrE5_uRrSsVVeI-1739897166-1.2.1.1-kSveRcDMItGXNX5B51nmCMP_Z.5PuYUydurSvpXajgi8XJAragffw3cCZsrAt8YF sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" cf-chl-ra: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://viewdocu.online Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:08 UTC	3966	OUT	Data Raw: 53 77 4b 46 46 46 32 46 55 46 53 46 71 46 52 79 72 42 79 72 45 4a 4b 38 6d 41 76 47 76 68 70 72 6e 71 72 6d 31 46 78 33 79 72 62 46 48 4c 78 68 33 65 72 2d 55 66 31 76 38 72 69 72 48 46 68 4a 4c 72 76 4e 72 48 77 78 66 72 59 38 72 32 72 78 4a 68 44 39 72 69 4c 78 37 72 74 4c 2b 61 72 6e 71 61 72 63 6f 46 59 4e 39 78 4a 77 38 68 62 56 37 75 2d 4b 72 2d 72 76 4b 56 73 4d 34 31 71 6b 48 37 54 43 4a 6d 38 59 51 55 45 31 6d 69 72 76 31 72 74 72 72 61 39 4e 74 35 44 72 74 61 72 59 56 74 68 72 48 52 4f 74 78 78 4f 72 47 38 70 38 6a 4f 75 6c 37 4f 6c 52 46 72 58 72 78 62 72 4d 2d 59 69 6f 70 56 50 4e 45 75 72 48 56 66 46 46 59 24 50 55 61 52 44 38 50 65 72 56 31 78 34 72 47 61 69 46 68 2b 39 71 78 50 62 55 31 79 43 4b 75 36 36 4e 45 2b 43 55 6d 31 65 6d 61 71 72 Data Ascii: SwKFFF2FUFSFqFRyrByrEJK8mAvGvhprnqrm1Fx3yrbFHLxh3er-Uf1v8rirHFhJLrvNrHwxfrY8r2rxJhD9riLx7rtL+arnqarcoFYN9xJw8hbV7u-Kr-rvKVsM41qkH7TCJm8YQUE1mirv1rtrra9Nt5DrtarYVthrHROtxxOrG8p8jOul7OlRFrXrxbrM-YiopVPNEurHVfFFY$PUaRD8PerV1x4rGaiFh+9qxPbU1yCKu66NE+CUm1emaqr

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:11 UTC	909	OUT	GET /favicon.ico HTTP/1.1 Host: viewdocu.online Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:11 UTC	837	IN	HTTP/1.1 404 Not Found Date: Tue, 18 Feb 2025 16:46:11 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=drHExYN1WSm5UiJGMU1F4gHHP0Q9HKKWoM2aX7h99%2BY053Q%2FlJbgqUWAENUCjMF1ZRoU%2FCEELCf4YDsoCWpHB%2BMckSt20kKoUjRlF%2B0iR975nSYb%2FawfuZFE3DptO27j3%2BI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 913f7de7d806e5f7-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=8212&min_rtt=8190&rtt_var=3087&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1487&delivery_rate=356532&cwnd=32&unsent_bytes=0&cid=9ae6d7854d5c6950&ts=535&x=0"
2025-02-18 16:46:11 UTC	285	IN	Data Raw: 31 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 61 63 68 65 2f 32 2e 34 2e 35 32 20 28 55 62 75 6e 74 75 29 20 53 65 72 76 65 72 20 61 74 20 76 69 65 77 64 6f 63 75 2e 6f 6e 6c 69 6e 65 20 50 6f 72 74 20 34 Data Ascii: 116<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p><hr><address>Apache/2.4.52 (Ubuntu) Server at viewdocu.online Port 4
2025-02-18 16:46:11 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:11 UTC	765	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:12 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:11 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27980 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-KksnBXomnwhXEAeZ' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-02-18 16:46:12 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-02-18 16:46:12 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 4b 6b 73 6e 42 58 6f 6d 6e 77 68 58 45 41 65 5a 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-KksnBXomnwhXEAeZ' 'unsafe-
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-02-18 16:46:12 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:11 UTC	587	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/37947894:1739895332:8SkyouDDYqU_J4zUQn65EZ81cEzXM6nnuwTiV2PICGk/913f7dda1b1cc346/HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9 HTTP/1.1 Host: viewdocu.online Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:12 UTC	978	IN	HTTP/1.1 400 Bad Request Date: Tue, 18 Feb 2025 16:46:12 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: VYy36WvU8P4e1aAFb0QcttRrhwVTE+OLQso+9zV8IXXBE42vleXlzDOlWXuFTRDaxcrEGx00nwnPQLVW8JvlwA==$/AMfBHD3nsMVi2V3q8Amcw== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=i1ByR6IqyYyJY4EGL51Hx5wHNEZBENW9rDAg%2B5H7pgJchFNHF0Tt2Tip4m3kMgBvryGb6fc4%2B63T2bJS9ha8UimkBUCzIoLFrrh7o61XBo16OfHlTLOzgoj0WU4kpdjbvpE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 913f7ded3bd705a7-IAD alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=7813&min_rtt=7811&rtt_var=2935&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1165&delivery_rate=372734&cwnd=32&unsent_bytes=0&cid=6068dd26d5eef61d&ts=171&x=0"
2025-02-18 16:46:12 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:12 UTC	744	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:12 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:12 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 913f7df1c80ede93-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:12 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:13 UTC	385	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:13 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:13 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 913f7df66f1443fa-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:13 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:14 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/831013738:1739895392:BzJzdlvns21gp9n5UKIGaiQVUa4zGLjH9uRhC5rjuCg/913f7decea075e7d/_CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4035 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: _CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:14 UTC	4035	OUT	Data Raw: 41 59 50 67 67 67 66 67 56 67 41 67 74 67 4a 71 62 75 71 62 24 36 34 24 36 63 2b 46 58 62 47 46 30 62 54 74 62 2d 4f 67 34 37 62 44 67 6e 50 34 65 62 4f 68 65 67 58 48 66 4a 6a 59 62 79 62 75 5a 67 62 24 56 62 41 36 5a 74 62 50 36 34 56 62 2d 68 46 64 62 6d 67 6e 64 62 6a 67 5a 69 30 6f 4a 54 50 34 73 5a 62 78 2b 39 39 4c 62 52 67 2d 70 53 57 62 39 24 34 71 37 24 2b 73 44 54 62 53 61 61 38 7a 31 4c 6f 45 58 2d 43 57 62 58 59 62 24 67 62 56 62 34 75 38 6f 62 5a 58 57 62 5a 6f 62 5a 75 74 69 62 2d 56 46 37 67 67 46 4f 2d 33 6a 5a 4e 47 49 6b 68 6d 57 62 62 4d 62 5a 59 62 69 72 75 59 62 65 68 62 65 67 5a 79 73 4f 39 65 59 71 46 4f 65 6d 6b 2b 62 6e 24 66 62 44 59 62 4c 71 34 57 42 58 6a 56 5a 62 67 6b 34 24 48 6b 46 35 4c 59 50 42 44 47 62 2d 50 62 53 7a 34 Data Ascii: AYPgggfgVgAgtgJqbuqb$64$6c+FXbGF0bTtb-Og47bDgnP4ebOhegXHfJjYbybuZgb$VbA6ZtbP64Vb-hFdbmgndbjgZi0oJTP4sZbx+99LbRg-pSWb9$4q7$+sDTbSaa8z1LoEX-CWbXYb$gbVb4u8obZXWbZobZutib-VF7ggFO-3jZNGIkhmWbbMbZYbiruYbehbegZysO9eYqFOemk+bn$fbDYbLq4WBXjVZbgk4$HkF5LYPBDGb-PbSz4
2025-02-18 16:46:14 UTC	835	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:14 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 184416 Connection: close cf-chl-gen: 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$hr2CAcukoIQzhN8XJJH8Qw== Server: cloudflare CF-RAY: 913f7df9da7e8c60-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:14 UTC	534	IN	Data Raw: 74 72 75 51 72 70 4b 61 6e 5a 2b 41 77 73 54 4a 70 37 36 63 69 4b 66 45 6d 37 43 75 6a 62 61 4a 7a 61 76 58 74 4c 69 64 74 4e 62 55 33 4c 2f 51 75 36 2f 6c 77 4a 2f 6f 36 4b 62 43 33 65 76 51 37 62 76 6c 7a 4b 75 74 77 75 2f 46 2b 72 44 6b 2b 63 66 70 32 4c 6a 4f 32 76 6e 53 42 72 6a 47 32 74 62 5a 33 4f 58 39 42 51 76 70 41 67 6b 52 36 4d 7a 32 30 4f 55 5a 46 39 72 78 2b 75 33 75 37 53 45 56 33 50 49 6e 42 78 48 34 38 68 55 6d 4b 76 67 45 43 54 48 37 4c 65 77 48 4a 54 58 75 44 41 55 58 4a 54 6f 4a 47 42 6e 34 48 44 6e 38 47 68 38 39 41 52 31 4b 53 77 78 4b 4f 41 30 6c 51 46 41 51 53 30 67 71 51 53 34 6d 4a 42 64 53 53 6c 31 66 58 68 67 2b 57 32 42 66 4a 45 39 66 59 54 31 42 4b 6d 59 73 4f 56 68 49 50 55 4a 77 62 55 6c 45 56 30 68 57 61 57 59 37 62 45 39 Data Ascii: truQrpKanZ+AwsTJp76ciKfEm7CujbaJzavXtLidtNbU3L/Qu6/lwJ/o6KbC3evQ7bvlzKutwu/F+rDk+cfp2LjO2vnSBrjG2tbZ3OX9BQvpAgkR6Mz20OUZF9rx+u3u7SEV3PInBxH48hUmKvgECTH7LewHJTXuDAUXJToJGBn4HDn8Gh89AR1KSwxKOA0lQFAQS0gqQS4mJBdSSl1fXhg+W2BfJE9fYT1BKmYsOVhIPUJwbUlEV0hWaWY7bE9
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 6b 53 4b 78 30 69 4c 69 56 59 44 46 70 46 46 7a 30 77 47 46 30 7a 5a 44 46 45 4e 54 4e 46 59 44 64 59 52 57 30 67 4a 57 59 2b 50 6d 46 70 61 56 52 79 54 30 52 34 52 45 64 38 61 55 68 55 56 55 31 77 66 32 39 37 5a 55 4e 2b 58 6d 68 32 64 32 64 74 67 6d 35 53 59 6d 64 54 53 49 56 30 63 32 53 48 66 59 56 56 58 6e 64 70 62 6e 70 78 58 6e 43 41 6b 57 56 30 71 61 31 70 6a 59 42 71 69 6f 2b 47 6b 6d 36 78 6e 37 61 34 6c 37 71 37 69 71 61 59 6e 33 69 73 77 4d 47 43 6a 36 43 59 6d 6f 61 2b 78 61 6a 4d 6a 70 69 70 6b 62 48 4e 6c 61 4b 75 7a 72 47 6b 74 4b 53 34 71 72 62 61 71 63 47 30 6e 72 37 44 33 35 72 6e 34 71 6a 6f 35 2b 6e 4b 76 64 44 42 76 39 48 73 77 2f 54 52 39 36 7a 35 73 39 58 49 37 66 37 59 79 2f 62 32 76 65 50 62 36 41 58 65 2f 4e 77 4c 32 38 58 63 2b Data Ascii: kSKx0iLiVYDFpFFz0wGF0zZDFENTNFYDdYRW0gJWY+PmFpaVRyT0R4REd8aUhUVU1wf297ZUN+Xmh2d2dtgm5SYmdTSIV0c2SHfYVVXndpbnpxXnCAkWV0qa1pjYBqio+Gkm6xn7a4l7q7iqaYn3iswMGCj6CYmoa+xajMjpipkbHNlaKuzrGktKS4qrbaqcG0nr7D35rn4qjo5+nKvdDBv9Hsw/TR96z5s9XI7f7Yy/b2vePb6AXe/NwL28Xc+
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 50 55 6c 4e 50 58 42 6f 32 56 54 63 76 48 46 6b 77 5a 6d 52 53 49 69 49 6f 58 44 68 49 5a 6b 6f 71 4b 6a 42 55 55 6a 5a 76 4d 54 49 79 4f 46 64 55 56 45 38 37 59 48 56 2f 66 48 6c 55 68 6c 43 42 68 47 71 4e 58 32 71 41 51 6c 70 6a 69 31 35 32 6b 5a 4a 78 63 35 52 73 6e 4a 69 56 56 35 4a 35 6c 56 2b 6b 63 4a 64 64 70 71 69 46 65 70 61 48 72 33 31 72 6b 4a 4f 6d 6b 57 36 4a 6b 71 47 59 73 59 39 37 65 4b 2b 75 72 4a 2b 33 65 70 70 33 73 4c 54 45 6c 63 4b 70 79 63 36 6b 70 38 75 4f 78 72 33 4f 6b 4b 47 68 6c 4a 47 51 74 70 53 7a 75 39 47 6f 30 4f 47 6a 31 4b 58 6a 30 61 62 45 36 4c 79 69 78 4b 65 36 6f 72 6e 72 36 38 6a 70 31 50 4c 50 78 50 6a 6a 31 64 44 63 76 75 48 69 32 4d 48 35 7a 62 7a 30 31 51 4b 38 2b 51 37 4c 78 77 2f 59 37 64 33 63 2f 64 54 49 31 76 Data Ascii: PUlNPXBo2VTcvHFkwZmRSIiIoXDhIZkoqKjBUUjZvMTIyOFdUVE87YHV/fHlUhlCBhGqNX2qAQlpji152kZJxc5RsnJiVV5J5lV+kcJddpqiFepaHr31rkJOmkW6JkqGYsY97eK+urJ+3epp3sLTElcKpyc6kp8uOxr3OkKGhlJGQtpSzu9Go0OGj1KXj0abE6LyixKe6ornr68jp1PLPxPjj1dDcvuHi2MH5zbz01QK8+Q7Lxw/Y7d3c/dTI1v
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 58 53 70 5a 4c 30 46 50 50 45 5a 47 52 54 59 36 53 57 74 57 59 32 4e 6c 59 79 78 6a 54 57 70 77 59 45 56 73 52 7a 6f 38 55 6c 55 39 64 30 39 36 51 48 4a 67 69 48 39 36 51 32 6c 38 52 46 78 66 65 58 36 54 5a 34 64 71 54 70 46 67 63 6e 4a 38 68 33 65 4e 63 56 75 41 69 35 31 37 64 31 79 59 6b 59 69 6a 65 34 46 2f 6d 6f 4b 5a 6b 4b 71 70 69 59 65 69 6f 4b 47 59 73 5a 75 52 6a 37 43 2f 6d 36 43 34 6c 4b 2b 66 74 36 54 41 75 49 6c 39 78 5a 69 47 76 4a 79 71 79 61 65 74 6f 63 79 2f 31 4c 69 72 71 5a 50 54 74 64 4c 67 34 4a 6e 41 73 73 2f 61 30 4c 7a 6f 79 4c 53 6b 74 74 62 49 79 36 6a 62 38 73 54 53 77 72 2f 74 39 38 57 33 31 50 6a 6d 30 4d 7a 72 2f 4f 37 52 31 66 34 42 38 41 73 41 33 75 62 46 78 76 6a 77 45 66 44 63 7a 4f 44 2b 38 50 50 51 42 51 6f 53 33 4e 54 Data Ascii: XSpZL0FPPEZGRTY6SWtWY2NlYyxjTWpwYEVsRzo8UlU9d096QHJgiH96Q2l8RFxfeX6TZ4dqTpFgcnJ8h3eNcVuAi517d1yYkYije4F/moKZkKqpiYeioKGYsZuRj7C/m6C4lK+ft6TAuIl9xZiGvJyqyaetocy/1LirqZPTtdLg4JnAss/a0LzoyLSkttbIy6jb8sTSwr/t98W31Pjm0Mzr/O7R1f4B8AsA3ubFxvjwEfDczOD+8PPQBQoS3NT
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 30 52 67 57 43 6b 64 5a 54 68 41 50 32 5a 49 51 54 39 74 54 6c 56 44 63 56 4e 5a 52 33 51 37 58 55 74 34 51 57 46 50 66 44 64 6c 55 34 42 44 61 56 65 45 53 48 35 6e 66 57 6d 4a 68 6f 5a 54 6b 32 74 6a 57 56 6c 36 61 48 68 72 6a 56 36 4f 6f 33 6d 46 6d 49 53 41 70 34 56 68 68 4b 61 59 66 58 69 70 59 33 47 6a 73 61 32 6b 6a 71 2b 50 71 6f 5a 34 69 6e 6d 4a 77 5a 4b 77 6f 35 36 6c 76 62 53 62 77 62 72 48 76 71 43 73 75 38 33 48 71 5a 2b 79 72 38 66 47 77 39 4c 59 6d 74 57 64 73 39 72 4d 32 4e 43 61 32 35 2f 68 34 74 54 66 32 4b 4c 6b 79 65 6e 71 33 4f 57 2f 34 4e 7a 77 38 66 4c 6b 36 2f 76 38 37 4e 50 4c 75 2b 47 36 75 76 55 43 38 38 50 38 31 73 67 4c 2f 74 2f 33 36 41 6b 4d 2b 2b 77 4e 7a 41 44 77 45 64 51 45 39 42 55 49 43 50 67 5a 45 41 7a 38 48 52 67 51 Data Ascii: 0RgWCkdZThAP2ZIQT9tTlVDcVNZR3Q7XUt4QWFPfDdlU4BDaVeESH5nfWmJhoZTk2tjWVl6aHhrjV6Oo3mFmISAp4VhhKaYfXipY3Gjsa2kjq+PqoZ4inmJwZKwo56lvbSbwbrHvqCsu83HqZ+yr8fGw9LYmtWds9rM2NCa25/h4tTf2KLkyenq3OW/4Nzw8fLk6/v87NPLu+G6uvUC88P81sgL/t/36AkM++wNzADwEdQE9BUICPgZEAz8HRgQ
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 68 70 61 6c 78 6a 63 33 52 6b 53 30 4d 7a 57 55 6c 45 63 53 35 6e 57 48 70 4e 61 31 78 2b 56 57 39 67 67 49 4e 7a 5a 49 52 46 58 6c 69 4b 57 6f 56 77 68 4a 42 55 6c 47 35 53 6d 49 52 7a 6e 56 4e 65 58 58 78 38 62 61 4e 38 6b 49 36 42 5a 57 42 63 5a 61 78 31 59 47 56 39 73 48 32 4b 61 6d 2b 4c 73 49 32 6d 71 70 4e 33 69 6f 32 76 6e 63 47 71 75 62 32 38 6a 70 71 52 6f 5a 58 46 76 70 2b 2f 79 4d 61 4a 76 49 58 4d 74 4d 6e 53 78 4d 2f 49 6b 74 53 35 32 64 72 4d 31 61 2f 51 7a 4f 44 68 34 74 54 62 36 2b 7a 63 77 37 75 72 30 4c 44 79 35 61 72 66 30 50 4c 46 34 39 54 32 7a 65 66 59 2b 50 76 72 33 50 33 4f 31 73 2f 48 30 76 33 6f 35 67 6e 4d 44 65 62 4b 45 66 7a 72 46 73 76 57 31 66 54 32 35 75 58 30 43 51 66 79 37 52 55 57 34 39 30 62 4b 42 77 48 49 77 59 62 47 Data Ascii: hpalxjc3RkS0MzWUlEcS5nWHpNa1x+VW9ggINzZIRFXliKWoVwhJBUlG5SmIRznVNeXXx8baN8kI6BZWBcZax1YGV9sH2Kam+LsI2mqpN3io2vncGqub28jpqRoZXFvp+/yMaJvIXMtMnSxM/IktS52drM1a/QzODh4tTb6+zcw7ur0LDy5arf0PLF49T2zefY+Pvr3P3O1s/H0v3o5gnMDebKEfzrFsvW1fT25uX0CQfy7RUW490bKBwHIwYbG
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 50 56 47 78 49 59 31 4e 72 57 48 52 73 50 54 46 35 54 45 46 77 67 46 4e 2b 5a 59 56 41 59 47 4f 49 61 49 4a 35 69 6b 35 64 58 56 42 4e 67 35 56 69 6a 57 74 30 6b 48 31 57 62 48 71 68 6d 32 43 4f 66 5a 70 34 59 58 71 63 64 34 6c 6a 64 70 65 51 70 49 43 55 70 5a 47 53 73 6f 75 51 75 58 4f 39 6a 72 32 79 74 5a 7a 43 73 5a 69 61 6e 5a 37 41 67 6f 4b 49 76 4a 69 6f 78 71 71 4b 69 70 43 30 73 70 62 50 6b 5a 4b 53 6d 4c 65 30 74 4b 2b 62 77 4e 58 54 77 74 61 31 31 72 53 6e 36 62 6e 68 35 74 69 74 34 73 54 65 37 66 4c 78 34 64 61 33 77 66 48 72 32 4e 37 79 31 4e 6e 64 2f 50 75 32 2b 74 4c 59 2b 50 54 36 37 4e 58 61 2b 77 37 65 42 75 50 73 43 66 58 4f 34 38 37 7a 48 4e 6f 49 43 66 30 61 46 75 38 42 44 2f 76 33 37 69 62 66 36 4e 77 6c 46 67 30 6e 41 41 59 45 4a 67 Data Ascii: PVGxIY1NrWHRsPTF5TEFwgFN+ZYVAYGOIaIJ5ik5dXVBNg5VijWt0kH1WbHqhm2COfZp4YXqcd4ljdpeQpICUpZGSsouQuXO9jr2ytZzCsZianZ7AgoKIvJioxqqKipC0spbPkZKSmLe0tK+bwNXTwta11rSn6bnh5tit4sTe7fLx4da3wfHr2N7y1Nnd/Pu2+tLY+PT67NXa+w7eBuPsCfXO487zHNoICf0aFu8BD/v37ibf6NwlFg0nAAYEJg
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 63 33 74 6e 57 48 63 34 61 31 78 37 62 32 39 67 66 33 64 7a 5a 49 4e 2f 64 32 69 49 5a 58 74 73 6a 48 56 2f 63 4a 42 67 57 5a 65 46 6c 58 6c 56 69 6e 4a 66 6d 35 61 57 62 57 61 54 6b 59 56 7a 64 33 68 66 66 34 71 46 69 49 78 39 6f 33 36 33 62 62 43 6a 74 4a 6c 33 73 70 57 49 76 35 70 36 6a 63 4b 77 6d 4a 4b 65 69 4a 69 43 7a 49 79 69 6e 4a 2b 74 6f 4e 4f 54 30 36 54 49 69 71 4b 72 31 4b 33 62 72 4b 71 77 72 71 36 33 76 64 4c 69 36 4c 6d 39 78 73 44 45 71 63 50 4d 35 61 6a 78 72 75 72 6f 79 38 6e 77 71 38 4c 71 2b 76 6a 4b 37 2b 6f 42 38 66 6a 6b 78 63 4c 36 41 75 51 49 2f 41 6a 49 43 67 6a 75 41 41 6e 76 43 50 62 53 36 2b 6f 59 45 2b 59 59 45 74 76 37 45 78 37 62 36 2f 45 67 2f 42 73 70 45 75 45 4a 46 76 34 71 4b 52 6b 6f 4c 53 66 7a 4e 52 55 44 47 67 6b Data Ascii: c3tnWHc4a1x7b29gf3dzZIN/d2iIZXtsjHV/cJBgWZeFlXlVinJfm5aWbWaTkYVzd3hff4qFiIx9o363bbCjtJl3spWIv5p6jcKwmJKeiJiCzIyinJ+toNOT06TIiqKr1K3brKqwrq63vdLi6Lm9xsDEqcPM5ajxruroy8nwq8Lq+vjK7+oB8fjkxcL6AuQI/AjICgjuAAnvCPbS6+oYE+YYEtv7Ex7b6/Eg/BspEuEJFv4qKRkoLSfzNRUDGgk
2025-02-18 16:46:14 UTC	1369	IN	Data Raw: 44 78 5a 59 45 35 64 55 6c 4f 46 67 6c 35 5a 62 46 31 62 59 48 74 50 6b 57 52 55 61 55 6c 56 6b 70 52 34 6a 6f 5a 34 63 46 61 4e 6e 6f 43 67 67 58 4b 46 59 4a 4b 56 69 6e 64 70 62 6f 6d 62 72 5a 32 46 63 71 79 43 63 61 47 72 75 4a 4b 7a 6b 36 31 37 6a 71 47 43 77 48 71 76 67 70 2b 55 69 4a 36 68 69 63 50 49 72 4c 71 37 71 73 4c 56 7a 70 37 49 31 74 61 59 30 39 7a 63 76 4c 6a 62 73 64 65 6a 6f 61 48 45 6f 38 44 44 30 38 6a 6e 70 64 69 2b 32 61 32 79 7a 64 2f 78 34 63 6d 32 38 4d 61 31 35 65 2f 38 31 74 37 39 41 50 6e 68 34 66 50 64 39 77 67 4a 79 77 7a 33 41 77 54 4c 42 2b 62 77 41 38 37 70 38 42 6f 4e 34 76 59 62 48 4e 77 59 45 53 45 41 49 79 54 76 39 66 30 6a 38 77 4c 31 34 69 6f 6f 47 66 30 54 41 65 6f 6c 49 2f 41 78 4c 43 4d 75 42 51 34 35 48 66 6b 65 Data Ascii: DxZYE5dUlOFgl5ZbF1bYHtPkWRUaUlVkpR4joZ4cFaNnoCggXKFYJKVindpbombrZ2FcqyCcaGruJKzk617jqGCwHqvgp+UiJ6hicPIrLq7qsLVzp7I1taY09zcvLjbsdejoaHEo8DD08jnpdi+2a2yzd/x4cm28Ma15e/81t79APnh4fPd9wgJywz3AwTLB+bwA87p8BoN4vYbHNwYESEAIyTv9f0j8wL14iooGf0TAeolI/AxLCMuBQ45Hfke

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Asipurch Algoma-Assessment 56242.pdf

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Hooking and other Techniques for Hiding and Protection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Local Storage\leveldb\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\Network Persistent State~RF5acb1a.TMP (copy)

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\ae0b7f16-c16e-48c2-be56-a74d1eabd8f5.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Network\c5d44d8e-7844-4955-a04f-d70d7607ec6d.tmp

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\000003.log

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG

C:\Users\user\AppData\LocalLow\Adobe\AcroCef\DC\Acrobat\Cache\Session Storage\LOG.old (copy)

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ConnectorIcons\icon-250218164605Z-247.bmp

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages

C:\Users\user\AppData\LocalLow\Adobe\Acrobat\DC\ReaderMessages-journal

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\2D85F72862B55C4EADD9E66E06947F3D

C:\Users\user\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\77EC63BDA74BD0D0E0426DC8F8008506

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeCMapFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeFnt23.lst.7632

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\AdobeSysFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AcroFnt23.lst (copy)

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\Cache\AdobeFnt23.lst.7632

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\IconCacheAcro65536.dat

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\Files\TESTING

C:\Users\user\AppData\Local\Adobe\Acrobat\DC\SOPHIA\Acrobat\SOPHIA.json

Windows Analysis Report
Asipurch Algoma-Assessment 56242.pdf

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:14 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/831013738:1739895392:BzJzdlvns21gp9n5UKIGaiQVUa4zGLjH9uRhC5rjuCg/913f7decea075e7d/_CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:15 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 18 Feb 2025 16:46:15 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: iGVhviNq9DfukdA+mqmtiWSlTkwcrfMKJizcL67HeEpM/WrAjjYkmTY6F+dE3iXZwttq3SwYLXahRTkJJBqqSw==$zP9ZLDYOQQY6BhUXMhww2w== Server: cloudflare CF-RAY: 913f7e005985439f-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:15 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:15 UTC	787	OUT	GET /cdn-cgi/challenge-platform/h/g/d/913f7decea075e7d/1739897174116/0aWcUDM_zAlL-dc HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:16 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:16 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 913f7e0629fe4393-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:16 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0e 00 00 00 31 08 02 00 00 00 65 06 0f fe 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR1eIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:16 UTC	816	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/913f7decea075e7d/1739897174118/931b0766704ae9794eb343c0b56efe9535922c2b0976b927fd96d9f3aaa8ae18/1MzrLQUZwXmdaz1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:16 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 18 Feb 2025 16:46:16 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-02-18 16:46:16 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6b 78 73 48 5a 6e 42 4b 36 58 6c 4f 73 30 50 41 74 57 37 2d 6c 54 57 53 4c 43 73 4a 64 72 6b 6e 5f 5a 62 5a 38 36 71 6f 72 68 67 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gkxsHZnBK6XlOs0PAtW7-lTWSLCsJdrkn_ZbZ86qorhgAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-02-18 16:46:16 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:18 UTC	1151	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/831013738:1739895392:BzJzdlvns21gp9n5UKIGaiQVUa4zGLjH9uRhC5rjuCg/913f7decea075e7d/_CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 35902 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: _CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/hu3ii/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:18 UTC	16384	OUT	Data Raw: 41 59 50 67 4c 5a 34 42 2b 39 2b 6e 50 34 64 62 56 62 61 56 50 34 37 34 4c 62 73 4c 62 65 67 34 36 2d 6f 62 58 71 4c 62 63 4f 2d 5a 62 66 74 67 50 2b 5a 38 50 62 41 5a 62 44 2b 5a 30 62 41 4c 36 63 24 34 30 6c 62 46 38 62 6d 67 39 42 30 50 62 57 70 36 62 4c 4b 50 2d 58 49 79 4f 62 68 62 53 67 34 46 62 31 61 68 71 67 62 6a 62 46 4e 30 6d 62 46 24 37 59 71 56 46 4b 70 74 62 49 72 24 59 36 62 77 57 57 62 62 39 56 62 39 73 4f 63 58 4f 62 31 62 6e 58 62 57 36 62 75 79 4a 6d 62 36 75 46 41 34 69 2b 62 46 36 74 2b 61 75 74 69 58 4a 6d 67 38 41 2d 6d 5a 37 36 41 35 4c 59 62 2d 43 68 62 34 36 34 2d 24 75 57 74 59 67 62 48 47 2b 68 51 78 63 70 38 36 6a 59 47 42 65 65 51 2d 7a 6a 39 4e 6a 6f 5a 33 37 2d 37 69 65 39 67 48 6a 39 41 24 42 2d 37 58 53 65 43 68 2d 79 70 Data Ascii: AYPgLZ4B+9+nP4dbVbaVP474LbsLbeg46-obXqLbcO-ZbftgP+Z8PbAZbD+Z0bAL6c$40lbF8bmg9B0PbWp6bLKP-XIyObhbSg4Fb1ahqgbjbFN0mbF$7YqVFKptbIr$Y6bwWWbb9Vb9sOcXOb1bnXbW6buyJmb6uFA4i+bF6t+autiXJmg8A-mZ76A5LYb-Chb464-$uWtYgbHG+hQxcp86jYGBeeQ-zj9NjoZ37-7ie9gHj9A$B-7XSeCh-yp
2025-02-18 16:46:18 UTC	16384	OUT	Data Raw: 34 79 4d 59 57 4e 6e 50 71 74 62 4c 76 33 76 59 67 62 32 67 75 62 5a 50 62 65 62 47 67 62 59 62 72 62 34 64 5a 6e 62 30 36 58 4f 2d 46 62 78 65 68 67 34 79 62 78 62 6e 35 36 33 62 31 62 41 36 34 38 62 4f 67 56 50 2d 49 50 42 67 50 2b 34 44 67 50 62 47 2b 2d 79 62 4d 67 57 62 5a 39 62 70 67 44 24 2d 43 62 54 67 41 69 2d 38 62 6e 62 58 64 5a 58 4f 2b 62 75 68 5a 4f 62 70 36 57 46 2d 2b 62 61 58 46 4d 56 7a 36 48 76 67 36 6e 2b 62 78 36 6e 68 34 4f 62 7a 67 6e 49 34 38 34 7a 62 37 62 5a 58 34 76 54 47 6f 62 70 58 34 67 50 57 59 39 4d 67 67 50 24 2d 71 4f 33 67 4d 57 34 44 4d 63 45 58 2b 48 2b 62 57 6f 75 4d 67 75 4f 53 62 6c 34 6b 6d 59 42 57 75 75 4e 6f 47 66 49 39 6d 5a 58 32 36 4b 74 48 59 4a 72 59 4b 6d 75 31 37 32 6b 52 7a 48 49 78 2b 74 4b 74 37 53 56 Data Ascii: 4yMYWNnPqtbLv3vYgb2gubZPbebGgbYbrb4dZnb06XO-Fbxehg4ybxbn563b1bA648bOgVP-IPBgP+4DgPbG+-ybMgWbZ9bpgD$-CbTgAi-8bnbXdZXO+buhZObp6WF-+baXFMVz6Hvg6n+bx6nh4ObzgnI484zb7bZX4vTGobpX4gPWY9MggP$-qO3gMW4DMcEX+H+bWouMguOSbl4kmYBWuuNoGfI9mZX26KtHYJrYKmu172kRzHIx+tKt7SV
2025-02-18 16:46:18 UTC	3134	OUT	Data Raw: 7a 6f 6d 24 5a 6c 75 61 6c 6d 45 46 24 38 44 78 6c 61 30 58 24 5a 70 78 30 36 50 50 62 53 61 52 30 77 6c 7a 5a 54 78 74 6c 77 31 74 33 57 2b 75 42 2d 57 51 6a 68 34 36 5a 6c 78 77 73 43 33 72 6b 50 7a 67 47 47 52 34 36 68 24 4a 63 6e 6c 64 73 49 77 51 4d 6b 50 34 7a 33 73 54 50 62 53 6d 64 65 66 30 38 6d 39 51 50 62 6f 34 32 58 7a 74 42 59 62 36 4f 50 2b 2d 45 4f 52 46 34 64 2d 38 62 2d 67 63 50 62 63 31 67 36 53 56 2d 4d 6e 4d 43 57 6e 6e 38 62 59 6f 35 50 62 6c 2b 59 6b 42 4b 31 57 62 4a 65 72 24 5a 2b 33 66 74 36 32 68 58 62 38 67 6e 68 72 47 4c 59 57 37 78 63 4b 44 64 37 77 39 5a 42 70 70 4f 47 42 7a 58 4a 54 62 58 57 67 24 51 67 67 41 45 47 62 33 74 4f 57 38 5a 74 6b 4c 2b 38 4f 62 38 62 42 62 35 50 5a 39 77 67 67 47 57 57 42 62 37 59 5a 37 5a 33 71 Data Ascii: zom$ZlualmEF$8Dxla0X$Zpx06PPbSaR0wlzZTxtlw1t3W+uB-WQjh46ZlxwsC3rkPzgGGR46h$JcnldsIwQMkP4z3sTPbSmdef08m9QPbo42XztBYb6OP+-EORF4d-8b-gcPbc1g6SV-MnMCWnn8bYo5Pbl+YkBK1WbJer$Z+3ft62hXb8gnhrGLYW7xcKDd7w9ZBppOGBzXJTbXWg$QggAEGb3tOW8ZtkL+8Ob8bBb5PZ9wggGWWBb7YZ7Z3q
2025-02-18 16:46:18 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:46:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27928 Connection: close cf-chl-gen: WY3Z3QySqarOzjxKnCAlVCFXSAf7rQ5Kw+MO7pEoMnJ+EjolsNLFsdVH9Dy5XcNU$j9RBYv2KwBhaf6E9TdyFgw== Server: cloudflare CF-RAY: 913f7e15bca6447a-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:18 UTC	1047	IN	Data Raw: 74 72 75 51 72 70 4c 41 6d 49 62 45 73 6e 79 49 67 37 36 58 70 61 53 35 78 4d 65 75 78 34 33 4c 73 73 75 61 74 71 33 51 76 70 6d 32 6e 65 4c 63 6d 38 4c 4f 70 4e 79 6c 33 75 6e 6e 31 61 6d 75 77 37 37 42 77 38 62 32 31 75 2f 48 78 4e 4c 31 30 64 62 36 76 74 4c 65 30 64 37 53 39 41 48 31 33 41 6f 4c 79 74 33 46 33 65 33 64 45 74 45 4b 37 75 48 51 41 78 62 6a 43 76 54 55 35 78 48 59 38 69 4c 73 34 76 6b 44 39 51 4d 46 42 43 45 4c 42 4f 30 72 37 67 58 70 41 68 49 4b 41 77 51 55 44 76 45 57 48 54 6f 4a 47 42 6e 33 2b 52 63 37 45 7a 6b 6d 4e 55 59 7a 42 53 4a 4f 4c 6a 6b 6d 53 54 4d 75 49 79 42 46 4c 31 52 42 4b 69 4e 47 56 7a 4d 73 4d 6c 70 62 4f 52 31 64 54 6c 64 70 5a 53 63 64 61 6d 46 66 62 57 38 76 61 6d 4e 7a 55 6e 55 76 53 45 68 51 4e 6b 5a 55 56 34 42 Data Ascii: truQrpLAmIbEsnyIg76XpaS5xMeux43Lssuatq3Qvpm2neLcm8LOpNyl3unn1amuw77Bw8b21u/HxNL10db6vtLe0d7S9AH13AoLyt3F3e3dEtEK7uHQAxbjCvTU5xHY8iLs4vkD9QMFBCELBO0r7gXpAhIKAwQUDvEWHToJGBn3+Rc7EzkmNUYzBSJOLjkmSTMuIyBFL1RBKiNGVzMsMlpbOR1dTldpZScdamFfbW8vamNzUnUvSEhQNkZUV4B
2025-02-18 16:46:18 UTC	1369	IN	Data Raw: 74 7a 39 43 73 73 64 4f 4d 72 36 65 35 31 37 54 50 6e 4a 6a 52 7a 4f 58 6a 32 38 6e 69 78 73 66 58 78 36 7a 77 73 4c 7a 41 33 73 6e 4d 78 76 58 50 39 76 6e 63 73 76 61 38 73 64 6e 4a 33 38 37 7a 7a 64 76 50 32 2b 58 6c 77 65 62 74 2b 66 66 35 33 67 6b 44 36 77 30 41 39 74 48 69 45 2f 6e 36 35 68 63 50 32 66 34 52 41 68 6a 6c 48 42 73 65 45 77 67 73 4a 2f 6a 71 37 67 38 6e 48 50 34 4d 36 2f 54 31 41 68 59 4e 43 53 73 34 45 2f 45 73 39 78 67 6b 46 42 30 33 51 54 56 46 42 69 41 59 53 45 35 4c 51 31 45 77 4c 6b 67 33 4b 6a 4d 6f 4f 43 52 4a 52 55 5a 4b 48 53 77 76 56 6c 4d 74 51 6a 67 67 50 45 4a 6f 49 32 64 6a 52 32 38 76 61 31 46 72 61 58 49 32 64 33 4e 43 56 44 74 63 58 6c 70 4c 53 6c 35 5a 4e 6f 4d 38 64 45 42 57 65 58 52 71 5a 6b 69 45 69 59 71 46 68 49 Data Ascii: tz9CssdOMr6e517TPnJjRzOXj28nixsfXx6zwsLzA3snMxvXP9vncsva8sdnJ387zzdvP2+Xlwebt+ff53gkD6w0A9tHiE/n65hcP2f4RAhjlHBseEwgsJ/jq7g8nHP4M6/T1AhYNCSs4E/Es9xgkFB03QTVFBiAYSE5LQ1EwLkg3KjMoOCRJRUZKHSwvVlMtQjggPEJoI2djR28va1FraXI2d3NCVDtcXlpLSl5ZNoM8dEBWeXRqZkiEiYqFhI
2025-02-18 16:46:18 UTC	1369	IN	Data Raw: 7a 74 4f 32 31 70 33 68 34 72 53 2f 7a 2b 53 34 6e 74 76 6f 76 4f 65 6b 37 4d 44 73 7a 66 44 45 38 4f 32 6e 79 38 6a 76 71 39 76 76 39 39 62 56 41 65 47 37 7a 67 44 57 2b 50 72 64 33 37 2f 33 43 4f 48 48 2b 73 58 34 36 64 76 73 42 65 38 41 37 65 54 70 30 50 51 62 36 64 54 33 36 78 58 32 2f 76 4c 77 4b 4f 62 30 46 51 55 62 44 51 6a 35 4c 66 76 2b 42 78 38 30 43 66 34 68 4b 43 55 7a 4f 76 73 33 2b 68 55 38 4c 6a 59 79 2b 7a 34 69 47 52 34 32 4f 54 38 46 49 43 51 75 53 53 46 55 45 55 38 71 48 30 42 56 47 52 70 63 55 43 31 4a 4f 6c 77 7a 54 54 35 65 59 56 46 43 59 69 4a 56 52 6d 59 71 57 55 70 71 58 69 6c 69 54 31 35 6b 62 47 4a 6a 56 31 68 32 53 47 6c 35 61 57 31 6b 55 46 5a 79 63 58 5a 45 51 45 70 67 61 59 31 4a 58 49 74 76 6a 32 46 4f 69 32 4b 59 6c 6f 52 Data Ascii: ztO21p3h4rS/z+S4ntvovOek7MDszfDE8O2ny8jvq9vv99bVAeG7zgDW+Prd37/3COHH+sX46dvsBe8A7eTp0PQb6dT36xX2/vLwKOb0FQUbDQj5Lfv+Bx80Cf4hKCUzOvs3+hU8LjYy+z4iGR42OT8FICQuSSFUEU8qH0BVGRpcUC1JOlwzTT5eYVFCYiJVRmYqWUpqXiliT15kbGJjV1h2SGl5aW1kUFZycXZEQEpgaY1JXItvj2FOi2KYloR
2025-02-18 16:46:18 UTC	1369	IN	Data Raw: 73 48 62 6e 37 71 34 31 4e 48 53 79 65 50 4d 77 73 44 61 72 74 72 52 36 38 54 4b 79 4f 72 4c 34 74 6e 79 36 39 79 33 2b 4f 6e 71 34 66 72 59 78 4d 48 34 39 2f 58 6f 32 75 6e 6b 35 4f 2f 74 44 77 58 74 2f 42 41 59 79 66 67 58 31 2b 6b 48 47 4e 6e 59 2f 42 37 63 49 78 67 55 35 43 51 6a 38 51 50 71 44 42 63 61 37 41 72 38 45 75 55 41 4a 79 51 31 38 66 55 6e 38 68 49 57 2b 43 45 38 39 78 66 37 44 79 38 6c 52 68 49 5a 52 54 38 46 49 42 64 4a 51 44 31 4c 55 68 52 50 45 79 31 55 52 6b 35 4b 46 46 59 36 4d 54 5a 4f 55 56 63 64 4f 44 78 47 59 54 6c 73 4b 57 64 46 52 79 70 77 50 46 4d 71 51 45 46 7a 63 45 51 73 55 48 56 30 4f 58 4e 65 62 46 6c 56 67 6c 78 41 68 6e 42 52 57 59 70 4c 69 6c 6c 77 54 59 42 74 53 34 46 50 54 6e 5a 67 69 47 56 35 63 56 61 48 6a 71 46 32 Data Ascii: sHbn7q41NHSyePMwsDartrR68TKyOrL4tny69y3+Onq4frYxMH49/Xo2unk5O/tDwXt/BAYyfgX1+kHGNnY/B7cIxgU5CQj8QPqDBca7Ar8EuUAJyQ18fUn8hIW+CE89xf7Dy8lRhIZRT8FIBdJQD1LUhRPEy1URk5KFFY6MTZOUVcdODxGYTlsKWdFRypwPFMqQEFzcEQsUHV0OXNebFlVglxAhnBRWYpLillwTYBtS4FPTnZgiGV5cVaHjqF2
2025-02-18 16:46:18 UTC	1369	IN	Data Raw: 54 4b 33 39 57 65 71 62 65 39 72 63 76 44 78 62 4c 4b 73 75 65 75 37 39 76 37 2f 65 37 66 32 62 36 2b 31 74 62 35 35 4d 62 65 35 4d 51 41 34 39 62 62 78 38 6a 6a 45 42 44 76 41 4f 30 51 36 65 45 55 45 66 4c 58 35 78 73 56 41 68 59 44 32 2f 48 34 2b 43 6e 39 42 43 51 4b 36 77 38 58 35 79 73 6f 47 77 41 57 4e 69 6f 41 39 78 41 35 47 41 67 4d 39 52 72 33 4d 41 45 65 44 67 58 38 42 6b 51 49 4c 42 6f 61 4b 53 6b 71 55 51 6f 6f 49 69 6f 4f 4a 54 5a 45 4f 53 31 45 50 68 31 61 55 52 74 51 47 7a 63 32 4d 6a 49 32 4f 43 70 65 51 6d 42 75 62 53 64 4f 54 47 78 73 52 6e 4a 74 64 54 51 7a 64 33 46 30 63 6a 59 34 54 6c 56 57 66 57 38 2f 5a 32 64 7a 61 32 79 48 54 48 64 58 52 6e 35 66 6c 45 31 72 6a 35 42 67 5a 46 43 49 6d 6e 75 5a 6e 4a 53 50 6d 5a 69 53 67 48 4a 7a 69 Data Ascii: TK39Weqbe9rcvDxbLKsueu79v7/e7f2b6+1tb55Mbe5MQA49bbx8jjEBDvAO0Q6eEUEfLX5xsVAhYD2/H4+Cn9BCQK6w8X5ysoGwAWNioA9xA5GAgM9Rr3MAEeDgX8BkQILBoaKSkqUQooIioOJTZEOS1EPh1aURtQGzc2MjI2OCpeQmBubSdOTGxsRnJtdTQzd3F0cjY4TlVWfW8/Z2dza2yHTHdXRn5flE1rj5BgZFCImnuZnJSPmZiSgHJzi
2025-02-18 16:46:18 UTC	1369	IN	Data Raw: 73 72 4d 7a 71 76 4d 43 77 37 73 7a 51 78 64 4c 4b 2b 37 58 30 2b 64 2f 58 7a 72 57 39 41 65 66 76 2f 67 48 39 36 2b 6b 42 2b 2f 66 75 43 42 4c 79 35 50 4c 55 44 4f 38 49 32 51 54 58 35 39 33 74 44 52 77 68 2b 76 6a 58 42 41 54 6d 48 77 72 6c 2f 69 49 64 47 67 66 2b 4d 41 49 45 4e 44 55 55 49 78 49 6d 44 67 59 7a 4e 42 67 62 2b 50 34 68 45 41 51 79 42 42 4d 64 51 42 6f 2b 53 44 73 6e 48 55 73 30 44 7a 52 51 4f 46 51 36 45 53 51 33 4a 7a 68 4c 4b 46 4e 59 48 54 4a 6d 59 54 67 78 61 45 55 6c 56 47 4e 6a 5a 6a 70 50 4a 48 4a 51 55 46 35 49 64 55 78 53 64 32 73 35 55 44 34 34 65 7a 74 34 63 58 74 67 56 6b 46 33 66 59 4a 38 65 55 43 4f 62 47 78 73 5a 4a 46 6f 62 70 43 48 56 57 78 59 55 32 39 34 6b 5a 75 41 6e 6d 2b 54 5a 5a 78 34 6b 49 6d 66 71 4b 61 4b 65 70 Data Ascii: srMzqvMCw7szQxdLK+7X0+d/XzrW9Aefv/gH96+kB+/fuCBLy5PLUDO8I2QTX593tDRwh+vjXBATmHwrl/iIdGgf+MAIENDUUIxImDgYzNBgb+P4hEAQyBBMdQBo+SDsnHUs0DzRQOFQ6ESQ3JzhLKFNYHTJmYTgxaEUlVGNjZjpPJHJQUF5IdUxSd2s5UD44ezt4cXtgVkF3fYJ8eUCObGxsZJFobpCHVWxYU294kZuAnm+TZZx4kImfqKaKep
2025-02-18 16:46:18 UTC	1369	IN	Data Raw: 73 4f 58 49 77 72 6e 74 79 2b 79 34 39 65 44 4c 79 76 4c 37 33 2b 54 7a 78 4e 66 45 2b 2b 73 47 36 77 50 77 35 39 45 55 2f 51 37 53 46 65 33 6a 38 42 6a 77 36 2f 77 67 38 78 66 36 4a 4f 49 66 42 43 6e 6f 38 77 6b 72 2f 51 41 71 49 78 73 49 37 54 55 65 4e 67 30 78 43 51 67 73 4b 52 7a 31 2f 69 77 51 50 66 34 78 46 44 33 34 4e 30 41 62 43 7a 74 44 4c 42 77 38 52 6b 6b 4e 51 45 70 4e 46 30 70 4f 56 51 31 49 55 7a 73 64 54 54 42 64 49 45 38 66 48 30 46 55 4a 45 63 71 57 55 77 71 49 56 39 51 5a 53 31 67 4d 55 68 45 5a 45 67 7a 53 47 74 79 61 54 39 73 55 48 35 64 63 57 52 35 4f 58 64 2f 5a 30 56 35 67 32 78 63 66 45 31 6a 55 6f 43 4b 69 56 57 45 61 4a 56 58 68 31 65 57 62 5a 4b 57 6f 6e 47 50 58 32 4a 68 6c 48 69 6c 61 70 6c 38 5a 34 6d 63 61 36 46 79 6f 4b 71 Data Ascii: sOXIwrnty+y49eDLyvL73+TzxNfE++sG6wPw59EU/Q7SFe3j8Bjw6/wg8xf6JOIfBCno8wkr/QAqIxsI7TUeNg0xCQgsKRz1/iwQPf4xFD34N0AbCztDLBw8RkkNQEpNF0pOVQ1IUzsdTTBdIE8fH0FUJEcqWUwqIV9QZS1gMUhEZEgzSGtyaT9sUH5dcWR5OXd/Z0V5g2xcfE1jUoCKiVWEaJVXh1eWbZKWonGPX2JhlHilapl8Z4mca6FyoKq

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:46:19 UTC	598	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/831013738:1739895392:BzJzdlvns21gp9n5UKIGaiQVUa4zGLjH9uRhC5rjuCg/913f7decea075e7d/_CAcRWdkL29l4YOIwJvYaaLsJ30jFFL5kOLCYndAhSE-1739897171-1.1.1.1-g_eYjz.Sn4.JUNQBGftpg0suBHndS8hXpvc78Q6PcN5MZ_4OVx1CPVhTVojkPjSG HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:46:19 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 18 Feb 2025 16:46:19 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: t6eRQjVvhdsKEkXo5NZcb7qp3xeYTUZOVJSSgcCeiOnXMD0rYgfHNCz0Bxytytt7skM+MiRSPjWTsMiCPsgM/w==$YALwJo4ueLcFDPo/LQVzQw== Server: cloudflare CF-RAY: 913f7e1b498e4326-EWR alt-svc: h3=":443"; ma=86400
2025-02-18 16:46:19 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:47:05 UTC	544	OUT	OPTIONS /report/v4?s=drHExYN1WSm5UiJGMU1F4gHHP0Q9HKKWoM2aX7h99%2BY053Q%2FlJbgqUWAENUCjMF1ZRoU%2FCEELCf4YDsoCWpHB%2BMckSt20kKoUjRlF%2B0iR975nSYb%2FawfuZFE3DptO27j3%2BI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://viewdocu.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:47:05 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 18 Feb 2025 16:47:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:47:05 UTC	534	OUT	OPTIONS /report/v4?s=i1ByR6IqyYyJY4EGL51Hx5wHNEZBENW9rDAg%2B5H7pgJchFNHF0Tt2Tip4m3kMgBvryGb6fc4%2B63T2bJS9ha8UimkBUCzIoLFrrh7o61XBo16OfHlTLOzgoj0WU4kpdjbvpE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://viewdocu.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:47:05 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 18 Feb 2025 16:47:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:47:06 UTC	487	OUT	POST /report/v4?s=drHExYN1WSm5UiJGMU1F4gHHP0Q9HKKWoM2aX7h99%2BY053Q%2FlJbgqUWAENUCjMF1ZRoU%2FCEELCf4YDsoCWpHB%2BMckSt20kKoUjRlF%2B0iR975nSYb%2FawfuZFE3DptO27j3%2BI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 2595 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:47:06 UTC	2595	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 35 38 33 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 33 32 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 76 69 65 77 64 6f 63 75 2e 6f 6e 6c 69 6e 65 2f 61 73 73 65 73 73 6d 65 6e 74 2f 3f 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 30 2d 64 69 72 2e 69 70 2d 64 64 6e 73 2e 63 6f 6d 2f 3f 75 66 6b 74 6a 6f 66 74 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 30 2c 22 74 79 70 65 22 3a 22 61 62 Data Ascii: [{"age":55839,"body":{"elapsed_time":1232,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft","sampling_fraction":1.0,"server_ip":"","status_code":0,"type":"ab
2025-02-18 16:47:06 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 18 Feb 2025 16:47:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:47:06 UTC	476	OUT	POST /report/v4?s=i1ByR6IqyYyJY4EGL51Hx5wHNEZBENW9rDAg%2B5H7pgJchFNHF0Tt2Tip4m3kMgBvryGb6fc4%2B63T2bJS9ha8UimkBUCzIoLFrrh7o61XBo16OfHlTLOzgoj0WU4kpdjbvpE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 636 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:47:06 UTC	636	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 32 38 36 34 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 36 36 30 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 76 69 65 77 64 6f 63 75 2e 6f 6e 6c 69 Data Ascii: [{"age":52864,"body":{"elapsed_time":660,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":400,"type":"http.error"},"type":"network-error","url":"https://viewdocu.onli
2025-02-18 16:47:06 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Tue, 18 Feb 2025 16:47:05 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-18 16:48:19 UTC	1329	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/37947894:1739895332:8SkyouDDYqU_J4zUQn65EZ81cEzXM6nnuwTiV2PICGk/913f7dda1b1cc346/HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9 HTTP/1.1 Host: viewdocu.online Connection: keep-alive Content-Length: 4723 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" cf-chl: HOD_EaKjGA5z00vpB1uUw75vJJPAA8ZVH_bv73yXG3g-1739897168-1.2.1.1-xH8kiJqw5Vguwa_J2mIQDYCUaC3GzCOcBao9.w1JdRmKZZzBQBDMPYq3ITyIUrQ9 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" cf-chl-ra: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-platform: "Windows" Accept: / Origin: https://viewdocu.online Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://viewdocu.online/assessment/?url=https://0-dir.ip-ddns.com/?ufktjoft Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-18 16:48:19 UTC	4723	OUT	Data Raw: 43 59 6b 7a 62 69 72 33 6a 2b 6a 78 6b 72 63 56 4b 56 6e 4b 6b 56 66 52 70 2b 70 69 73 53 2b 56 6b 7a 70 6f 59 72 6e 38 56 74 7a 4e 6b 4d 31 56 79 35 56 4d 4a 7a 69 46 56 6d 7a 4d 65 33 4d 58 56 4f 38 7a 69 53 56 63 31 6a 61 4a 56 4b 74 7a 72 78 2b 4a 2b 65 75 56 45 39 56 38 4d 56 4b 2d 4b 56 4e 56 72 33 56 55 56 78 63 56 2b 77 31 6b 31 56 78 56 2b 79 49 66 79 7a 2b 61 58 66 47 77 41 39 31 62 52 56 38 65 4b 65 49 56 64 6b 56 57 56 2b 52 4c 2b 56 56 6d 4b 79 61 56 67 39 56 54 56 70 70 56 6b 32 69 56 43 35 75 56 52 4a 72 64 72 7a 43 49 7a 69 63 58 78 63 69 62 69 4a 39 66 6b 35 63 75 66 4d 56 63 54 62 75 39 30 67 49 56 2b 68 35 36 38 78 52 6a 53 67 49 37 56 47 35 58 2b 69 57 75 69 68 66 56 4d 74 49 62 54 61 7a 4a 78 57 39 38 70 67 6f 6b 51 37 56 56 68 32 65 Data Ascii: CYkzbir3j+jxkrcVKVnKkVfRp+pisS+VkzpoYrn8VtzNkM1Vy5VMJziFVmzMe3MXVO8ziSVc1jaJVKtzrx+J+euVE9V8MVK-KVNVr3VUVxcV+w1k1VxV+yIfyz+aXfGwA91bRV8eKeIVdkVWV+RL+VVmKyaVg9VTVppVk2iVC5uVRJrdrzCIzicXxcibiJ9fk5cufMVcTbu90gIV+h568xRjSgI7VG5X+iWuihfVMtIbTazJxW98pgokQ7VVh2e
2025-02-18 16:48:19 UTC	1326	IN	HTTP/1.1 200 OK Date: Tue, 18 Feb 2025 16:48:19 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 3184 Connection: close cf-chl-out-s: EmNz20c2KjW9WYO3SN3//qVSbWU89iaBjdHG/puFOHcagIaz6Yhp919xsRAlnp8vgT93ZPJc3xan85rTjhJN16LUlo8zz31l2Lc9PkAAyBBTgdXYvfjmAOd0wyfwUSZbIouXv21TBN7nNkDdIqvCm0VyqE4brR2TSvrXYZN//N+gijlFsOVWF2YFTeRxnCX/onUnS2KXrREnklWZZkiToyqLqBiMh05RN1FOR1XEYSeJuNf3Amaz0tzoL11HlaJ/ekYSh59+CdnZVbXW2iS7RYIeZmLWCmq3JXSrLVb7pN29URdPp6eB88qt3eDzxJqVKtN1Hq86rAWO42rwgLdjREdV6N5KHjI+u67giCjljN5DFYHDBY14o/MmEOFg/1cnDC8y0YV8C+lEKIv+0CLDWAr3lPJaT/EgbL9g7uUbnmjYDPb4ZUiu76VQwX9Olw8n998LMJV+ZEaRRX0sdvaxt/D8Z3W8u1hpqRzHlDgEbvmEgPYdOKKM7hPO/MGbtM9An1F5xuU/W687DXf0F7aOx2ngxK5teWJbhzKRh3r5ZwgA+uEiXDLAK19Dyi2o/vE1qZwkQi0WRH0j0woxgxAIDQVgBekqDdcUDfLE1rrqbYw=$UCKmItZv1FcKoFk0+DutSw== cf-chl-out: Yu7LuzlCvx2M1+FeruGr8BqVgpsjCSJjPMKz68plKiir1Z1MV4LY+1kZsHmWgaLND9rLBbtyoatcG/fwDkFxDQ==$n0ItWjWVyVbkHNjE5pNiCw== Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I1DbCQUw0qbw9kuoZciKBV%2FeqSymiCtWc7y37FQkeC7sBuLXUu4wlWAn4AGQ46dbcFdUh7cLbvTXywVwm%2BappwtF0N5Zl1mjVOWlmnMf2teeoN6X0QPKiNY693hQpfQB4y4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 913f810c6854057c-IAD alt-svc: h3=":443"; ma=86400
2025-02-18 16:48:19 UTC	216	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 37 37 37 34 26 6d 69 6e 5f 72 74 74 3d 37 37 37 31 26 72 74 74 5f 76 61 72 3d 32 39 32 31 26 73 65 6e 74 3d 36 26 72 65 63 76 3d 31 30 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 36 36 37 34 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 37 34 34 30 36 26 63 77 6e 64 3d 33 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 34 34 65 36 61 66 36 65 34 64 32 32 66 31 33 33 26 74 73 3d 31 34 34 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=7774&min_rtt=7771&rtt_var=2921&sent=6&recv=10&lost=0&retrans=0&sent_bytes=2838&recv_bytes=6674&delivery_rate=374406&cwnd=32&unsent_bytes=0&cid=44e6af6e4d22f133&ts=144&x=0"
2025-02-18 16:48:19 UTC	1196	IN	Data Raw: 66 32 64 68 5a 6d 4b 4c 63 49 4f 4d 56 57 69 46 69 33 42 59 58 6c 64 35 66 47 36 56 64 58 52 35 6e 47 53 57 6f 4b 47 6d 69 36 64 75 59 35 75 72 66 49 75 6e 74 58 53 6d 63 49 61 55 64 6e 64 2f 6b 6f 6d 77 6b 70 4f 6a 77 4c 43 6c 6d 49 4f 36 6f 4c 36 38 76 71 54 43 76 4e 4b 6e 6e 34 33 4c 6f 6f 2b 74 78 71 54 54 6b 4c 58 4f 31 37 7a 43 31 62 57 6a 76 4f 44 71 71 64 61 6a 75 62 2f 46 79 2b 50 70 78 38 37 44 38 37 2f 74 31 73 57 7a 74 2b 63 41 41 62 6a 53 33 66 77 43 35 72 37 63 75 74 33 6c 44 63 7a 65 44 41 6b 4f 43 63 72 65 7a 4e 54 55 30 74 6a 4c 37 52 7a 55 33 65 33 7a 49 67 77 44 2f 52 54 6a 38 43 49 68 35 69 4d 6a 42 41 67 5a 2f 66 6b 75 41 69 45 6e 4e 53 45 77 43 79 59 72 38 6a 72 76 4e 42 72 34 46 52 30 79 48 76 63 53 4f 41 51 43 49 43 67 34 43 79 55 Data Ascii: f2dhZmKLcIOMVWiFi3BYXld5fG6VdXR5nGSWoKGmi6duY5urfIuntXSmcIaUdnd/komwkpOjwLClmIO6oL68vqTCvNKnn43Loo+txqTTkLXO17zC1bWjvODqqdajub/Fy+Ppx87D87/t1sWzt+cAAbjS3fwC5r7cut3lDczeDAkOCcrezNTU0tjL7RzU3e3zIgwD/RTj8CIh5iMjBAgZ/fkuAiEnNSEwCyYr8jrvNBr4FR0yHvcSOAQCICg4CyU
2025-02-18 16:48:19 UTC	1369	IN	Data Raw: 41 66 54 66 34 2f 6a 57 38 51 37 59 44 76 45 62 31 76 67 41 36 78 44 31 35 50 54 78 47 2f 49 6e 49 67 45 43 47 53 30 65 46 41 59 31 4b 69 7a 77 4c 54 59 34 4d 52 6f 4a 43 55 41 41 48 52 77 41 47 6a 4e 41 50 6a 6b 31 4c 41 6b 4b 48 44 6f 71 4d 53 6c 4d 53 78 39 42 50 78 55 57 4d 45 59 33 48 46 38 30 58 79 42 54 54 43 4a 66 52 57 42 66 57 56 56 4d 53 44 70 64 54 57 78 75 4a 47 4e 43 55 43 31 34 56 6a 6c 53 65 31 6c 78 61 46 78 5a 62 57 34 35 56 45 39 42 5a 34 53 4a 64 47 56 73 59 57 4e 58 54 48 71 43 53 35 53 55 54 6c 61 44 6d 49 31 32 6b 33 61 63 66 70 75 5a 6d 56 32 4d 67 57 39 64 59 71 69 43 68 35 35 38 68 6d 2b 61 66 32 71 48 6b 4a 4b 56 72 48 68 77 72 59 32 76 6e 70 61 58 69 35 6d 36 73 70 6d 75 77 6f 47 57 74 38 4f 6e 7a 4c 71 45 6c 35 2b 6d 72 4b 2b Data Ascii: AfTf4/jW8Q7YDvEb1vgA6xD15PTxG/InIgECGS0eFAY1KizwLTY4MRoJCUAAHRwAGjNAPjk1LAkKHDoqMSlMSx9BPxUWMEY3HF80XyBTTCJfRWBfWVVMSDpdTWxuJGNCUC14VjlSe1lxaFxZbW45VE9BZ4SJdGVsYWNXTHqCS5SUTlaDmI12k3acfpuZmV2MgW9dYqiCh558hm+af2qHkJKVrHhwrY2vnpaXi5m6spmuwoGWt8OnzLqEl5+mrK+
2025-02-18 16:48:19 UTC	619	IN	Data Raw: 50 62 55 31 66 58 62 44 64 72 39 39 65 41 53 41 78 55 55 49 67 6e 6b 44 4e 38 46 4b 41 55 4d 2f 4f 6f 55 4a 41 30 54 4c 77 30 55 4d 50 49 79 4e 2f 68 42 39 78 46 41 45 52 73 64 48 7a 4e 46 2f 42 67 44 53 54 73 6b 50 45 34 2f 45 30 52 51 51 30 4d 56 56 45 64 49 4b 30 63 75 4c 55 31 43 4b 32 4d 33 54 31 34 77 56 7a 4e 63 59 6a 39 4e 4b 69 39 66 4f 69 74 52 54 57 49 31 64 6b 4a 59 64 44 4a 33 63 54 70 51 63 46 42 36 4e 6e 31 53 62 32 4a 2f 56 6b 70 30 68 31 75 44 59 6f 4e 68 69 47 47 47 68 58 4e 6b 6b 6d 5a 37 68 5a 4e 61 61 58 78 36 6e 57 74 39 64 6e 4f 58 64 59 6d 48 58 5a 2b 68 6e 49 57 44 6f 33 74 2f 70 70 4f 47 6c 4b 65 59 64 35 6d 6b 68 58 32 37 75 59 79 41 77 62 46 38 67 4b 65 77 79 49 71 42 74 71 47 2f 70 49 72 43 73 63 61 68 79 61 4f 67 78 4d 47 36 Data Ascii: PbU1fXbDdr99eASAxUUIgnkDN8FKAUM/OoUJA0TLw0UMPIyN/hB9xFAERsdHzNF/BgDSTskPE4/E0RQQ0MVVEdIK0cuLU1CK2M3T14wVzNcYj9NKi9fOitRTWI1dkJYdDJ3cTpQcFB6Nn1Sb2J/Vkp0h1uDYoNhiGGGhXNkkmZ7hZNaaXx6nWt9dnOXdYmHXZ+hnIWDo3t/ppOGlKeYd5mkhX27uYyAwbF8gKewyIqBtqG/pIrCscahyaOgxMG6