Edit tour

Windows Analysis Report
http://nestspeak.com

Overview

General Information

Sample URL:	http://nestspeak.com
Analysis ID:	1622570
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

AI detected suspicious URL

Phishing site or detected (based on various text indicators)

Detected non-DNS traffic on DNS port

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid T&C link found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4312 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5480 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2000,i,16376115168852635981,9461264891893528188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6520 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nest%73%70%65%61%6b%2e%63%6f%6d" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
1.5.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1536849324:1740388352:ds0z8fSfXeBxr2_fnhDvTWyjlgeYv3wEUcvGy3JCb6E/916e6dd99d760f6b/H2ORob.KsrNR2JbfjRVOs6sOahjEbB1DvkKsPmjlTGQ-1740389344-1.1.1.1-FUCuSw06da.tQwcQ3aEXOxbWaSnvf2umoM3gWFssBqcJ4phlcqQvg29OuzBklebl HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3408sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Content-Type: text/plain;charset=UTF-8cf-chl: H2ORob.KsrNR2JbfjRVOs6sOahjEbB1DvkKsPmjlTGQ-1740389344-1.1.1.1-FUCuSw06da.tQwcQ3aEXOxbWaSnvf2umoM3gWFssBqcJ4phlcqQvg29OuzBkleblcf-chl-ra: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 24 Feb 2025 09:29:06 GMTContent-Type: text/html; charset=iso-8859-1Transfer-Encoding: chunkedConnection: closeAge: 166Cache-Control: max-age=14400cf-cache-status: HITReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oos%2FjgFdT3ONwIQ%2BOPpUCzW%2BkS6NObpR0FA06IxZEFENiYVpQ0nSZp9UnxFUZWYhqd6TVkHhjIqe%2BgW8TjxgclRa%2F9%2FOAjzf3NcJLXi46Gju7drjoRpVO8NCDWUOw6l9EhlgJubXg%2BvMgBU%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 916e6de69c46c32a-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1668&min_rtt=1665&rtt_var=631&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1234&delivery_rate=1724748&cwnd=244&unsent_bytes=0&cid=0a3985646a416317&ts=158&x=0"

Source: chromecache_83.2.dr, chromecache_65.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_90.2.dr, chromecache_75.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_84.2.dr, chromecache_72.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_84.2.dr, chromecache_90.2.dr, chromecache_75.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_84.2.dr, chromecache_90.2.dr, chromecache_75.2.dr, chromecache_72.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60147
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60155
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 59985
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 60055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60055
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 60147 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 60076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 59985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 60155 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal64.phis.win@19/43@52/20

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2000,i,16376115168852635981,9461264891893528188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://nest%73%70%65%61%6b%2e%63%6f%6d"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2080 --field-trial-handle=2000,i,16376115168852635981,9461264891893528188,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://nest%73%70%65%61%6b%2e%63%6f%6d	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
http://nestspeak.com/	0%	Avira URL Cloud	safe
https://nestspeak.com/	0%	Avira URL Cloud	safe
https://6265662839.sbs/next.php	0%	Avira URL Cloud	safe
https://relogin.lgninmsoftrl.com/e41Xa	0%	Avira URL Cloud	safe
https://6265662839-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://relogin.lgninmsoftrl.com/favicon.ico	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
cdn.jsdelivr.net.cdn.cloudflare.net	104.18.187.31	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	high
e329293.dscd.akamaiedge.net	23.15.178.154	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
cos.ap-bangkok.myqcloud.com	43.128.193.10	true	false	high
6265662839.sbs	69.49.246.64	true	false	high
s-part-0039.t-0009.t-msedge.net	13.107.246.67	true	false	high
relogin.lgninmsoftrl.com	104.21.96.1	true	false	high
nestspeak.com	103.138.88.61	true	true	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
www.google.com	172.217.18.4	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
6265662839-1317754460.cos.ap-bangkok.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://nestspeak.com/	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/916e6dd99d760f6b/1740389346092/R3NHKJtsRRHjY6S	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/916e6dd99d760f6b/1740389346085/fa61e57a6779b82f2528692f60131350b2eb18335238f22195058d72f04221e9/YV06VFFGK_eeFab	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://relogin.lgninmsoftrl.com/e41Xa	true	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=oos%2FjgFdT3ONwIQ%2BOPpUCzW%2BkS6NObpR0FA06IxZEFENiYVpQ0nSZp9UnxFUZWYhqd6TVkHhjIqe%2BgW8TjxgclRa%2F9%2FOAjzf3NcJLXi46Gju7drjoRpVO8NCDWUOw6l9EhlgJubXg%2BvMgBU%3D	false		high
https://6265662839-1317754460.cos.ap-bangkok.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
http://nestspeak.com/	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
https://relogin.lgninmsoftrl.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/	false		high
https://relogin.lgninmsoftrl.com/e41Xa/	true		unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://6265662839.sbs/next.php	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=916e6dd99d760f6b&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1536849324:1740388352:ds0z8fSfXeBxr2_fnhDvTWyjlgeYv3wEUcvGy3JCb6E/916e6dd99d760f6b/H2ORob.KsrNR2JbfjRVOs6sOahjEbB1DvkKsPmjlTGQ-1740389344-1.1.1.1-FUCuSw06da.tQwcQ3aEXOxbWaSnvf2umoM3gWFssBqcJ4phlcqQvg29OuzBklebl	false		high
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/b/b0e4a89976ce/api.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://getbootstrap.com/)	chromecache_84.2.dr, chromecache_72.2.dr	false	high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_84.2.dr, chromecache_90.2.dr, chromecache_75.2.dr, chromecache_72.2.dr	false	high
https://getbootstrap.com)	chromecache_90.2.dr, chromecache_75.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_84.2.dr, chromecache_90.2.dr, chromecache_75.2.dr, chromecache_72.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_83.2.dr, chromecache_65.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.187.31	cdn.jsdelivr.net.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
69.49.246.64	6265662839.sbs	United States	46606	UNIFIEDLAYER-AS-1US	false
104.21.96.1	relogin.lgninmsoftrl.com	United States	13335	CLOUDFLARENETUS	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
23.15.178.154	e329293.dscd.akamaiedge.net	United States	20940	AKAMAI-ASN1EU	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
103.138.88.61	nestspeak.com	Viet Nam	45538	ODS-AS-VNOnlinedataservicesVN	true
239.255.255.250	unknown	Reserved	unknown	unknown	false
43.128.193.10	cos.ap-bangkok.myqcloud.com	Japan	4249	LILLY-ASUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
95.101.182.112	unknown	European Union	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1622570
Start date and time:	2025-02-24 10:27:52 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 29s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://nestspeak.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@19/43@52/20
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.46, 74.125.133.84, 216.58.206.78, 142.250.184.238, 142.250.186.142, 199.232.210.172, 2.23.77.188, 172.217.23.110, 142.250.186.110, 142.250.185.142, 142.250.185.202, 142.250.184.202, 142.250.186.74, 142.250.185.170, 142.250.185.138, 172.217.18.10, 142.250.186.170, 142.250.186.138, 172.217.16.138, 142.250.185.234, 142.250.185.74, 142.250.186.42, 142.250.184.234, 142.250.185.106, 142.250.186.106, 142.250.74.202, 142.250.81.238, 172.217.147.41, 142.250.186.174, 142.250.185.174, 173.194.142.8, 172.217.16.195, 2.19.106.160, 4.175.87.197, 13.107.253.72, 13.107.246.67
Excluded domains from analysis (whitelisted): r3.sn-5ualdnze.gvt1.com, fs.microsoft.com, r4.sn-5uaeznse.gvt1.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, r3---sn-5ualdnze.gvt1.com, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, firstparty-azurefd-prod.trafficmanager.net, r4---sn-5uaeznse.gvt1.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://nest%73%70%65%61%6b%2e%63%6f%6d

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32012)
Category:	downloaded
Size (bytes):	69597
Entropy (8bit):	5.369216080582935
Encrypted:	false
SSDEEP:	1536:qNhEyjjTikEJO4edXXe9J578go6MWX2xkjVe4c4j2ll2Ac7pK3F71QDU8CuT:Exc2yjq4j2uYnQDU8CuT
MD5:	5F48FC77CAC90C4778FA24EC9C57F37D
SHA1:	9E89D1515BC4C371B86F4CB1002FD8E377C1829F
SHA-256:	9365920887B11B33A3DC4BA28A0F93951F200341263E3B9CEFD384798E4BE398
SHA-512:	CAB8C4AFA1D8E3A8B7856EE29AE92566D44CEEAD70C8D533F2C98A976D77D0E1D314719B5C6A473789D8C6B21EBB4B89A6B0EC2E1C9C618FB1437EBC77D3A269
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.2.1.slim.min.js
Preview:	/! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_e

Source: https://relogin.lgninmsoftrl.com/e41Xa/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The URL 'relogin.lgninmsoftrl.com' does not match the legitimate domain., The URL contains misspellings and unusual character sequences ('lgninmsoftrl'), which are common in phishing attempts., The use of a subdomain 'relogin' and the structure of the URL suggest an attempt to mimic a legitimate login page. DOM: 1.5.pages.csv
Source: https://relogin.lgninmsoftrl.com/e41Xa/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'relogin.lgninmsoftrl.com' does not match the legitimate domain 'microsoft.com'., The domain 'lgninmsoftrl.com' appears to be a misspelling or rearrangement of 'login' and 'microsoft', which is a common phishing tactic., The use of 'relogin' as a subdomain is suspicious and often used in phishing attempts to mimic legitimate login processes., The email domain 'ekamao.com' does not appear to be associated with Microsoft, adding to the suspicion. DOM: 1.6.pages.csv

Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: 1.5.pages.csv, type: HTML

Source: http://nest%73%70%65%61%6b%2e%63%6f%6d	Joe Sandbox AI: The URL 'http://nest%73%70%65%61%6b%2e%63%6f%6d' uses percent-encoding to represent characters, which can be decoded to 'nestspeak.com'. This is visually and structurally similar to 'nest.com', a known brand associated with smart home products. The use of 'speak' as a suffix could suggest a different purpose, such as a communication or voice-related service, but it is close enough to potentially confuse users into thinking it is related to the Nest brand. The similarity score is high due to the visual resemblance and potential for user confusion, while the spoofed score reflects the likelihood of typosquatting given the encoded characters and structural similarity.
Source: https://lgninmsoftrl.com	Joe Sandbox AI: The URL 'https://lgninmsoftrl.com' appears to be a typosquatting attempt targeting the well-known brand Microsoft. The legitimate URL is 'https://login.microsoft.com'. The analyzed URL uses character omissions and substitutions: 'login' is shortened to 'lgnin', and 'microsoft' is altered to 'msoftrl'. These changes maintain a high degree of visual similarity, likely to confuse users. The domain structure lacks any legitimate subdomain or extension that would suggest a different purpose, reinforcing the likelihood of a deceptive intent. The similarity score is high due to the structural and character-level resemblance, and the spoofed score is high due to the potential for user confusion.
Source: https://relogin.lgninmsoftrl.com	Joe Sandbox AI: The URL 'https://relogin.lgninmsoftrl.com' appears to be a typosquatting attempt targeting Microsoft's login portal. The subdomain 'relogin' suggests a login-related function, which is common for phishing attempts. The main domain 'lgninmsoftrl' is a jumbled version of 'login.microsoft', with character substitutions and reordering ('lgnin' for 'login' and 'msoftrl' for 'microsoft'). These changes are likely to confuse users into thinking they are accessing a legitimate Microsoft login page. The use of a non-standard domain extension '.com' does not provide any legitimate context that would suggest a different purpose unrelated to Microsoft. The high similarity score is due to the structural and character-level resemblance to the legitimate Microsoft login URL, and the high spoofed score reflects the likelihood of user confusion and the deceptive nature of the URL.

Source: Chrome DOM: 1.0	OCR Text: Microsoft Checking for secure web navigation. Verifying... CLOUDFLARE Ternw Before granting access, Microsoft needs to assess your connection for security.
Source: Chrome DOM: 1.3	OCR Text: Microsoft Checking for secure web navigation. Verifying v.. CLOUDFLARE Ternw Before granting access, Microsoft needs to assess your connection for security.

Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: Invalid link: Privacy statement
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: Invalid link: Privacy statement

Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No favicon
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No favicon
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No favicon
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No favicon
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No favicon

Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No <meta name="author".. found
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No <meta name="author".. found

Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No <meta name="copyright".. found
Source: https://relogin.lgninmsoftrl.com/e41Xa/	HTTP Parser: No <meta name="copyright".. found

Source: global traffic	TCP traffic: 192.168.2.4:49738 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.4:59978 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	TCP traffic detected without corresponding DNS query: 199.232.214.172
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nestspeak.com
Source: global traffic	DNS traffic detected: DNS query: relogin.lgninmsoftrl.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6265662839-1317754460.cos.ap-bangkok.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 6265662839.sbs
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 24, 2025 10:28:50.704164982 CET	53	52180	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:50.733696938 CET	53	55043	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:51.731271982 CET	53	62895	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:54.841480970 CET	50667	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:54.841655016 CET	58265	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:54.852559090 CET	53	58265	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:54.852885962 CET	53	50667	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:56.518640995 CET	58552	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:56.523130894 CET	57864	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:56.529922962 CET	53	58552	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:56.816395998 CET	53	57864	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:57.515067101 CET	54298	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:57.515403032 CET	63427	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:57.809576035 CET	53	54298	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:57.854665995 CET	53	63427	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:59.565171003 CET	63825	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:59.565354109 CET	60972	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:28:59.573764086 CET	53	60972	1.1.1.1	192.168.2.4
Feb 24, 2025 10:28:59.585402966 CET	53	63825	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:00.913276911 CET	49984	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:00.913733006 CET	56489	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:00.922564030 CET	53	49984	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:00.923348904 CET	53	56489	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:02.222023010 CET	55053	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:02.222173929 CET	54937	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:02.231195927 CET	53	55053	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:02.233167887 CET	53	54937	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:02.241370916 CET	50431	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:02.241491079 CET	62582	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:02.250752926 CET	53	62582	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:02.252134085 CET	53	50431	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:02.864234924 CET	49753	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:02.864367008 CET	53352	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:02.871328115 CET	53	53352	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:02.871714115 CET	53	49753	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:03.553980112 CET	51390	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:03.554256916 CET	60362	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:03.564126968 CET	53	60362	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:03.564745903 CET	53	51390	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:03.707787991 CET	57765	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:03.707989931 CET	58526	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:03.714843035 CET	53	57765	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:03.715651989 CET	53	58526	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:05.058248043 CET	138	138	192.168.2.4	192.168.2.255
Feb 24, 2025 10:29:06.399136066 CET	60601	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:06.399353027 CET	54355	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:06.406372070 CET	53	60601	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:06.406766891 CET	53	54355	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:08.937387943 CET	53	53520	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.180108070 CET	54150	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.180243969 CET	58055	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.180917978 CET	56922	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.181119919 CET	61728	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.181685925 CET	64696	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.181938887 CET	56355	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.183526039 CET	56004	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.183661938 CET	50579	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.184062958 CET	65060	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.184283972 CET	59877	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.187444925 CET	53	58055	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.188441038 CET	53	56922	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.188674927 CET	53	54150	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.188817024 CET	53	64696	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.188848019 CET	53	61728	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.189555883 CET	53	56355	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.190787077 CET	53	55944	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.190838099 CET	53	56004	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.192240953 CET	53	50579	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.449975967 CET	53	59877	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.601731062 CET	53	65060	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.914097071 CET	64795	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.914247036 CET	56248	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.921547890 CET	53	64795	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.921586037 CET	53	56248	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:23.998014927 CET	51192	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:23.998312950 CET	63743	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:24.000113010 CET	65472	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:24.000248909 CET	64254	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:24.005920887 CET	53	63743	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:24.005958080 CET	53	51192	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:24.007736921 CET	53	65472	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:24.008460045 CET	53	64254	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:24.032752037 CET	50344	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:24.032962084 CET	64986	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:24.040291071 CET	53	50344	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:24.040894985 CET	53	64986	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:24.344211102 CET	53	58246	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:25.989033937 CET	62559	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:25.989723921 CET	58950	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:25.999840975 CET	58251	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:26.000015020 CET	57472	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:26.189435959 CET	53	57472	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:26.242830038 CET	53	58950	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:26.256860971 CET	53	62559	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:26.615271091 CET	53	58251	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:27.201605082 CET	63022	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:27.201755047 CET	58042	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:28.218910933 CET	59475	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:28.219033957 CET	59381	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:28.368877888 CET	53	58042	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:28.368923903 CET	53	63022	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:28.372613907 CET	53	49990	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:28.373502970 CET	53	59475	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:28.375310898 CET	53	59381	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:30.425488949 CET	56831	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:30.425631046 CET	56395	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:30.433041096 CET	53	56395	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:30.433253050 CET	53	56831	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:30.433953047 CET	53	50027	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:31.353800058 CET	60891	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:31.354263067 CET	62785	53	192.168.2.4	1.1.1.1
Feb 24, 2025 10:29:31.364408016 CET	53	62785	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:31.372746944 CET	53	60891	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:32.065418005 CET	53	54706	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:37.078651905 CET	53	63625	1.1.1.1	192.168.2.4
Feb 24, 2025 10:29:50.037024021 CET	53	61445	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 24, 2025 10:28:56.816474915 CET	192.168.2.4	1.1.1.1	c218	(Port unreachable)	Destination Unreachable
Feb 24, 2025 10:29:28.373578072 CET	192.168.2.4	1.1.1.1	c1f4	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
Feb 24, 2025 10:28:56.545433044 CET	428	OUT	GET / HTTP/1.1 Host: nestspeak.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Feb 24, 2025 10:28:57.509720087 CET	1021	IN	HTTP/1.1 301 Moved Permanently Connection: Keep-Alive Keep-Alive: timeout=5, max=100 content-type: text/html content-length: 795 date: Mon, 24 Feb 2025 09:28:55 GMT server: LiteSpeed location: https://nestspeak.com/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c [TRUNCATED] Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</style></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, sans-serif; height:100%; background-color: #fff;"><div style="height:auto; min-height:100%; "> <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">301</h1><h2 style="margin-top:20px;font-size: 30px;">Moved Permanently</h2><p>The document has been permanently moved.</p></div></div></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:28:59 UTC	656	OUT	GET / HTTP/1.1 Host: nestspeak.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:28:59 UTC	473	IN	HTTP/1.1 302 Found Connection: close x-powered-by: PHP/7.4.33 location: https://relogin.lgninmsoftrl.com/e41Xa content-type: text/html; charset=UTF-8 content-length: 0 date: Mon, 24 Feb 2025 09:28:57 GMT server: LiteSpeed cache-control: no-cache, no-store, must-revalidate, max-age=0 alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:00 UTC	672	OUT	GET /e41Xa HTTP/1.1 Host: relogin.lgninmsoftrl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:00 UTC	876	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 24 Feb 2025 09:29:00 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://relogin.lgninmsoftrl.com/e41Xa/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uGp%2BX2ZD9CgVMq9GgbbtWkwsqXxjt07dJP1R%2F5Kxk8MG6MXc1V3ReiNVtvxU3knUvH%2FWMlD%2Fnf%2B8f3IfzETiaYCDzo0U4jj%2BoRk6EwFH2E1uqeOFtcOtBtwXJJm00AcWpNeQDkDdMjAMaSA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 916e6dc34dff1a48-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2028&min_rtt=2024&rtt_var=762&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1250&delivery_rate=1442687&cwnd=183&unsent_bytes=0&cid=e2a87dfcc01efc36&ts=408&x=0"
2025-02-24 09:29:00 UTC	253	IN	Data Raw: 66 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 6c 6f 67 69 6e 2e 6c 67 6e 69 6e 6d 73 6f 66 74 72 6c 2e 63 6f 6d 2f 65 34 31 58 61 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f7<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://relogin.lgninmsoftrl.com/e41Xa/">here</a>.</p></body></html>
2025-02-24 09:29:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:01 UTC	673	OUT	GET /e41Xa/ HTTP/1.1 Host: relogin.lgninmsoftrl.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:02 UTC	998	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=a2b2q3jtd9b2qnoq1pkn47dp1u; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AyLGPKYmPTiutfmrI9G3IyO9j13LH0LE5snqg20RfXwLtxsWvcRRMpsTzFL3NQjOg%2BVxu%2B0yUb1%2F1jeQR42DXH83Sgo8Yob53Iq%2Bm%2BMH1N0KDIHSIzSQVPiqKjRQuxpKfKkCOu9decI6WlI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 916e6dcb2d8b42c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1636&min_rtt=1621&rtt_var=638&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1251&delivery_rate=1674311&cwnd=223&unsent_bytes=0&cid=821bee85b8c07e8e&ts=314&x=0"
2025-02-24 09:29:02 UTC	371	IN	Data Raw: 31 30 63 66 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 45 74 68 65 72 65 61 6c 54 77 69 6e 6b 6c 65 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 66 61 6d 6f 75 73 20 6d 75 73 69 63 69 61 6e 20 70 6c 61 79 65 64 20 61 20 68 65 61 72 74 66 65 6c 74 20 6d 65 6c 6f 64 79 20 74 68 61 74 20 6d 6f 76 65 64 20 65 76 65 72 79 6f 6e 65 20 74 6f 20 74 65 61 72 73 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: 10cf <html lang="en"> <head> <meta charset="UTF-8"> <title>EtherealTwinkle</title> ... <span>A famous musician played a heartfelt melody that moved everyone to tears.</span> --> <meta name="robots" content=
2025-02-24 09:29:02 UTC	1369	IN	Data Raw: 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 41 20 66 65 61 72 6c 65 73 73 20 61 64 76 65 6e 74 75 72 65 72 20 73 65 74 20 73 61 69 6c 20 74 6f 20 65 78 70 6c 6f 72 65 20 6d 79 73 74 65 72 69 6f 75 73 20 75 6e 63 68 61 72 74 65 64 20 69 73 6c 61 6e 64 73 20 66 61 72 20 61 77 61 79 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 54 68 65 20 63 68 65 66 20 74 61 75 67 68 74 20 61 20 63 6f 6f 6b 69 6e 67 20 63 Data Ascii: t src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>A fearless adventurer set sail to explore mysterious uncharted islands far away.</p> --> <style> * /* The chef taught a cooking c
2025-02-24 09:29:02 UTC	1369	IN	Data Raw: 2a 20 41 20 64 65 64 69 63 61 74 65 64 20 74 65 61 63 68 65 72 20 69 6e 73 70 69 72 65 64 20 73 74 75 64 65 6e 74 73 20 74 6f 20 70 75 72 73 75 65 20 6b 6e 6f 77 6c 65 64 67 65 20 61 6e 64 20 66 6f 6c 6c 6f 77 20 74 68 65 69 72 20 64 72 65 61 6d 73 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b Data Ascii: * A dedicated teacher inspired students to pursue knowledge and follow their dreams. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width: 768px) {
2025-02-24 09:29:02 UTC	1202	IN	Data Raw: 69 72 6f 6e 6d 65 6e 74 61 6c 20 63 6f 6e 73 65 72 76 61 74 69 6f 6e 20 65 66 66 6f 72 74 73 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 54 68 65 20 64 65 74 65 63 74 69 76 65 20 66 6f 6c 6c 6f 77 65 64 20 63 6c 75 65 73 20 63 61 72 65 66 75 6c 6c 79 20 74 6f 20 75 6e 63 6f 76 65 72 20 61 20 73 68 6f 63 6b 69 6e 67 20 68 69 64 64 65 6e 20 74 72 75 74 68 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 38 70 6b 52 47 6a 69 38 38 36 4b 72 46 66 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 55 6d 62 72 61 46 6c 61 72 65 22 3e 0d 0a 20 20 20 20 Data Ascii: ironmental conservation efforts. --> ... The detective followed clues carefully to uncover a shocking hidden truth. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA8pkRGji886KrFf" data-callback="UmbraFlare">
2025-02-24 09:29:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:02 UTC	552	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://relogin.lgninmsoftrl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:02 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 24 Feb 2025 09:29:02 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/b0e4a89976ce/api.js Server: cloudflare CF-RAY: 916e6dd05e0d42df-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:02 UTC	633	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://relogin.lgninmsoftrl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:02 UTC	725	IN	HTTP/1.1 200 OK Connection: close Content-Length: 1746 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=604800, s-maxage=43200 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: image/png X-JSD-Version: master X-JSD-Version-Type: branch ETag: W/"6d2-AYrTQKiV+wIbV7PAik2IZG8pgfE" Accept-Ranges: bytes Age: 823 Date: Mon, 24 Feb 2025 09:29:02 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-ewr-kewr1740052-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-02-24 09:29:02 UTC	1378	IN	Data Raw: 52 49 46 46 ca 06 00 00 57 45 42 50 56 50 38 4c bd 06 00 00 2f ff c4 3f 11 1e 3a b6 b5 29 92 9c da dd 4c 65 66 c3 f0 78 d3 a6 b4 8a 5e 86 a0 40 cc 54 95 15 59 62 66 96 25 79 da 0a cb ca 9e 86 50 44 dd 3c a3 05 b0 c9 cc e4 cb 65 4b 16 5b 63 89 7c c9 93 20 39 92 a4 48 0a c5 9f 67 29 b3 97 e9 c4 0c 4f 5c 75 65 96 ba aa 87 03 6e 24 49 8e 9c 8a 7e 13 40 2f ae e7 39 27 36 c2 07 c8 dc 34 ba 7b af 51 11 c0 c0 b2 6d 3b 6d b3 ac af 2e 0b 1c e6 e9 37 5f 1d 04 a3 65 c9 9c e2 00 c2 0c 4e 9e 73 27 a0 aa 81 c8 b5 ac 41 2b 9b 3e ca 74 7a 20 5c eb 7a 67 b0 ae b5 8f 08 a7 bb f0 0c 11 9c e0 da 0b d0 38 d4 38 88 5b 83 71 89 5d 8a 0c 5a dd f5 d1 0f a7 6b 1a d4 ba de 1f ac 4d d7 3c 20 82 11 5c 7f 09 82 41 fc c7 7f fc c7 7f fc c7 7f fc 87 18 fd 68 d3 e4 4f 91 91 f0 1f ff f1 1f Data Ascii: RIFFWEBPVP8L/?:)Lefx^@TYbf%yPD<eK[c\| 9Hg)O\uen$I~@/9'64{Qm;m.7_eNs'A+>tz \zg88[q]ZkM< \AhO
2025-02-24 09:29:02 UTC	368	IN	Data Raw: ee 2a c6 ec 56 a7 71 8f 31 3b 44 ad ef 9f c3 33 46 ac 69 db 66 b3 82 6b 25 3c 3b 9b 85 b8 b5 ee ba f0 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff f1 1f ff Data Ascii: *Vq1;D3Fifk%<;

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:03 UTC	567	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://relogin.lgninmsoftrl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:03 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:03 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 916e6dd439058c71-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 09:29:03 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-24 09:29:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://nestspeak.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
http://nestspeak.com

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:04 UTC	383	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:04 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 916e6dd90a0042c3-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 09:29:04 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:04 UTC	808	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://relogin.lgninmsoftrl.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:04 UTC	1297	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28157 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-OiZwpfuyOT6JZB64' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-02-24 09:29:04 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-02-24 09:29:04 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 4f 69 5a 77 70 66 75 79 4f 54 36 4a 5a 42 36 34 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-OiZwpfuyOT6JZB64' 'unsafe-
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:04 UTC	731	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=916e6dd99d760f6b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:04 UTC	331	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 122964 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 916e6dddbc15420b-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 09:29:04 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 77 56 56 77 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 Data Ascii: window._cf_chl_opt.wVVw8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflar
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 61 63 63 69 64 65 6e 74 61 6c 6c 79 25 32 30 63 61 63 68 65 64 25 32 30 62 79 25 32 30 61 6e 25 32 30 69 6e 74 65 72 6d 65 64 69 61 72 79 25 32 30 61 6e 64 25 32 30 69 73 25 32 30 6e 6f 25 32 30 6c 6f 6e 67 65 72 25 32 30 61 76 61 69 6c 61 62 6c 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 75 6e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 22 3a 22 59 6f 75 72 25 32 30 62 72 6f 77 73 65 72 25 32 30 69 73 25 32 30 6f 75 74 25 32 30 6f Data Ascii: accidentally%20cached%20by%20an%20intermediary%20and%20is%20no%20longer%20available","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","turnstile_success":"Success%21","unsupported_browser":"Your%20browser%20is%20out%20o
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 2c 66 30 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 2d 70 61 72 73 65 49 6e 74 28 67 49 28 37 38 30 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 35 33 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 67 49 28 36 37 35 29 29 2f 33 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 34 36 34 29 29 2f 34 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 37 32 34 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 39 37 32 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 35 34 29 29 2f 37 29 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 35 33 35 29 29 2f 38 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 33 31 35 29 29 2f Data Ascii: ,f0){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=-parseInt(gI(780))/1+-parseInt(gI(1753))/2+parseInt(gI(675))/3(parseInt(gI(464))/4)+parseInt(gI(724))/5+-parseInt(gI(972))/6(parseInt(gI(1754))/7)+-parseInt(gI(535))/8*(parseInt(gI(1315))/
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 2c 65 3d 64 2c 66 3d 31 2c 67 3d 31 65 33 2a 65 4d 5b 69 33 28 31 37 31 39 29 5d 5b 69 33 28 31 30 32 38 29 5d 28 32 3c 3c 66 2c 33 32 29 2c 65 4d 5b 69 33 28 31 31 32 37 29 5d 28 66 75 6e 63 74 69 6f 6e 28 69 35 2c 68 29 7b 69 35 3d 69 33 2c 68 3d 7b 27 44 57 54 64 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 5e 6a 7d 2c 27 4f 56 71 48 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 26 6a 7d 2c 27 52 69 7a 77 76 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 2c 69 34 29 7b 72 65 74 75 72 6e 20 69 34 3d 62 2c 65 5b 69 34 28 31 30 31 33 29 5d 28 69 2c 6a 29 7d 2c 27 73 65 53 6d 4f 27 3a 66 75 6e 63 74 69 6f 6e 28 69 2c 6a 29 7b 72 65 74 75 72 6e 20 69 2d 6a 7d 7d 2c 65 4d 5b 69 35 28 31 30 36 37 29 5d 26 Data Ascii: ,e=d,f=1,g=1e3*eM[i3(1719)][i3(1028)](2<<f,32),eM[i3(1127)](function(i5,h){i5=i3,h={'DWTdz':function(i,j){return i^j},'OVqHK':function(i,j){return i&j},'Rizwv':function(i,j,i4){return i4=b,e[i4(1013)](i,j)},'seSmO':function(i,j){return i-j}},eM[i5(1067)]&
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 31 2c 4c 5b 44 5d 5b 69 36 28 31 36 37 39 29 5d 28 4d 5b 42 5b 43 5d 5d 5b 45 5d 29 29 26 26 28 69 5b 69 36 28 31 34 33 34 29 5d 28 4e 2c 4f 5b 42 5b 43 5d 5d 5b 45 5d 29 7c 7c 50 5b 44 5d 5b 69 36 28 31 32 35 30 29 5d 28 27 6f 2e 27 2b 51 5b 42 5b 43 5d 5d 5b 45 5d 29 29 2c 45 2b 2b 29 3b 7d 65 6c 73 65 20 52 5b 44 5d 3d 53 5b 42 5b 43 5d 5d 5b 69 36 28 31 38 31 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 59 2c 69 37 29 7b 72 65 74 75 72 6e 20 69 37 3d 69 36 2c 69 5b 69 37 28 31 36 36 35 29 5d 28 27 6f 2e 27 2c 59 29 7d 29 7d 65 6c 73 65 20 66 5b 69 36 28 31 32 33 38 29 5d 3d 4a 53 4f 4e 5b 69 36 28 31 36 30 30 29 5d 28 66 5b 69 36 28 31 32 33 38 29 5d 29 3b 6b 3d 69 5b 69 36 28 38 34 34 29 5d 28 68 2c 69 36 28 34 36 37 29 29 2c 6c 3d 69 5b 69 36 28 31 36 36 Data Ascii: 1,L[D][i6(1679)](M[B[C]][E]))&&(i[i6(1434)](N,O[B[C]][E])\|\|P[D][i6(1250)]('o.'+Q[B[C]][E])),E++);}else R[D]=S[B[C]][i6(1813)](function(Y,i7){return i7=i6,i[i7(1665)]('o.',Y)})}else f[i6(1238)]=JSON[i6(1600)](f[i6(1238)]);k=i[i6(844)](h,i6(467)),l=i[i6(166
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 6e 2c 6f 29 7b 72 65 74 75 72 6e 20 69 62 3d 67 4a 2c 6a 3d 7b 7d 2c 6a 5b 69 62 28 31 37 37 39 29 5d 3d 69 62 28 31 31 34 33 29 2c 6a 5b 69 62 28 39 33 38 29 5d 3d 69 62 28 31 30 36 37 29 2c 6a 5b 69 62 28 31 31 39 37 29 5d 3d 69 62 28 35 32 34 29 2c 6a 5b 69 62 28 31 30 34 35 29 5d 3d 69 62 28 39 37 36 29 2c 6a 5b 69 62 28 31 31 38 31 29 5d 3d 69 62 28 31 31 38 38 29 2c 6a 5b 69 62 28 31 31 35 35 29 5d 3d 69 62 28 31 30 39 35 29 2c 6a 5b 69 62 28 39 34 30 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 73 2c 76 29 7b 72 65 74 75 72 6e 20 73 3e 76 7d 2c 6a 5b 69 62 28 31 34 35 36 29 5d 3d 69 62 28 39 33 37 29 2c 6b 3d 6a 2c 6c 3d 65 5b 69 62 28 37 39 34 29 5d 28 29 2c 6d 3d 6b 5b 69 62 28 31 31 35 35 29 5d 2c 6b 5b 69 62 28 39 34 30 29 5d 28 6c 5b 69 62 28 31 36 37 Data Ascii: n,o){return ib=gJ,j={},j[ib(1779)]=ib(1143),j[ib(938)]=ib(1067),j[ib(1197)]=ib(524),j[ib(1045)]=ib(976),j[ib(1181)]=ib(1188),j[ib(1155)]=ib(1095),j[ib(940)]=function(s,v){return s>v},j[ib(1456)]=ib(937),k=j,l=e[ib(794)](),m=k[ib(1155)],k[ib(940)](l[ib(167
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 3d 64 5b 6a 34 28 31 33 39 32 29 5d 28 73 65 74 49 6e 74 65 72 76 61 6c 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 67 79 28 29 7d 2c 31 65 33 29 3a 65 26 26 64 5b 6a 34 28 36 30 30 29 5d 28 65 5b 6a 34 28 31 36 35 32 29 5d 2c 6a 34 28 35 32 34 29 29 26 26 65 5b 6a 34 28 39 37 35 29 5d 3d 3d 3d 6a 34 28 31 37 34 37 29 26 26 64 5b 6a 34 28 38 34 31 29 5d 28 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 2c 67 38 29 7d 29 2c 67 61 3d 21 5b 5d 2c 21 66 42 28 67 4a 28 31 35 33 31 29 29 26 26 28 67 79 28 29 2c 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 6a 45 2c 63 2c 64 2c 65 29 7b 6a 45 3d 67 4a 2c 63 3d 7b 27 41 43 42 6f 6d 27 3a 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 28 29 7d 2c 27 53 43 50 67 44 27 3a 66 75 6e 63 74 69 6f 6e 28 66 Data Ascii: =d[j4(1392)](setInterval,function(){gy()},1e3):e&&d[j4(600)](e[j4(1652)],j4(524))&&e[j4(975)]===j4(1747)&&d[j4(841)](clearInterval,g8)}),ga=![],!fB(gJ(1531))&&(gy(),setInterval(function(jE,c,d,e){jE=gJ,c={'ACBom':function(f){return f()},'SCPgD':function(f
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 72 6e 20 47 2b 48 7d 7d 2c 6f 5b 6a 4a 28 31 36 33 39 29 5d 28 6e 75 6c 6c 2c 68 29 7c 7c 68 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6a 3b 66 6f 72 28 78 3d 67 45 28 68 29 2c 67 5b 6a 4a 28 36 31 33 29 5d 5b 6a 4a 28 38 31 34 29 5d 26 26 28 78 3d 78 5b 6a 4a 28 31 37 39 39 29 5d 28 67 5b 6a 4a 28 36 31 33 29 5d 5b 6a 4a 28 38 31 34 29 5d 28 68 29 29 29 2c 78 3d 67 5b 6a 4a 28 31 32 38 34 29 5d 5b 6a 4a 28 31 36 37 30 29 5d 26 26 67 5b 6a 4a 28 31 33 34 32 29 5d 3f 67 5b 6a 4a 28 31 32 38 34 29 5d 5b 6a 4a 28 31 36 37 30 29 5d 28 6e 65 77 20 67 5b 28 6a 4a 28 31 33 34 32 29 29 5d 28 78 29 29 3a 66 75 6e 63 74 69 6f 6e 28 47 2c 6a 4c 2c 48 29 7b 66 6f 72 28 6a 4c 3d 6a 4a 2c 47 5b 6a 4c 28 38 33 31 29 5d 28 29 2c 48 3d 30 3b 48 3c 47 5b 6a 4c 28 Data Ascii: rn G+H}},o[jJ(1639)](null,h)\|\|h===void 0)return j;for(x=gE(h),g[jJ(613)][jJ(814)]&&(x=x[jJ(1799)](g[jJ(613)][jJ(814)](h))),x=g[jJ(1284)][jJ(1670)]&&g[jJ(1342)]?g[jJ(1284)][jJ(1670)](new g[(jJ(1342))](x)):function(G,jL,H){for(jL=jJ,G[jL(831)](),H=0;H<G[jL(
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 67 6f 54 74 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 57 56 43 46 65 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 46 49 78 43 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 7c 69 7d 2c 27 56 74 6f 68 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 58 54 4e 51 59 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 69 70 72 46 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 2d 69 7d 2c 27 6f 65 78 59 71 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 Data Ascii: return h(i)},'goTth':function(h,i){return h-i},'WVCFe':function(h,i){return h<i},'FIxCp':function(h,i){return h\|i},'Vtoht':function(h,i){return h<<i},'XTNQY':function(h,i){return h==i},'iprFh':function(h,i){return h-i},'oexYq':function(h,i){return h(i)},'
2025-02-24 09:29:04 UTC	1369	IN	Data Raw: 2c 73 2c 78 2c 42 2c 43 2c 44 2c 45 2c 46 2c 47 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 29 7b 69 66 28 6a 51 3d 6a 4e 2c 6e 75 6c 6c 3d 3d 69 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 78 3d 7b 7d 2c 42 3d 7b 7d 2c 43 3d 27 27 2c 44 3d 32 2c 45 3d 33 2c 46 3d 32 2c 47 3d 5b 5d 2c 48 3d 30 2c 49 3d 30 2c 4a 3d 30 3b 4a 3c 69 5b 6a 51 28 31 35 33 38 29 5d 3b 4a 2b 3d 31 29 69 66 28 4b 3d 69 5b 6a 51 28 33 39 37 29 5d 28 4a 29 2c 4f 62 6a 65 63 74 5b 6a 51 28 31 32 30 38 29 5d 5b 6a 51 28 36 33 30 29 5d 5b 6a 51 28 31 38 34 33 29 5d 28 78 2c 4b 29 7c 7c 28 78 5b 4b 5d 3d 45 2b 2b 2c 42 5b 4b 5d 3d 21 30 29 2c 4c 3d 43 2b 4b 2c 4f 62 6a 65 63 74 5b 6a 51 28 31 32 30 38 29 5d 5b 6a 51 28 36 33 30 29 5d 5b 6a 51 28 31 38 34 33 29 5d 28 78 2c 4c 29 29 43 3d 4c 3b 65 Data Ascii: ,s,x,B,C,D,E,F,G,H,I,J,K,L,M){if(jQ=jN,null==i)return'';for(x={},B={},C='',D=2,E=3,F=2,G=[],H=0,I=0,J=0;J<i[jQ(1538)];J+=1)if(K=i[jQ(397)](J),Object[jQ(1208)][jQ(630)][jQ(1843)](x,K)\|\|(x[K]=E++,B[K]=!0),L=C+K,Object[jQ(1208)][jQ(630)][jQ(1843)](x,L))C=L;e

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:04 UTC	743	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:05 UTC	240	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:04 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 916e6dde1c78428e-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 09:29:05 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:06 UTC	1150	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1536849324:1740388352:ds0z8fSfXeBxr2_fnhDvTWyjlgeYv3wEUcvGy3JCb6E/916e6dd99d760f6b/H2ORob.KsrNR2JbfjRVOs6sOahjEbB1DvkKsPmjlTGQ-1740389344-1.1.1.1-FUCuSw06da.tQwcQ3aEXOxbWaSnvf2umoM3gWFssBqcJ4phlcqQvg29OuzBklebl HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3408 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Type: text/plain;charset=UTF-8 cf-chl: H2ORob.KsrNR2JbfjRVOs6sOahjEbB1DvkKsPmjlTGQ-1740389344-1.1.1.1-FUCuSw06da.tQwcQ3aEXOxbWaSnvf2umoM3gWFssBqcJ4phlcqQvg29OuzBklebl cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:06 UTC	3408	OUT	Data Raw: 61 4f 73 4d 72 4d 78 62 7a 53 32 56 73 32 4f 2d 44 56 59 49 59 70 59 39 4d 2d 34 59 4f 64 58 56 50 70 64 59 44 62 59 64 47 72 50 33 59 50 2d 50 69 50 43 30 64 77 4c 4d 67 2d 68 2b 72 59 6e 59 47 54 2d 59 44 7a 4d 44 31 59 4a 54 2d 7a 37 4d 72 38 2d 32 38 58 59 64 73 47 4f 32 59 44 6a 63 6a 58 73 4d 7a 56 59 79 4d 64 64 59 45 73 51 4f 59 4b 61 4a 76 57 49 70 74 73 34 32 77 61 73 59 67 73 53 73 6a 59 34 50 77 64 48 52 4d 7a 69 59 47 47 30 57 79 68 4d 59 2b 54 36 50 30 53 56 59 48 54 77 71 70 24 73 59 32 2d 50 75 78 6f 34 59 48 30 54 54 38 34 72 6e 59 50 64 6b 59 32 54 59 79 34 32 69 4d 32 4c 76 59 7a 31 59 53 59 50 6e 68 67 4e 59 68 52 50 68 35 2d 50 6c 44 35 70 31 70 7a 69 59 7a 24 6a 51 38 72 59 46 38 54 64 59 41 42 6d 50 55 7a 33 44 71 78 76 51 59 68 6d Data Ascii: aOsMrMxbzS2Vs2O-DVYIYpY9M-4YOdXVPpdYDbYdGrP3YP-PiPC0dwLMg-h+rYnYGT-YDzMD1YJT-z7Mr8-28XYdsGO2YDjcjXsMzVYyMddYEsQOYKaJvWIpts42wasYgsSsjY4PwdHRMziYGG0WyhMY+T6P0SVYHTwqp$sY2-Puxo4YH0TT84rnYPdkY2TYy42iM2LvYz1YSYPnhgNYhRPh5-PlD5p1pziYz$jQ8rYF8TdYABmPUz3DqxvQYhm
2025-02-24 09:29:06 UTC	1051	IN	HTTP/1.1 200 OK Date: Mon, 24 Feb 2025 09:29:06 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 229624 Connection: close cf-chl-gen: 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$KXDRgX+2tAu/yNgV0lB8Bg== Server: cloudflare CF-RAY: 916e6de4fd754286-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 09:29:06 UTC	318	IN	Data Raw: 75 36 2b 58 67 61 4a 31 6d 37 75 42 77 73 4f 46 71 4b 65 36 74 38 4f 4d 6e 73 66 4c 79 38 44 43 31 61 71 4f 79 73 66 4c 76 4b 75 65 75 4e 32 70 77 36 43 78 6c 36 47 65 33 39 36 2f 78 71 6e 69 6f 4f 4c 72 75 73 4c 43 35 4e 33 6e 31 38 6e 6d 2b 64 66 4a 35 38 6a 66 36 4e 48 75 76 74 58 44 39 50 33 42 31 2f 54 33 31 75 51 43 7a 67 54 76 36 41 62 4c 46 65 4c 55 44 42 72 5a 35 68 77 4c 43 4f 77 65 32 76 72 62 41 66 51 55 34 51 72 6d 48 66 6f 64 39 52 6f 51 35 67 73 62 45 50 77 7a 4b 50 4d 50 47 69 7a 33 45 79 59 30 4e 76 49 76 4f 54 77 6d 45 68 51 34 50 30 45 30 49 7a 77 74 4f 79 34 70 47 7a 49 69 52 53 6f 52 55 51 74 45 52 6c 67 2b 53 54 30 74 50 6b 70 42 48 46 51 2b 52 44 55 2b 59 53 70 65 4b 6b 31 71 57 44 45 75 55 47 46 50 64 6b 56 4b 63 55 64 46 4e 6b 38 Data Ascii: u6+XgaJ1m7uBwsOFqKe6t8OMnsfLy8DC1aqOysfLvKueuN2pw6Cxl6Ge396/xqnioOLrusLC5N3n18nm+dfJ58jf6NHuvtXD9P3B1/T31uQCzgTv6AbLFeLUDBrZ5hwLCOwe2vrbAfQU4QrmHfod9RoQ5gsbEPwzKPMPGiz3EyY0NvIvOTwmEhQ4P0E0IzwtOy4pGzIiRSoRUQtERlg+ST0tPkpBHFQ+RDU+YSpeKk1qWDEuUGFPdkVKcUdFNk8
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 74 32 62 49 32 47 70 4a 43 52 67 71 71 55 6b 35 61 6d 6d 4a 6c 31 6d 35 2b 4f 71 6f 47 72 6e 37 2b 37 76 4c 2b 66 76 37 37 44 78 61 69 4d 76 37 79 79 7a 37 7a 42 30 59 36 32 6c 61 4b 72 78 4d 6d 2f 30 74 6a 4a 79 75 43 74 77 35 37 62 76 4b 50 65 74 65 44 6a 72 65 66 50 37 75 66 53 30 63 62 69 31 4d 57 78 36 62 47 38 2f 72 33 64 32 4e 79 2b 75 2b 50 6a 2b 37 2f 62 78 76 76 62 35 76 73 49 33 39 6e 37 34 64 37 30 35 68 44 57 35 41 30 51 32 2f 73 53 37 67 33 77 38 75 49 53 47 78 62 31 34 69 6e 6f 39 41 6b 44 34 79 76 70 48 51 45 6c 37 50 51 33 4d 44 51 51 46 53 34 6f 4e 54 6f 50 4f 44 6f 73 2b 68 6b 51 42 68 73 67 41 53 42 4b 49 30 51 34 4b 78 38 2b 4a 30 30 52 51 44 46 53 51 78 49 77 4a 78 63 38 58 53 39 53 53 79 42 51 47 69 35 48 4f 6d 68 55 4e 54 5a 6f 51 Data Ascii: t2bI2GpJCRgqqUk5ammJl1m5+OqoGrn7+7vL+fv77DxaiMv7yyz7zB0Y62laKrxMm/0tjJyuCtw57bvKPeteDjrefP7ufS0cbi1MWx6bG8/r3d2Ny+u+Pj+7/bxvvb5vsI39n74d705hDW5A0Q2/sS7g3w8uISGxb14ino9AkD4yvpHQEl7PQ3MDQQFS4oNToPODos+hkQBhsgASBKI0Q4Kx8+J00RQDFSQxIwJxc8XS9SSyBQGi5HOmhUNTZoQ
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 4a 62 4c 47 44 70 36 61 77 64 59 53 78 66 4c 36 37 6c 62 4b 54 6d 4b 47 61 67 73 61 6a 71 6f 48 4d 6f 4d 61 6d 7a 4c 75 79 70 72 4f 66 30 38 2b 58 69 35 53 57 6c 36 36 55 72 5a 66 43 73 64 57 6a 6e 37 32 78 6f 4e 6a 4a 36 61 69 6a 37 63 50 75 34 39 72 73 34 73 33 78 79 2b 48 32 77 2f 7a 32 2b 74 69 2f 32 64 44 63 38 4f 33 46 41 51 65 36 42 63 54 4c 43 39 33 63 77 64 67 51 35 64 38 46 46 67 7a 7a 37 75 54 53 38 42 67 61 36 78 48 62 33 78 51 59 47 78 76 6d 34 76 73 45 4b 65 6f 48 39 53 63 44 43 41 55 73 36 67 67 71 46 75 34 56 45 52 50 32 4d 68 48 38 39 54 73 57 45 77 39 44 46 68 73 52 45 55 66 38 49 41 6b 4d 51 79 6f 71 51 44 51 6b 48 79 39 4a 4a 69 51 6e 44 51 34 63 57 68 70 68 54 68 30 74 50 52 39 45 4f 32 52 42 61 79 52 61 4a 43 74 69 52 6d 30 75 51 43 Data Ascii: JbLGDp6awdYSxfL67lbKTmKGagsajqoHMoMamzLuyprOf08+Xi5SWl66UrZfCsdWjn72xoNjJ6aij7cPu49rs4s3xy+H2w/z2+ti/2dDc8O3FAQe6BcTLC93cwdgQ5d8FFgzz7uTS8Bga6xHb3xQYGxvm4vsEKeoH9ScDCAUs6ggqFu4VERP2MhH89TsWEw9DFhsREUf8IAkMQyoqQDQkHy9JJiQnDQ4cWhphTh0tPR9EO2RBayRaJCtiRm0uQC
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 67 34 71 4d 72 37 75 70 72 70 36 55 67 36 4e 39 6f 5a 71 42 71 49 62 45 7a 63 61 69 71 73 76 4e 71 37 4c 4e 6a 73 32 34 32 72 65 34 6b 35 57 70 78 37 47 31 34 63 33 69 77 4f 4c 51 34 65 4c 6c 32 63 50 58 76 71 37 4a 75 63 61 2b 7a 4e 43 77 77 63 54 42 38 39 6a 32 79 2f 4c 34 38 66 61 2f 31 65 57 2b 75 4c 2f 59 76 77 7a 4c 34 77 44 6d 32 2b 66 6c 36 76 48 63 39 67 4c 51 39 68 48 58 31 67 59 4d 43 65 72 5a 37 41 44 69 2b 4e 38 6c 34 50 34 54 42 69 73 44 41 51 76 72 4b 4f 34 53 37 41 44 30 49 53 45 56 4c 53 33 37 4d 75 38 57 4c 68 45 66 39 44 41 33 41 78 67 32 47 52 51 57 4f 68 73 5a 49 45 6c 4e 51 43 6b 38 51 43 6f 71 56 79 55 73 57 69 67 33 53 31 70 49 4b 31 49 31 55 53 45 31 50 54 34 30 4e 69 6c 44 4f 56 6c 4a 52 6b 6c 4b 52 45 38 6e 5a 54 4e 70 54 54 70 Data Ascii: g4qMr7uprp6Ug6N9oZqBqIbEzcaiqsvNq7LNjs242re4k5Wpx7G14c3iwOLQ4eLl2cPXvq7Juca+zNCwwcTB89j2y/L48fa/1eW+uL/YvwzL4wDm2+fl6vHc9gLQ9hHX1gYMCerZ7ADi+N8l4P4TBisDAQvrKO4S7AD0ISEVLS37Mu8WLhEf9DA3Axg2GRQWOhsZIElNQCk8QCoqVyUsWig3S1pIK1I1USE1PT40NilDOVlJRklKRE8nZTNpTTp
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 37 70 38 66 62 47 42 78 35 69 38 77 36 4b 31 76 36 6a 48 79 39 4b 2b 30 4c 37 43 72 73 4c 53 78 37 75 77 31 4e 61 77 30 64 33 4b 33 64 43 67 73 65 4c 68 33 38 53 33 35 71 50 64 78 38 79 75 71 50 4c 6e 39 4c 2b 7a 78 64 50 7a 39 76 72 48 30 39 2f 4f 32 37 6e 65 7a 72 37 31 7a 76 4c 6f 77 63 63 46 77 2f 55 44 39 38 6f 50 43 51 2f 38 38 2b 72 51 44 64 6b 56 2b 76 76 6c 48 67 67 54 32 43 51 41 38 64 77 6a 49 53 62 62 4a 75 59 43 49 51 55 47 2b 2b 30 48 4e 66 45 74 4a 43 58 34 39 67 2f 7a 4d 44 48 31 45 44 77 71 49 50 6b 35 44 6a 34 6f 52 7a 4d 63 41 69 46 4f 43 53 70 47 52 69 42 4b 49 78 49 79 4e 31 45 4d 4e 43 6b 79 47 42 68 62 47 6a 6b 33 55 45 41 31 57 6c 68 61 58 32 56 6b 56 56 70 77 59 79 34 6b 62 48 52 75 59 32 68 6c 62 30 55 78 64 57 78 55 62 57 70 39 Data Ascii: 7p8fbGBx5i8w6K1v6jHy9K+0L7CrsLSx7uw1Naw0d3K3dCgseLh38S35qPdx8yuqPLn9L+zxdPz9vrH09/O27nezr71zvLowccFw/UD98oPCQ/88+rQDdkV+vvlHggT2CQA8dwjISbbJuYCIQUG++0HNfEtJCX49g/zMDH1EDwqIPk5Dj4oRzMcAiFOCSpGRiBKIxIyN1EMNCkyGBhbGjk3UEA1WlhaX2VkVVpwYy4kbHRuY2hlb0UxdWxUbWp9
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 47 32 6e 34 6e 43 6f 61 4b 4b 69 4c 4b 36 73 6f 79 73 6b 4c 61 6f 71 4a 69 76 70 39 4b 70 34 4b 43 72 6d 2b 4c 50 72 35 2b 66 70 39 37 43 36 75 61 66 71 4b 66 4c 37 73 6e 46 79 74 2f 77 37 76 6e 4e 36 4d 33 4f 79 63 7a 5a 74 2b 76 79 41 2b 44 68 32 66 50 53 31 4e 66 44 78 77 54 6d 32 63 62 68 35 38 6b 49 37 41 6f 53 44 39 4d 4e 36 65 59 63 2b 65 7a 32 39 42 58 78 37 53 41 55 39 76 37 38 48 65 49 47 48 42 6a 2b 4d 44 4d 6a 37 2f 33 77 45 41 63 44 4a 79 76 33 45 67 6f 72 44 42 70 41 4f 50 35 42 49 53 41 57 45 30 67 6d 47 53 4d 66 51 46 45 4c 49 6b 67 74 52 30 73 4f 4d 69 59 75 4d 55 6f 73 4b 78 5a 53 4d 46 73 74 50 6c 4e 69 55 47 59 33 48 44 68 61 50 46 5a 6b 54 6d 6f 71 4d 32 70 75 4e 6a 45 75 57 46 45 34 56 44 4e 52 63 54 77 7a 4f 55 78 32 65 31 56 30 5a Data Ascii: G2n4nCoaKKiLK6soyskLaoqJivp9Kp4KCrm+LPr5+fp97C6uafqKfL7snFyt/w7vnN6M3OyczZt+vyA+Dh2fPS1NfDxwTm2cbh58kI7AoSD9MN6eYc+ez29BXx7SAU9v78HeIGHBj+MDMj7/3wEAcDJyv3EgorDBpAOP5BISAWE0gmGSMfQFELIkgtR0sOMiYuMUosKxZSMFstPlNiUGY3HDhaPFZkTmoqM2puNjEuWFE4VDNRcTwzOUx2e1V0Z
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 64 75 4c 4b 78 6b 35 4c 57 7a 61 57 79 77 64 75 6b 70 4b 66 52 76 4a 6e 5a 7a 38 7a 5a 32 64 71 6e 70 4e 36 2b 74 4d 54 58 31 71 62 69 30 65 2b 75 76 4e 4c 47 30 62 62 70 32 37 66 49 75 66 44 61 32 63 36 35 39 64 58 78 35 66 50 56 32 4e 76 69 31 76 58 2b 38 41 6a 63 36 77 4c 63 7a 75 62 34 46 4f 34 48 43 76 48 5a 31 2f 4d 66 39 75 4c 32 45 43 49 46 49 65 63 45 35 79 77 6d 44 66 73 73 42 44 48 36 37 53 59 4c 41 68 4d 76 49 78 66 7a 43 6a 33 37 43 2f 30 31 46 78 63 68 46 78 37 39 50 78 6f 6b 48 77 59 67 47 79 59 6b 4b 6a 77 69 4d 31 46 53 49 6c 59 79 4a 79 30 76 4b 56 73 33 48 6a 6b 75 57 43 46 5a 4d 54 56 41 4a 6d 68 57 4c 54 77 2f 4d 47 64 50 54 32 64 71 5a 7a 55 76 62 46 68 49 58 57 74 74 57 44 63 36 58 46 56 50 64 56 35 63 5a 56 31 45 59 55 68 4e 56 6d Data Ascii: duLKxk5LWzaWywdukpKfRvJnZz8zZ2dqnpN6+tMTX1qbi0e+uvNLG0bbp27fIufDa2c659dXx5fPV2Nvi1vX+8Ajc6wLczub4FO4HCvHZ1/Mf9uL2ECIFIecE5ywmDfssBDH67SYLAhMvIxfzCj37C/01FxchFx79PxokHwYgGyYkKjwiM1FSIlYyJy0vKVs3HjkuWCFZMTVAJmhWLTw/MGdPT2dqZzUvbFhIXWttWDc6XFVPdV5cZV1EYUhNVm
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 73 71 66 4c 6b 4c 61 77 32 64 6a 57 71 35 75 77 6f 4d 4c 5a 6e 65 47 36 33 73 6a 66 33 65 53 72 77 62 6e 42 71 66 44 50 37 39 2f 65 38 64 65 30 38 75 6e 59 31 39 4c 50 30 66 54 36 2b 4d 54 44 76 39 37 33 41 50 6f 4b 42 65 50 36 7a 77 55 4e 43 77 41 52 42 77 76 69 44 4f 62 30 39 77 76 59 39 50 67 51 34 41 73 55 49 50 37 6d 45 77 6e 37 39 52 73 6a 44 50 34 66 36 69 6e 6b 49 65 34 48 49 78 6e 77 4a 78 59 62 43 76 7a 35 48 41 7a 7a 2f 43 51 32 4e 45 4d 56 49 79 73 56 4f 43 63 47 47 43 6c 43 51 69 45 63 56 53 34 4f 56 54 68 57 57 44 56 48 55 52 59 77 58 42 30 79 52 56 63 67 58 6d 63 36 4a 57 49 37 4e 79 56 66 53 6a 78 4f 62 69 30 72 55 6c 39 53 54 56 56 44 65 54 78 64 63 46 4a 50 62 55 38 38 5a 58 74 61 5a 31 46 53 58 6c 61 43 59 55 70 70 51 34 61 44 55 6c 4b Data Ascii: sqfLkLaw2djWq5uwoMLZneG63sjf3eSrwbnBqfDP79/e8de08unY19LP0fT6+MTDv973APoKBeP6zwUNCwARBwviDOb09wvY9PgQ4AsUIP7mEwn79RsjDP4f6inkIe4HIxnwJxYbCvz5HAzz/CQ2NEMVIysVOCcGGClCQiEcVS4OVThWWDVHURYwXB0yRVcgXmc6JWI7NyVfSjxObi0rUl9STVVDeTxdcFJPbU88ZXtaZ1FSXlaCYUppQ4aDUlK
2025-02-24 09:29:06 UTC	1369	IN	Data Raw: 62 37 47 76 70 66 51 34 4d 48 58 33 4f 44 51 33 62 50 62 78 2b 54 6f 36 73 69 6e 34 4c 76 55 31 62 4c 50 37 39 6e 35 38 64 6e 4f 31 74 37 32 76 41 4c 72 39 38 41 43 37 2f 37 52 2b 63 50 31 2f 4f 48 4f 34 77 62 6f 32 67 59 42 46 39 54 72 36 64 6a 61 48 66 4c 39 36 77 6a 6f 34 42 55 4d 49 65 54 59 43 43 6b 6b 42 53 62 39 42 43 49 6c 2f 69 45 49 36 7a 50 78 4d 76 63 7a 43 68 77 58 4d 51 59 74 47 77 30 36 4e 7a 34 2f 45 52 78 45 53 53 59 37 53 67 68 48 50 51 6c 53 4c 69 6f 6b 4a 31 51 6c 4b 6c 70 47 47 31 73 63 58 7a 51 5a 4f 44 63 67 59 79 42 55 58 6a 31 71 49 6a 4e 74 54 46 35 6b 50 43 30 75 63 7a 4a 6d 53 32 4e 68 52 33 41 79 64 46 30 36 67 44 70 35 62 46 52 7a 66 48 64 61 58 6f 70 61 52 48 64 6f 52 6c 6c 6d 6a 33 43 4a 54 32 42 71 6b 32 69 59 6b 49 39 58 Data Ascii: b7GvpfQ4MHX3ODQ3bPbx+To6sin4LvU1bLP79n58dnO1t72vALr98AC7/7R+cP1/OHO4wbo2gYBF9Tr6djaHfL96wjo4BUMIeTYCCkkBSb9BCIl/iEI6zPxMvczChwXMQYtGw06Nz4/ERxESSY7SghHPQlSLiokJ1QlKlpGG1scXzQZODcgYyBUXj1qIjNtTF5kPC0uczJmS2NhR3AydF06gDp5bFRzfHdaXopaRHdoRllmj3CJT2Bqk2iYkI9X

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:06 UTC	656	OUT	GET /favicon.ico HTTP/1.1 Host: relogin.lgninmsoftrl.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://relogin.lgninmsoftrl.com/e41Xa/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=a2b2q3jtd9b2qnoq1pkn47dp1u
2025-02-24 09:29:06 UTC	856	IN	HTTP/1.1 404 Not Found Date: Mon, 24 Feb 2025 09:29:06 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Age: 166 Cache-Control: max-age=14400 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oos%2FjgFdT3ONwIQ%2BOPpUCzW%2BkS6NObpR0FA06IxZEFENiYVpQ0nSZp9UnxFUZWYhqd6TVkHhjIqe%2BgW8TjxgclRa%2F9%2FOAjzf3NcJLXi46Gju7drjoRpVO8NCDWUOw6l9EhlgJubXg%2BvMgBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 916e6de69c46c32a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1668&min_rtt=1665&rtt_var=631&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1234&delivery_rate=1724748&cwnd=244&unsent_bytes=0&cid=0a3985646a416317&ts=158&x=0"
2025-02-24 09:29:06 UTC	202	IN	Data Raw: 63 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 55 52 4c 20 77 61 73 20 6e 6f 74 20 66 6f 75 6e 64 20 6f 6e 20 74 68 69 73 20 73 65 72 76 65 72 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: c4<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>404 Not Found</title></head><body><h1>Not Found</h1><p>The requested URL was not found on this server.</p></body></html>
2025-02-24 09:29:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:06 UTC	565	OUT	OPTIONS /report/v4?s=oos%2FjgFdT3ONwIQ%2BOPpUCzW%2BkS6NObpR0FA06IxZEFENiYVpQ0nSZp9UnxFUZWYhqd6TVkHhjIqe%2BgW8TjxgclRa%2F9%2FOAjzf3NcJLXi46Gju7drjoRpVO8NCDWUOw6l9EhlgJubXg%2BvMgBU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://relogin.lgninmsoftrl.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:06 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 24 Feb 2025 09:29:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:07 UTC	815	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/916e6dd99d760f6b/1740389346085/fa61e57a6779b82f2528692f60131350b2eb18335238f22195058d72f04221e9/YV06VFFGK_eeFab HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/vzp7l/0x4AAAAAAA8pkRGji886KrFf/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:07 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Mon, 24 Feb 2025 09:29:07 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-02-24 09:29:07 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 2d 6d 48 6c 65 6d 64 35 75 43 38 6c 4b 47 6b 76 59 42 4d 54 55 4c 4c 72 47 44 4e 53 4f 50 49 68 6c 51 57 4e 63 76 42 43 49 65 6b 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20g-mHlemd5uC8lKGkvYBMTULLrGDNSOPIhlQWNcvBCIekAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-02-24 09:29:07 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:07 UTC	599	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1536849324:1740388352:ds0z8fSfXeBxr2_fnhDvTWyjlgeYv3wEUcvGy3JCb6E/916e6dd99d760f6b/H2ORob.KsrNR2JbfjRVOs6sOahjEbB1DvkKsPmjlTGQ-1740389344-1.1.1.1-FUCuSw06da.tQwcQ3aEXOxbWaSnvf2umoM3gWFssBqcJ4phlcqQvg29OuzBklebl HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:07 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Mon, 24 Feb 2025 09:29:07 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: OsAx1JHaf0wmcxzUI+1T+2kQx0wkLqtoGKRNGBf9NYmnms/iPRMKzmzCS7TjQVZCSW19HJWs4QtiKPZvmZsMCw==$qceZOlTdggXjOMSK8REcog== Server: cloudflare CF-RAY: 916e6dedbe0142c8-EWR alt-svc: h3=":443"; ma=86400
2025-02-24 09:29:07 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-24 09:29:07 UTC	498	OUT	POST /report/v4?s=oos%2FjgFdT3ONwIQ%2BOPpUCzW%2BkS6NObpR0FA06IxZEFENiYVpQ0nSZp9UnxFUZWYhqd6TVkHhjIqe%2BgW8TjxgclRa%2F9%2FOAjzf3NcJLXi46Gju7drjoRpVO8NCDWUOw6l9EhlgJubXg%2BvMgBU%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 443 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-24 09:29:07 UTC	443	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 30 39 34 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 72 65 6c 6f 67 69 6e 2e 6c 67 6e 69 6e 6d 73 6f 66 74 72 6c 2e 63 6f 6d 2f 65 34 31 58 61 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 39 36 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d Data Ascii: [{"age":0,"body":{"elapsed_time":1094,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://relogin.lgninmsoftrl.com/e41Xa/","sampling_fraction":1.0,"server_ip":"104.21.96.1","status_code":404,"type":"http.error"},"type":"network-
2025-02-24 09:29:07 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Mon, 24 Feb 2025 09:29:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close