Edit tour

Windows Analysis Report
https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJU

Overview

General Information

Sample URL:	https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8P
Analysis ID:	1623767
Infos:

Detection

HTMLPhisher, Invisible JS

Score:	76
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish10

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

AI detected suspicious Javascript

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

Invalid T&C link found

Uses Javascript AES encryption / decryption (likely to hide suspicious Javascript code)

Classification

Process Tree

System is w10x64native

chrome.exe (PID: 6608 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 6692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2196,i,6378653344874956996,17781831892651349130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2212 /prefetch:3 MD5: BB7C48CDDDE076E7EB44022520F40F77)

chrome.exe (PID: 6012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br" MD5: BB7C48CDDDE076E7EB44022520F40F77)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
2.14.id.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.14.id.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.23.id.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.24.id.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.26.id.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.23.id.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
2.24.id.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
7.28..script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
6.8.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
6.8.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
6.9.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
6.7.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
6.7.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
7.12.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
7.12.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
7.13.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
7.13.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
7.13.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
7.11.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
7.11.pages.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
7.11.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
6.9.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
7.12.pages.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security
Click to see the 18 entries

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

Phishing

AI detected phishing page

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The provided URL '0x.j6h0wx.ru' does not match the legitimate domain for Microsoft., The URL uses a '.ru' domain extension, which is unusual for Microsoft and could indicate a phishing attempt., The URL contains suspicious elements such as '0x' and 'j6h0wx', which do not relate to Microsoft., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft accounts. DOM: 7.12.pages.csv
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The legitimate domain for Microsoft is 'microsoft.com'., The URL '0x.j6h0wx.ru' does not match the legitimate domain for Microsoft., The domain extension '.ru' is unusual for Microsoft, which typically uses '.com'., The URL contains suspicious elements such as '0x' and 'j6h0wx', which do not relate to Microsoft., The presence of input fields for 'Email, phone, or Skype' is typical for phishing attempts targeting Microsoft accounts. DOM: 7.13.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 7.12.pages.csv, type: HTML
Source: Yara match	File source: 7.13.pages.csv, type: HTML
Source: Yara match	File source: 7.11.pages.csv, type: HTML

Yara detected Invisible JS

Source: Yara match	File source: 2.14.id.script.csv, type: HTML
Source: Yara match	File source: 2.26.id.script.csv, type: HTML
Source: Yara match	File source: 2.23.id.script.csv, type: HTML
Source: Yara match	File source: 2.24.id.script.csv, type: HTML
Source: Yara match	File source: 6.8.pages.csv, type: HTML
Source: Yara match	File source: 6.7.pages.csv, type: HTML
Source: Yara match	File source: 7.13.pages.csv, type: HTML
Source: Yara match	File source: 7.11.pages.csv, type: HTML
Source: Yara match	File source: 6.9.pages.csv, type: HTML
Source: Yara match	File source: 7.12.pages.csv, type: HTML

Yara detected Obfuscation Via HangulCharacter

Source: Yara match	File source: 2.14.id.script.csv, type: HTML
Source: Yara match	File source: 2.23.id.script.csv, type: HTML
Source: Yara match	File source: 2.24.id.script.csv, type: HTML
Source: Yara match	File source: 7.28..script.csv, type: HTML
Source: Yara match	File source: 6.8.pages.csv, type: HTML
Source: Yara match	File source: 6.9.pages.csv, type: HTML
Source: Yara match	File source: 6.7.pages.csv, type: HTML
Source: Yara match	File source: 7.12.pages.csv, type: HTML
Source: Yara match	File source: 7.13.pages.csv, type: HTML
Source: Yara match	File source: 7.11.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 2.22.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://0x.j6h0wx.ru/gd6SkLCCOs-KEHtLU/#... This script demonstrates several high-risk behaviors, including dynamic code execution, potential data exfiltration, and suspicious redirection. The use of obfuscated code and the presence of a debugger statement further increase the risk. Overall, this script exhibits a high level of malicious intent and should be considered a significant security threat.
Source: 2.15.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://0x.j6h0wx.ru/gd6SkLCCOs-KEHtLU/#... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and the use of obfuscated code/URLs. The script appears to be attempting to redirect the user to a suspicious domain and potentially collect sensitive information. These behaviors are highly indicative of malicious intent, warranting a high-risk score.
Source: 2.14.id.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://0x.j6h0wx.ru/gd6SkLCCOs-KEHtLU/#... This script demonstrates several high-risk behaviors, including dynamic code execution using `eval`, data exfiltration through obfuscated URLs, and aggressive DOM manipulation. The combination of these factors indicates a highly suspicious and potentially malicious script that should be treated with caution.

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN

HTTP Parser: Number of links: 0

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://membersgelita.cpmeduca.com.br/

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN

HTTP Parser: Title: does not match URL

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: Invalid link: Terms of use
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: Invalid link: Privacy & cookies
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: Invalid link: Terms of use
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: Invalid link: Privacy & cookies
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: Invalid link: Terms of use
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: Invalid link: Privacy & cookies

Source: https://0x.j6h0wx.ru/gd6SkLCCOs-KEHtLU/#

HTTP Parser: function nwmwzqfdsc(){vrbhnqfues = atob("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...

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN

HTTP Parser: <input type="password" .../> found

Source: https://membersgelita.cpmeduca.com.br/	HTTP Parser: No favicon
Source: https://membersgelita.cpmeduca.com.br/	HTTP Parser: No favicon
Source: https://membersgelita.cpmeduca.com.br/	HTTP Parser: No favicon
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No favicon
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No favicon
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No favicon

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No <meta name="author".. found
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No <meta name="author".. found
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No <meta name="author".. found

Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No <meta name="copyright".. found
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No <meta name="copyright".. found
Source: https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\scoped_dir6608_239767535			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_6608_1811351499			Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: atpscan.global.hornetsecurity.com to https://securelinks.cloud-security.net/v4?d=eqoz7axszn2v2mi6ipmcwatgyizy7lknff2rdliyxlc&f=uieqkeft6zo7ank8ilozfptujo3kkk4bot32m0ssaem2yjb3nbrjpc-bjavicogvusbpae9kns3shx7u3k2fiwwiqyik3sqzlkfz5y8q_nj8pat_j9hmt1bo5p4oipc1ezyzpgjbftb7um-l94hwha&i=&k=wfad&m=2x6lr8wiarfjoki1cldoagvtznic1yoh--dhqhznxnrdjug4m82-vm5qxqdcsasurkvh0fd5kojubllo3n6jks2ra2-p7_2temj9tyhs2hxglgvjvr5gylt_yoyerzjf&n=gp4dg9igvmhgp7cc0mfzdfvrvhv5htxygqbtvpxmjpuibpkifzsl5kiafqbse-kavbpk5s1aryk-3vqubsvq7a&r=wvglaks8l0zh9eou1fbnsha5ij0xua-ig_trldcdeatev5ai8mkqzhv2y3yodq5k&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3a%2f%2faws.predictiveresponse.net%2ffwdhs.htm%3fredirect%3d%2f%2fmembersgelita.cpmeduca.com.br

Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.150
Source: unknown	TCP traffic detected without corresponding DNS query: 104.208.16.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.4.43.62
Source: unknown	TCP traffic detected without corresponding DNS query: 104.208.16.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.4.43.62
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.5
Source: unknown	TCP traffic detected without corresponding DNS query: 23.4.43.62
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.5
Source: unknown	TCP traffic detected without corresponding DNS query: 23.4.43.62
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.5
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.5
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 52.159.126.152
Source: unknown	TCP traffic detected without corresponding DNS query: 23.50.115.152
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.5
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.29.5
Source: unknown	TCP traffic detected without corresponding DNS query: 23.208.86.131
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 239.255.255.250
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br HTTP/1.1Host: atpscan.global.hornetsecurity.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /trachs.js HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.brAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtrac.php?org=null&lea=null&ite=&lvl=2&uvi=trZjCSd3N1740492745&uvx=undefined&ctr=&curl=https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br&titl=redirect&ref=&sid=null HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.brAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _pa_user=trZjCSd3N1740492745
Source: global traffic	HTTP traffic detected: GET /trachs.js HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rtrac.php?org=null&lea=null&ite=&lvl=2&uvi=trZjCSd3N1740492745&uvx=undefined&ctr=&curl=https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br&titl=redirect&ref=&sid=null HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _pa_user=trZjCSd3N1740492745
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.brAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _pa_user=trZjCSd3N1740492745
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: aws.predictiveresponse.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _pa_user=trZjCSd3N1740492745
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js?onload=RGHt6&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"Origin: https://membersgelita.cpmeduca.com.brsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js?onload=RGHt6&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=91784a6e7ba34c31&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=91784a6e7ba34c31&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/91784a6e7ba34c31/1740492753019/E3F_aYKvLtfRrTk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/d/91784a6e7ba34c31/1740492753019/E3F_aYKvLtfRrTk HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/pat/91784a6e7ba34c31/1740492753028/9800c44d337a52a9750a1ebaf036ed85df843c7cb7fb9da83360050410c2c3af/vs8jr-5uqGRmQvr HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"Origin: https://membersgelita.cpmeduca.com.brsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://membersgelita.cpmeduca.com.br/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: developers.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: __cf_bm=yL0AouymNmr65VbVdvj8Cmy8kJTt8kY2fIGWmi1DlNg-1740492770-1.0.1.1-T8QyU2QRMaBDkcLbWHDKr9CaxjwK9YCiXA7Uk0oZjKsee4cVACOYuPeK2TRnMtoGQSyoEyo7_4wfATHYduUrbw
Source: global traffic	HTTP traffic detected: GET /fent/randexp.js/releases/download/v0.4.3/randexp.min.js HTTP/1.1Host: github.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250225%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250225T141306Z&X-Amz-Expires=300&X-Amz-Signature=542bab51ca14c67979b46c16eb985bbb9fe90da09b9ccce8c3c5caadf79509aa&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-alivesec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://0x.j6h0wx.ru/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /github-production-release-asset-2e65be/2925284/11f3acf8-4ccb-11e6-8ce4-c179c0a212de?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Credential=releaseassetproduction%2F20250225%2Fus-east-1%2Fs3%2Faws4_request&X-Amz-Date=20250225T141306Z&X-Amz-Expires=300&X-Amz-Signature=542bab51ca14c67979b46c16eb985bbb9fe90da09b9ccce8c3c5caadf79509aa&X-Amz-SignedHeaders=host&response-content-disposition=attachment%3B%20filename%3Drandexp.min.js&response-content-type=application%2Foctet-stream HTTP/1.1Host: objects.githubusercontent.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: atpscan.global.hornetsecurity.com
Source: global traffic	DNS traffic detected: DNS query: securelinks.cloud-security.net
Source: global traffic	DNS traffic detected: DNS query: aws.predictiveresponse.net
Source: global traffic	DNS traffic detected: DNS query: membersgelita.cpmeduca.com.br
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: 0x.j6h0wx.ru
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: developers.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: j5xap.vxmeszv.ru
Source: global traffic	DNS traffic detected: DNS query: github.com
Source: global traffic	DNS traffic detected: DNS query: ok4static.oktacdn.com
Source: global traffic	DNS traffic detected: DNS query: objects.githubusercontent.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 4025sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128"sec-ch-ua-platform: "Windows"cf-chl: MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTncf-chl-ra: 0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36Content-Type: text/plain;charset=UTF-8Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	TCP traffic: 192.168.11.20:65465 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:65465 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:65465 -> 239.255.255.250:1900
Source: global traffic	TCP traffic: 192.168.11.20:65465 -> 239.255.255.250:1900

Source: chromecache_177.1.dr, chromecache_132.1.dr	String found in binary or memory: http://github.com/fent/randexp.js/raw/master/LICENSE
Source: chromecache_154.1.dr	String found in binary or memory: https://aws.predictiveresponse.net/trachs.js
Source: chromecache_177.1.dr, chromecache_132.1.dr	String found in binary or memory: https://github.com/fent)
Source: chromecache_179.1.dr	String found in binary or memory: https://securelinks.cloud-security.net/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49675
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal76.phis.win@24/159@66/23

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\scoped_dir6608_239767535

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2196,i,6378653344874956996,17781831892651349130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2212 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-subproc-heap-profiling --field-trial-handle=2196,i,6378653344874956996,17781831892651349130,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20240909-180142.416000 --mojo-platform-channel-handle=2212 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\scoped_dir6608_239767535			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Directory created: C:\Program Files\chrome_BITS_6608_1811351499			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	1 Scripting	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	2 Masquerading	OS Credential Dumping	1 Network Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Scripting	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Deobfuscate/Decode Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://securelinks.cloud-security.net/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
j5xap.vxmeszv.ru	172.67.148.160	true	false	unknown
developers.cloudflare.com	104.16.2.189	true	false	high
github.com	140.82.113.3	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
0x.j6h0wx.ru	172.67.141.88	true	true	unknown
membersgelita.cpmeduca.com.br	172.67.223.84	true	false	unknown
aws.predictiveresponse.net	184.72.233.230	true	false	high
code.jquery.com	151.101.66.137	true	false	high
securelinks.cloud-security.net	94.100.133.74	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
atpscan.global.hornetsecurity.com	94.100.136.44	true	false	high
www.google.com	142.250.189.132	true	false	high
d19d360lklgih4.cloudfront.net	108.156.83.105	true	false	unknown
objects.githubusercontent.com	185.199.110.133	true	false	high
ok4static.oktacdn.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Reputation
https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br	false	high
https://securelinks.cloud-security.net/v4?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https:%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br	false	unknown
https://code.jquery.com/jquery-3.6.0.min.js	false	high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	high
https://membersgelita.cpmeduca.com.br/	false	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/d/91784a6e7ba34c31/1740492753019/E3F_aYKvLtfRrTk	false	high
https://a.nel.cloudflare.com/report/v4?s=abSD4ZOeuVEnpUhSqUuO3DMZcr1zjWgMNzd9WiICXQ1a5PSpAGO7MZ2cFM8tyhNDlrD96Bp4jKU1CRZMOM0aLmXr83R04oXh0eMHpLeYkt2VMBoKXOCO%2FLCo6Mlu	false	high
https://0x.j6h0wx.ru/iggsxqjgshfbonvsxaeprzwmsmzmmdgyezstlmj6snloz8lf4v35lpctv?NWQTFHJADSSLDTPMIN	true	unknown
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false	high
https://a.nel.cloudflare.com/report/v4?s=vLNBsPErIvNur6D91TdMuzKOQjphTmoNhTRElOZhaevQiirW7BHV67%2Bc%2FpgjKUlRShqVlv2778skE%2BSqGRAILymXEZqPu4jOt7YofpcXodX%2F7du2JX8DRu4noIkB	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/pat/91784a6e7ba34c31/1740492753028/9800c44d337a52a9750a1ebaf036ed85df843c7cb7fb9da83360050410c2c3af/vs8jr-5uqGRmQvr	false	high
https://code.jquery.com/jquery-3.2.1.min.js	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=91784a6e7ba34c31&lang=auto	false	high
https://aws.predictiveresponse.net/rtrac.php?org=null&lea=null&ite=&lvl=2&uvi=trZjCSd3N1740492745&uvx=undefined&ctr=&curl=https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br&titl=redirect&ref=&sid=null	false	high
https://developers.cloudflare.com/favicon.png	false	high
https://a.nel.cloudflare.com/report/v4?s=EsJNin95opRq%2B2zofdKCV%2FAdMkqoCc3yhv5JYBeqXBknfbxauInYmyK5HM3WIp6q8yWkNlWZGmBaq1WvsOoC0OhAp7j3d%2BSw1vJFQCXX9Z3Gx2E7fsNyWxYGfg50BV4Pq6OCMAUpHXSvrQCGy8sNbQ%3D%3D	false	high
https://aws.predictiveresponse.net/favicon.ico	false	high
https://aws.predictiveresponse.net/trachs.js	false	high
https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br	false	high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/	false	high
https://a.nel.cloudflare.com/report/v4?s=JhmlVv2TLs5Qj1vIVe19ZSyO7%2Fs3n7KfpqrkBdoQA9g1F7ru8JO9zUlte7uWhfr1jFPcBMNR5ZQCu3DBnArDrooTPPmBKr0%2FEKy3iRrpy%2BoZzbbcTyo1IVtK9vC%2BF8cvqQSWREqP6Zq6metr5McyrA%3D%3D	false	high
https://0x.j6h0wx.ru/gd6SkLCCOs-KEHtLU/#	true	unknown
https://challenges.cloudflare.com/turnstile/v0/b/b0e4a89976ce/api.js	false	high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://securelinks.cloud-security.net/	chromecache_179.1.dr	false	Avira URL Cloud: safe	unknown
https://github.com/fent)	chromecache_177.1.dr, chromecache_132.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
140.82.113.3	github.com	United States	36459	GITHUBUS	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
184.72.233.230	aws.predictiveresponse.net	United States	14618	AMAZON-AESUS	false
185.199.111.133	unknown	Netherlands	54113	FASTLYUS	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
185.199.110.133	objects.githubusercontent.com	Netherlands	54113	FASTLYUS	false
104.16.2.189	developers.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.17.24.14	unknown	United States	13335	CLOUDFLARENETUS	false
172.67.148.160	j5xap.vxmeszv.ru	United States	13335	CLOUDFLARENETUS	false
142.250.189.132	www.google.com	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
94.100.136.44	atpscan.global.hornetsecurity.com	Germany	24679	SSERV-ASDE	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
172.67.141.88	0x.j6h0wx.ru	United States	13335	CLOUDFLARENETUS	true
108.156.83.105	d19d360lklgih4.cloudfront.net	United States	16509	AMAZON-02US	false
108.156.83.127	unknown	United States	16509	AMAZON-02US	false
94.100.133.74	securelinks.cloud-security.net	Germany	25394	MK-NETZDIENSTE-ASDE	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
172.67.223.84	membersgelita.cpmeduca.com.br	United States	13335	CLOUDFLARENETUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.11.20

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1623767
Start date and time:	2025-02-25 15:05:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 9m 32s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br
Analysis system description:	Windows 10 64 bit 20H2 Native physical Machine for testing VM-aware malware (Office 2019, Chrome 128, Firefox 91, Adobe Reader DC 21, Java 8 Update 301
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@24/159@66/23
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, sppsvc.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.217.227, 142.251.35.238, 173.194.210.84, 172.217.15.206, 142.250.217.238, 192.178.50.78, 172.217.165.206, 142.250.64.238, 142.250.64.142, 142.250.189.142, 142.250.217.170, 172.217.3.74, 142.250.64.138, 192.178.50.74, 192.178.50.42, 142.250.64.234, 172.217.2.202, 142.250.64.170, 142.250.64.202, 172.217.165.202, 142.250.217.202, 142.250.189.138, 142.250.217.234, 199.232.214.172, 172.217.2.206, 142.251.35.234, 172.217.15.202, 142.250.64.227, 142.250.217.174, 142.250.64.174, 172.217.3.78, 23.202.75.249
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, www.googleapis.com, dns.msftncsi.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://atpscan.global.hornetsecurity.com/?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 2 x 2, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	61
Entropy (8bit):	3.990210155325004
Encrypted:	false
SSDEEP:	3:yionv//thPltV/CI7syxl/k4E08up:6v/lhPgI17Tp
MD5:	9246CCA8FC3C00F50035F28E9F6B7F7D
SHA1:	3AA538440F70873B574F40CD793060F53EC17A5D
SHA-256:	C07D7D29E3C20FA6CA4C5D20663688D52BAD13E129AD82CE06B80EB187D9DC84
SHA-512:	A2098304D541DF4C71CDE98E4C4A8FB1746D7EB9677CEBA4B19FF522EFDD981E484224479FD882809196B854DBC5B129962DBA76198D34AAECF7318BD3736C6B
Malicious:	false
Reputation:	low
URL:	https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/cmg/1
Preview:	.PNG........IHDR...............s....IDAT.....$.....IEND.B`.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 25, 2025 15:12:04.808712006 CET	137	137	192.168.11.20	192.168.11.255
Feb 25, 2025 15:12:05.572907925 CET	137	137	192.168.11.20	192.168.11.255
Feb 25, 2025 15:12:06.338386059 CET	137	137	192.168.11.20	192.168.11.255
Feb 25, 2025 15:12:12.281831026 CET	65465	1900	192.168.11.20	239.255.255.250
Feb 25, 2025 15:12:12.377665043 CET	53	50054	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:12.400854111 CET	53	65464	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:13.287903070 CET	65465	1900	192.168.11.20	239.255.255.250
Feb 25, 2025 15:12:13.342784882 CET	53	50779	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:14.298361063 CET	65465	1900	192.168.11.20	239.255.255.250
Feb 25, 2025 15:12:14.752295971 CET	53	65058	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:15.313777924 CET	65465	1900	192.168.11.20	239.255.255.250
Feb 25, 2025 15:12:16.924364090 CET	63935	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:16.924451113 CET	51801	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:17.059864998 CET	53	63935	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:17.060611010 CET	53	51801	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:18.049420118 CET	53286	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:18.049479961 CET	53448	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:18.186985016 CET	53	53286	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:18.188853025 CET	53	53448	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:19.452769995 CET	56159	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:19.452840090 CET	60133	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:19.591608047 CET	53	60133	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:19.592926025 CET	53	56159	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:22.460287094 CET	56958	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:22.460391045 CET	53823	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:22.596066952 CET	53	56958	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:22.597340107 CET	53	53823	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:24.775855064 CET	62832	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:24.776058912 CET	60648	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:24.912072897 CET	53	62832	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:24.970280886 CET	53	60648	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:25.980199099 CET	64469	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:25.980284929 CET	56525	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:26.116415977 CET	53	64469	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:26.144387007 CET	53	56525	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:27.393393993 CET	58267	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:27.393563032 CET	65221	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:27.739420891 CET	53	58267	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:27.741149902 CET	53	65221	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:29.290836096 CET	49459	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:29.290962934 CET	59305	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:29.301815987 CET	56576	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:29.301959991 CET	62127	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:29.441848040 CET	53	62127	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:29.441880941 CET	53	56576	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:29.636135101 CET	53	49459	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:29.638371944 CET	53	59305	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:30.249825001 CET	51904	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:30.249923944 CET	58762	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:30.255055904 CET	65492	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:30.255165100 CET	63835	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:30.388160944 CET	53	51904	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:30.388185024 CET	53	58762	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:30.392544985 CET	53	65492	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:30.392575026 CET	53	63835	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:34.841115952 CET	53	63982	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:42.024063110 CET	53	54269	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:44.203320026 CET	58809	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:44.203450918 CET	49826	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:44.203648090 CET	60485	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:44.203718901 CET	53622	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:44.338512897 CET	53	49826	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:44.338751078 CET	53	53622	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:44.338836908 CET	53	60485	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:44.339132071 CET	53	58809	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:45.343545914 CET	54532	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:45.343661070 CET	59864	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:45.401257992 CET	64356	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:45.401319027 CET	54349	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:45.472454071 CET	61303	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:45.472564936 CET	64106	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:45.479346991 CET	53	54532	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:45.480334997 CET	53	59864	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:45.537306070 CET	53	64356	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:45.538893938 CET	53	54349	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:45.982677937 CET	53	61303	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:46.006794930 CET	53	64106	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:47.591461897 CET	51458	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:47.591556072 CET	50324	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:47.592631102 CET	51406	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:47.592690945 CET	57368	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:47.592911959 CET	61350	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:47.592988014 CET	55954	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:47.726643085 CET	53	51458	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:47.727442026 CET	53	51406	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:47.727675915 CET	53	61350	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:47.727689981 CET	53	50324	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:47.729291916 CET	53	55954	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:47.729337931 CET	53	57368	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:48.550323009 CET	61867	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:48.550462008 CET	63838	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:48.686162949 CET	53	61867	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:48.686400890 CET	53	63838	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:49.400214911 CET	49775	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:49.400379896 CET	58198	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:49.539344072 CET	53	58198	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:49.542659044 CET	53	49775	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:50.371876955 CET	64462	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:50.371970892 CET	53168	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:50.508029938 CET	53	53168	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:50.509931087 CET	53	64462	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:56.955472946 CET	53	50578	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:58.172024965 CET	54507	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:58.172111988 CET	63874	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:12:58.315713882 CET	53	63874	1.1.1.1	192.168.11.20
Feb 25, 2025 15:12:58.315876007 CET	53	54507	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:00.018378973 CET	64884	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:00.018491983 CET	56903	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:00.282988071 CET	53	64884	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:00.612385035 CET	53	56903	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:04.272861958 CET	57312	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:04.272972107 CET	52279	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:04.412362099 CET	53	57312	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:04.415082932 CET	53	52279	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:05.976095915 CET	59298	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:05.976185083 CET	49230	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:05.977911949 CET	50719	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:05.978009939 CET	62554	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:06.110968113 CET	53	49230	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:06.111187935 CET	53	59298	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:06.114762068 CET	53	62554	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:06.116319895 CET	53	50719	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:07.018629074 CET	61641	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:07.018712997 CET	53566	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:07.154212952 CET	53	61641	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:07.155124903 CET	53	53566	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:07.688088894 CET	60279	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:07.688088894 CET	52602	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:07.824238062 CET	53	52602	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:07.828128099 CET	53	60279	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:08.025930882 CET	51633	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:08.026012897 CET	50949	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:08.162106037 CET	53	50949	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:08.162313938 CET	53	51633	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:08.492100954 CET	53	57875	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:12.396605015 CET	53	55751	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.064254045 CET	53	57346	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.562060118 CET	62366	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:23.562175035 CET	53544	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:23.562474012 CET	60754	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:23.562629938 CET	60796	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:23.562838078 CET	53588	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:23.562994003 CET	54340	53	192.168.11.20	1.1.1.1
Feb 25, 2025 15:13:23.697118998 CET	53	53544	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.697379112 CET	53	60754	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.697446108 CET	53	62366	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.698159933 CET	53	54340	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.698414087 CET	53	60796	1.1.1.1	192.168.11.20
Feb 25, 2025 15:13:23.698517084 CET	53	53588	1.1.1.1	192.168.11.20

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Feb 25, 2025 15:12:24.970520020 CET	192.168.11.20	1.1.1.1	cb55	(Port unreachable)	Destination Unreachable
Feb 25, 2025 15:13:00.612581968 CET	192.168.11.20	1.1.1.1	cb8a	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:18 UTC	1350	OUT	GET /?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br HTTP/1.1 Host: atpscan.global.hornetsecurity.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:19 UTC	1027	IN	HTTP/1.1 302 Found Server: nginx Date: Tue, 25 Feb 2025 14:12:19 GMT Content-Type: text/html; charset=UTF-8 Connection: close Set-Cookie: ATPSESSID=11b4441f0788d86806dc3001401cbd27; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Location: https://securelinks.cloud-security.net/v4?d=eqOz7AXSzN2V2mi6iPmcWAtgYiZy7lkNff2rdLiYxLc&f=uieQKeFt6Zo7ANK8iLoZFPTujO3kkK4boT32m0sSAem2yjB3nbrJPC-bjAvICoGvUsBPae9KnS3shx7u3k2FiwwIqyiK3sQzLKFz5y8q_nj8PAt_J9HmT1bo5p4OIPC1eZYzpGJBfTb7UM-l94hwhA&i=&k=WFad&m=2x6lr8WIArfjoki1cLDoaGvtZnic1YOh--dHqhZnxNrDJUG4m82-vM5qXqDCSAsURkVh0fd5KOJuBllo3N6JKs2ra2-P7_2temJ9tYhs2hxglgVJVr5gYlT_yoYeRZjF&n=GP4DG9iGvMhGp7Cc0MfzdFVrVHv5htxygQbtVpxMJpUIBpkiFZSL5KiAfQBsE-KAVBPk5S1ARYk-3VQUbSVQ7A&r=WVGLAKs8L0Zh9eoU1fbnSHa5iJ0XuA-IG_TRldcDEATEV5Ai8mKQZHV2Y3yODQ5K&s=49438b7fe2a6d5a79aafcc5ab0730c0b326ba1d8858947a63aac81e1e9547b97&u=https%3A%2F%2Faws.predictiveresponse.net%2Ffwdhs.htm%3Fredirect%3D%2F%2FmembersGelita.cpmeduca.com.br

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:25 UTC	712	OUT	GET /fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br HTTP/1.1 Host: aws.predictiveresponse.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:25 UTC	255	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:25 GMT Server: Apache Last-Modified: Sun, 10 Jun 2018 22:13:25 GMT ETag: "105-56e50f124dc5b" Accept-Ranges: bytes Content-Length: 261 Vary: Accept-Encoding Connection: close Content-Type: text/html
2025-02-25 14:12:25 UTC	261	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 20 54 72 61 6e 73 69 74 69 6f 6e 61 6c 2f 2f 45 4e 22 3e 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 74 69 74 6c 65 3e 72 65 64 69 72 65 63 74 3c 2f 74 69 74 6c 65 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 77 73 2e 70 72 65 64 69 63 74 69 76 65 72 65 73 70 6f 6e 73 65 2e 6e 65 74 2f 74 72 61 63 68 73 2e 6a 73 22 3e 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 63 72 69 70 74 20 6c 61 6e 67 75 61 67 65 3d 22 4a 61 76 61 53 63 72 69 70 74 22 3e 20 74 72 61 63 6b 50 72 65 64 69 63 74 69 76 65 28 29 3b 20 3c 2f 73 63 72 69 70 74 3e 0a 3c 2f Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"><HTML><HEAD><title>redirect</title><script language="JavaScript" src="https://aws.predictiveresponse.net/trachs.js"> </script><script language="JavaScript"> trackPredictive(); </script></

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:25 UTC	603	OUT	GET /trachs.js HTTP/1.1 Host: aws.predictiveresponse.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:25 UTC	271	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:25 GMT Server: Apache Last-Modified: Wed, 08 May 2024 08:30:47 GMT ETag: "3543-617ed1e853bc0" Accept-Ranges: bytes Content-Length: 13635 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2025-02-25 14:12:25 UTC	13635	IN	Data Raw: 76 61 72 20 74 6d 65 20 3d 20 30 3b 0a 76 61 72 20 74 6f 74 20 3d 20 22 22 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 72 61 63 56 65 72 73 69 6f 6e 28 29 20 7b 0a 20 20 20 20 20 61 6c 65 72 74 28 27 74 72 61 63 2e 6a 73 20 68 74 74 70 20 56 65 72 73 69 6f 6e 20 35 2e 30 27 29 3b 0a 7d 0a 66 75 6e 63 74 69 6f 6e 20 6a 53 6c 65 65 70 28 73 29 7b 0a 20 20 20 20 20 20 20 20 73 3d 73 2a 31 30 30 30 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 61 3d 74 72 75 65 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 6e 3d 6e 65 77 20 44 61 74 65 28 29 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 77 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 73 4d 53 3d 6e 2e 67 65 74 54 69 6d 65 28 29 3b 0a 20 20 20 20 20 20 20 20 77 68 69 6c 65 28 61 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: var tme = 0;var tot = "";function tracVersion() { alert('trac.js http Version 5.0');}function jSleep(s){ s=s*1000; var a=true; var n=new Date(); var w; var sMS=n.getTime(); while(a){

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:26 UTC	892	OUT	GET /rtrac.php?org=null&lea=null&ite=&lvl=2&uvi=trZjCSd3N1740492745&uvx=undefined&ctr=&curl=https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br&titl=redirect&ref=&sid=null HTTP/1.1 Host: aws.predictiveresponse.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _pa_user=trZjCSd3N1740492745
2025-02-25 14:12:26 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:26 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:27 UTC	594	OUT	GET /rtrac.php?org=null&lea=null&ite=&lvl=2&uvi=trZjCSd3N1740492745&uvx=undefined&ctr=&curl=https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br&titl=redirect&ref=&sid=null HTTP/1.1 Host: aws.predictiveresponse.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _pa_user=trZjCSd3N1740492745
2025-02-25 14:12:27 UTC	150	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:27 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:27 UTC	703	OUT	GET /favicon.ico HTTP/1.1 Host: aws.predictiveresponse.net Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://aws.predictiveresponse.net/fwdhs.htm?redirect=//membersGelita.cpmeduca.com.br Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _pa_user=trZjCSd3N1740492745
2025-02-25 14:12:27 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:27 GMT Server: Apache Last-Modified: Sat, 03 Sep 2022 02:29:02 GMT ETag: "27e-5e7bc9c1b45e7" Accept-Ranges: bytes Content-Length: 638 Connection: close Content-Type: image/vnd.microsoft.icon
2025-02-25 14:12:27 UTC	638	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 02 45 49 44 41 54 38 4f 7d d3 4b 68 13 51 14 06 e0 73 ee 8d 35 44 a4 26 50 28 14 1f 95 88 74 13 70 61 37 29 66 c6 6a 92 1a 74 67 17 e2 a3 d2 9d 42 41 28 54 17 62 71 23 2e 04 8b d0 85 0b 35 68 2b 9a 85 8f 66 66 b4 34 26 2d 15 5a 51 2a 4d 83 56 2c 25 36 21 48 cb 68 63 1e 1d 33 33 57 d2 87 26 cd c4 bb 3f 1f e7 3f e7 5c 84 ff bc e7 6e f7 ce ad 00 4e 42 c1 42 80 4e 1d 91 a4 8f 08 c0 4a 4b d0 a8 fe a9 c7 63 a3 aa 7a 71 0b 25 2d 26 42 0e 52 04 ab 09 09 43 c4 67 98 cd 9d e3 23 91 cc 46 5d 05 f0 c2 e9 dc 9e 35 9b 1b 4d 36 5b ac 3d 10 d0 5e 79 3c 36 24 18 a0 88 87 09 02 10 c0 47 9c 20 9e a9 0a 00 40 11 2d 6b 33 ec f5 ee d1 28 ce 12 80 1a 44 d4 54 1d 0e 1c 15 c5 Data Ascii: PNGIHDRaEIDAT8O}KhQs5D&P(tpa7)fjtgBA(Tbq#.5h+ff4&-ZQ*MV,%6!Hhc33W&??\nNBBNJKczq%-&BRCg#F]5M6[=^y<6$G @-k3(DT

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:28 UTC	405	OUT	GET /favicon.ico HTTP/1.1 Host: aws.predictiveresponse.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _pa_user=trZjCSd3N1740492745
2025-02-25 14:12:28 UTC	247	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:28 GMT Server: Apache Last-Modified: Sat, 03 Sep 2022 02:29:02 GMT ETag: "27e-5e7bc9c1b45e7" Accept-Ranges: bytes Content-Length: 638 Connection: close Content-Type: image/vnd.microsoft.icon
2025-02-25 14:12:28 UTC	638	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 02 45 49 44 41 54 38 4f 7d d3 4b 68 13 51 14 06 e0 73 ee 8d 35 44 a4 26 50 28 14 1f 95 88 74 13 70 61 37 29 66 c6 6a 92 1a 74 67 17 e2 a3 d2 9d 42 41 28 54 17 62 71 23 2e 04 8b d0 85 0b 35 68 2b 9a 85 8f 66 66 b4 34 26 2d 15 5a 51 2a 4d 83 56 2c 25 36 21 48 cb 68 63 1e 1d 33 33 57 d2 87 26 cd c4 bb 3f 1f e7 3f e7 5c 84 ff bc e7 6e f7 ce ad 00 4e 42 c1 42 80 4e 1d 91 a4 8f 08 c0 4a 4b d0 a8 fe a9 c7 63 a3 aa 7a 71 0b 25 2d 26 42 0e 52 04 ab 09 09 43 c4 67 98 cd 9d e3 23 91 cc 46 5d 05 f0 c2 e9 dc 9e 35 9b 1b 4d 36 5b ac 3d 10 d0 5e 79 3c 36 24 18 a0 88 87 09 02 10 c0 47 9c 20 9e a9 0a 00 40 11 2d 6b 33 ec f5 ee d1 28 ce 12 80 1a 44 d4 54 1d 0e 1c 15 c5 Data Ascii: PNGIHDRaEIDAT8O}KhQs5D&P(tpa7)fjtgBA(Tbq#.5h+ff4&-ZQ*MV,%6!Hhc33W&??\nNBBNJKczq%-&BRCg#F]5M6[=^y<6$G @-k3(DT

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:29 UTC	603	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js?onload=RGHt6&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Origin: https://membersgelita.cpmeduca.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:30 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:30 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91784a688c253367-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6a 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 6a 65 7c 7c 28 6a 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var je;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(je\|\|(je={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 Data Ascii: xecute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirect
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 Data Ascii: rams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugS
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c Data Ascii: language,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 74 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: l(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&te(p,v.prototype),p},Oe.apply(null,a
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 Data Ascii: r));function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat
2025-02-25 14:12:30 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 Data Ascii: height="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verti

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:30 UTC	418	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js?onload=RGHt6&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:31 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:31 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91784a6e6b485c6c-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:31 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:30 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:31 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:31 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 27945 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-9cr9QevRab7mA9aQ' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-02-25 14:12:31 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-02-25 14:12:31 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 39 63 72 39 51 65 76 52 61 62 37 6d 41 39 61 51 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-9cr9QevRab7mA9aQ' 'unsafe-
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 Data Ascii: mes fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfor
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 66 Data Ascii: align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:f
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 70 Data Ascii: hadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #exp
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 2c Data Ascii: }.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active,
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e 6b Data Ascii: esh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:link
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 64 Data Ascii: :checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wid
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a 30 Data Ascii: ontent:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:0
2025-02-25 14:12:31 UTC	1369	IN	Data Raw: 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 6f Data Ascii: {margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{co

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:31 UTC	739	OUT	GET /cdn-cgi/challenge-platform/h/b/orchestrate/chl_api/v1?ray=91784a6e7ba34c31&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:32 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:31 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 121604 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91784a73b95409a6-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:32 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 77 56 56 77 38 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 69 74 65 2d 74 65 72 6d 73 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 Data Ascii: window._cf_chl_opt.wVVw8={"metadata":{"challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebsite-terms%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23brow
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 74 69 6d 65 6f 75 74 22 3a 22 54 69 6d 65 64 25 32 30 6f 75 74 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 5f 61 6c 77 61 79 73 5f 70 61 73 73 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 25 32 43 25 32 30 61 6c 77 61 79 73 25 32 30 70 61 73 73 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 70 72 69 76 61 63 79 22 3a 22 50 72 69 76 61 63 79 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 6f 6f 74 65 72 5f 74 65 72 6d 73 22 3a 22 54 65 72 6d 73 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 73 75 63 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 65 65 64 62 61 63 6b 5f 64 Data Ascii: .","turnstile_timeout":"Timed%20out","testing_only_always_pass":"Testing%20only%2C%20always%20pass.","turnstile_refresh":"Refresh","turnstile_footer_privacy":"Privacy","turnstile_footer_terms":"Terms","turnstile_success":"Success%21","turnstile_feedback_d
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 2c 67 67 29 7b 66 6f 72 28 67 4a 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 67 49 2c 65 2c 66 29 7b 66 6f 72 28 67 49 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 67 49 28 31 38 34 33 29 29 2f 31 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 38 34 39 29 29 2f 32 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 34 39 38 29 29 2f 33 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 37 37 29 29 2f 34 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 39 29 29 2f 35 2b 2d 70 61 72 73 65 49 6e 74 28 67 49 28 31 30 31 31 29 29 2f 36 2a 28 70 61 72 73 65 49 6e 74 28 67 49 28 31 32 39 34 29 29 2f 37 29 2b 70 61 72 73 65 49 6e 74 28 67 49 28 31 37 37 33 29 29 2f 38 2a 28 2d 70 61 72 73 65 49 6e 74 28 67 49 28 36 30 37 Data Ascii: ,gg){for(gJ=b,function(c,d,gI,e,f){for(gI=b,e=c();!![];)try{if(f=parseInt(gI(1843))/1(parseInt(gI(849))/2)+parseInt(gI(1498))/3+parseInt(gI(1277))/4+-parseInt(gI(1299))/5+-parseInt(gI(1011))/6(parseInt(gI(1294))/7)+parseInt(gI(1773))/8*(-parseInt(gI(607
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 28 29 2c 6d 3d 6b 5b 67 4d 28 34 39 30 29 5d 28 69 2c 6b 5b 67 4d 28 31 34 34 33 29 5d 29 2c 6e 3d 6b 5b 67 4d 28 31 37 36 34 29 5d 28 6b 5b 67 4d 28 38 33 37 29 5d 28 6b 5b 67 4d 28 31 37 31 36 29 5d 28 67 4d 28 37 37 33 29 2c 65 4d 5b 67 4d 28 31 38 33 34 29 5d 5b 67 4d 28 34 35 36 29 5d 29 2b 6b 5b 67 4d 28 31 38 35 31 29 5d 2c 65 4d 5b 67 4d 28 31 38 33 34 29 5d 5b 67 4d 28 31 30 37 31 29 5d 29 2b 27 2f 27 2b 65 4d 5b 67 4d 28 31 38 33 34 29 5d 2e 63 48 2c 27 2f 27 29 2b 65 4d 5b 67 4d 28 31 38 33 34 29 5d 5b 67 4d 28 31 34 36 34 29 5d 2c 6f 3d 7b 7d 2c 6f 5b 67 4d 28 31 34 30 33 29 5d 3d 65 4d 5b 67 4d 28 31 38 33 34 29 5d 5b 67 4d 28 31 34 30 33 29 5d 2c 6f 5b 67 4d 28 31 35 38 36 29 5d 3d 65 4d 5b 67 4d 28 31 38 33 34 29 5d 5b 67 4d 28 31 35 38 36 Data Ascii: (),m=k[gM(490)](i,k[gM(1443)]),n=k[gM(1764)](k[gM(837)](k[gM(1716)](gM(773),eM[gM(1834)][gM(456)])+k[gM(1851)],eM[gM(1834)][gM(1071)])+'/'+eM[gM(1834)].cH,'/')+eM[gM(1834)][gM(1464)],o={},o[gM(1403)]=eM[gM(1834)][gM(1403)],o[gM(1586)]=eM[gM(1834)][gM(1586
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 37 30 32 29 5d 28 6f 2c 75 6e 64 65 66 69 6e 65 64 2c 6b 5b 67 51 28 31 36 33 36 29 5d 29 7d 2c 31 30 29 2c 65 4d 5b 67 50 28 31 35 35 33 29 5d 28 66 75 6e 63 74 69 6f 6e 28 67 52 29 7b 67 52 3d 67 50 2c 65 4d 5b 67 52 28 34 36 39 29 5d 28 29 7d 2c 31 65 33 29 2c 65 4d 5b 67 50 28 31 33 34 34 29 5d 5b 67 50 28 31 34 39 35 29 5d 28 67 50 28 37 32 35 29 2c 65 29 2c 21 5b 5d 29 7d 2c 65 51 3d 30 2c 65 54 3d 7b 7d 2c 65 54 5b 67 4a 28 31 33 35 34 29 5d 3d 65 53 2c 65 4d 5b 67 4a 28 37 33 31 29 5d 3d 65 54 2c 65 56 3d 65 4d 5b 67 4a 28 31 38 33 34 29 5d 5b 67 4a 28 34 36 37 29 5d 5b 67 4a 28 31 36 36 33 29 5d 2c 65 57 3d 65 4d 5b 67 4a 28 31 38 33 34 29 5d 5b 67 4a 28 34 36 37 29 5d 5b 67 4a 28 31 37 34 30 29 5d 2c 65 58 3d 65 4d 5b 67 4a 28 31 38 33 34 29 5d Data Ascii: 702)](o,undefined,k[gQ(1636)])},10),eM[gP(1553)](function(gR){gR=gP,eM[gR(469)]()},1e3),eM[gP(1344)][gP(1495)](gP(725),e),![])},eQ=0,eT={},eT[gJ(1354)]=eS,eM[gJ(731)]=eT,eV=eM[gJ(1834)][gJ(467)][gJ(1663)],eW=eM[gJ(1834)][gJ(467)][gJ(1740)],eX=eM[gJ(1834)]
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 66 53 5b 67 4a 28 31 37 39 37 29 5d 3d 66 6f 2c 66 53 5b 67 4a 28 31 30 35 32 29 5d 3d 66 6e 2c 66 53 5b 67 4a 28 31 32 33 38 29 5d 3d 66 79 2c 66 53 5b 67 4a 28 31 30 33 32 29 5d 3d 66 78 2c 66 53 5b 67 4a 28 31 34 32 38 29 5d 3d 66 77 2c 66 53 5b 67 4a 28 31 33 35 32 29 5d 3d 66 76 2c 66 53 5b 67 4a 28 31 31 37 34 29 5d 3d 66 67 2c 66 53 5b 67 4a 28 31 36 31 30 29 5d 3d 66 52 2c 66 53 5b 67 4a 28 31 34 37 38 29 5d 3d 66 6b 2c 66 53 5b 67 4a 28 31 31 35 32 29 5d 3d 66 68 2c 66 53 5b 67 4a 28 36 33 34 29 5d 3d 66 64 2c 66 53 5b 67 4a 28 39 38 35 29 5d 3d 66 63 2c 65 4d 5b 67 4a 28 38 32 33 29 5d 3d 66 53 2c 66 54 3d 66 75 6e 63 74 69 6f 6e 28 69 6a 2c 64 2c 65 2c 66 2c 67 29 7b 72 65 74 75 72 6e 20 69 6a 3d 67 4a 2c 64 3d 7b 27 77 49 57 70 4d 27 3a 69 6a Data Ascii: fS[gJ(1797)]=fo,fS[gJ(1052)]=fn,fS[gJ(1238)]=fy,fS[gJ(1032)]=fx,fS[gJ(1428)]=fw,fS[gJ(1352)]=fv,fS[gJ(1174)]=fg,fS[gJ(1610)]=fR,fS[gJ(1478)]=fk,fS[gJ(1152)]=fh,fS[gJ(634)]=fd,fS[gJ(985)]=fc,eM[gJ(823)]=fS,fT=function(ij,d,e,f,g){return ij=gJ,d={'wIWpM':ij
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 3d 69 7d 7d 2c 65 3d 53 74 72 69 6e 67 5b 69 6a 28 31 31 35 39 29 5d 2c 66 3d 7b 27 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 69 2c 69 6b 2c 6a 2c 6b 29 7b 72 65 74 75 72 6e 20 69 6b 3d 62 2c 6a 3d 7b 7d 2c 6a 5b 69 6b 28 31 33 31 38 29 5d 3d 64 5b 69 6b 28 34 34 32 29 5d 2c 6b 3d 6a 2c 64 5b 69 6b 28 35 31 33 29 5d 28 69 6b 28 31 38 34 39 29 2c 69 6b 28 31 38 34 39 29 29 3f 69 6b 28 31 36 32 32 29 5b 69 6b 28 31 33 30 33 29 5d 28 69 29 3a 64 5b 69 6b 28 31 38 33 34 29 5d 5b 69 6b 28 31 34 30 35 29 5d 5b 69 6b 28 31 31 35 35 29 5d 28 6b 5b 69 6b 28 31 33 31 38 29 5d 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 Data Ascii: ,i){return h===i}},e=String[ij(1159)],f={'h':function(h){return h==null?'':f.g(h,6,function(i,ik,j,k){return ik=b,j={},j[ik(1318)]=d[ik(442)],k=j,d[ik(513)](ik(1849),ik(1849))?ik(1622)[ik(1303)](i):d[ik(1834)][ik(1405)][ik(1155)](k[ik(1318)])})},'g':funct
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 5b 69 6c 28 36 32 37 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 78 5b 4c 5d 3d 45 2b 2b 2c 53 74 72 69 6e 67 28 4b 29 29 7d 69 66 28 27 27 21 3d 3d 43 29 7b 69 66 28 4f 62 6a 65 63 74 5b 69 6c 28 31 36 39 30 29 5d 5b 69 6c 28 31 38 35 35 29 5d 5b 69 6c 28 31 33 30 31 29 5d 28 42 2c 43 29 29 7b 69 66 28 64 5b 69 6c 28 34 34 34 29 5d 28 32 35 36 2c 43 5b 69 6c 28 31 34 38 39 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 73 3c 46 3b 48 3c 3c 3d 31 2c 64 5b 69 6c 28 31 32 36 30 29 5d 28 49 2c 64 5b 69 6c 28 39 31 33 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 69 6c 28 39 38 32 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 69 6c 28 31 34 38 39 29 5d 28 30 29 2c 73 3d 30 3b 38 3e 73 3b 48 3d 64 5b 69 6c 28 37 36 Data Ascii: [il(627)](2,F),F++),x[L]=E++,String(K))}if(''!==C){if(Object[il(1690)][il(1855)][il(1301)](B,C)){if(d[il(444)](256,C[il(1489)](0))){for(s=0;s<F;H<<=1,d[il(1260)](I,d[il(913)](j,1))?(I=0,G[il(982)](o(H)),H=0):I++,s++);for(M=C[il(1489)](0),s=0;8>s;H=d[il(76
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 31 2c 45 3d 30 3b 33 3e 45 3b 73 5b 45 5d 3d 45 2c 45 2b 3d 31 29 3b 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 70 28 36 32 37 29 5d 28 32 2c 32 29 2c 46 3d 31 3b 4b 21 3d 46 3b 64 5b 69 70 28 35 31 33 29 5d 28 69 70 28 34 35 37 29 2c 69 70 28 31 37 38 35 29 29 3f 47 5b 69 70 28 37 30 32 29 5d 28 6a 2c 43 2c 69 70 28 37 37 30 29 29 3a 28 4c 3d 47 26 48 2c 48 3e 3e 3d 31 2c 64 5b 69 70 28 31 37 37 32 29 5d 28 30 2c 48 29 26 26 28 48 3d 6a 2c 47 3d 6f 28 49 2b 2b 29 29 2c 4a 7c 3d 28 30 3c 4c 3f 31 3a 30 29 2a 46 2c 46 3c 3c 3d 31 29 29 3b 73 77 69 74 63 68 28 4a 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4a 3d 30 2c 4b 3d 4d 61 74 68 5b 69 70 28 36 32 37 29 5d 28 32 2c 38 29 2c 46 3d 31 3b 64 5b 69 70 28 31 31 38 35 29 5d 28 46 2c 4b 29 3b 4c 3d 47 26 48 Data Ascii: 1,E=0;3>E;s[E]=E,E+=1);for(J=0,K=Math[ip(627)](2,2),F=1;K!=F;d[ip(513)](ip(457),ip(1785))?G[ip(702)](j,C,ip(770)):(L=G&H,H>>=1,d[ip(1772)](0,H)&&(H=j,G=o(I++)),J\|=(0<L?1:0)*F,F<<=1));switch(J){case 0:for(J=0,K=Math[ip(627)](2,8),F=1;d[ip(1185)](F,K);L=G&H
2025-02-25 14:12:32 UTC	1369	IN	Data Raw: 7b 72 65 74 75 72 6e 20 66 57 28 63 29 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 66 55 28 65 5b 69 43 28 31 37 32 30 29 5d 28 66 56 2c 63 29 29 7d 7d 2c 66 58 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 69 44 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 29 7b 66 6f 72 28 69 44 3d 67 4a 2c 67 3d 7b 7d 2c 67 5b 69 44 28 31 38 33 33 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 25 73 7d 2c 67 5b 69 44 28 37 35 32 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2b 73 7d 2c 67 5b 69 44 28 31 35 35 34 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 2d 73 7d 2c 67 5b 69 44 28 31 34 37 35 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 73 29 7b 72 65 74 75 72 6e 20 6e 26 73 7d 2c 68 3d 67 Data Ascii: {return fW(c)}catch(g){return fU(e[iC(1720)](fV,c))}},fX=function(f,iD,g,h,i,j,k,l,m){for(iD=gJ,g={},g[iD(1833)]=function(n,s){return n%s},g[iD(752)]=function(n,s){return n+s},g[iD(1554)]=function(n,s){return n-s},g[iD(1475)]=function(n,s){return n&s},h=g

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:31 UTC	751	OUT	GET /cdn-cgi/challenge-platform/h/b/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:32 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:32 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91784a73bb0a335b-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:32 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:32 UTC	1158	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4025 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-platform: "Windows" cf-chl: MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:32 UTC	4025	OUT	Data Raw: 63 64 35 71 75 71 4b 41 44 4e 6f 56 35 6f 64 24 37 56 6e 6a 6e 76 6e 46 71 24 33 6e 64 42 78 56 58 76 42 6e 37 41 6e 42 48 75 58 4d 6e 58 24 58 31 58 39 30 42 70 68 71 47 24 34 62 75 6e 50 6e 48 43 24 6e 37 44 71 37 54 6e 51 43 24 44 52 71 75 5a 24 6f 5a 78 6e 42 35 48 64 6f 6a 6e 44 51 6e 62 6e 66 70 51 71 45 24 51 2b 4c 6e 47 35 56 76 4d 61 30 6e 37 51 6e 4a 6e 35 35 6e 73 30 35 59 59 6e 39 42 33 42 64 74 72 69 68 62 71 2b 55 6e 34 43 30 6f 37 24 69 51 59 30 51 77 43 64 6e 63 24 58 48 48 6e 4e 43 6a 37 36 4a 51 33 65 38 76 4a 50 64 77 71 6e 2d 6e 66 78 2d 79 6e 58 63 37 4b 24 6e 37 24 58 4a 58 4f 56 35 6e 44 54 6e 5a 38 67 61 44 33 6e 6d 6e 6f 54 35 73 73 24 51 65 66 30 68 2b 41 50 56 24 35 58 66 6e 37 42 6e 47 32 4c 30 71 6e 68 70 32 42 4c 6e 70 72 32 Data Ascii: cd5quqKADNoV5od$7VnjnvnFq$3ndBxVXvBn7AnBHuXMnX$X1X90BphqG$4bunPnHC$n7Dq7TnQC$DRquZ$oZxnB5HdojnDQnbnfpQqE$Q+LnG5VvMa0n7QnJn55ns05YYn9B3Bdtrihbq+Un4C0o7$iQY0QwCdnc$XHHnNCj76JQ3e8vJPdwqn-nfx-ynXc7K$n7$XJXOV5nDTnZ8gaD3nmnoT5ss$Qef0h+APV$5Xfn7BnG2L0qnhp2BLnpr2
2025-02-25 14:12:33 UTC	1051	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:33 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 228048 Connection: close cf-chl-gen: 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$kPhR4JnGbmhhv5MZbTtf7g== Server: cloudflare CF-RAY: 91784a797a0f257d-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:33 UTC	318	IN	Data Raw: 6b 34 71 55 56 35 65 51 68 33 43 4d 6b 6c 46 71 69 5a 2b 6b 63 4a 57 62 63 4b 65 56 5a 48 31 2b 6d 36 4b 6b 62 36 2b 50 66 4c 4b 69 62 36 79 47 70 36 36 73 65 37 75 62 65 4a 53 66 74 5a 4b 59 73 37 71 30 68 38 65 6f 6c 5a 36 71 71 36 4b 66 76 38 61 38 6b 39 50 4a 73 4a 50 4a 6b 34 32 6d 76 73 76 67 72 64 43 64 77 4f 54 56 6f 4c 6d 37 31 37 72 57 71 39 76 69 78 71 2f 77 35 2b 37 30 34 4f 7a 32 72 2b 62 4a 79 63 2f 72 38 74 4b 2f 41 62 76 55 76 66 48 6b 32 4d 48 79 78 4f 44 38 39 77 58 37 34 77 41 48 34 74 4d 55 43 68 50 54 43 74 51 64 36 75 6e 79 32 66 62 37 48 50 4d 56 33 2b 45 66 32 76 6e 6b 43 4f 7a 71 49 52 41 72 4d 77 6f 6a 42 77 37 74 43 51 59 55 42 78 41 6d 46 66 55 49 2b 52 59 36 42 42 63 64 4a 52 30 42 49 54 5a 4d 2f 6b 55 34 4d 43 39 41 51 51 38 Data Ascii: k4qUV5eQh3CMklFqiZ+kcJWbcKeVZH1+m6Kkb6+PfLKib6yGp66se7ubeJSftZKYs7q0h8eolZ6qq6Kfv8a8k9PJsJPJk42mvsvgrdCdwOTVoLm717rWq9vixq/w5+704Oz2r+bJyc/r8tK/AbvUvfHk2MHyxOD89wX74wAH4tMUChPTCtQd6uny2fb7HPMV3+Ef2vnkCOzqIRArMwojBw7tCQYUBxAmFfUI+RY6BBcdJR0BITZM/kU4MC9AQQ8
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 46 5a 4f 47 4e 6f 51 57 56 58 65 6b 74 70 57 59 39 63 62 56 39 74 61 57 35 79 6b 70 6d 50 64 70 78 70 6d 48 4b 56 62 70 35 32 66 6d 53 59 68 6f 64 31 59 6d 61 41 67 5a 75 66 61 61 74 70 6a 4b 71 6a 69 4c 61 79 70 6f 61 71 76 59 2b 37 75 35 56 37 6d 59 50 44 6b 35 47 78 79 59 43 68 67 73 75 56 71 4d 43 50 6a 36 62 4b 30 36 65 74 79 36 32 54 73 5a 76 62 71 37 47 7a 34 65 43 33 31 4e 37 6a 76 70 37 6d 79 4e 32 6a 76 71 6d 37 36 2f 44 46 78 2f 44 65 76 37 62 6c 77 37 66 43 77 38 7a 47 76 66 62 36 77 50 48 38 39 4c 30 47 41 64 6f 4c 44 4e 38 4a 7a 4f 37 4a 37 4d 37 4c 79 76 51 51 47 4f 37 6b 30 76 41 64 35 65 6a 35 36 41 30 42 2f 68 30 58 42 4f 54 33 4a 79 66 63 4b 67 44 6e 37 53 63 73 42 41 6f 6f 43 75 30 4e 4d 7a 51 49 44 68 41 2b 50 52 51 78 4f 30 41 62 2b Data Ascii: FZOGNoQWVXektpWY9cbV9taW5ykpmPdpxpmHKVbp52fmSYhod1YmaAgZufaatpjKqjiLaypoaqvY+7u5V7mYPDk5GxyYChgsuVqMCPj6bK06ety62TsZvbq7Gz4eC31N7jvp7myN2jvqm76/DFx/Dev7blw7fCw8zGvfb6wPH89L0GAdoLDN8JzO7J7M7LyvQQGO7k0vAd5ej56A0B/h0XBOT3JyfcKgDn7ScsBAooCu0NMzQIDhA+PRQxO0Ab+
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 69 53 59 78 2f 5a 6b 32 52 67 32 70 52 6c 6f 64 75 56 56 43 4c 63 6c 70 71 62 6f 31 2f 6c 34 4e 73 59 4a 70 6d 68 70 2b 6e 6f 35 35 73 61 6d 71 77 6f 49 68 74 74 49 61 65 73 47 2b 69 6a 48 6d 36 72 5a 42 39 76 70 2b 55 67 63 4b 73 6b 49 57 32 67 72 4b 35 75 38 6d 68 6a 70 6d 51 6e 71 72 45 6b 37 4f 49 78 4c 6a 53 7a 62 7a 58 74 36 7a 59 33 71 32 37 76 75 4b 67 76 39 69 34 36 4c 75 6a 32 4d 66 61 37 63 79 2b 78 38 48 68 39 75 50 4d 39 4e 4c 6e 35 50 62 78 39 76 45 41 75 50 6e 58 34 73 4d 44 37 39 33 47 39 66 73 4a 37 51 50 73 34 50 73 51 32 77 54 70 37 77 58 77 46 2f 44 6d 36 4e 76 79 49 53 44 75 37 67 54 37 38 4e 34 65 39 50 76 31 41 75 54 66 41 6a 41 51 36 42 49 6a 42 44 41 6b 4b 51 6b 4f 38 44 55 54 45 76 51 35 47 78 62 34 50 69 45 32 45 44 51 34 50 42 Data Ascii: iSYx/Zk2Rg2pRloduVVCLclpqbo1/l4NsYJpmhp+no55samqwoIhttIaesG+ijHm6rZB9vp+UgcKskIW2grK5u8mhjpmQnqrEk7OIxLjSzbzXt6zY3q27vuKgv9i46Luj2Mfa7cy+x8Hh9uPM9NLn5Pbx9vEAuPnX4sMD793G9fsJ7QPs4PsQ2wTp7wXwF/Dm6NvyISDu7gT78N4e9Pv1AuTfAjAQ6BIjBDAkKQkO8DUTEvQ5Gxb4PiE2EDQ4PB
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 66 31 39 67 59 30 31 73 6b 56 46 30 6c 34 65 49 6b 4a 53 54 65 58 71 58 6d 35 69 4f 6e 6e 71 42 59 48 71 6e 67 33 64 6f 72 6f 70 71 6f 58 79 48 63 70 43 78 63 34 71 32 6a 48 61 78 75 58 4b 56 6c 37 43 2b 6d 59 61 66 6f 4a 47 53 6f 37 32 4c 6d 61 57 65 6b 63 47 64 71 36 48 4f 6b 4c 61 5a 78 6f 33 45 31 37 6d 75 74 36 76 67 7a 65 53 64 34 64 47 36 6f 65 54 69 32 4b 58 4f 71 64 71 75 71 71 72 55 7a 50 66 4f 34 72 66 53 36 39 48 48 31 50 48 2b 75 64 50 31 38 72 37 68 30 64 66 52 39 65 58 6a 32 51 77 43 2f 41 7a 4c 41 2f 51 4b 34 2f 48 67 2b 4f 6a 4e 42 78 6a 72 2b 50 77 53 37 77 38 4e 48 2f 45 42 4a 75 50 38 4a 2f 33 36 4b 54 45 42 2b 77 4d 55 42 78 44 30 4e 51 49 45 47 68 4d 2b 43 53 6b 50 44 67 41 77 45 77 55 67 4d 79 55 57 41 6b 68 48 50 52 6b 4f 52 51 30 Data Ascii: f19gY01skVF0l4eIkJSTeXqXm5iOnnqBYHqng3doropqoXyHcpCxc4q2jHaxuXKVl7C+mYafoJGSo72LmaWekcGdq6HOkLaZxo3E17mut6vgzeSd4dG6oeTi2KXOqdquqqrUzPfO4rfS69HH1PH+udP18r7h0dfR9eXj2QwC/AzLA/QK4/Hg+OjNBxjr+PwS7w8NH/EBJuP8J/36KTEB+wMUBxD0NQIEGhM+CSkPDgAwEwUgMyUWAkhHPRkORQ0
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 6c 68 72 6b 34 35 61 63 70 69 49 6a 5a 78 75 67 34 2b 51 6c 6f 65 5a 63 70 61 42 67 61 69 71 6d 59 36 45 72 6f 65 57 72 70 61 4d 6a 34 57 49 73 35 53 53 66 5a 79 55 6b 59 75 6b 6d 73 4b 2f 66 36 6a 41 76 70 2b 56 6f 6f 61 36 6d 36 53 39 74 4d 37 53 7a 34 2b 34 30 4d 36 75 6d 71 76 62 33 4c 57 33 33 73 53 31 73 4b 61 65 71 62 54 42 76 2b 71 36 38 4e 75 75 35 71 37 55 37 76 66 4f 7a 63 62 49 78 50 4c 6c 79 39 6a 35 77 4e 66 36 77 74 6a 62 78 77 6e 59 31 2b 54 6f 35 4d 55 4c 45 73 67 44 45 73 2f 70 39 41 72 57 30 2b 66 62 37 4e 6b 65 44 66 48 77 2f 68 45 41 49 68 44 67 42 2b 41 4b 47 2f 63 6f 48 43 48 38 42 75 67 74 42 77 72 73 4d 51 38 4f 38 44 55 58 45 76 51 36 48 54 49 4d 4d 44 51 34 46 6a 77 32 41 6a 64 42 46 30 6f 75 42 77 6b 37 56 42 34 72 4d 55 56 55 Data Ascii: lhrk45acpiIjZxug4+QloeZcpaBgaiqmY6EroeWrpaMj4WIs5SSfZyUkYukmsK/f6jAvp+Vooa6m6S9tM7Sz4+40M6umqvb3LW33sS1sKaeqbTBv+q68Nuu5q7U7vfOzcbIxPLly9j5wNf6wtjbxwnY1+To5MULEsgDEs/p9ArW0+fb7NkeDfHw/hEAIhDgB+AKG/coHCH8BugtBwrsMQ8O8DUXEvQ6HTIMMDQ4Fjw2AjdBF0ouBwk7VB4rMUVU
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 6c 73 69 6e 69 54 62 4a 52 34 70 33 69 52 66 36 70 71 6f 34 57 6d 6a 58 71 72 70 32 36 76 71 59 52 34 73 70 75 4a 6e 61 65 78 73 70 43 75 76 35 70 2f 6e 72 57 59 79 62 69 34 6f 70 76 4d 6d 4d 75 51 67 36 79 51 31 62 47 6c 31 39 4c 4c 71 38 72 64 75 36 72 4f 6b 71 43 67 76 73 54 6d 75 72 4c 6d 36 4d 54 71 74 4f 7a 45 79 73 47 2b 78 37 37 6a 79 4d 72 43 79 50 6a 4c 74 4d 37 30 36 2f 66 7a 36 66 6a 37 34 39 48 79 76 38 62 64 33 64 6a 71 2f 41 66 67 42 51 41 4c 44 41 58 2b 44 51 2f 32 30 2b 66 4e 44 39 6e 70 48 41 44 61 47 41 50 31 33 51 49 47 45 2b 49 45 42 67 49 75 4a 50 6f 78 2b 53 30 54 41 77 38 6d 43 54 6f 5a 4b 52 4d 4a 45 50 77 73 41 66 4d 64 41 55 59 69 46 6b 68 44 50 42 77 37 54 69 77 62 50 31 45 52 48 56 55 31 56 69 73 30 55 78 6b 76 4f 46 64 48 4d Data Ascii: lsiniTbJR4p3iRf6pqo4WmjXqrp26vqYR4spuJnaexspCuv5p/nrWYybi4opvMmMuQg6yQ1bGl19LLq8rdu6rOkqCgvsTmurLm6MTqtOzEysG+x77jyMrCyPjLtM706/fz6fj749Hyv8bd3djq/AfgBQALDAX+DQ/20+fND9npHADaGAP13QIGE+IEBgIuJPox+S0TAw8mCToZKRMJEPwsAfMdAUYiFkhDPBw7TiwbP1ERHVU1Vis0UxkvOFdHM
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 69 67 6f 47 56 64 70 65 72 58 34 4b 64 73 57 4f 73 62 72 56 6e 73 59 65 35 61 37 6d 56 6a 49 70 37 6a 5a 69 74 6f 33 6d 68 67 72 43 5a 68 4c 61 56 78 63 62 4a 70 49 57 69 75 36 7a 45 6a 63 71 32 75 4b 6d 56 6d 64 79 73 70 37 44 5a 77 4e 72 6a 75 72 44 6a 76 64 6a 4a 74 70 79 32 31 4e 62 6e 34 4e 33 62 34 66 50 4d 30 73 47 33 79 2b 6d 78 7a 2f 6a 62 2b 50 62 70 77 63 48 78 31 39 7a 54 43 4d 58 63 77 77 62 45 78 39 76 50 34 4d 34 4e 46 65 44 66 34 75 76 34 45 68 7a 79 38 4e 58 74 49 65 44 79 2f 4e 6f 45 33 66 73 66 4a 53 55 41 4a 79 33 38 41 41 59 42 2b 2b 34 6d 4e 67 58 75 49 78 55 52 38 54 67 4e 47 78 34 2b 2f 6a 33 2b 48 78 34 79 45 7a 52 49 2b 78 38 36 54 67 42 4a 43 31 49 45 54 68 34 6c 49 78 4e 4d 4d 55 59 38 52 46 77 51 4f 42 78 41 48 79 49 32 49 56 Data Ascii: igoGVdperX4KdsWOsbrVnsYe5a7mVjIp7jZito3mhgrCZhLaVxcbJpIWiu6zEjcq2uKmVmdysp7DZwNrjurDjvdjJtpy21Nbn4N3b4fPM0sG3y+mxz/jb+PbpwcHx19zTCMXcwwbEx9vP4M4NFeDf4uv4Ehzy8NXtIeDy/NoE3fsfJSUAJy38AAYB++4mNgXuIxUR8TgNGx4+/j3+Hx4yEzRI+x86TgBJC1IETh4lIxNMMUY8RFwQOBxAHyI2IV
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 58 36 6c 2f 73 57 4f 78 6a 59 53 43 63 34 57 51 70 5a 74 78 6d 58 71 6f 6b 58 79 75 6a 62 32 2b 77 5a 78 39 6d 72 4f 6b 76 49 58 43 72 72 43 68 6a 5a 48 55 70 4a 2b 6f 30 62 6a 53 32 37 4b 77 75 71 2b 6f 32 70 2b 7a 31 4e 6d 65 75 39 37 6b 35 62 2b 72 37 4c 79 2f 75 4d 7a 49 71 65 2f 50 78 50 61 7a 34 50 6e 74 2b 4c 62 39 78 76 33 75 34 4e 58 35 41 75 30 49 35 76 4c 6f 77 66 77 46 44 2b 4c 6e 34 4f 6b 53 42 41 37 70 31 66 45 51 37 4f 6b 62 30 74 72 7a 46 78 30 64 39 78 38 6c 39 50 66 39 2b 50 50 6d 48 69 37 38 35 68 73 4e 43 65 6b 77 43 51 77 57 4e 76 59 31 39 68 63 57 4b 67 73 73 51 50 4d 58 4d 6b 62 33 51 51 4e 4b 2b 30 59 57 48 52 73 4c 52 43 6b 2b 4e 44 78 55 43 44 41 55 4f 42 63 61 4c 68 6c 4c 4b 6c 70 62 48 44 6c 52 4e 30 38 2b 4f 45 4e 67 58 6b 42 Data Ascii: X6l/sWOxjYSCc4WQpZtxmXqokXyujb2+wZx9mrOkvIXCrrChjZHUpJ+o0bjS27Kwuq+o2p+z1Nmeu97k5b+r7Ly/uMzIqe/PxPaz4Pnt+Lb9xv3u4NX5Au0I5vLowfwFD+Ln4OkSBA7p1fEQ7Okb0trzFx0d9x8l9Pf9+PPmHi785hsNCekwCQwWNvY19hcWKgssQPMXMkb3QQNK+0YWHRsLRCk+NDxUCDAUOBcaLhlLKlpbHDlRN08+OENgXkB
2025-02-25 14:12:33 UTC	1369	IN	Data Raw: 49 4e 76 64 47 32 44 63 35 47 31 64 6e 64 2b 64 61 31 37 6d 35 37 44 6d 4b 47 54 70 4d 69 4b 67 73 62 4b 6f 70 75 77 76 59 54 45 6e 35 4b 6e 72 5a 62 56 6b 4e 57 55 71 5a 32 56 7a 64 36 72 6d 62 75 66 77 4a 32 7a 6d 37 62 4c 77 74 65 6e 71 73 66 73 33 2b 58 67 37 2f 66 69 35 37 50 61 32 50 66 46 2f 65 75 33 41 74 2b 35 32 63 58 45 2f 66 55 45 2b 2b 7a 37 36 39 30 42 33 68 44 78 34 75 54 79 41 2f 6a 51 43 76 50 59 38 50 49 55 47 67 73 4b 37 51 55 46 45 76 6f 52 38 50 49 43 42 50 34 6a 42 2b 7a 6e 34 77 7a 77 4e 68 50 75 36 51 67 5a 38 76 73 71 48 66 59 41 4c 69 77 50 4d 30 55 46 2f 44 38 43 4e 42 38 4a 43 7a 63 47 50 45 31 51 53 52 77 6e 53 53 46 44 45 45 70 4b 44 6a 49 7a 47 56 70 4e 53 6c 51 36 49 45 49 2f 47 69 51 7a 51 56 64 68 53 44 35 44 63 69 52 6f Data Ascii: INvdG2Dc5G1dnd+da17m57DmKGTpMiKgsbKopuwvYTEn5KnrZbVkNWUqZ2Vzd6rmbufwJ2zm7bLwtenqsfs3+Xg7/fi57Pa2PfF/eu3At+52cXE/fUE++z7690B3hDx4uTyA/jQCvPY8PIUGgsK7QUFEvoR8PICBP4jB+zn4wzwNhPu6QgZ8vsqHfYALiwPM0UF/D8CNB8JCzcGPE1QSRwnSSFDEEpKDjIzGVpNSlQ6IEI/GiQzQVdhSD5DciRo

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:33 UTC	605	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:34 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Feb 2025 14:12:34 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: Zj3JKReYf0eoI46hP2QfZqvW9YGabqVtfWC/2nd/xB96L2yUYUI1Z9rrzoXlf97zeooQpfeX9+Ey+GPbjIgzbw==$z10lQqHoRbHNYLgA4qVvXw== Server: cloudflare CF-RAY: 91784a81c98d5c82-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:34 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:34 UTC	794	OUT	GET /cdn-cgi/challenge-platform/h/b/d/91784a6e7ba34c31/1740492753019/E3F_aYKvLtfRrTk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:34 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:34 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 91784a835a9d9ab7-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:34 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 17 08 02 00 00 00 a3 d1 79 1c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRyIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:35 UTC	434	OUT	GET /cdn-cgi/challenge-platform/h/b/d/91784a6e7ba34c31/1740492753019/E3F_aYKvLtfRrTk HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:35 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:35 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 91784a888d586d9e-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:35 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 04 00 00 00 17 08 02 00 00 00 a3 d1 79 1c 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRyIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:36 UTC	823	OUT	GET /cdn-cgi/challenge-platform/h/b/pat/91784a6e7ba34c31/1740492753028/9800c44d337a52a9750a1ebaf036ed85df843c7cb7fb9da83360050410c2c3af/vs8jr-5uqGRmQvr HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:36 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 25 Feb 2025 14:12:36 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-02-25 14:12:36 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 6d 41 44 45 54 54 4e 36 55 71 6c 31 43 68 36 36 38 44 62 74 68 64 2d 45 50 48 79 33 2d 35 32 6f 4d 32 41 46 42 42 44 43 77 36 38 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gmADETTN6Uql1Ch668Dbthd-EPHy3-52oM2AFBBDCw68AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-02-25 14:12:36 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:37 UTC	1159	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 38734 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-platform: "Windows" cf-chl: MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:37 UTC	16384	OUT	Data Raw: 63 64 35 71 53 6f 58 77 75 2b 51 73 64 44 42 6f 6b 34 35 53 71 30 33 37 51 58 42 6f 6a 6e 67 71 2b 35 58 73 6e 31 71 2d 64 6f 61 6e 63 6d 44 6e 2b 24 44 6f 6e 32 71 73 51 6f 68 66 35 6e 63 6f 6e 6e 75 6e 36 6e 44 35 6e 7a 6e 6f 75 6e 73 6b 6f 6e 75 58 4a 34 7a 67 6e 6e 38 58 42 24 6f 37 6e 58 41 4d 6b 6e 37 71 6f 56 4b 6e 61 24 6e 54 31 56 6e 6f 51 46 6e 4b 4a 33 6e 2b 24 24 37 51 75 53 74 71 34 31 77 30 4e 75 35 58 54 31 4a 38 67 42 6e 37 64 31 55 71 6e 39 4c 6b 6e 31 46 71 58 4f 24 24 44 6b 34 53 35 6e 57 6d 71 67 53 43 4d 68 46 54 4d 33 55 43 39 24 6e 63 75 71 77 53 42 6e 78 37 69 67 4b 4e 31 71 6e 47 6c 68 73 44 44 2d 6e 34 75 6e 69 73 51 46 79 6e 58 6b 6e 73 2d 63 55 24 6f 54 31 2d 2d 68 75 74 42 67 4a 63 2d 75 6e 47 35 33 6e 34 50 64 63 44 4a 4c 44 Data Ascii: cd5qSoXwu+QsdDBok45Sq037QXBojngq+5Xsn1q-doancmDn+$Don2qsQohf5nconnun6nD5nznounskonuXJ4zgnn8XB$o7nXAMkn7qoVKna$nT1VnoQFnKJ3n+$$7QuStq41w0Nu5XT1J8gBn7d1Uqn9Lkn1FqXO$$Dk4S5nWmqgSCMhFTM3UC9$ncuqwSBnx7igKN1qnGlhsDD-n4unisQFynXkns-cU$oT1--hutBgJc-unG53n4PdcDJLD
2025-02-25 14:12:37 UTC	16384	OUT	Data Raw: 48 68 37 36 57 78 7a 42 75 46 6a 62 45 53 77 42 46 6e 79 45 2b 71 44 6a 58 63 71 66 51 58 74 70 44 71 42 64 44 73 6e 47 71 4a 24 37 52 58 76 71 5a 64 6e 4f 58 66 71 42 33 58 5a 6e 2b 71 2d 62 58 4b 30 47 6a 2d 43 44 58 6e 35 24 47 51 37 41 58 6d 34 58 42 6f 30 58 31 24 62 42 42 67 58 54 24 38 42 66 64 24 4b 24 56 43 6e 54 6e 6b 24 37 6e 2b 6a 6e 63 71 37 43 44 6c 6e 37 24 4a 6e 2d 70 58 72 45 24 6e 2b 5a 58 68 34 48 71 43 79 58 62 71 47 39 37 51 44 35 4d 5a 79 53 2b 65 4e 6e 4f 73 66 58 41 43 54 76 38 24 53 6e 6d 45 73 51 42 4f 4d 4d 71 31 6e 73 4f 58 78 2d 6e 64 37 73 58 4a 71 77 64 6f 52 6e 76 71 63 35 44 52 6e 66 71 70 64 44 5a 58 2b 71 76 64 66 24 44 6e 24 30 71 73 33 44 77 6e 52 42 66 33 6f 31 24 63 42 6e 67 6e 54 24 66 42 6e 4f 58 68 24 76 2d 4d 2d Data Ascii: Hh76WxzBuFjbESwBFnyE+qDjXcqfQXtpDqBdDsnGqJ$7RXvqZdnOXfqB3XZn+q-bXK0Gj-CDXn5$GQ7AXm4XBo0X1$bBBgXT$8Bfd$K$VCnTnk$7n+jncq7CDln7$Jn-pXrE$n+ZXh4HqCyXbqG97QD5MZyS+eNnOsfXACTv8$SnmEsQBOMMq1nsOXx-nd7sXJqwdoRnvqc5DRnfqpdDZX+qvdf$Dn$0qs3DwnRBf3o1$cBngnT$fBnOXh$v-M-
2025-02-25 14:12:37 UTC	5966	OUT	Data Raw: 35 6a 6e 66 71 34 4c 70 35 6e 42 4f 69 63 74 47 76 41 65 6e 65 35 4b 43 56 4f 42 4a 75 58 6a 58 6f 71 47 2d 77 6c 74 75 61 39 37 58 41 50 77 68 39 6d 50 76 53 70 47 69 6b 4c 64 47 38 52 54 6e 53 52 32 24 66 75 58 39 6e 44 71 64 36 74 68 4d 78 39 46 36 52 72 64 50 4f 6e 7a 6f 31 4a 41 50 35 63 52 6b 4d 65 75 51 69 56 6a 6e 24 4e 37 63 41 30 6c 32 43 44 77 38 6e 69 33 46 63 69 47 4a 64 74 38 56 75 6e 34 6c 45 75 6f 78 4b 43 76 54 67 56 36 52 42 4a 46 73 50 62 4b 61 33 69 39 64 5a 4a 6d 33 41 55 64 34 52 37 4d 45 71 76 6c 6e 68 6a 4d 69 58 48 4a 4e 48 65 33 77 67 6e 54 6e 56 2b 79 64 4b 48 31 55 54 37 2d 6a 67 65 56 58 35 77 37 6a 32 45 65 47 42 6d 54 42 45 71 77 52 37 55 51 6a 59 50 71 4a 67 4a 39 4a 34 6e 32 44 52 6c 35 58 58 52 43 4d 45 73 50 53 44 45 54 Data Ascii: 5jnfq4Lp5nBOictGvAene5KCVOBJuXjXoqG-wltua97XAPwh9mPvSpGikLdG8RTnSR2$fuX9nDqd6thMx9F6RrdPOnzo1JAP5cRkMeuQiVjn$N7cA0l2CDw8ni3FciGJdt8Vun4lEuoxKCvTgV6RBJFsPbKa3i9dZJm3AUd4R7MEqvlnhjMiXHJNHe3wgnTnV+ydKH1UT7-jgeVX5w7j2EeGBmTBEqwR7UQjYPqJgJ9J4n2DRl5XXRCMEsPSDET
2025-02-25 14:12:37 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27960 Connection: close cf-chl-gen: wjQW3b0UHOTsNTcKvzSFt9yN0nyQK0awl3Slrvkn30jfzDJBgzKKbaqALfgl1BJr$jKirQS5t+1g7EKOb4uL+aQ== Server: cloudflare CF-RAY: 91784a94ccd56da1-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:37 UTC	1047	IN	Data Raw: 6b 34 71 55 56 35 68 71 6b 70 71 48 66 5a 71 67 6b 5a 68 30 6e 46 74 36 6b 70 69 55 6e 35 36 63 6d 4b 4a 76 73 5a 47 6e 68 59 4f 6c 63 59 69 76 62 34 36 55 73 4b 31 35 6e 4c 36 72 6f 62 75 4f 72 5a 33 49 6c 72 57 45 6e 49 57 2b 6e 61 69 50 75 37 4c 50 6e 72 61 4d 32 4b 48 49 30 4e 65 6b 78 35 6a 66 71 73 4c 66 35 4b 37 51 78 62 69 6d 31 37 71 38 33 36 50 43 76 4e 76 69 76 2b 72 4e 39 73 62 49 36 61 2f 4f 31 50 4c 64 7a 66 72 65 33 4d 48 37 7a 75 55 45 43 64 54 7a 36 76 62 44 2f 74 7a 4e 33 67 41 48 34 74 4d 55 38 2b 41 58 42 39 4d 52 36 68 30 4f 36 76 55 6a 46 52 77 6c 39 53 4c 5a 2b 68 63 62 41 65 51 46 47 79 76 2b 42 51 63 31 37 78 41 70 44 51 4d 54 46 79 73 49 44 45 41 41 43 52 63 30 46 6a 49 67 4f 41 41 36 4e 53 59 47 4e 30 74 48 4c 67 6f 66 53 53 51 Data Ascii: k4qUV5hqkpqHfZqgkZh0nFt6kpiUn56cmKJvsZGnhYOlcYivb46UsK15nL6robuOrZ3IlrWEnIW+naiPu7LPnraM2KHI0Nekx5jfqsLf5K7Qxbim17q836PCvNviv+rN9sbI6a/O1PLdzfre3MH7zuUECdTz6vbD/tzN3gAH4tMU8+AXB9MR6h0O6vUjFRwl9SLZ+hcbAeQFGyv+BQc17xApDQMTFysIDEAACRc0FjIgOAA6NSYGN0tHLgofSSQ
2025-02-25 14:12:37 UTC	1369	IN	Data Raw: 43 70 4b 56 38 68 71 68 73 67 48 74 2b 72 49 53 6b 72 48 47 46 70 4a 4a 34 72 37 6d 32 6b 35 53 38 66 4b 46 2f 77 5a 57 6d 76 71 61 63 69 5a 6e 4a 78 71 4f 6c 76 72 75 52 6c 4b 32 65 6f 4b 4c 48 6f 71 79 62 73 36 79 58 7a 75 44 4c 72 72 66 4f 6f 72 72 68 76 74 7a 66 76 4e 32 36 32 4d 4f 37 76 74 7a 4b 35 62 37 6d 79 76 6e 4b 34 39 48 39 32 64 76 57 2b 4f 76 35 39 64 44 7a 38 4e 50 66 77 4d 6e 4b 31 64 72 64 32 41 41 4e 35 39 51 42 41 77 66 35 31 2f 67 49 45 4f 30 50 45 66 77 52 47 2b 4c 74 38 43 55 6e 2f 52 76 36 36 51 54 32 2f 41 51 76 38 52 76 2b 2f 69 76 79 44 44 49 4f 39 52 59 4d 2b 7a 30 4d 46 55 4e 42 51 78 73 34 51 55 55 61 41 7a 39 45 4f 6b 6b 34 4a 30 49 64 4b 78 38 67 48 69 4d 71 43 78 41 52 4f 31 55 57 45 52 49 75 58 6a 77 68 54 6d 4d 35 50 6b Data Ascii: CpKV8hqhsgHt+rISkrHGFpJJ4r7m2k5S8fKF/wZWmvqaciZnJxqOlvruRlK2eoKLHoqybs6yXzuDLrrfOorrhvtzfvN262MO7vtzK5b7myvnK49H92dvW+Ov59dDz8NPfwMnK1drd2AAN59QBAwf51/gIEO0PEfwRG+Lt8CUn/Rv66QT2/AQv8Rv+/ivyDDIO9RYM+z0MFUNBQxs4QUUaAz9EOkk4J0IdKx8gHiMqCxARO1UWERIuXjwhTmM5Pk
2025-02-25 14:12:37 UTC	1369	IN	Data Raw: 71 61 52 6b 6d 35 56 7a 70 49 35 7a 75 6f 79 6b 74 6e 57 6f 6b 6e 2f 41 73 35 61 44 78 4b 57 61 68 38 69 79 6c 6f 75 6d 69 4c 65 2f 77 63 75 6e 6c 4a 2b 76 70 4b 37 61 7a 4d 79 4f 32 72 37 59 31 63 4c 65 77 64 7a 6b 6f 64 57 66 32 4b 4f 71 74 72 6a 67 38 4d 54 6a 36 36 72 49 35 73 4b 32 30 64 58 57 31 4f 71 38 31 64 33 75 32 66 76 2b 7a 39 54 42 42 64 6e 32 34 2f 66 59 2b 51 37 42 35 41 41 55 78 51 2f 51 47 4d 6b 55 36 52 7a 4e 48 50 66 75 37 4e 33 76 2b 68 41 47 32 77 54 6b 45 2f 76 6d 47 64 37 38 34 41 67 47 36 41 6f 4f 49 54 63 4f 46 79 6e 76 44 78 77 39 38 78 4d 64 51 66 63 58 49 6b 58 37 47 7a 45 33 53 43 63 33 42 6b 51 76 4a 56 49 70 4b 30 59 6d 48 7a 63 54 4a 78 42 5a 53 31 74 54 53 55 39 67 4e 52 35 68 4e 6c 4e 41 56 44 56 41 61 68 35 42 52 6e 41 Data Ascii: qaRkm5VzpI5zuoyktnWokn/As5aDxKWah8iyloumiLe/wcunlJ+vpK7azMyO2r7Y1cLewdzkodWf2KOqtrjg8MTj66rI5sK20dXW1Oq81d3u2fv+z9TBBdn24/fY+Q7B5AAUxQ/QGMkU6RzNHPfu7N3v+hAG2wTkE/vmGd784AgG6AoOITcOFynvDxw98xMdQfcXIkX7GzE3SCc3BkQvJVIpK0YmHzcTJxBZS1tTSU9gNR5hNlNAVDVAah5BRnA
2025-02-25 14:12:37 UTC	1369	IN	Data Raw: 62 4f 44 6b 48 65 34 72 5a 52 37 76 62 47 59 66 38 4b 31 6e 49 50 48 75 61 43 48 7a 4c 32 6b 69 34 62 42 71 4a 43 67 70 4d 4f 31 7a 62 6d 69 6c 74 43 63 76 4e 58 64 32 64 53 69 74 71 50 6c 77 62 71 6e 36 62 32 2b 71 2b 7a 62 77 71 2f 77 34 38 61 7a 39 4e 58 4b 74 2f 6a 69 78 73 58 57 75 4f 66 76 38 51 54 58 78 4e 44 30 38 65 44 6c 33 67 57 2b 2f 50 72 75 37 41 73 48 36 2b 6e 79 37 77 76 7a 2b 75 77 45 39 51 33 65 39 64 37 54 2f 74 6f 45 46 66 55 69 46 68 76 36 41 4f 49 6e 42 51 54 6d 4b 77 30 49 36 6a 41 54 4b 41 49 6d 4b 69 34 4d 4d 69 7a 33 4c 54 63 4e 51 43 52 45 42 52 73 63 4f 30 68 4d 51 68 70 46 45 45 67 4c 49 53 35 42 51 79 74 59 49 55 70 55 4b 69 38 64 59 42 6b 73 47 56 34 73 50 57 56 68 56 7a 39 59 4b 69 56 68 4b 79 6f 71 4b 30 4a 64 5a 6b 4a 4f Data Ascii: bODkHe4rZR7vbGYf8K1nIPHuaCHzL2ki4bBqJCgpMO1zbmiltCcvNXd2dSitqPlwbqn6b2+q+zbwq/w48az9NXKt/jixsXWuOfv8QTXxND08eDl3gW+/Pru7AsH6+ny7wvz+uwE9Q3e9d7T/toEFfUiFhv6AOInBQTmKw0I6jATKAImKi4MMiz3LTcNQCREBRscO0hMQhpFEEgLIS5BQytYIUpUKi8dYBksGV4sPWVhVz9YKiVhKyoqK0JdZkJO
2025-02-25 14:12:37 UTC	1369	IN	Data Raw: 4f 62 66 4b 71 54 66 72 43 32 68 5a 75 54 77 49 4f 67 75 36 61 44 6f 71 37 51 68 36 61 7a 31 49 75 71 74 4e 69 50 72 73 53 57 7a 62 75 76 30 39 79 71 75 4c 6d 75 7a 72 47 39 73 75 66 46 75 39 62 73 75 63 62 79 34 63 62 4b 76 2b 48 6e 36 75 2f 46 32 62 6d 34 2f 50 37 49 32 4f 2f 78 7a 38 2b 38 35 76 76 43 36 4d 6a 30 36 73 41 41 43 63 66 6b 30 66 4d 51 46 52 4c 30 45 68 63 53 45 64 6f 50 32 65 33 68 38 74 38 59 49 69 50 37 2f 51 44 36 39 76 58 31 4d 42 6b 47 4c 52 38 6b 45 67 6b 76 45 41 37 79 47 43 38 59 2b 52 45 70 38 76 6b 76 4c 44 6c 46 47 7a 38 45 52 55 6f 4c 4a 55 74 4d 43 78 73 49 52 45 6b 31 4e 79 67 55 45 56 51 4e 4d 44 49 30 4c 79 73 71 4b 6d 52 4e 4f 6d 46 54 57 45 70 6a 4a 6b 6f 71 4b 57 30 6e 4f 56 31 63 62 44 49 73 50 7a 41 78 4e 6c 68 76 65 Data Ascii: ObfKqTfrC2hZuTwIOgu6aDoq7Qh6az1IuqtNiPrsSWzbuv09yquLmuzrG9sufFu9bsucby4cbKv+Hn6u/F2bm4/P7I2O/xz8+85vvC6Mj06sAACcfk0fMQFRL0EhcSEdoP2e3h8t8YIiP7/QD69vX1MBkGLR8kEgkvEA7yGC8Y+REp8vkvLDlFGz8ERUoLJUtMCxsIREk1NygUEVQNMDI0LysqKmRNOmFTWEpjJkoqKW0nOV1cbDIsPzAxNlhve
2025-02-25 14:12:37 UTC	1369	IN	Data Raw: 69 75 4a 2b 76 75 37 47 41 6f 4d 62 47 76 61 76 48 68 37 4f 67 6f 37 4f 6c 71 38 65 69 31 36 61 32 31 70 6d 52 32 62 62 51 77 62 65 75 34 4b 57 34 73 38 4c 6c 76 4e 7a 73 32 4c 76 44 71 75 66 55 79 4f 37 72 79 4f 66 4e 38 66 72 77 37 74 6e 50 38 76 72 44 34 4f 54 6b 38 62 38 41 33 51 66 4c 39 77 63 51 78 76 30 4e 42 4d 37 6b 46 52 62 69 42 77 6e 6f 38 64 7a 55 41 4e 6b 4e 47 76 54 39 2f 4f 48 68 35 2b 6b 6f 46 75 51 67 44 2b 38 51 47 68 30 31 4c 78 37 7a 43 50 59 4c 47 53 30 71 2b 41 77 64 49 52 49 52 49 6a 59 75 51 45 4d 6d 45 6a 70 4b 42 44 6b 37 47 78 6c 50 44 79 52 4f 4b 30 68 51 46 46 6f 33 4f 79 30 56 54 69 6b 61 54 42 31 63 58 6b 4d 2f 4f 46 4d 2f 4f 6b 74 62 62 45 59 69 53 30 52 30 55 54 4a 79 53 31 56 55 52 6e 6b 34 4e 6a 30 35 65 48 70 66 57 31 Data Ascii: iuJ+vu7GAoMbGvavHh7Ogo7Olq8ei16a21pmR2bbQwbeu4KW4s8LlvNzs2LvDqufUyO7ryOfN8frw7tnP8vrD4OTk8b8A3QfL9wcQxv0NBM7kFRbiBwno8dzUANkNGvT9/OHh5+koFuQgD+8QGh01Lx7zCPYLGS0q+AwdIRIRIjYuQEMmEjpKBDk7GxlPDyROK0hQFFo3Oy0VTikaTB1cXkM/OFM/OktbbEYiS0R0UTJyS1VURnk4Nj05eHpfW1
2025-02-25 14:12:37 UTC	1369	IN	Data Raw: 67 6f 4f 34 6e 61 61 4b 76 49 69 78 6b 4a 37 50 30 5a 47 4c 70 63 6e 64 7a 4c 72 5a 72 75 44 67 77 4c 54 52 30 4d 69 31 76 71 6e 69 75 37 65 36 34 37 37 78 75 75 50 45 34 4c 58 4d 73 37 44 72 36 63 66 73 38 50 58 4e 37 65 33 51 76 4d 2f 45 35 38 48 65 2b 2b 7a 45 43 52 44 73 79 64 45 41 36 73 2f 56 43 4f 37 50 37 75 55 46 31 64 30 59 43 64 6e 68 46 42 58 63 49 52 51 52 33 2f 34 55 43 65 51 70 4c 42 6a 70 43 41 6f 53 36 77 73 57 47 50 44 35 4b 42 54 32 45 7a 67 65 2b 77 49 4f 4a 66 30 62 45 68 38 43 52 54 77 74 42 55 6f 6d 4d 41 73 6e 51 43 73 4d 4b 31 41 33 45 43 38 6d 4f 68 67 65 50 6b 6b 62 4e 30 78 46 48 57 46 6f 55 43 49 70 49 56 30 6c 57 43 56 59 4b 54 4a 73 56 53 31 78 56 6c 55 79 55 46 4a 61 4e 6d 6c 65 61 54 6c 38 4f 57 51 39 52 54 31 6e 52 45 70 Data Ascii: goO4naaKvIixkJ7P0ZGLpcndzLrZruDgwLTR0Mi1vqniu7e6477xuuPE4LXMs7Dr6cfs8PXN7e3QvM/E58He++zECRDsydEA6s/VCO7P7uUF1d0YCdnhFBXcIRQR3/4UCeQpLBjpCAoS6wsWGPD5KBT2Ezge+wIOJf0bEh8CRTwtBUomMAsnQCsMK1A3EC8mOhgePkkbN0xFHWFoUCIpIV0lWCVYKTJsVS1xVlUyUFJaNmleaTl8OWQ9RT1nREp

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:38 UTC	605	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:38 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Feb 2025 14:12:38 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: FQSiJixRf3dts1vGcpjY68/8Z8p5FkIB2dMdEBAY/zLE8/p3s4J6IVunPDMzjBND2SNVj3YRYgzoaZXVi2vwRA==$gwVIoOhnTnlZMyopsROa1g== Server: cloudflare CF-RAY: 91784a9bbdcf8db8-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:38 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:42 UTC	1159	OUT	POST /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41178 sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-platform: "Windows" cf-chl: MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn cf-chl-ra: 0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/b/turnstile/if/ov2/av0/rcv/1wntr/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:42 UTC	16384	OUT	Data Raw: 63 64 35 71 53 6f 58 77 75 2b 51 73 64 44 42 6f 6b 34 35 53 71 30 33 37 51 58 42 6f 6a 6e 67 71 2b 35 58 73 6e 31 71 2d 64 6f 61 6e 63 6d 44 6e 2b 24 44 6f 6e 32 71 73 51 6f 68 66 35 6e 63 6f 6e 6e 75 6e 36 6e 44 35 6e 7a 6e 6f 75 6e 73 6b 6f 6e 75 58 4a 34 7a 67 6e 6e 38 58 42 24 6f 37 6e 58 41 4d 6b 6e 37 71 6f 56 4b 6e 61 24 6e 54 31 56 6e 6f 51 46 6e 4b 4a 33 6e 2b 24 24 37 51 75 53 74 71 34 31 77 30 4e 75 35 58 54 31 4a 38 67 42 6e 37 64 31 55 71 6e 39 4c 6b 6e 31 46 71 58 4f 24 24 44 6b 34 53 35 6e 57 6d 71 67 53 43 4d 68 46 54 4d 33 55 43 39 24 6e 63 75 71 77 53 42 6e 78 37 69 67 4b 4e 31 71 6e 47 6c 68 73 44 44 2d 6e 34 75 6e 69 73 51 46 79 6e 58 6b 6e 73 2d 63 55 24 6f 54 31 2d 2d 68 75 74 42 67 4a 63 2d 75 6e 47 35 33 6e 34 50 64 63 44 4a 4c 44 Data Ascii: cd5qSoXwu+QsdDBok45Sq037QXBojngq+5Xsn1q-doancmDn+$Don2qsQohf5nconnun6nD5nznounskonuXJ4zgnn8XB$o7nXAMkn7qoVKna$nT1VnoQFnKJ3n+$$7QuStq41w0Nu5XT1J8gBn7d1Uqn9Lkn1FqXO$$Dk4S5nWmqgSCMhFTM3UC9$ncuqwSBnx7igKN1qnGlhsDD-n4unisQFynXkns-cU$oT1--hutBgJc-unG53n4PdcDJLD
2025-02-25 14:12:42 UTC	16384	OUT	Data Raw: 48 68 37 36 57 78 7a 42 75 46 6a 62 45 53 77 42 46 6e 79 45 2b 71 44 6a 58 63 71 66 51 58 74 70 44 71 42 64 44 73 6e 47 71 4a 24 37 52 58 76 71 5a 64 6e 4f 58 66 71 42 33 58 5a 6e 2b 71 2d 62 58 4b 30 47 6a 2d 43 44 58 6e 35 24 47 51 37 41 58 6d 34 58 42 6f 30 58 31 24 62 42 42 67 58 54 24 38 42 66 64 24 4b 24 56 43 6e 54 6e 6b 24 37 6e 2b 6a 6e 63 71 37 43 44 6c 6e 37 24 4a 6e 2d 70 58 72 45 24 6e 2b 5a 58 68 34 48 71 43 79 58 62 71 47 39 37 51 44 35 4d 5a 79 53 2b 65 4e 6e 4f 73 66 58 41 43 54 76 38 24 53 6e 6d 45 73 51 42 4f 4d 4d 71 31 6e 73 4f 58 78 2d 6e 64 37 73 58 4a 71 77 64 6f 52 6e 76 71 63 35 44 52 6e 66 71 70 64 44 5a 58 2b 71 76 64 66 24 44 6e 24 30 71 73 33 44 77 6e 52 42 66 33 6f 31 24 63 42 6e 67 6e 54 24 66 42 6e 4f 58 68 24 76 2d 4d 2d Data Ascii: Hh76WxzBuFjbESwBFnyE+qDjXcqfQXtpDqBdDsnGqJ$7RXvqZdnOXfqB3XZn+q-bXK0Gj-CDXn5$GQ7AXm4XBo0X1$bBBgXT$8Bfd$K$VCnTnk$7n+jncq7CDln7$Jn-pXrE$n+ZXh4HqCyXbqG97QD5MZyS+eNnOsfXACTv8$SnmEsQBOMMq1nsOXx-nd7sXJqwdoRnvqc5DRnfqpdDZX+qvdf$Dn$0qs3DwnRBf3o1$cBngnT$fBnOXh$v-M-
2025-02-25 14:12:42 UTC	8410	OUT	Data Raw: 35 6a 6e 66 71 34 4c 70 35 6e 42 4f 69 63 74 47 76 41 65 6e 65 35 4b 43 56 4f 42 4a 75 58 6a 58 6f 71 47 2d 77 6c 74 75 61 39 37 58 41 50 77 68 39 6d 50 76 53 70 47 69 6b 4c 64 47 38 52 54 6e 53 52 32 24 66 75 58 39 6e 44 71 64 36 74 68 4d 78 39 46 36 52 72 64 50 4f 6e 7a 6f 31 4a 41 50 35 63 52 6b 4d 65 75 51 69 56 6a 6e 24 4e 37 63 41 30 6c 32 43 44 77 38 6e 69 33 46 63 69 47 4a 64 74 38 56 75 6e 34 6c 45 75 6f 78 4b 43 76 54 67 56 36 52 42 4a 46 73 50 62 4b 61 33 69 39 64 5a 4a 6d 33 41 55 64 34 52 37 4d 45 71 76 6c 6e 68 6a 4d 69 58 48 4a 4e 48 65 33 77 67 6e 54 6e 56 2b 79 64 4b 48 31 55 54 37 2d 6a 67 65 56 58 35 77 37 6a 32 45 65 47 42 6d 54 42 45 71 77 52 37 55 51 6a 59 50 71 4a 67 4a 39 4a 34 6e 32 44 52 6c 35 58 58 52 43 4d 45 73 50 53 44 45 54 Data Ascii: 5jnfq4Lp5nBOictGvAene5KCVOBJuXjXoqG-wltua97XAPwh9mPvSpGikLdG8RTnSR2$fuX9nDqd6thMx9F6RrdPOnzo1JAP5cRkMeuQiVjn$N7cA0l2CDw8ni3FciGJdt8Vun4lEuoxKCvTgV6RBJFsPbKa3i9dZJm3AUd4R7MEqvlnhjMiXHJNHe3wgnTnV+ydKH1UT7-jgeVX5w7j2EeGBmTBEqwR7UQjYPqJgJ9J4n2DRl5XXRCMEsPSDET
2025-02-25 14:12:43 UTC	1308	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:43 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5080 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2025-02-25 14:12:43 UTC	229	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 79 7a 79 41 79 63 66 5a 36 63 6f 68 4b 6f 47 52 70 31 2f 53 6d 36 59 37 73 6e 59 74 4e 76 72 77 38 73 68 59 53 42 36 4d 61 39 38 71 4d 77 71 7a 5a 69 78 7a 46 67 6e 35 6d 69 35 35 50 73 67 78 5a 53 31 37 58 45 30 53 76 49 42 69 38 63 45 6e 41 4d 6d 47 5a 72 51 51 4d 66 77 65 34 38 4e 2f 74 6e 45 67 53 4c 42 4a 75 6c 77 3d 24 52 47 73 6c 71 5a 41 63 2f 75 6c 55 78 67 46 6e 36 67 45 62 53 77 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 31 37 38 34 61 62 38 64 38 62 35 34 39 37 32 2d 4d 49 41 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: yzyAycfZ6cohKoGRp1/Sm6Y7snYtNvrw8shYSB6Ma98qMwqzZixzFgn5mi55PsgxZS17XE0SvIBi8cEnAMmGZrQQMfwe48N/tnEgSLBJulw=$RGslqZAc/ulUxgFn6gEbSw==Server: cloudflareCF-RAY: 91784ab8d8b54972-MIAalt-svc: h3=":443"; ma=86400
2025-02-25 14:12:43 UTC	1201	IN	Data Raw: 6b 34 71 55 56 35 68 71 6b 70 71 48 66 5a 71 67 6b 5a 68 30 6e 46 74 36 67 58 65 56 65 6f 68 72 6c 34 36 72 65 70 6d 66 74 49 43 66 6c 71 4a 76 71 6f 68 35 69 71 75 79 73 48 2f 41 65 35 52 39 73 61 53 59 67 62 4b 45 6f 4c 79 33 78 4c 75 6a 76 38 62 41 6b 39 54 4d 7a 74 62 46 6c 4e 4b 62 7a 5a 61 6f 6e 73 2f 57 7a 4b 50 6a 78 75 4c 6f 30 74 2f 71 36 39 76 69 7a 71 2f 77 77 74 54 30 35 73 62 55 73 65 62 4b 7a 4f 32 7a 30 75 2f 4f 37 74 4c 2b 2f 65 2f 56 34 4d 66 7a 41 51 7a 66 2b 77 50 69 7a 78 48 4e 2f 68 55 46 44 52 50 30 42 2b 6f 45 36 67 72 74 46 39 38 51 46 2f 4c 6a 4a 41 63 54 49 77 76 6a 46 66 73 50 35 67 34 73 49 69 58 38 38 53 6b 75 4c 53 45 62 4e 67 37 32 4d 44 38 56 2b 68 6f 44 2b 6a 59 31 4b 41 41 78 45 7a 74 4e 49 51 30 70 53 69 59 72 48 45 45 Data Ascii: k4qUV5hqkpqHfZqgkZh0nFt6gXeVeohrl46repmftICflqJvqoh5iquysH/Ae5R9saSYgbKEoLy3xLujv8bAk9TMztbFlNKbzZaons/WzKPjxuLo0t/q69vizq/wwtT05sbUsebKzO2z0u/O7tL+/e/V4MfzAQzf+wPizxHN/hUFDRP0B+oE6grtF98QF/LjJAcTIwvjFfsP5g4sIiX88SkuLSEbNg72MD8V+hoD+jY1KAAxEztNIQ0pSiYrHEE
2025-02-25 14:12:43 UTC	1369	IN	Data Raw: 52 41 56 33 76 76 72 2b 67 7a 7a 46 53 55 63 2b 77 54 2b 42 67 50 34 35 4f 6f 4b 48 79 6b 53 44 77 41 44 39 42 49 73 42 77 6a 38 47 6a 7a 33 45 78 73 35 41 67 56 44 44 78 2f 36 46 6b 45 68 4a 68 68 4a 51 79 6b 63 4a 31 49 6e 4d 55 6b 76 4c 30 77 77 4b 6a 64 64 53 54 38 35 4b 30 41 77 47 7a 46 65 4f 30 4e 72 61 55 6b 36 59 46 31 51 52 43 68 50 54 6b 5a 51 54 45 74 54 56 6c 64 57 54 55 70 66 4f 31 68 2f 63 56 35 61 50 56 39 33 59 6d 5a 6a 68 6c 35 6e 58 34 52 72 62 58 31 4d 59 30 79 51 6c 6d 6c 52 62 47 56 77 61 6e 5a 62 63 35 46 68 58 47 57 6d 67 6d 4a 36 6c 35 35 33 69 48 5a 76 65 58 42 2b 66 32 36 48 67 4a 65 32 69 4c 71 44 70 6f 36 75 6f 49 32 51 77 70 43 58 6c 5a 2b 50 73 4a 7a 4c 76 63 61 65 6d 4d 47 63 68 35 33 42 78 4b 48 54 6e 38 43 6e 74 4c 65 38 Data Ascii: RAV3vvr+gzzFSUc+wT+BgP45OoKHykSDwAD9BIsBwj8Gjz3Exs5AgVDDx/6FkEhJhhJQykcJ1InMUkvL0wwKjddST85K0AwGzFeO0NraUk6YF1QRChPTkZQTEtTVldWTUpfO1h/cV5aPV93YmZjhl5nX4RrbX1MY0yQlmlRbGVwanZbc5FhXGWmgmJ6l553iHZveXB+f26HgJe2iLqDpo6uoI2QwpCXlZ+PsJzLvcaemMGch53BxKHTn8CntLe8
2025-02-25 14:12:43 UTC	1369	IN	Data Raw: 2f 65 34 50 62 35 38 2f 6a 6c 4b 66 30 62 43 42 7a 38 4c 6a 4c 6c 43 54 51 34 36 54 51 4b 50 4f 30 38 47 41 38 4e 2f 52 41 62 4d 43 62 37 4a 41 55 7a 48 41 63 35 4f 55 6f 35 43 30 49 45 4a 31 52 4a 46 43 77 33 49 78 41 76 50 46 30 55 4d 7a 31 58 58 43 77 6b 55 6c 6c 6f 59 7a 70 61 54 43 6c 41 57 79 55 6f 50 46 35 71 4c 56 42 4f 64 33 64 68 4d 54 52 49 57 6a 78 32 67 48 5a 4c 57 48 56 77 68 7a 31 79 57 55 56 70 64 32 74 38 62 32 57 53 61 57 74 50 5a 47 4a 6b 59 32 74 51 6b 5a 79 53 5a 33 53 52 6a 4b 4e 5a 6a 6e 56 68 6b 35 4f 48 70 6f 46 35 72 48 75 74 66 6e 79 63 74 47 75 4d 74 6f 79 43 6b 4b 6c 35 64 6f 32 6f 6b 48 71 52 72 4a 32 39 70 6f 52 2f 68 5a 48 49 71 4a 69 48 6e 71 2b 6c 30 71 6d 73 6e 61 32 68 7a 63 4b 6f 78 39 58 4c 32 39 50 4a 7a 2b 43 30 33 Data Ascii: /e4Pb58/jlKf0bCBz8LjLlCTQ46TQKPO08GA8N/RAbMCb7JAUzHAc5OUo5C0IEJ1RJFCw3IxAvPF0UMz1XXCwkUlloYzpaTClAWyUoPF5qLVBOd3dhMTRIWjx2gHZLWHVwhz1yWUVpd2t8b2WSaWtPZGJkY2tQkZySZ3SRjKNZjnVhk5OHpoF5rHutfnyctGuMtoyCkKl5do2okHqRrJ29poR/hZHIqJiHnq+l0qmsna2hzcKox9XL29PJz+C03
2025-02-25 14:12:43 UTC	1141	IN	Data Raw: 39 4b 51 66 35 4b 65 33 35 2b 75 7a 75 43 44 58 2b 4b 42 4d 45 4e 52 54 38 46 2f 30 56 45 51 34 58 49 78 51 67 52 68 4d 66 4a 43 63 6b 48 43 6b 34 43 52 46 50 55 54 77 48 48 78 4a 53 4c 7a 55 33 50 53 74 62 4b 68 30 35 4f 55 4e 63 46 32 5a 56 56 44 6c 45 5a 56 55 34 53 57 55 77 50 33 46 63 4c 6b 74 50 4e 54 52 48 61 6d 6c 6c 56 48 39 73 4f 30 39 76 67 59 46 65 55 58 46 47 53 59 74 54 52 57 65 41 5a 30 68 6f 6b 56 35 4d 62 33 4a 76 64 58 47 5a 59 33 31 79 6a 5a 56 59 64 35 4b 52 59 33 4f 6a 6b 57 65 41 71 6f 68 33 68 70 36 70 63 49 43 4d 66 48 2b 4e 6a 36 42 30 68 6e 47 34 65 5a 53 59 76 6f 32 54 72 37 57 30 6b 48 32 77 67 36 47 57 78 61 71 5a 6c 37 33 48 6b 64 50 51 6a 34 65 4e 70 34 36 77 31 36 53 77 72 64 32 58 71 62 66 69 33 5a 36 77 6e 62 65 69 77 4d Data Ascii: 9KQf5Ke35+uzuCDX+KBMENRT8F/0VEQ4XIxQgRhMfJCckHCk4CRFPUTwHHxJSLzU3PStbKh05OUNcF2ZVVDlEZVU4SWUwP3FcLktPNTRHamllVH9sO09vgYFeUXFGSYtTRWeAZ0hokV5Mb3JvdXGZY31yjZVYd5KRY3OjkWeAqoh3hp6pcICMfH+Nj6B0hnG4eZSYvo2Tr7W0kH2wg6GWxaqZl73HkdPQj4eNp46w16Swrd2Xqbfi3Z6wnbeiwM

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:43 UTC	605	OUT	GET /cdn-cgi/challenge-platform/h/b/flow/ov1/1840809178:1740489198:X93NK8llHBwOG1FJW9W9HvQOUF9dRTyEShM4monWoJU/91784a6e7ba34c31/MDVbxO8OGnwFOr7cccDfsexRK66jFA6CKXWlZmrKVoc-1740492751-1.1.1.1-6_rapb7wCTln3ut5LM_DxWX3.iufZbt1crKaPOfJWhKE.3xtEwV6YGJ.H5g74KTn HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:44 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 25 Feb 2025 14:12:44 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: BtwR4EoAxgD9ioTK/tXrHPKks+YrY0Xj11vt+F6wvLh7Vjv2xtLwk75SZQMA7gabRJcaI8CBammvd14kTEwH1g==$1ekcK4SnRM6stDyibscpfw== Server: cloudflare CF-RAY: 91784abffe2c288e-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:44 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:44 UTC	598	OUT	GET /jquery-3.2.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" Origin: https://membersgelita.cpmeduca.com.br sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://membersgelita.cpmeduca.com.br/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:45 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86659 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15283" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1740863 Date: Tue, 25 Feb 2025 14:12:45 GMT X-Served-By: cache-lga21971-LGA, cache-pdk-kfty8610070-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 0 X-Timer: S1740492765.065360,VS0,VE1 Vary: Accept-Encoding
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: rn this.pushStack(c>=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 73 2c 22 22 29 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 77 28 4f 62 6a 65 63 74 28 61 29 29 3f Data Ascii: c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").replace(s,"")},makeArray:function(a,b){var c=b\|\|[];return null!=a&&(w(Object(a))?
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e 70 75 73 68 2c 47 3d 44 2e 70 75 73 68 2c 48 3d 44 2e 73 6c 69 63 65 2c 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 61 5b 63 5d 3d 3d 3d Data Ascii: ,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.push,G=D.push,H=D.slice,I=function(a,b){for(var c=0,d=a.length;c<d;c++)if(a[c]===
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 2d 66 5d 7b 31 2c 36 7d 22 2b 4b 2b 22 3f 7c 28 22 2b 4b 2b 22 29 7c 2e 29 22 2c 22 69 67 22 29 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d Data Ascii: +"\\)\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da-f]{1,6}"+K+"?\|("+K+")\|.)","ig"),aa=function(a,b,c){var d="0x"+b-65536;return d!=
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 6b 3d 75 29 2c 6f 3d 67 28 61 29 2c 68 3d 6f 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 68 2d 2d 29 6f 5b 68 5d 3d 22 23 22 2b 6b 2b 22 20 22 2b 73 61 28 6f 5b 68 5d 29 3b 72 3d 6f 2e 6a 6f 69 6e 28 Data Ascii: ementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.setAttribute("id",k=u),o=g(a),h=o.length;while(h--)o[h]="#"+k+" "+sa(o[h]);r=o.join(
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 5d 3d 63 5b 65 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 72 65 74 75 72 6e 20 61 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 Data Ascii: sabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e]=c[e]))})})}function qa(a){return a&&"undefined"!=typeof a.getElementsByTagName&
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 61 29 72 65 74 75 72 6e 5b 66 5d 3b 65 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 61 29 2c 64 3d 30 3b 77 68 69 6c 65 28 66 3d 65 5b 64 2b 2b 5d 29 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 Data Ascii: d");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value===a)return[f];e=b.getElementsByName(a),d=0;while(f=e[d++])if(c=f.getAttributeNod
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 65 6e 61 62 6c 65 64 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 3a 65 6e 61 62 6c 65 64 22 2c 22 3a 64 69 73 61 62 6c 65 64 22 29 2c 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 64 69 Data Ascii: eElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.querySelectorAll(":enabled").length&&q.push(":enabled",":disabled"),o.appendChild(a).di
2025-02-25 14:12:45 UTC	1378	IN	Data Raw: 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 67 5b 64 5d 3d 3d 3d 68 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6c 61 28 Data Ascii: l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.unshift(c);c=b;while(c=c.parentNode)h.unshift(c);while(g[d]===h[d])d++;return d?la(

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:45 UTC	364	OUT	GET /jquery-3.2.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:46 UTC	610	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86659 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15283" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 25 Feb 2025 14:12:46 GMT Age: 1740864 X-Served-By: cache-lga21971-LGA, cache-pdk-kfty8610021-PDK X-Cache: HIT, HIT X-Cache-Hits: 1, 1 X-Timer: S1740492766.202546,VS0,VE1 Vary: Accept-Encoding
2025-02-25 14:12:46 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.2.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery
2025-02-25 14:12:46 UTC	16384	IN	Data Raw: 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 75 72 6e 20 65 5b 75 5d 3f 65 28 62 29 3a 65 2e 6c 65 6e 67 74 68 3e 31 3f 28 63 3d 5b 61 2c 61 2c 22 22 2c 62 5d 2c 64 2e 73 65 74 46 69 6c 74 65 72 73 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 Data Ascii: [a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);return e[u]?e(b):e.length>1?(c=[a,a,"",b],d.setFilters.hasOwnProperty(a.toLowerCase(
2025-02-25 14:12:46 UTC	16384	IN	Data Raw: 72 2e 65 78 70 61 6e 64 6f 2b 56 2e 75 69 64 2b 2b 7d 56 2e 75 69 64 3d 31 2c 56 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 55 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d Data Ascii: r.expando+V.uid++}V.uid=1,V.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},U(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==
2025-02-25 14:12:46 UTC	16384	IN	Data Raw: 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 45 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 Data Ascii: tContent=a)})},null,a,arguments.length)},append:function(){return Ja(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Ea(this,a);b.appendChild(a)}})},prepend:function(){return Ja(this,arguments,function(a){if(1
2025-02-25 14:12:46 UTC	16384	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 69 6e 67 22 2c 22 63 65 6c 6c 50 61 64 64 69 6e 67 22 2c 22 72 6f 77 53 70 61 6e 22 2c 22 63 6f 6c 53 70 61 6e 22 2c 22 75 73 65 4d 61 70 22 2c 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 70 72 6f 70 46 69 78 5b 74 68 69 73 Data Ascii: t:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpacing","cellPadding","rowSpan","colSpan","useMap","frameBorder","contentEditable"],function(){r.propFix[this
2025-02-25 14:12:46 UTC	4739	IN	Data Raw: 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 55 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 28 29 3a 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 2c 68 3f 62 5b 68 5d 3d 62 5b 68 5d 2e 72 65 70 6c 61 63 65 28 55 62 2c 22 24 31 22 2b 65 29 3a 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 62 2e 75 72 6c 2b 3d 28 76 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 26 22 3a Data Ascii: application/x-www-form-urlencoded")&&Ub.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallback():b.jsonpCallback,h?b[h]=b[h].replace(Ub,"$1"+e):b.jsonp!==!1&&(b.url+=(vb.test(b.url)?"&":

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:48 UTC	666	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0x.j6h0wx.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:48 UTC	386	IN	HTTP/1.1 302 Found Date: Tue, 25 Feb 2025 14:12:48 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/b/b0e4a89976ce/api.js Server: cloudflare CF-RAY: 91784adadae509fa-MIA alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:48 UTC	653	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0x.j6h0wx.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:48 UTC	972	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:48 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 153684 Expires: Sun, 15 Feb 2026 14:12:48 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Pd2qmm3nbInnzEife2bPMKfmiPmUorLJVx4fe15%2F%2Fz4JGWsmEcTePc%2Bie2AIWKNK%2B%2Ff4QOkwaJ8M4tvl7073XNJo67PobfWtTNC9MMApBQQcZ%2Fc09X%2B%2FmfUE6T%2Bt20hyh%2FUUF4WI"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91784adad8a78dc7-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:48 UTC	397	IN	Data Raw: 37 62 65 36 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7be6!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 Data Ascii: fined"!=typeof globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 61 72 20 74 3d 6f 2e 63 6c 6f 6e 65 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: ar t=o.clone.call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 7b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f Data Ascii: {"string"==typeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){fo
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 74 69 6f 6e 20 4e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 Data Ascii: tion N(){for(var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 4f 5b 37 5d 3e 3e 3e 30 3f 31 3a 30 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b Data Ascii: O[7]>>>0?1:0;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 41 72 72 61 79 28 74 2e 62 75 66 66 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 Data Ascii: Array(t.buffer,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 5d 3d 6e 3b 76 61 72 20 6f 3d 72 2e 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 Data Ascii: ]=n;var o=r.charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABC
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 39 36 37 32 39 36 2a 61 2e 61 62 73 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e Data Ascii: 967296*a.abs(a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>
2025-02-25 14:12:48 UTC	1369	IN	Data Raw: 2c 6d 2c 79 2c 32 33 2c 41 5b 33 39 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 Data Ascii: ,m,y,23,A[39]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:48 UTC	625	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0x.j6h0wx.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:48 UTC	607	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1734370 Date: Tue, 25 Feb 2025 14:12:48 GMT X-Served-By: cache-lga21931-LGA, cache-gnv1820027-GNV X-Cache: HIT, HIT X-Cache-Hits: 156, 0 X-Timer: S1740492768.431826,VS0,VE1 Vary: Accept-Encoding
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2025-02-25 14:12:48 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:49 UTC	650	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="128", "Not;A=Brand";v="24", "Google Chrome";v="128" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://0x.j6h0wx.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:49 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91784ae00d15748b-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:49 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-25 14:12:49 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-02-25 14:12:49 UTC	389	OUT	GET /turnstile/v0/b/b0e4a89976ce/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-02-25 14:12:50 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 25 Feb 2025 14:12:50 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Wed, 19 Feb 2025 14:53:05 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91784ae52e91a4ca-MIA alt-svc: h3=":443"; ma=86400
2025-02-25 14:12:50 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-02-25 14:12:50 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 62 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("b","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(