Edit tour

Windows Analysis Report
NEW__Review_202551087.svg

Overview

General Information

Sample name:	NEW__Review_202551087.svg
Analysis ID:	1635458
MD5:	9a21dc60a947bc4b37688cf39ab375bd
SHA1:	e0638ef6f8dbe04fc9a48a625a8fab0904e93838
SHA256:	ff7287439e3d65f9922a553b7088bfc60518cae18724020cb970f0604a6b32cc
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Yara detected HtmlPhish54

AI detected suspicious Javascript

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML page contains obfuscated script src

HTML title does not match URL

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 1452 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\NEW__Review_202551087.svg MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6692 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,10923603637270966853,11030071007452806499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
1.147..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.137..script.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
4.8.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.12.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.9.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
5.10.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
Click to see the 1 entries

Source: https://sso.corujinhajuridica.com/?zozitz7rz=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&sso_reload=true

Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is well-known and typically associated with the domain 'microsoft.com'., The URL 'sso.corujinhajuridica.com' does not match the legitimate domain for Microsoft., The domain 'corujinhajuridica.com' does not appear to be related to Microsoft., The presence of 'sso' in the subdomain could be an attempt to mimic a Single Sign-On service, which is commonly used by Microsoft., The email domain 'outloc.com' is suspiciously similar to 'outlook.com', a service provided by Microsoft, indicating a potential phishing attempt. DOM: 5.12.pages.csv

Yara detected HtmlPhish54

Source: Yara match	File source: 1.147..script.csv, type: HTML
Source: Yara match	File source: 1.137..script.csv, type: HTML
Source: Yara match	File source: 4.8.pages.csv, type: HTML
Source: Yara match	File source: 5.12.pages.csv, type: HTML
Source: Yara match	File source: 5.9.pages.csv, type: HTML
Source: Yara match	File source: 5.10.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 1.9..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: blob:https://vacilandos.com/993be3fe-ca8c-4eb7-b00... This script demonstrates high-risk behavior by using the `eval()` function to execute dynamic code received from an untrusted source. The use of `eval()` allows for the execution of arbitrary JavaScript, which poses a significant security risk. Additionally, the lack of origin verification and the absence of a message source indicate that this script is vulnerable to cross-origin attacks and could be used to execute malicious code on the client-side.
Source: 1.70.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: ... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code. It attempts to collect sensitive information like the user agent and potentially other user data, and sends it to an unknown domain. The script also tries to hide its true purpose through heavy obfuscation. These factors indicate a high likelihood of malicious intent, warranting a high-risk score.
Source: 1.131..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://vacilandos.com/?&... This script demonstrates several high-risk behaviors:1. Dynamic code execution using `eval()` and `decodeURIComponent()` to execute obfuscated code.2. Data exfiltration by setting a cookie with sensitive information and potentially submitting form data to an unknown destination.3. Obfuscated code and URLs, making it difficult to determine the script's true purpose.The combination of these behaviors indicates a high likelihood of malicious intent, and this script should be considered a significant security risk.

HTTP Parser: Number of links: 0

Source: https://vacilandos.com/?&

HTTP Parser: Base64 decoded: <svg xmlns="http://www.w3.org/2000/svg" width="32" height="32" fill="none"><path fill="#B20F03" d="M16 3a13 13 0 1 0 13 13A13.015 13.015 0 0 0 16 3m0 24a11 11 0 1 1 11-11 11.01 11.01 0 0 1-11 11"/><path fill="#B20F03" d="M17.038 18.615H14.87L14.563 9.5h2....

Source: https://sso.corujinhajuridica.com/?zozitz7rz=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyR	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gY3VzdG9tRnVuY3Rpb24oKSB7CiAgICBpZiAoIWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoIi5jdXN0b20tY2xhc3MiKSB8fCAhZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLnJvdGF0ZS1jbGFzcyIpKSB7CiAgICAgICAgdmFyIG5ld0RpdiA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbn
Source: https://sso.corujinhajuridica.com/?zozitz7rz=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyR	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gY3VzdG9tRnVuY3Rpb24oKSB7CiAgICBpZiAoIWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoIi5jdXN0b20tY2xhc3MiKSB8fCAhZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLnJvdGF0ZS1jbGFzcyIpKSB7CiAgICAgICAgdmFyIG5ld0RpdiA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbn
Source: https://sso.corujinhajuridica.com/?zozitz7rz=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyR	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gY3VzdG9tRnVuY3Rpb24oKSB7CiAgICBpZiAoIWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoIi5jdXN0b20tY2xhc3MiKSB8fCAhZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLnJvdGF0ZS1jbGFzcyIpKSB7CiAgICAgICAgdmFyIG5ld0RpdiA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbn
Source: https://sso.corujinhajuridica.com/?zozitz7rz=aHR0cHM6Ly9sb2dpbi5taWNyb3NvZnRvbmxpbmUuY29tL2NvbW1vbi9vYXV0aDIvdjIuMC9hdXRob3JpemU/Y2xpZW50X2lkPTQ3NjU0NDViLTMyYzYtNDliMC04M2U2LTFkOTM3NjUyNzZjYSZyZWRpcmVjdF91cmk9aHR0cHMlM0ElMkYlMkZ3d3cub2ZmaWNlLmNvbSUyR	HTTP Parser: Script src: data:text/javascript;base64,ZnVuY3Rpb24gY3VzdG9tRnVuY3Rpb24oKSB7CiAgICBpZiAoIWRvY3VtZW50LnF1ZXJ5U2VsZWN0b3IoIi5jdXN0b20tY2xhc3MiKSB8fCAhZG9jdW1lbnQucXVlcnlTZWxlY3RvcigiLnJvdGF0ZS1jbGFzcyIpKSB7CiAgICAgICAgdmFyIG5ld0RpdiA9IGRvY3VtZW50LmNyZWF0ZUVsZW1lbn

HTTP Parser: Title: MOD-9ytc6p44 does not match URL

HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/NEW__Review_202551087.svg	HTTP Parser: No favicon
Source: https://abe87c29.46b20494-8a43-4c49-8a51-bc2a41cc9c27-e624a29b-c629-4f2f-99.pages.dev/voiceseses	HTTP Parser: No favicon
Source: https://vacilandos.com/?&	HTTP Parser: No favicon
Source: https://vacilandos.com/?&	HTTP Parser: No favicon
Source: https://vacilandos.com/?&	HTTP Parser: No favicon
Source: https://sso.corujinhajuridica.com/?zozitz7rz=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...	HTTP Parser: No favicon
Source: https://login.live.com/oauth20_authorize.srf?client_id=4765445b-32c6-49b0-83e6-1d93765276ca&scope=openid+profile+https%3a%2f%2fwww.office.com%2fv2%2fOfficeHome.All&redirect_uri=https%3a%2f%2fwww.office.com%2flandingv2&response_type=code+id_token&state=IIYiiuCBDlhebhVqGn2YFiUIf3TzP-LdvnJ57lxHddjSwTDd3X-T6POpf0c8dDza5PfbdZwEAEO-IhDUjmP2Du9OIh-3m1mJVFk54NlMz3nI9Cd9mUebjFB8lAl_yW_gfwzsTvp3obg7sXiTe4QBQIFjBYjwvHWYpzIE-exgDfAfhBEKuwMHIl91l7fu5ZEVP-44nWz7kFjo-NHF1K8m8ZpUljoHy_y1Y-gOWgjFkvboLJ8kaFKrzqJQz3k1P301yWjs8KdE22PCiWm_KIt0nQ&response_mode=form_post&nononce=638773072736372615.YjZhYzliYzQtODY5NS00ZjhmLTkxNDUtMDM4NzQ2OTM3NjU2OGYxMWU0ZDUtNGU5Yi00ZTczLWIwOWQtYmMzY2I1YjRmM2Ez&x-client-SKU=ID_NET8_0&x-client-Ver=7.5.1.0&uaid=0c2000bfd76f4e4abaf3b9a95b9d0dcc&msproxy=1&issuer=mso&tenant=common&ui_locales=en-US&epct=PAQABDgEAAABVrSpeuWamRam2jAF1XRQEglBBOYr8pg2wurudub_MBeU1y9uk4tFtjI3yxeLKBVHQ-h_1G5WEKxRu6N4UTwPe9ji5c0I_6PO8utN8ZOiYu4wRcbljlxNZKIqTDZsQiEsY4Zo1SGU8yAQMcUSE5ZMH8Xf9KQoI5eahUoUIGkOnLNpwnpt6b6w53RDZqOl44GGM6...	HTTP Parser: No favicon

Source: https://sso.corujinhajuridica.com/?zozitz7rz=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	HTTP Parser: No <meta name="author".. found
Source: https://sso.corujinhajuridica.com/?zozitz7rz=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	HTTP Parser: No <meta name="author".. found
Source: https://sso.corujinhajuridica.com/?zozitz7rz=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	HTTP Parser: No <meta name="author".. found

Source: https://sso.corujinhajuridica.com/?zozitz7rz=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...	HTTP Parser: No <meta name="copyright".. found
Source: https://sso.corujinhajuridica.com/?zozitz7rz=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...	HTTP Parser: No <meta name="copyright".. found
Source: https://sso.corujinhajuridica.com/?zozitz7rz=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...	HTTP Parser: No <meta name="copyright".. found

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 50MB

Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.86.251.25
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 52.109.28.46
Source: unknown	TCP traffic detected without corresponding DNS query: 51.132.193.104
Source: unknown	TCP traffic detected without corresponding DNS query: 52.123.128.14
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.19
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.19
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.76

Source: global traffic

HTTP traffic detected: HTTP/1.1 200 OKServer: nginxContent-Type: application/pkix-certLast-Modified: Wed, 01 May 2024 21:14:13 GMTETag: "6632b0a5-509"Content-Disposition: attachment; filename="R10.der"Accept-Ranges: bytesVary: Accept-EncodingContent-Encoding: gzipContent-Length: 1245Cache-Control: max-age=3600Expires: Tue, 11 Mar 2025 17:27:52 GMTDate: Tue, 11 Mar 2025 16:27:52 GMTConnection: keep-aliveData Raw: 1f 8b 08 00 00 00 00 00 00 00 33 68 62 65 35 68 62 7a bb 80 99 89 91 89 49 c0 7b 45 d0 e4 ef b3 f4 17 15 b3 79 af 60 e9 2d bd 60 c0 cb c6 a9 d5 e6 d1 f6 9d 97 91 91 9b 95 c1 c0 df 90 db 80 93 8d 39 94 85 4d 98 29 34 d8 50 d3 40 1d c4 e1 12 56 f0 cc 2b 49 2d ca 4b 2d 51 08 4e 4d 2e 2d ca 2c a9 54 08 4a 2d 4e 4d 2c 4a ce 50 70 2f ca 2f 2d 30 14 35 10 06 29 65 16 e6 f1 0c 0e 72 57 08 ca cf 2f 51 88 30 34 90 13 e7 35 32 31 30 36 34 36 00 83 28 20 d7 1c c8 35 32 32 36 b5 34 b5 8c 02 32 51 2c 14 33 10 81 58 c8 eb 93 5a a2 5e ac e0 9a 97 5c 54 59 50 62 c8 63 c0 05 31 9d 39 c8 d0 c0 a0 89 51 09 d9 e1 8c ac 0c cc 4d 8c fc 0c 40 71 2e a6 26 46 46 86 f3 e1 4f 9f 1d 09 11 7a bb c5 fd df 49 f5 88 32 b7 00 8d 1e 59 bb 8e fb ac 73 af 6e 95 d0 dc 7b 77 6b d4 fe 5f df ce 2d de b7 9e 41 d1 3b 29 2a ca 86 51 ff 68 04 f3 b7 ce ff 7d 82 ce af 0f 6e 7d 20 c2 3e ad 3f 5f fe fa f3 5d 8d 96 9c a5 a9 db 0f ad 97 88 36 57 d3 78 be f8 0b bb 76 ae d4 ff d5 11 7b a6 ae 73 f8 ff f2 74 f8 91 ad d1 f5 15 bc 12 89 7b c4 9f 87 1c db ed 39 f1 6c 9e c4 c5 86 d6 77 cb 52 cd f6 94 bc da 13 e0 f3 ea 8f e2 67 0b b1 c9 53 76 6d b8 9c 6d c1 76 56 4c a8 ea 54 50 e9 89 b5 65 9b 0e cd 89 9d e1 1a 93 9f 58 7d 4c f7 9d 8d 70 50 1b e3 cd f0 67 16 32 f7 7b b7 ca 4f 9a 38 eb b9 97 cc 19 d7 15 45 a1 1f 36 3c 5b cc fe e6 ef 72 e9 b4 79 f6 1e dd 85 2d 85 11 27 ad 7e bd 8f fb 14 ed a2 6d 53 f2 bc 7f 93 fb 41 f6 ac b3 b3 b6 f3 4e fb 2e d4 a8 16 18 c2 f5 26 f1 db f7 af 8f 3e 75 9d 98 ca db cb c4 cc c8 c0 b8 b8 f1 87 41 e3 57 03 3e 60 b8 c9 f2 33 32 fe 67 61 01 26 81 36 03 59 10 5f 95 05 14 d0 1c da 6c 8c ac ac ec cc 4c 70 16 a3 81 10 48 5a 18 a4 9c c3 80 0d 48 31 31 32 40 b4 f0 b1 88 b1 88 ec de 73 d8 7d e9 93 3d 2b 8f 1d 5e 52 c4 23 d0 bb c8 f4 e1 89 17 06 f2 20 69 65 16 09 03 b1 06 91 ca 2d 91 cf aa b7 3d 7d c2 58 dc c0 d1 71 42 2a e2 db cb d9 79 06 46 30 f3 19 19 59 d4 0c 54 0c 94 60 7c 03 a6 36 b1 8c 92 92 02 2b 7d fd 0a 43 bd 4c bd 9c 54 60 74 eb e5 17 a5 eb 83 13 93 ac 02 0b 30 de 0d 38 d8 d8 d2 1b 79 18 99 18 c1 89 51 56 9e 45 c1 40 ce 40 66 81 d4 02 09 64 dd c9 c8 ba 51 53 35 73 13 d0 17 93 36 3e 77 34 7f 5d 39 b7 f1 d9 d9 47 aa 0f ad 14 5e 4e 70 99 ba b8 31 e6 fc e1 d8 bf 7b 17 14 5c dd 38 4d 43 89 fb d2 27 8d f3 3c cf af 3c 73 ee 51 51 92 3d e8 34 e9 22 e7 fa f9 de 5f 4e 14 f8 2b 88 6d 8c ba cb f8 4d fe 87 7c 62 b6 88 fa 86 a2 de e4 75 ef 1e 9d f3 3e 6f 7e 77 f7 e2 2b 67 9f af 0d 58 bb 77 ff e3 37 76 49 66 05 33 0d 97 bf e8 bd fb 2a e9 91 d0 ba af 73 ae d8 ea f0 ac ba 30 Data Ascii: 3hbe5hbzI{Ey`-`9M)4P@V+I-K-QNM.-

Source: global traffic	HTTP traffic detected: GET /sch/redirect.html?fp=eyJ1c2VyQWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM0LjAuMC4wIFNhZmFyaS81MzcuMzYiLCJsYW5ndWFnZSI6ImVuLVVTIiwiY29sb3JEZXB0aCI6MjQsImRldmljZU1lbW9yeSI6OCwiaGFyZHdhcmVDb25jdXJyZW5jeSI6NCwicmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsInRpbWV6b25lIjoiQW1lcmljYS9OZXdfWW9yayIsInRvdWNoU3VwcG9ydCI6ZmFsc2UsIndlYmRyaXZlciI6ZmFsc2V9 HTTP/1.1Host: barakshaddai.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js?onload=EFpGI0&render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveOrigin: https://vacilandos.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91ec6af6ed81d65b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/91ec6af6ed81d65b/1741710445108/sT965rpB_3HJAn_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/91ec6af6ed81d65b/1741710445110/b4267656a0a698a3f05054b3d0ce89c2ef786a733912432f134d62d93baaffa0/W2H94TjrtQ2KZEo HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/91ec6af6ed81d65b/1741710445108/sT965rpB_3HJAn_ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rules/rule701850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule701851v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703050v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule700850v1s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /rules/rule703051v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.svc.static.microsoft
Source: global traffic	HTTP traffic detected: GET /?trysignin=0 HTTP/1.1Host: www.office.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://login.live.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OH.SID=7d30e125-534d-4628-8b5f-0492230589d9; OH.FLID=a1ac589d-f554-4ef2-a1b2-5b1626cec6db
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: r10.i.lencr.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_69.2.dr

String found in binary or memory: <meta http-equiv="refresh" content="0;url=https://www.facebook.com/> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: abe87c29.46b20494-8a43-4c49-8a51-bc2a41cc9c27-e624a29b-c629-4f2f-99.pages.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: barakshaddai.com
Source: global traffic	DNS traffic detected: DNS query: vacilandos.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: sso.corujinhajuridica.com
Source: global traffic	DNS traffic detected: DNS query: r10.i.lencr.org
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: www.office.com
Source: global traffic	DNS traffic detected: DNS query: portal.office.com
Source: global traffic	DNS traffic detected: DNS query: outlook.office.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: substrate.office.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=y134%2BMLzYjN01Ki2mvBPwmfNc2m4uEKZ0asCSLfOiWE0VyoUKHDC5Jn2tToLKaKn1rYfmxVJ5mPIUMN514myX%2BEeFwGhNFKK%2FVfzLsZOJXa%2BjjH71zcBSwIMctQxzHBleg%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 404Content-Type: application/reports+jsonOrigin: https://vacilandos.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_87.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_87.2.dr	String found in binary or memory: http://www.json.org/json2.js
Source: chromecache_87.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_69.2.dr	String found in binary or memory: https://goal.com
Source: chromecache_87.2.dr	String found in binary or memory: https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js
Source: chromecache_79.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_79.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_69.2.dr	String found in binary or memory: https://vacilandos.com/?&

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49677
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir1452_1155319372

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir1452_1155319372

Jump to behavior

Source: classification engine

Classification label: mal60.phis.winSVG@30/50@40/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\NEW__Review_202551087.svg
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,10923603637270966853,11030071007452806499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2052,i,10923603637270966853,11030071007452806499,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2236 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 Extra Window Memory Injection	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	2 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
https://barakshaddai.com/sch/redirect.html?fp=eyJ1c2VyQWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM0LjAuMC4wIFNhZmFyaS81MzcuMzYiLCJsYW5ndWFnZSI6ImVuLVVTIiwiY29sb3JEZXB0aCI6MjQsImRldmljZU1lbW9yeSI6OCwiaGFyZHdhcmVDb25jdXJyZW5jeSI6NCwicmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsInRpbWV6b25lIjoiQW1lcmljYS9OZXdfWW9yayIsInRvdWNoU3VwcG9ydCI6ZmFsc2UsIndlYmRyaXZlciI6ZmFsc2V9	0%	Avira URL Cloud	safe
http://www.json.org/json2.js	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/NEW__Review_202551087.svg	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
e329293.dscd.akamaiedge.net	95.101.182.112	true	false	high
barakshaddai.com	212.1.210.10	true	false	unknown
b-0004.b-msedge.net	13.107.6.156	true	false	high
sso.corujinhajuridica.com	192.227.220.2	true	false	high
www.tm.a.prd.aadg.trafficmanager.net	20.190.160.20	true	false	high
e192961.dscx.akamaiedge.net	2.19.122.30	true	false	high
ooc-g2.tm-4.office.com	52.98.179.194	true	false	high
officemru.x01-003.oxo-oasisice-mru.01-francecentral-prod.cosmic.office.net	52.109.68.2	true	false	unknown
a726.dscd.akamai.net	2.22.242.88	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
www.google.com	216.58.206.68	true	false	high
abe87c29.46b20494-8a43-4c49-8a51-bc2a41cc9c27-e624a29b-c629-4f2f-99.pages.dev	172.66.44.189	true	false	high
vacilandos.com	104.21.80.1	true	false	high
FRA-efz.ms-acdc.office.com	52.98.178.242	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
www.office.com	unknown	unknown	false	high
outlook.office.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
substrate.office.com	unknown	unknown	false	high
r10.i.lencr.org	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
portal.office.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://otelrules.svc.static.microsoft/rules/rule701851v1s19.xml	false		high
https://abe87c29.46b20494-8a43-4c49-8a51-bc2a41cc9c27-e624a29b-c629-4f2f-99.pages.dev/voiceseses	false		unknown
https://otelrules.svc.static.microsoft/rules/rule703050v3s19.xml	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/91ec6af6ed81d65b/1741710445110/b4267656a0a698a3f05054b3d0ce89c2ef786a733912432f134d62d93baaffa0/W2H94TjrtQ2KZEo	false		high
https://www.office.com/?trysignin=0	false		high
https://a.nel.cloudflare.com/report/v4?s=y134%2BMLzYjN01Ki2mvBPwmfNc2m4uEKZ0asCSLfOiWE0VyoUKHDC5Jn2tToLKaKn1rYfmxVJ5mPIUMN514myX%2BEeFwGhNFKK%2FVfzLsZOJXa%2BjjH71zcBSwIMctQxzHBleg%3D%3D	false		high
https://barakshaddai.com/sch/redirect.html?fp=eyJ1c2VyQWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM0LjAuMC4wIFNhZmFyaS81MzcuMzYiLCJsYW5ndWFnZSI6ImVuLVVTIiwiY29sb3JEZXB0aCI6MjQsImRldmljZU1lbW9yeSI6OCwiaGFyZHdhcmVDb25jdXJyZW5jeSI6NCwicmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsInRpbWV6b25lIjoiQW1lcmljYS9OZXdfWW9yayIsInRvdWNoU3VwcG9ydCI6ZmFsc2UsIndlYmRyaXZlciI6ZmFsc2V9	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/91ec6af6ed81d65b/1741710445108/sT965rpB_3HJAn_	false		high
https://otelrules.svc.static.microsoft/rules/rule701850v1s19.xml	false		high
file:///C:/Users/user/Desktop/NEW__Review_202551087.svg	false	Avira URL Cloud: safe	unknown
https://vacilandos.com/?&	true		unknown
http://r10.i.lencr.org/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91ec6af6ed81d65b&lang=auto	false		high
https://www.office.com/landingv2	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://a.nel.cloudflare.com/report/v4?s=V%2Fh6xzQMb6GhdXr3PUpBpi2P5ywTy0nlQwgRUZbWfYvWd9Gu4JpZGLFJFNfGTNUsEuohRj0fsFxERn%2F4hlMJsu6EsCiv%2BidVMryd0GSi93LljejRMEjUP%2BewrrJa08to5Q%3D%3D	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R	false		high
https://otelrules.svc.static.microsoft/rules/rule700850v1s19.xml	false		high
https://otelrules.svc.static.microsoft/rules/rule703051v3s19.xml	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://goal.com	chromecache_69.2.dr	false		high
http://knockoutjs.com/	chromecache_87.2.dr	false		high
https://login.windows-ppe.net	chromecache_79.2.dr	false		high
https://js.monitor.azure.com/scripts/c/ms.analytics-web-2.min.js	chromecache_87.2.dr	false		high
http://www.json.org/json2.js	chromecache_87.2.dr	false	Avira URL Cloud: safe	unknown
https://login.microsoftonline.com	chromecache_79.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_87.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.48.1	unknown	United States	13335	CLOUDFLARENETUS	false
13.107.6.156	b-0004.b-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
212.1.210.10	barakshaddai.com	United States	47583	AS-HOSTINGERLT	false
172.66.44.189	abe87c29.46b20494-8a43-4c49-8a51-bc2a41cc9c27-e624a29b-c629-4f2f-99.pages.dev	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.66.47.67	unknown	United States	13335	CLOUDFLARENETUS	false
104.21.80.1	vacilandos.com	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
2.19.122.30	e192961.dscx.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false
192.227.220.2	sso.corujinhajuridica.com	United States	36352	AS-COLOCROSSINGUS	false

Private

IP
192.168.2.17
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1635458
Start date and time:	2025-03-11 17:26:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	NEW__Review_202551087.svg
Detection:	MAL
Classification:	mal60.phis.winSVG@30/50@40/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.238, 142.250.184.195, 64.233.184.84, 142.250.186.174, 142.250.186.142, 142.250.185.206, 216.58.206.78, 142.250.186.46, 172.217.16.142, 142.250.186.78, 142.250.186.99, 172.217.18.14, 172.217.168.195, 142.251.39.110, 20.190.160.2, 20.190.160.22, 40.126.32.138, 20.190.160.65, 20.190.160.14, 40.126.32.74, 20.190.160.4, 142.250.185.174, 40.126.31.128, 20.190.159.23, 40.126.31.131, 20.190.159.129, 40.126.31.2, 40.126.31.1, 20.190.159.64, 20.190.159.75, 216.58.212.142, 216.58.206.42, 142.250.186.74, 142.250.186.106, 172.217.16.202, 142.250.185.138, 142.250.186.42, 142.250.181.234, 142.250.184.234, 142.250.185.202, 142.250.74.202, 142.250.185.170, 142.250.185.74, 142.250.184.202, 216.58.212.170, 142.250.186.170, 142.250.186.138, 52.182.143.208, 104.208.16.88, 40.126.32.140, 20.190.160.67, 2.23.246.101, 20.190.183.27, 20.190.183.26, 20.190.183.25, 20.223.35.26, 23.57.23.230, 20.12.23.50, 23.60.203.209, 13.107.246.60, 40.126.32.133
Excluded domains from analysis (whitelisted): europe.ocws1.live.com.akadns.net, slscr.update.microsoft.com, www.tm.lg.prod.aadmsa.akadns.net, e13678.dscb.akamaiedge.net, clientservices.googleapis.com, browser.events.data.trafficmanager.net, res-1.cdn.office.net, prod.ocws1.live.com.akadns.net, www.microsoft.com-c-3.edgekey.net, clients2.google.com, login.live.com, update.googleapis.com, shell.cdn.office.net, csp.microsoft.com, ags.privatelink.msidentity.com, fs.microsoft.com, content-autofill.googleapis.com, aadcdnoriginwus2.azureedge.net, www.tm.v4.a.prd.aadg.akadns.net, aadcdn.msauth.net, e19254.dscg.akamaiedge.net, res-stls-prod.edgesuite.net, shell.cdn.office.net-c.edgekey.net.globalredir.akadns.net, edgedl.me.gvt1.com, res-prod.trafficmanager.net, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com, iris-de-prod-azsc-v2-neu.northeurope.cloudapp.azure.com, www.tm.lg.prod.aadmsa.trafficmanager.net, appsforoffice.microsoft.com, weu-azsc-000.ocws.officeapps.live.com, frc-00.ocws.officeapps.live.com, gra
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	dropped
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

File type:	SVG Scalable Vector Graphics image
Entropy (8bit):	5.154291536886063
TrID:	Scalable Vector Graphics (18501/1) 100.00%
File name:	NEW__Review_202551087.svg
File size:	8'364 bytes
MD5:	9a21dc60a947bc4b37688cf39ab375bd
SHA1:	e0638ef6f8dbe04fc9a48a625a8fab0904e93838
SHA256:	ff7287439e3d65f9922a553b7088bfc60518cae18724020cb970f0604a6b32cc
SHA512:	4c1434aa6b7c0fc59785aeeb14626fc12bb641ef55dc7f97f64b139e216c354694b60dac5295512adddd2a5986ee28957f0dd464090a71ce4b2ecdd061f8da57
SSDEEP:	96:rXkKG3QLtEj4LJ8uGuwy4Mg/Gbm58tX4NYa/TAE4N5sTFjnRJOmJnXwMmRbEJV:rUKGam49tHp4l+a/E4FNxJXqbgV
TLSH:	FD02973445C80136AA38835DF36B7846DB7744D7010ACE54704D8A2B2FBAC997EFB2E5
File Content Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 400 400" width="100%" height="100%" preserveAspectRatio="xMidYMid meet" version="1.1">.. Definitions -->.. <defs>.. Glow effect filter -->.. <filter id="glow" x="-20%" y="-20%" width="

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 11, 2025 17:26:47.251945972 CET	53	58126	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:47.296917915 CET	53	54517	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:49.675875902 CET	59345	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:49.676110029 CET	56635	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:49.686943054 CET	53	59345	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:49.689217091 CET	53	56635	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:51.572973967 CET	53	53316	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:51.979506016 CET	58488	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:51.979651928 CET	55618	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:51.986304998 CET	53	55618	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:51.987164974 CET	53	58488	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:56.789488077 CET	59158	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:56.789621115 CET	62306	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:56.799932957 CET	53	59158	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:56.803500891 CET	53	62306	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:56.992038965 CET	49984	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:56.992330074 CET	64559	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:57.004160881 CET	53	64559	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:57.012022018 CET	53	49984	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:59.738213062 CET	65109	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:59.738379002 CET	59097	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:26:59.752948046 CET	53	65109	1.1.1.1	192.168.2.17
Mar 11, 2025 17:26:59.764018059 CET	53	59097	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:04.294918060 CET	52967	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:04.295079947 CET	62488	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:04.301680088 CET	53	62488	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:04.302257061 CET	53	52967	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:06.209779024 CET	58516	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:06.209911108 CET	58623	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:06.216394901 CET	53	58516	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:06.216408968 CET	53	58623	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:07.271368027 CET	52048	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:07.271523952 CET	55284	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:07.286473989 CET	53	52048	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:07.302556038 CET	53	55284	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:08.626023054 CET	53	51520	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:09.340364933 CET	54241	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:09.340544939 CET	50351	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:09.347191095 CET	53	54241	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:09.347214937 CET	53	50351	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:17.106832027 CET	51745	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:17.106983900 CET	63985	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:17.113719940 CET	53	51745	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:17.114872932 CET	53	63985	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:27.690406084 CET	53	60912	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:47.060111046 CET	56297	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:47.060313940 CET	59754	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:47.146545887 CET	53	60111	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:47.285501957 CET	53	59754	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:47.287280083 CET	53	56297	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:50.487510920 CET	53	51622	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:51.507281065 CET	50046	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:51.507415056 CET	62883	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:27:51.514878988 CET	53	50046	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:51.521919012 CET	53	62883	1.1.1.1	192.168.2.17
Mar 11, 2025 17:27:52.581651926 CET	53	63265	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:04.300431967 CET	53831	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:04.300595045 CET	60655	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:04.307297945 CET	53	53831	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:04.307621002 CET	53	60655	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:08.351106882 CET	54406	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:08.351293087 CET	61117	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:08.357717037 CET	53	61117	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:08.358397007 CET	53	54406	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:09.059573889 CET	138	138	192.168.2.17	192.168.2.255
Mar 11, 2025 17:28:19.465368986 CET	62155	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:19.465675116 CET	57499	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:19.686321974 CET	53	62155	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:19.693443060 CET	53	57499	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:20.835419893 CET	53	57332	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:29.897247076 CET	53	54622	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:50.127119064 CET	65210	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:50.127773046 CET	60595	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:50.134869099 CET	53	65210	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:50.136038065 CET	53	60595	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.580796957 CET	52271	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.581021070 CET	50377	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.582004070 CET	55381	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.582273006 CET	58343	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.582288980 CET	53071	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.582387924 CET	63512	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.587392092 CET	53	52271	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.588963032 CET	53	55381	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.589099884 CET	53	50377	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.589224100 CET	53	58343	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.589409113 CET	53	53071	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.589518070 CET	53	63512	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.590754032 CET	56799	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.590842009 CET	53932	53	192.168.2.17	1.1.1.1
Mar 11, 2025 17:28:53.598098993 CET	53	53932	1.1.1.1	192.168.2.17
Mar 11, 2025 17:28:53.598469973 CET	53	56799	1.1.1.1	192.168.2.17

Timestamp	Bytes transferred	Direction	Data
Mar 11, 2025 17:27:51.527554989 CET	255	OUT	GET / HTTP/1.1 Host: r10.i.lencr.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 11, 2025 17:27:52.184879065 CET	1236	IN	HTTP/1.1 200 OK Server: nginx Content-Type: application/pkix-cert Last-Modified: Wed, 01 May 2024 21:14:13 GMT ETag: "6632b0a5-509" Content-Disposition: attachment; filename="R10.der" Accept-Ranges: bytes Vary: Accept-Encoding Content-Encoding: gzip Content-Length: 1245 Cache-Control: max-age=3600 Expires: Tue, 11 Mar 2025 17:27:52 GMT Date: Tue, 11 Mar 2025 16:27:52 GMT Connection: keep-alive Data Raw: 1f 8b 08 00 00 00 00 00 00 00 33 68 62 65 35 68 62 7a bb 80 99 89 91 89 49 c0 7b 45 d0 e4 ef b3 f4 17 15 b3 79 af 60 e9 2d bd 60 c0 cb c6 a9 d5 e6 d1 f6 9d 97 91 91 9b 95 c1 c0 df 90 db 80 93 8d 39 94 85 4d 98 29 34 d8 50 d3 40 1d c4 e1 12 56 f0 cc 2b 49 2d ca 4b 2d 51 08 4e 4d 2e 2d ca 2c a9 54 08 4a 2d 4e 4d 2c 4a ce 50 70 2f ca 2f 2d 30 14 35 10 06 29 65 16 e6 f1 0c 0e 72 57 08 ca cf 2f 51 88 30 34 90 13 e7 35 32 31 30 36 34 36 00 83 28 20 d7 1c c8 35 32 32 36 b5 34 b5 8c 02 32 51 2c 14 33 10 81 58 c8 eb 93 5a a2 5e ac e0 9a 97 5c 54 59 50 62 c8 63 c0 05 31 9d 39 c8 d0 c0 a0 89 51 09 d9 e1 8c ac 0c cc 4d 8c fc 0c 40 71 2e a6 26 46 46 86 f3 e1 4f 9f 1d 09 11 7a bb c5 fd df 49 f5 88 32 b7 00 8d 1e 59 bb 8e fb ac 73 af 6e 95 d0 dc 7b 77 6b d4 fe 5f df ce 2d de b7 9e 41 d1 3b 29 2a ca 86 51 ff 68 04 f3 b7 ce ff 7d 82 ce af 0f 6e 7d 20 c2 3e ad 3f 5f fe fa f3 5d 8d 96 9c a5 a9 db 0f ad 97 88 36 57 d3 78 be f8 0b bb 76 ae d4 ff d5 11 7b a6 ae 73 f8 ff f2 74 f8 91 ad d1 f5 15 bc 12 89 7b c4 9f 87 1c db [TRUNCATED] Data Ascii: 3hbe5hbzI{Ey`-`9M)4P@V+I-K-QNM.-,TJ-NM,JPp//-05)erW/Q045210646( 522642Q,3XZ^\TYPbc19QM@q.&FFOzI2Ysn{wk_-A;)Qh}n} >?_]6Wxv{st{9lwRgSvmmvVLTPeX}LpPg2{O8E6<[ry-'~mSAN.&>uAW>`32ga&6Y_lLpHZH112@s}=+^R# ie-=}XqByF0YT`\|6+}CLT`t08yQVE@@fdQS5s6>w4]9G^Np1{\8MC'<<sQQ=4"_N+mM\|bu>o~w+gXw7vIf3*s0
Mar 11, 2025 17:27:52.184906006 CET	422	IN	Data Raw: a7 72 df 2b db 18 97 bc 69 86 c9 51 b5 d7 ea fc 55 16 78 b3 d6 c7 e5 5f ba f2 2a de d8 5b f8 5a f8 b6 53 f7 02 77 c4 2e e6 6c 2a f9 7b bc 62 de e6 9d 6b c4 6e 79 69 4f 3b bc ad 3b a9 ff 67 89 e4 a2 79 cc f7 5e e6 cf de c0 7f 69 41 d4 b7 d6 98 43 Data Ascii: r+iQUx_[ZSw.l{bknyiO;;gy^iAC,O\3:%v<6'&tsU--M4bSr\D>`L{N8>^5E2DcR3'WfiqLZ=ib/"mw3d;wJ\
Mar 11, 2025 17:28:37.196427107 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:26:58 UTC	1069	OUT	GET /sch/redirect.html?fp=eyJ1c2VyQWdlbnQiOiJNb3ppbGxhLzUuMCAoV2luZG93cyBOVCAxMC4wOyBXaW42NDsgeDY0KSBBcHBsZVdlYktpdC81MzcuMzYgKEtIVE1MLCBsaWtlIEdlY2tvKSBDaHJvbWUvMTM0LjAuMC4wIFNhZmFyaS81MzcuMzYiLCJsYW5ndWFnZSI6ImVuLVVTIiwiY29sb3JEZXB0aCI6MjQsImRldmljZU1lbW9yeSI6OCwiaGFyZHdhcmVDb25jdXJyZW5jeSI6NCwicmVzb2x1dGlvbiI6IjEyODB4MTAyNCIsInRpbWV6b25lIjoiQW1lcmljYS9OZXdfWW9yayIsInRvdWNoU3VwcG9ydCI6ZmFsc2UsIndlYmRyaXZlciI6ZmFsc2V9 HTTP/1.1 Host: barakshaddai.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:26:59 UTC	565	IN	HTTP/1.1 200 OK Connection: close content-type: text/html last-modified: Mon, 10 Mar 2025 15:36:45 GMT accept-ranges: bytes content-length: 1125 date: Tue, 11 Mar 2025 16:26:59 GMT server: LiteSpeed platform: hostinger strict-transport-security: max-age=31536000; includeSubDomains; preload x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-11 16:26:59 UTC	803	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 3e 0a 20 20 20 20 3c 73 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Redirecting...</title> <meta http-equiv="refresh" content="0;url=https://www.facebook.com/> <s
2025-03-11 16:26:59 UTC	322	IN	Data Raw: 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 65 64 69 72 65 63 74 2d 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 3e 52 65 64 69 72 65 63 74 69 6e 67 2e 2e 2e 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 3c 70 3e 49 66 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 72 65 64 69 72 65 63 74 65 64 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2c 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6f 61 6c 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 72 65 64 69 72 65 63 74 2d 6c 69 6e 6b 22 3e 63 6c 69 63 6b 20 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f Data Ascii: le></head><body> <div class="redirect-container"> <h1>Redirecting...</h1> <p>If you are not redirected automatically, <a href="https://goal.com" class="redirect-link">click here</a>.</p> </div> <script> window.locatio

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:06 UTC	545	OUT	OPTIONS /report/v4?s=y134%2BMLzYjN01Ki2mvBPwmfNc2m4uEKZ0asCSLfOiWE0VyoUKHDC5Jn2tToLKaKn1rYfmxVJ5mPIUMN514myX%2BEeFwGhNFKK%2FVfzLsZOJXa%2BjjH71zcBSwIMctQxzHBleg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vacilandos.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 11 Mar 2025 16:27:07 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:08 UTC	589	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js?onload=EFpGI0&render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Origin: https://vacilandos.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:09 UTC	471	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:08 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 91ec6ae31bb913b9-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:09 UTC	898	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 20 65 7d 66 75 6e 63 74 69 6f 6e 20 49 72 28 65 2c 74 29 7b 76 61 72 20 61 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 65 29 3b 69 66 28 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 29 7b 76 61 72 20 6f 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 53 79 6d 62 6f 6c 73 28 65 29 3b 74 26 26 28 6f 3d 6f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2c 63 29 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 29 2c 61 2e 70 75 73 68 2e 61 70 70 6c 79 28 61 2c 6f 29 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 69 74 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3d 74 21 3d 6e 75 Data Ascii: e}function Ir(e,t){var a=Object.keys(e);if(Object.getOwnPropertySymbols){var o=Object.getOwnPropertySymbols(e);t&&(o=o.filter(function(c){return Object.getOwnPropertyDescriptor(e,c).enumerable})),a.push.apply(a,o)}return a}function it(e,t){return t=t!=nu
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 72 61 79 24 2f 2e 74 65 73 74 28 61 29 29 72 65 74 75 72 6e 20 6f 74 28 65 2c 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 49 65 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 7a 74 28 65 29 7c 7c 42 74 28 65 2c 74 29 7c 7c 58 74 28 65 2c 74 29 7c 7c 47 74 28 29 7d 66 75 6e 63 74 69 6f 6e 20 46 28 65 29 7b 22 40 73 77 63 2f 68 65 6c 70 65 72 73 20 2d 20 74 79 70 65 6f 66 22 3b 72 65 74 75 72 6e 20 65 26 26 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 53 79 6d 62 6f 6c 3f 22 73 79 6d 62 6f 6c 22 3a 74 79 70 65 6f 66 20 65 7d 66 75 6e 63 74 69 6f 6e 20 50 65 28 65 2c 74 29 7b 76 61 72 20 61 3d 7b 6c 61 62 65 6c 3a 30 2c 73 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6c 5b 30 Data Ascii: ray$/.test(a))return ot(e,t)}}function Ie(e,t){return zt(e)\|\|Bt(e,t)\|\|Xt(e,t)\|\|Gt()}function F(e){"@swc/helpers - typeof";return e&&typeof Symbol!="undefined"&&e.constructor===Symbol?"symbol":typeof e}function Pe(e,t){var a={label:0,sent:function(){if(l[0
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 22 54 75 72 6e 73 74 69 6c 65 27 73 20 61 70 69 2e 6a 73 20 77 61 73 20 6c 6f 61 64 65 64 2c 20 62 75 74 20 74 68 65 20 69 66 72 61 6d 65 20 75 6e 64 65 72 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 63 6f 75 6c 64 20 6e 6f 74 20 62 65 20 6c 6f 61 64 65 64 2e 20 48 61 73 20 74 68 65 20 76 69 73 69 74 6f 72 20 62 6c 6f 63 6b 65 64 20 73 6f 6d 65 20 70 61 72 74 73 20 6f 66 20 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 20 6f 72 20 61 72 65 20 74 68 65 79 20 73 65 6c 66 2d 68 6f 73 74 69 6e 67 20 61 70 69 2e 6a 73 3f 22 7d 3b 76 61 72 20 51 74 3d 33 30 30 30 32 30 3b 76 61 72 20 57 65 3d 33 30 30 30 33 30 3b 76 61 72 20 55 65 3d 33 30 30 30 33 31 3b 76 61 72 20 71 3b 28 66 75 Data Ascii: tion:"Turnstile's api.js was loaded, but the iframe under challenges.cloudflare.com could not be loaded. Has the visitor blocked some parts of challenges.cloudflare.com or are they self-hosting api.js?"};var Qt=300020;var We=300030;var Ue=300031;var q;(fu
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 65 65 7c 7c 28 65 65 3d 7b 7d 29 29 3b 76 61 72 20 63 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4e 65 76 65 72 3d 22 6e 65 76 65 72 22 2c 65 2e 4d 61 6e 75 61 6c 3d 22 6d 61 6e 75 61 6c 22 2c 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 29 28 63 65 7c 7c 28 63 65 3d 7b 7d 29 29 3b 76 61 72 20 51 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 6c 77 61 79 73 3d 22 61 6c 77 61 79 73 22 2c 65 2e 45 78 65 63 75 74 65 3d 22 65 78 65 63 75 74 65 22 2c 65 2e 49 6e 74 65 72 61 63 74 69 6f 6e 4f 6e 6c 79 3d 22 69 6e 74 65 72 61 63 74 69 6f 6e 2d 6f 6e 6c 79 22 7d 29 28 51 7c 7c 28 51 3d 7b 7d 29 29 3b 76 61 72 20 6d 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 52 65 6e 64 65 72 Data Ascii: manual",e.Auto="auto"})(ee\|\|(ee={}));var ce;(function(e){e.Never="never",e.Manual="manual",e.Auto="auto"})(ce\|\|(ce={}));var Q;(function(e){e.Always="always",e.Execute="execute",e.InteractionOnly="interaction-only"})(Q\|\|(Q={}));var me;(function(e){e.Render
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 70 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 4d 2e 4e 6f 72 6d 61 6c 2c 4d 2e 43 6f 6d 70 61 63 74 2c 4d 2e 49 6e 76 69 73 69 62 6c 65 2c 4d 2e 46 6c 65 78 69 62 6c 65 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 74 28 65 29 7b 72 65 74 75 72 6e 20 4c 28 5b 22 61 75 74 6f 22 2c 22 6d 61 6e 75 61 6c 22 2c 22 6e 65 76 65 72 22 5d 2c 65 29 7d 76 61 72 20 4e 72 3d 2f 5e 5b 61 2d 7a 5d 7b 32 2c 33 7d 28 5b 2d 5f 5d 5b 61 2d 7a 5d 7b 32 7d 29 3f 24 2f 69 3b 66 75 6e 63 74 69 6f 6e 20 67 74 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 22 61 75 74 6f 22 7c 7c 4e 72 2e 74 65 73 74 Data Ascii: unction pt(e){return L([M.Normal,M.Compact,M.Invisible,M.Flexible],e)}function vt(e){return L(["auto","manual","never"],e)}function mt(e){return L(["auto","manual","never"],e)}var Nr=/^[a-z]{2,3}([-_][a-z]{2})?$/i;function gt(e){return e==="auto"\|\|Nr.test
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 72 22 2c 22 72 6f 2d 72 6f 22 5d 3b 66 75 6e 63 74 69 6f 6e 20 54 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 3b 69 66 28 74 29 7b 76 61 72 20 6f 3b 61 3d 28 6f 3d 65 5b 22 62 61 73 65 2d 75 72 6c 22 5d 29 21 3d 3d 6e 75 6c 6c 26 26 6f 21 3d 3d 76 6f 69 64 20 30 3f 6f 3a 61 7d 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 52 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 2c 68 29 7b 76 61 72 20 73 3d 54 74 28 61 2c 63 29 2c 70 3d 6c 3f 22 68 2f 22 2e 63 6f 6e 63 61 74 28 6c 2c 22 2f 22 29 3a 22 22 2c 5f 3d 68 3f 22 3f 22 2e 63 6f 6e 63 61 74 28 68 29 3a 22 22 2c 41 3d 61 5b 22 66 65 65 64 62 61 63 6b 2d 65 6e 61 62 6c 65 64 22 5d 3d 3d 3d 21 31 3f 22 Data Ascii: r","ro-ro"];function Tt(e,t){var a="https://challenges.cloudflare.com";if(t){var o;a=(o=e["base-url"])!==null&&o!==void 0?o:a}return a}function Rt(e,t,a,o,c,l,v,h){var s=Tt(a,c),p=l?"h/".concat(l,"/"):"",_=h?"?".concat(h):"",A=a["feedback-enabled"]===!1?"
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 72 65 74 75 72 6e 20 6f 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 63 2c 6f 7d 2c 74 65 28 65 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 75 72 28 65 2c 74 29 7b 69 66 28 74 79 70 65 6f 66 20 74 21 3d 22 66 75 6e 63 74 69 6f 6e 22 26 26 74 21 3d 3d 6e 75 6c 6c 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 75 70 65 72 20 65 78 70 72 65 73 73 69 6f 6e 20 6d 75 73 74 20 65 69 74 68 65 72 20 62 65 20 6e 75 6c 6c 20 6f 72 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 65 2e 70 72 6f 74 6f 74 79 70 65 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 26 26 74 2e 70 72 6f 74 6f 74 79 70 65 2c 7b 63 6f 6e 73 74 72 75 63 74 6f 72 3a 7b 76 61 6c 75 65 3a 65 2c 77 Data Ascii: ect.setPrototypeOf\|\|function(o,c){return o.__proto__=c,o},te(e,t)}function ur(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,w
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 7d 29 2c 74 65 28 63 2c 6f 29 7d 2c 47 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 73 72 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 26 26 28 46 28 74 29 3d 3d 3d 22 6f 62 6a 65 63 74 22 7c 7c 74 79 70 65 6f 66 20 74 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 74 3a 7a 65 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 64 72 28 65 29 7b 76 61 72 20 74 3d 42 65 28 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6f 3d 6c 65 28 65 29 2c 63 3b 69 66 28 74 29 7b 76 61 72 20 6c 3d 6c 65 28 74 68 69 73 29 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3b 63 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6f 2c 61 72 67 75 6d 65 6e 74 73 2c 6c 29 7d 65 6c 73 65 20 63 3d 6f 2e 61 70 70 6c 79 28 74 68 69 73 Data Ascii: ,configurable:!0}}),te(c,o)},Ge(e)}function sr(e,t){return t&&(F(t)==="object"\|\|typeof t=="function")?t:ze(e)}function dr(e){var t=Be();return function(){var o=le(e),c;if(t){var l=le(this).constructor;c=Reflect.construct(o,arguments,l)}else c=o.apply(this
2025-03-11 16:27:09 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 29 7b 76 61 72 20 6f 3d 54 74 28 74 2e 70 61 72 61 6d 73 2c 21 31 29 2c 63 3d 22 68 2f 22 2e 63 6f 6e 63 61 74 28 22 67 22 2c 22 2f 22 29 2c 6c 2c 76 2c 68 3d 22 22 2e 63 6f 6e 63 61 74 28 6f 2c 22 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 22 29 2e 63 6f 6e 63 61 74 28 63 2c 22 66 65 65 64 62 61 63 6b 2d 72 65 70 6f 72 74 73 2f 22 29 2e 63 6f 6e 63 61 74 28 58 65 28 65 29 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 74 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 28 76 3d 74 2e 70 61 72 61 6d 73 2e 74 68 65 6d 65 29 21 3d 3d 6e 75 6c 6c 26 26 76 21 3d 3d 76 6f 69 64 20 30 3f 76 3a 74 2e 74 68 65 6d 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 Data Ascii: unction(e,t,a){var o=Tt(t.params,!1),c="h/".concat("g","/"),l,v,h="".concat(o,"/cdn-cgi/challenge-platform/").concat(c,"feedback-reports/").concat(Xe(e),"/").concat(t.displayLanguage,"/").concat((v=t.params.theme)!==null&&v!==void 0?v:t.theme,"/").concat(

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:09 UTC	520	OUT	POST /report/v4?s=y134%2BMLzYjN01Ki2mvBPwmfNc2m4uEKZ0asCSLfOiWE0VyoUKHDC5Jn2tToLKaKn1rYfmxVJ5mPIUMN514myX%2BEeFwGhNFKK%2FVfzLsZOJXa%2BjjH71zcBSwIMctQxzHBleg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 404 Content-Type: application/reports+json Origin: https://vacilandos.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:09 UTC	404	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 35 35 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 61 72 61 6b 73 68 61 64 64 61 69 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 38 30 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a Data Ascii: [{"age":0,"body":{"elapsed_time":4555,"method":"GET","phase":"application","protocol":"h2","referrer":"https://barakshaddai.com/","sampling_fraction":1.0,"server_ip":"104.21.80.1","status_code":403,"type":"http.error"},"type":"network-error","url":"https:
2025-03-11 16:27:10 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 11 Mar 2025 16:27:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:11 UTC	806	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:12 UTC	1297	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:11 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28084 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-3PUvZusa7zadJHIX' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-11 16:27:12 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-11 16:27:12 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 33 50 55 76 5a 75 73 61 37 7a 61 64 4a 48 49 58 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-3PUvZusa7zadJHIX' 'unsafe-
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-11 16:27:12 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:14 UTC	773	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=91ec6af6ed81d65b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:15 UTC	331	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:15 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 117148 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 91ec6b0c3832c59e-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:15 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 70 72 69 76 61 63 79 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 70 72 69 76 61 63 79 70 6f 6c 69 63 79 25 32 46 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.privacy_link":"https%3A%2F%2Fwww.cloudflare.com%2Fprivacypolicy%2F","challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 2e 25 33 43 62 72 25 32 46 25 33 45 25 33 43 61 25 32 30 74 61 72 67 65 74 25 33 44 25 32 32 5f 62 6c 61 6e 6b 25 32 32 25 32 30 72 65 6c 25 33 44 25 32 32 6e 6f 6f 70 65 6e 65 72 25 32 30 6e 6f 72 65 66 65 72 72 65 72 25 32 32 25 32 30 68 72 65 66 25 33 44 25 32 32 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 25 32 32 25 33 45 43 6c 69 63 6b 25 32 30 68 65 72 65 25 32 30 66 6f 72 25 32 30 6d 6f 72 65 25 32 30 69 6e 66 6f 72 6d 61 74 Data Ascii: .%3Cbr%2F%3E%3Ca%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%20href%3D%22https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support%22%3EClick%20here%20for%20more%20informat
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 74 6f 72 25 32 30 6f 72 25 32 30 73 75 62 6d 69 74 25 32 30 61 25 32 30 66 65 65 64 62 61 63 6b 25 32 30 72 65 70 6f 72 74 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 51 2c 65 54 2c 65 56 2c 65 57 2c 65 58 2c 66 39 2c 66 6c 2c 66 72 2c 66 73 2c 66 74 2c 66 44 2c 66 4f 2c 66 53 2c Data Ascii: tor%20or%20submit%20a%20feedback%20report"},"polyfills":{"feedback_report_output_subtitle":false,"feedback_report_guideline":false,"feedback_report_aux_subtitle":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eQ,eT,eV,eW,eX,f9,fl,fr,fs,ft,fD,fO,fS,
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 27 29 2c 6b 3d 30 3b 21 21 5b 5d 3b 29 7b 73 77 69 74 63 68 28 6a 5b 6b 2b 2b 5d 29 7b 63 61 73 65 27 30 27 3a 6c 3d 69 5b 67 4d 28 31 34 33 36 29 5d 28 65 4f 2c 66 5b 67 4d 28 31 30 30 39 29 5d 2c 66 5b 67 4d 28 39 33 36 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 31 27 3a 6d 3d 69 5b 67 4d 28 32 34 30 29 5d 28 68 2c 69 5b 67 4d 28 33 38 35 29 5d 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6e 5b 67 4d 28 39 30 33 29 5d 28 67 6d 5b 67 4d 28 34 30 31 29 5d 28 78 29 29 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 33 27 3a 6e 5b 67 4d 28 31 33 34 37 29 5d 3d 35 65 33 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 34 27 3a 6e 5b 67 4d 28 31 38 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 35 Data Ascii: '),k=0;!![];){switch(j[k++]){case'0':l=i[gM(1436)](eO,f[gM(1009)],f[gM(936)]);continue;case'1':m=i[gM(240)](h,i[gM(385)]);continue;case'2':n[gM(903)](gm[gM(401)](x));continue;case'3':n[gM(1347)]=5e3;continue;case'4':n[gM(187)]=function(){};continue;case'5
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 31 5d 5b 67 4e 28 31 31 32 39 29 5d 28 6b 29 2c 6c 29 29 29 7b 69 66 28 65 5b 67 4e 28 31 32 32 33 29 5d 21 3d 3d 67 4e 28 32 35 36 29 29 72 65 74 75 72 6e 20 67 4e 28 36 36 32 29 3b 65 6c 73 65 20 69 3d 28 67 3d 6c 5b 31 5d 2c 68 3d 65 5b 67 4e 28 37 33 30 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 32 5d 2c 31 30 29 2c 65 5b 67 4e 28 34 39 38 29 5d 28 70 61 72 73 65 49 6e 74 2c 6c 5b 33 5d 2c 31 30 29 29 7d 7d 65 6c 73 65 20 65 5b 67 4e 28 31 34 33 39 29 5d 28 67 4e 28 39 36 33 29 2c 67 4e 28 38 36 36 29 29 3f 68 5b 67 4e 28 31 30 30 39 29 5d 3d 69 5b 67 4e 28 31 30 35 32 29 5d 28 6a 5b 67 4e 28 31 30 30 39 29 5d 2c 6b 5b 67 4e 28 31 65 33 29 5d 28 6c 5b 67 4e 28 31 30 30 39 29 5d 29 29 3a 66 3d 4a 53 4f 4e 5b 67 4e 28 31 30 35 32 29 5d 28 64 29 3b 72 65 Data Ascii: 1][gN(1129)](k),l))){if(e[gN(1223)]!==gN(256))return gN(662);else i=(g=l[1],h=e[gN(730)](parseInt,l[2],10),e[gN(498)](parseInt,l[3],10))}}else e[gN(1439)](gN(963),gN(866))?h[gN(1009)]=i[gN(1052)](j[gN(1009)],k[gN(1e3)](l[gN(1009)])):f=JSON[gN(1052)](d);re
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 37 30 32 29 5d 3d 3d 3d 68 44 28 31 38 32 29 26 26 66 5b 68 44 28 34 32 33 29 5d 28 67 5b 68 44 28 31 35 34 35 29 5d 2c 68 44 28 31 38 38 29 29 3f 66 72 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 66 75 6e 63 74 69 6f 6e 28 68 45 29 7b 68 45 3d 68 44 2c 68 45 28 39 35 36 29 21 3d 3d 68 45 28 39 35 36 29 3f 64 5b 68 45 28 31 31 37 36 29 5d 5b 68 45 28 31 32 37 34 29 5d 28 68 45 28 35 35 30 29 29 3a 66 52 28 29 7d 2c 31 65 33 29 3a 67 26 26 66 5b 68 44 28 31 38 31 29 5d 28 67 5b 68 44 28 37 30 32 29 5d 2c 68 44 28 31 38 32 29 29 26 26 67 5b 68 44 28 31 35 34 35 29 5d 3d 3d 3d 68 44 28 31 35 39 29 26 26 63 6c 65 61 72 49 6e 74 65 72 76 61 6c 28 66 72 29 7d 29 2c 66 74 3d 21 5b 5d 2c 21 65 55 28 67 4a 28 31 36 33 29 29 26 26 28 66 52 28 29 2c 73 65 74 49 6e 74 65 Data Ascii: 702)]===hD(182)&&f[hD(423)](g[hD(1545)],hD(188))?fr=setInterval(function(hE){hE=hD,hE(956)!==hE(956)?d[hE(1176)][hE(1274)](hE(550)):fR()},1e3):g&&f[hD(181)](g[hD(702)],hD(182))&&g[hD(1545)]===hD(159)&&clearInterval(fr)}),ft=![],!eU(gJ(163))&&(fR(),setInte
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 68 28 69 29 7d 2c 27 78 79 57 4a 64 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 62 49 64 42 6d 27 3a 69 4c 28 31 31 37 34 29 2c 27 53 6d 5a 56 62 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 6f 79 72 4b 4b 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3e 69 7d 2c 27 77 79 4b 74 55 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3d 3d 69 7d 2c 27 67 66 6c 78 4e 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 43 43 6f 6d 74 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 72 63 75 46 72 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 Data Ascii: h(i)},'xyWJd':function(h,i){return h<<i},'bIdBm':iL(1174),'SmZVb':function(h,i){return i\|h},'oyrKK':function(h,i){return h>i},'wyKtU':function(h,i){return h==i},'gflxN':function(h,i){return h<i},'CComt':function(h,i){return h<<i},'rcuFr':function(h,i){ret
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6a 3d 3d 3d 6b 7d 2c 27 61 49 78 54 74 27 3a 69 4e 28 31 32 32 36 29 7d 2c 6e 75 6c 6c 3d 3d 68 3f 27 27 3a 66 2e 67 28 68 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 69 4f 29 7b 69 66 28 69 4f 3d 69 4e 2c 64 5b 69 4f 28 36 32 33 29 5d 28 69 4f 28 31 35 35 37 29 2c 69 4f 28 31 35 35 37 29 29 29 69 5b 69 4f 28 32 37 34 29 5d 28 43 5b 69 4f 28 39 32 33 29 5d 2c 69 4f 28 31 35 38 38 29 29 26 26 44 5b 69 4f 28 31 30 33 37 29 5d 2b 2b 2c 45 5b 69 4f 28 39 32 33 29 5d 3d 3d 3d 69 5b 69 4f 28 31 34 30 34 29 5d 26 26 46 5b 69 4f 28 31 34 35 37 29 5d 2b 2b 2c 69 5b 69 4f 28 31 35 32 36 29 5d 28 47 5b 69 4f 28 39 32 33 29 5d 2c 69 4f 28 32 36 35 29 29 26 26 48 5b 69 4f 28 33 32 32 29 5d 2b 2b 2c 49 5b 69 4f 28 39 32 33 29 5d 3d 3d 3d 69 5b 69 4f Data Ascii: return j===k},'aIxTt':iN(1226)},null==h?'':f.g(h,6,function(j,iO){if(iO=iN,d[iO(623)](iO(1557),iO(1557)))i[iO(274)](C[iO(923)],iO(1588))&&D[iO(1037)]++,E[iO(923)]===i[iO(1404)]&&F[iO(1457)]++,i[iO(1526)](G[iO(923)],iO(265))&&H[iO(322)]++,I[iO(923)]===i[iO
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 3d 30 2c 61 34 5b 69 50 28 35 34 32 29 5d 28 61 35 28 61 36 29 29 2c 61 37 3d 30 29 3a 61 38 2b 2b 2c 61 39 3d 30 2c 58 2b 2b 29 3b 66 6f 72 28 61 61 3d 61 62 5b 69 50 28 36 33 38 29 5d 28 30 29 2c 61 63 3d 30 3b 64 5b 69 50 28 36 34 36 29 5d 28 31 36 2c 61 64 29 3b 61 66 3d 31 2e 31 35 26 61 68 7c 61 67 3c 3c 31 2c 64 5b 69 50 28 31 32 31 38 29 5d 28 61 69 2c 61 6a 2d 31 29 3f 28 61 6b 3d 30 2c 61 6c 5b 69 50 28 35 34 32 29 5d 28 61 6d 28 61 6e 29 29 2c 61 6f 3d 30 29 3a 61 70 2b 2b 2c 61 71 3e 3e 3d 31 2c 61 65 2b 2b 29 3b 7d 44 2d 2d 2c 64 5b 69 50 28 31 37 30 29 5d 28 30 2c 44 29 26 26 28 44 3d 4d 61 74 68 5b 69 50 28 34 32 35 29 5d 28 32 2c 46 29 2c 46 2b 2b 29 2c 64 65 6c 65 74 65 20 42 5b 43 5d 7d 65 6c 73 65 20 66 6f 72 28 4d 3d 78 5b 43 5d 2c 73 Data Ascii: =0,a4[iP(542)](a5(a6)),a7=0):a8++,a9=0,X++);for(aa=ab[iP(638)](0),ac=0;d[iP(646)](16,ad);af=1.15&ah\|ag<<1,d[iP(1218)](ai,aj-1)?(ak=0,al[iP(542)](am(an)),ao=0):ap++,aq>>=1,ae++);}D--,d[iP(170)](0,D)&&(D=Math[iP(425)](2,F),F++),delete B[C]}else for(M=x[C],s
2025-03-11 16:27:15 UTC	1369	IN	Data Raw: 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 52 2c 69 29 7b 72 65 74 75 72 6e 20 69 52 3d 69 4c 2c 69 3d 7b 27 72 6a 44 79 73 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 6b 2c 69 51 29 7b 72 65 74 75 72 6e 20 69 51 3d 62 2c 64 5b 69 51 28 33 30 35 29 5d 28 6a 2c 6b 29 7d 2c 27 61 44 45 71 44 27 3a 64 5b 69 52 28 31 30 39 30 29 5d 2c 27 56 4e 78 5a 43 27 3a 64 5b 69 52 28 31 30 37 39 29 5d 7d 2c 68 3d 3d 6e 75 6c 6c 3f 27 27 3a 64 5b 69 52 28 31 37 30 29 5d 28 27 27 2c 68 29 3f 6e 75 6c 6c 3a 66 2e 69 28 68 5b 69 52 28 38 33 33 29 5d 2c 33 32 37 36 38 2c 66 75 6e 63 74 69 6f 6e 28 6a 2c 69 53 29 7b 72 65 74 75 72 6e 20 69 53 3d 69 52 2c 69 5b 69 53 28 36 30 30 29 5d 28 69 5b 69 53 28 37 30 30 29 5d 2c 69 5b 69 53 28 36 34 39 29 5d 29 3f 76 Data Ascii: ('')},'j':function(h,iR,i){return iR=iL,i={'rjDys':function(j,k,iQ){return iQ=b,d[iQ(305)](j,k)},'aDEqD':d[iR(1090)],'VNxZC':d[iR(1079)]},h==null?'':d[iR(170)]('',h)?null:f.i(h[iR(833)],32768,function(j,iS){return iS=iR,i[iS(600)](i[iS(700)],i[iS(649)])?v

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:15 UTC	785	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:17 UTC	240	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:16 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 91ec6b126d9705c6-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:17 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:19 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4207 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:19 UTC	4207	OUT	Data Raw: 24 41 4e 53 52 53 6b 53 2d 53 46 53 45 77 7a 31 77 7a 57 53 77 4c 35 6b 6f 67 77 52 7a 6f 7a 50 36 4c 32 66 63 7a 70 74 7a 74 4c 4b 4f 4b 38 7a 44 63 7a 41 61 63 4b 34 4f 61 7a 52 63 74 59 4b 79 7a 6a 4c 7a 48 50 63 65 65 63 7a 65 32 35 53 35 66 4e 43 53 32 4f 7a 42 66 69 7a 7a 51 6e 2b 47 77 4f 7a 6a 61 73 56 41 53 4c 67 4f 48 7a 73 69 6b 37 53 59 7a 38 5a 67 4d 41 7a 4d 66 48 50 75 75 4f 6a 6e 47 71 55 4a 67 61 30 4e 77 48 67 72 63 7a 77 5a 63 7a 36 53 4b 51 42 4e 72 71 32 35 49 36 41 63 4b 50 7a 4b 4d 65 4e 7a 52 56 7a 31 39 77 56 56 57 71 6f 7a 4b 70 48 6a 52 4f 7a 6e 47 4e 36 6e 69 74 56 53 35 56 52 35 43 2b 7a 6f 2b 54 49 35 35 36 46 63 35 73 45 77 49 75 70 7a 7a 56 56 5a 38 47 79 6a 6e 51 55 61 79 70 7a 2b 6b 24 7a 48 6e 41 6a 35 4b 63 45 7a 4b 56 Data Ascii: $ANSRSkS-SFSEwz1wzWSwL5kogwRzozP6L2fczptztLKOK8zDczAacK4OazRctYKyzjLzHPceecze25S5fNCS2OzBfizzQn+GwOzjasVASLgOHzsik7SYz8ZgMAzMfHPuuOjnGqUJga0NwHgrczwZcz6SKQBNrq25I6AcKPzKMeNzRVz19wVVWqozKpHjROznGN6nitVS5VR5C+zo+TI556Fc5sEwIupzzVVZ8GyjnQUaypz+k$zHnAj5KcEzKV
2025-03-11 16:27:20 UTC	1071	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:19 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 238572 Connection: close cf-chl-gen: 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$VTYmJ7KbbNo3ctI8iE4P3g== Server: cloudflare CF-RAY: 91ec6b275b3705c3-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:20 UTC	298	IN	Data Raw: 66 37 65 6d 78 34 65 78 6c 4c 54 42 74 62 32 61 6d 72 36 4e 69 62 47 7a 30 64 50 41 70 35 4b 34 70 35 69 6f 73 65 43 58 6d 4e 43 6b 30 62 57 6c 34 4c 6a 6b 33 4c 6e 6f 31 75 58 6b 72 2b 66 42 71 72 2f 67 30 4d 6a 31 30 64 50 7a 75 66 71 2f 39 4f 2f 34 33 72 2f 62 77 66 66 33 32 64 76 4c 2f 4e 7a 48 33 77 48 4d 36 38 33 4f 46 42 54 55 37 76 6b 57 45 66 6e 73 35 76 4c 53 45 41 54 33 46 41 4d 61 46 42 67 48 48 67 67 4c 2f 51 77 4e 47 67 48 39 37 51 67 50 43 69 4d 36 44 67 6f 52 4f 66 77 57 45 7a 38 37 51 54 55 41 42 67 49 7a 4d 52 6f 67 42 7a 78 4e 4f 67 63 79 52 69 39 4e 4c 69 39 45 4b 68 5a 56 55 78 55 57 4b 6c 59 30 50 78 77 30 48 57 45 59 49 56 34 6c 56 6d 52 6c 4b 6a 59 36 59 69 77 79 5a 30 4e 68 5a 57 31 76 61 48 4a 71 4f 57 31 2f 57 58 52 4e 62 6d 42 Data Ascii: f7emx4exlLTBtb2amr6NibGz0dPAp5K4p5ioseCXmNCk0bWl4Ljk3Lno1uXkr+fBqr/g0Mj10dPzufq/9O/43r/bwff32dvL/NzH3wHM683OFBTU7vkWEfns5vLSEAT3FAMaFBgHHggL/QwNGgH97QgPCiM6DgoROfwWEz87QTUABgIzMRogBzxNOgcyRi9NLi9EKhZVUxUWKlY0Pxw0HWEYIV4lVmRlKjY6YiwyZ0NhZW1vaHJqOW1/WXRNbmB
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 5a 30 59 34 61 53 68 36 56 69 59 36 65 50 6e 4a 68 76 71 4b 32 6c 62 71 46 79 6c 71 65 5a 6a 59 75 72 65 4b 2b 50 6f 6e 36 4e 6b 37 61 42 73 35 36 31 6f 49 75 6e 74 63 62 4d 68 70 44 41 76 49 36 48 6a 4b 37 4c 6b 74 43 34 31 63 62 4d 71 62 6d 31 76 75 47 34 32 36 4b 67 77 74 2f 68 70 71 69 6d 77 75 2b 76 71 72 7a 67 73 4c 2f 65 36 74 6e 61 7a 4d 71 31 72 2b 76 65 76 73 48 77 2b 74 33 52 31 2b 48 36 31 64 33 4c 2b 2b 6e 70 33 67 2f 50 33 42 54 6a 42 41 33 50 31 51 51 48 46 76 66 37 33 52 45 41 44 52 6a 31 35 4f 44 38 39 68 54 6c 36 69 30 69 36 42 73 43 2b 77 67 4f 38 54 51 73 38 77 6f 53 4d 79 51 47 48 44 49 52 4b 76 30 35 45 78 59 64 47 51 51 46 51 54 49 39 4b 52 6b 70 55 45 35 53 53 69 77 68 4e 6c 56 53 4e 53 30 32 49 31 52 52 55 78 77 77 49 52 6b 6a 4c Data Ascii: Z0Y4aSh6ViY6ePnJhvqK2lbqFylqeZjYureK+Pon6Nk7aBs561oIuntcbMhpDAvI6HjK7LktC41cbMqbm1vuG426Kgwt/hpqimwu+vqrzgsL/e6tnazMq1r+vevsHw+t3R1+H61d3L++np3g/P3BTjBA3P1QQHFvf73READRj15OD89hTl6i0i6BsC+wgO8TQs8woSMyQGHDIRKv05ExYdGQQFQTI9KRkpUE5SSiwhNlVSNS02I1RRUxwwIRkjL
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 4d 6e 32 70 2f 67 62 47 6c 72 6e 2b 4a 69 59 4f 6d 64 72 65 33 76 4a 6c 76 6b 72 75 78 66 72 6d 72 68 49 32 61 6c 63 47 37 78 35 4f 5a 7a 5a 61 36 75 49 65 69 76 4c 57 32 6f 4b 66 4d 72 4e 53 54 32 74 48 4e 74 4e 69 61 73 4b 4f 36 33 38 4c 6a 32 4c 71 38 31 62 72 63 37 4d 50 59 35 65 47 7a 70 71 76 68 36 65 62 4d 7a 74 72 76 72 2f 7a 49 79 4e 37 33 35 50 66 69 42 74 66 41 75 39 50 6b 32 73 76 6f 33 77 66 4e 2f 42 54 55 45 67 45 55 30 68 62 6b 43 66 73 54 32 66 45 63 2b 52 72 63 4a 69 45 58 46 2b 59 6e 46 53 49 69 48 65 6b 67 2b 6a 41 77 38 53 48 2b 37 41 49 78 4f 6a 76 32 45 50 63 61 4b 78 38 65 4f 76 6b 44 2b 30 45 63 47 52 56 4a 48 43 45 58 46 30 30 44 44 44 73 55 4b 79 5a 48 53 42 46 57 4c 31 45 2b 54 7a 56 4a 50 45 35 56 51 47 42 59 4d 6b 42 53 4f 6c Data Ascii: Mn2p/gbGlrn+JiYOmdre3vJlvkruxfrmrhI2alcG7x5OZzZa6uIeivLW2oKfMrNST2tHNtNiasKO638Lj2Lq81brc7MPY5eGzpqvh6ebMztrvr/zIyN735PfiBtfAu9Pk2svo3wfN/BTUEgEU0hbkCfsT2fEc+RrcJiEXF+YnFSIiHekg+jAw8SH+7AIxOjv2EPcaKx8eOvkD+0EcGRVJHCEXF00DDDsUKyZHSBFWL1E+TzVJPE5VQGBYMkBSOl
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 6b 6e 47 6a 70 5a 36 33 69 4a 65 7a 69 4c 71 6d 6b 4c 54 42 65 4b 32 77 78 59 43 46 6d 4d 48 43 6e 38 61 63 6c 63 50 45 77 4c 32 2f 73 61 66 47 76 72 48 55 31 72 65 38 76 4e 43 32 6c 64 75 65 34 4a 6e 52 34 74 6e 52 30 4e 4b 6f 31 4e 33 6b 35 61 76 4b 78 37 37 64 39 4e 43 74 38 73 37 52 2b 2b 72 4c 79 64 76 77 41 4c 33 58 39 65 50 6d 2b 73 4c 54 41 4d 49 44 2b 41 54 57 78 75 62 61 79 4f 59 56 34 41 54 6f 46 74 66 71 35 68 6b 66 2f 4e 73 55 2b 53 45 4e 31 76 72 7a 46 79 51 63 2b 4f 4d 4b 44 2b 59 43 2b 52 4c 71 41 53 6f 67 49 43 49 33 45 77 59 75 43 67 30 76 43 79 41 38 41 68 72 37 52 6a 41 61 41 68 4a 46 4b 67 52 4a 49 77 49 49 43 6a 35 43 46 43 64 55 46 78 5a 4a 47 46 45 5a 58 43 64 53 54 56 39 4f 48 54 42 43 59 55 64 54 4a 54 51 70 50 6d 41 2f 57 44 35 Data Ascii: knGjpZ63iJeziLqmkLTBeK2wxYCFmMHCn8aclcPEwL2/safGvrHU1re8vNC2ldue4JnR4tnR0NKo1N3k5avKx77d9NCt8s7R++rLydvwAL3X9ePm+sLTAMID+ATWxubayOYV4AToFtfq5hkf/NsU+SEN1vrzFyQc+OMKD+YC+RLqASogICI3EwYuCg0vCyA8Ahr7RjAaAhJFKgRJIwIICj5CFCdUFxZJGFEZXCdSTV9OHTBCYUdTJTQpPmA/WD5
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 4c 70 79 64 6e 4a 33 66 5a 46 35 6c 37 65 34 6c 37 6d 41 6d 6f 4f 78 70 35 53 45 67 36 79 39 75 4d 32 73 76 34 32 71 73 5a 57 58 74 38 69 79 71 35 6e 5a 79 35 32 77 7a 37 37 6b 33 75 57 38 36 4e 66 45 33 2b 71 6d 79 65 72 6c 35 4c 4b 7a 77 4e 48 32 36 72 48 6f 31 4c 4b 7a 37 4e 2f 78 30 64 71 35 32 39 44 36 78 64 48 43 42 2b 41 44 33 4d 55 51 2f 63 33 76 41 41 48 4c 37 4e 48 6b 43 76 59 4f 44 2f 30 47 31 2f 58 72 37 75 72 65 31 76 48 63 4a 79 58 30 48 67 45 48 35 42 6f 74 4a 69 55 6a 48 69 6b 69 4c 53 34 6f 42 43 55 4a 4b 54 6a 30 47 54 34 77 2f 45 45 55 51 6a 59 32 4f 43 55 61 4e 7a 6f 4d 52 69 49 4e 47 79 59 4e 4e 43 64 4b 56 31 68 48 4a 6c 68 52 50 6a 55 78 49 54 6f 79 49 43 4a 53 59 6c 74 62 58 56 6b 69 61 55 74 46 61 7a 74 76 54 32 42 70 53 45 6c 4f Data Ascii: LpydnJ3fZF5l7e4l7mAmoOxp5SEg6y9uM2sv42qsZWXt8iyq5nZy52wz77k3uW86NfE3+qmyerl5LKzwNH26rHo1LKz7N/x0dq529D6xdHCB+AD3MUQ/c3vAAHL7NHkCvYOD/0G1/Xr7ure1vHcJyX0HgEH5BotJiUjHikiLS4oBCUJKTj0GT4w/EEUQjY2OCUaNzoMRiINGyYNNCdKV1hHJlhRPjUxIToyICJSYltbXVkiaUtFaztvT2BpSElO
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 44 41 66 5a 47 69 66 4b 4b 38 72 38 4f 44 74 72 6d 2f 74 38 4f 48 7a 37 36 4d 70 61 71 4e 73 74 4b 34 75 70 48 62 74 38 36 39 6d 73 76 69 79 39 4b 66 74 4f 61 7a 35 4c 6a 61 76 72 6d 6d 72 64 2b 71 71 38 44 4a 74 50 62 70 31 4f 65 7a 77 72 66 33 74 64 2f 63 30 39 4c 43 38 64 51 48 78 65 58 30 31 74 6e 39 42 4e 72 6a 33 74 73 52 35 75 62 66 46 77 45 4f 2b 4e 55 63 44 2b 34 47 39 78 49 54 33 41 33 5a 2f 43 50 6b 49 43 6f 6e 4b 76 6f 45 4c 77 4d 63 2b 42 6f 69 37 69 55 45 45 43 38 7a 49 69 72 32 46 67 73 59 45 54 73 71 4d 79 34 31 47 53 41 2b 49 6a 4d 59 4e 79 49 6b 47 51 73 38 48 6b 63 6c 53 44 64 4b 54 7a 67 31 4e 6b 70 5a 4c 54 67 78 55 55 74 57 57 30 52 42 51 6c 5a 6c 4f 55 51 39 58 56 64 4a 4c 32 56 41 63 31 35 67 52 6d 59 76 59 6b 6c 4b 52 46 70 4d 53 Data Ascii: DAfZGifKK8r8ODtrm/t8OHz76MpaqNstK4upHbt869msviy9KftOaz5Ljavrmmrd+qq8DJtPbp1Oezwrf3td/c09LC8dQHxeX01tn9BNrj3tsR5ubfFwEO+NUcD+4G9xIT3A3Z/CPkIConKvoELwMc+Boi7iUEEC8zIir2FgsYETsqMy41GSA+IjMYNyIkGQs8HkclSDdKTzg1NkpZLTgxUUtWW0RBQlZlOUQ9XVdJL2VAc15gRmYvYklKRFpMS
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 51 73 61 53 58 79 72 6d 74 74 35 66 42 72 61 48 43 77 62 2b 6f 79 5a 50 43 75 71 69 30 30 62 32 58 76 4d 6a 43 76 2b 4c 66 78 64 71 30 35 4d 6d 69 34 73 33 4d 76 4d 6a 72 32 75 62 49 33 4e 54 45 72 2f 54 5a 37 75 72 78 32 2f 4c 63 37 2b 4c 31 2b 76 66 6d 2b 76 4c 79 38 64 6a 32 43 65 7a 73 7a 2f 48 66 37 50 37 31 35 51 63 47 39 65 6a 6b 42 76 6a 72 48 77 34 43 44 4f 73 57 41 76 55 58 46 68 54 38 48 75 63 58 44 67 30 42 49 68 73 6d 4b 79 67 56 42 65 38 70 47 68 6e 33 4c 68 77 79 4d 79 73 69 2b 79 39 42 4a 2f 34 2f 4d 7a 4d 70 43 44 30 32 48 54 73 35 4d 7a 45 68 53 54 52 4c 4e 55 30 37 54 6c 74 4d 50 79 30 59 54 45 73 62 56 6b 35 45 51 54 68 66 4e 30 52 71 59 6a 73 34 61 6d 64 41 55 6a 78 57 51 31 46 49 62 30 6c 56 4f 47 6c 64 54 56 46 7a 61 6c 46 76 62 57 Data Ascii: QsaSXyrmtt5fBraHCwb+oyZPCuqi00b2XvMjCv+Lfxdq05Mmi4s3MvMjr2ubI3NTEr/TZ7urx2/Lc7+L1+vfm+vLy8dj2Cezsz/Hf7P715QcG9ejkBvjrHw4CDOsWAvUXFhT8HucXDg0BIhsmKygVBe8pGhn3LhwyMysi+y9BJ/4/MzMpCD02HTs5MzEhSTRLNU07TltMPy0YTEsbVk5EQThfN0RqYjs4amdAUjxWQ1FIb0lVOGldTVFzalFvbW
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 72 73 48 4f 76 37 47 77 77 63 69 6f 79 70 61 35 70 72 54 4a 74 36 79 33 33 73 47 76 30 61 2f 41 74 64 75 77 30 74 4c 49 7a 4f 66 57 79 4e 33 4a 76 39 43 79 31 4d 50 32 35 64 4c 46 31 4f 72 36 35 63 6a 66 2f 4e 37 79 37 65 33 54 39 62 37 69 35 76 33 31 35 74 6e 6e 2f 67 33 36 42 2b 63 4d 38 73 33 4f 30 2b 77 4b 30 76 62 39 45 39 6f 65 37 2f 73 41 47 2f 45 6d 33 68 4d 49 42 66 73 57 2f 69 54 34 45 68 4d 52 41 53 6b 56 42 51 55 6f 49 67 55 63 4f 53 63 2b 4c 69 6f 55 44 42 51 65 47 42 59 52 50 78 73 37 43 43 73 66 54 6b 6f 35 49 53 77 6c 4d 7a 4e 57 4d 55 6b 6e 4f 53 31 50 50 30 39 54 51 44 30 2b 55 6d 45 31 51 44 6c 5a 55 30 55 72 54 6a 74 4a 58 6b 78 42 54 48 4e 57 52 6d 5a 79 62 57 52 49 62 33 42 66 58 57 46 72 59 6d 46 52 65 31 64 33 52 49 5a 59 56 49 61 Data Ascii: rsHOv7Gwwcioypa5prTJt6y33sGv0a/Atduw0tLIzOfWyN3Jv9Cy1MP25dLF1Or65cjf/N7y7e3T9b7i5v315tnn/g36B+cM8s3O0+wK0vb9E9oe7/sAG/Em3hMIBfsW/iT4EhMRASkVBQUoIgUcOSc+LioUDBQeGBYRPxs7CCsfTko5ISwlMzNWMUknOS1PP09TQD0+UmE1QDlZU0UrTjtJXkxBTHNWRmZybWRIb3BfXWFrYmFRe1d3RIZYVIa
2025-03-11 16:27:20 UTC	1369	IN	Data Raw: 73 36 39 79 64 47 34 71 62 53 72 7a 4b 76 64 33 74 72 4a 31 64 32 2b 74 4d 44 41 34 74 48 64 35 64 69 39 33 65 48 59 32 73 65 2b 71 73 58 50 79 63 50 44 2b 4d 7a 35 31 4e 37 54 75 37 6a 37 39 75 4c 69 31 39 59 48 30 66 58 71 79 74 6a 34 32 4f 73 4f 45 74 73 52 41 78 62 4f 41 64 4c 75 43 4e 63 61 38 76 62 79 49 66 51 44 2f 43 66 6c 4b 66 51 64 46 68 77 42 44 4f 62 71 42 68 41 53 4e 43 45 78 4b 67 37 31 42 54 72 33 38 67 30 66 45 55 48 7a 4e 44 6e 38 2f 69 49 61 41 52 77 31 50 69 35 43 44 41 6c 48 49 55 63 4e 51 78 34 66 46 55 73 61 57 6c 49 2b 46 68 67 32 56 46 78 4d 48 43 4e 44 59 56 77 66 49 53 63 39 59 32 68 77 4c 79 38 6f 59 57 74 71 54 79 35 56 51 30 4a 7a 66 56 46 79 50 48 56 2f 67 32 39 56 52 57 49 2f 61 46 6c 2b 51 30 53 46 56 30 78 38 68 34 69 48 Data Ascii: s69ydG4qbSrzKvd3trJ1d2+tMDA4tHd5di93eHY2se+qsXPycPD+Mz51N7Tu7j79uLi19YH0fXqytj42OsOEtsRAxbOAdLuCNca8vbyIfQD/CflKfQdFhwBDObqBhASNCExKg71BTr38g0fEUHzNDn8/iIaARw1Pi5CDAlHIUcNQx4fFUsaWlI+Fhg2VFxMHCNDYVwfISc9Y2hwLy8oYWtqTy5VQ0JzfVFyPHV/g29VRWI/aFl+Q0SFV0x8h4iH

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:24 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 4221 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R cf-chl-ra: 1 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:24 UTC	4221	OUT	Data Raw: 24 41 4e 53 52 53 6b 53 2d 53 46 53 45 77 7a 31 77 7a 57 53 77 4c 35 6b 6f 67 77 52 7a 6f 7a 50 36 4c 32 66 63 7a 70 74 7a 74 4c 4b 4f 4b 38 7a 44 63 7a 41 61 63 4b 34 4f 61 7a 52 63 74 59 4b 79 7a 6a 4c 7a 48 50 63 65 65 63 7a 65 32 35 53 35 66 4e 43 53 32 4f 7a 42 66 69 7a 7a 51 6e 2b 47 77 4f 7a 6a 61 73 56 41 53 4c 67 4f 48 7a 73 69 6b 37 53 59 7a 38 5a 67 4d 41 7a 4d 66 48 50 75 75 4f 6a 6e 47 71 55 4a 67 61 30 4e 77 48 67 72 63 7a 77 5a 63 7a 36 53 4b 51 42 4e 72 71 32 35 49 36 41 63 4b 50 7a 4b 4d 65 4e 7a 52 56 7a 31 39 77 56 56 57 71 6f 7a 4b 70 48 6a 52 4f 7a 6e 47 4e 36 6e 69 74 56 53 35 56 52 35 43 2b 7a 6f 2b 54 49 35 35 36 46 63 35 73 45 77 49 75 70 7a 7a 56 56 5a 38 47 79 6a 6e 51 55 61 79 70 7a 2b 6b 24 7a 48 6e 41 6a 35 4b 63 45 7a 4b 56 Data Ascii: $ANSRSkS-SFSEwz1wzWSwL5kogwRzozP6L2fczptztLKOK8zDczAacK4OazRctYKyzjLzHPceecze25S5fNCS2OzBfizzQn+GwOzjasVASLgOHzsik7SYz8ZgMAzMfHPuuOjnGqUJga0NwHgrczwZcz6SKQBNrq25I6AcKPzKMeNzRVz19wVVWqozKpHjROznGN6nitVS5VR5C+zo+TI556Fc5sEwIupzzVVZ8GyjnQUaypz+k$zHnAj5KcEzKV
2025-03-11 16:27:25 UTC	1071	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:25 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 238520 Connection: close cf-chl-gen: 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$tOIrBCCq/4KkZ8SMCxbKzQ== Server: cloudflare CF-RAY: 91ec6b4999fed6b1-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:25 UTC	298	IN	Data Raw: 66 37 65 6d 78 34 65 78 6c 4c 54 42 74 62 32 61 6d 72 36 4e 69 62 47 7a 30 64 50 41 70 35 4b 34 70 35 69 6f 73 65 43 58 6d 4e 43 6b 30 62 57 6c 34 4c 6a 6b 33 4c 6e 6f 31 75 58 6b 72 2b 66 42 71 72 2f 67 30 4d 6a 31 30 64 50 7a 75 66 71 2f 39 4f 2f 34 33 72 2f 62 77 66 66 33 32 64 76 4c 2f 4e 7a 48 33 77 48 4d 36 38 33 4f 46 42 54 55 37 76 6b 57 45 66 6e 73 35 76 4c 53 45 41 54 77 45 2f 49 69 4a 67 6a 66 46 53 66 34 4b 76 67 4a 4d 68 77 72 44 54 59 67 4b 41 51 72 4a 41 6f 45 4f 67 67 57 4d 66 6f 78 45 52 51 32 4a 68 51 43 4f 67 55 33 49 6a 6b 58 4f 67 63 79 52 69 39 4e 4c 69 39 45 4b 68 5a 56 55 78 55 57 4b 6c 59 30 50 78 77 30 48 57 45 59 49 56 34 6c 56 6d 52 6c 4b 6a 59 36 59 69 77 79 5a 30 4e 68 5a 57 31 76 61 48 4a 71 4f 57 31 2f 57 58 52 4e 62 6d 42 Data Ascii: f7emx4exlLTBtb2amr6NibGz0dPAp5K4p5ioseCXmNCk0bWl4Ljk3Lno1uXkr+fBqr/g0Mj10dPzufq/9O/43r/bwff32dvL/NzH3wHM683OFBTU7vkWEfns5vLSEATwE/IiJgjfFSf4KvgJMhwrDTYgKAQrJAoEOggWMfoxERQ2JhQCOgU3IjkXOgcyRi9NLi9EKhZVUxUWKlY0Pxw0HWEYIV4lVmRlKjY6YiwyZ0NhZW1vaHJqOW1/WXRNbmB
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 5a 30 59 34 61 53 68 36 56 69 59 36 65 50 6e 4a 68 76 71 4b 57 6c 62 71 46 79 6c 71 65 5a 6a 59 75 72 65 4b 2b 50 6f 6e 36 4e 6b 37 61 42 73 35 36 31 6f 49 75 6e 74 63 62 4d 68 70 44 41 76 49 36 48 6a 4b 37 4c 6b 74 43 34 31 63 62 4d 71 62 6d 31 76 75 47 34 32 36 4b 67 77 74 2f 68 70 71 69 6d 77 75 2b 76 71 72 7a 67 73 4c 2f 65 36 74 6e 61 7a 4d 71 31 72 2b 76 65 76 73 48 77 2b 74 33 52 31 2b 48 36 31 64 33 4c 2b 2b 6e 70 33 67 2f 50 33 42 54 6a 42 41 33 50 31 51 51 48 46 76 66 37 33 52 45 41 44 52 6a 31 35 4f 44 38 39 68 54 6c 36 69 30 69 36 42 73 43 2b 77 67 4f 38 54 51 73 38 77 6f 53 4d 79 51 47 48 44 49 52 4b 76 30 35 45 78 59 64 47 51 51 46 51 54 49 39 4b 52 6b 70 55 45 35 53 53 69 77 68 4e 6c 56 53 4e 53 30 32 49 31 52 52 55 78 77 77 49 52 6b 6a 4c Data Ascii: Z0Y4aSh6ViY6ePnJhvqKWlbqFylqeZjYureK+Pon6Nk7aBs561oIuntcbMhpDAvI6HjK7LktC41cbMqbm1vuG426Kgwt/hpqimwu+vqrzgsL/e6tnazMq1r+vevsHw+t3R1+H61d3L++np3g/P3BTjBA3P1QQHFvf73READRj15OD89hTl6i0i6BsC+wgO8TQs8woSMyQGHDIRKv05ExYdGQQFQTI9KRkpUE5SSiwhNlVSNS02I1RRUxwwIRkjL
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 4d 6e 32 70 2f 67 62 47 6c 72 6e 2b 4a 69 59 4f 6d 64 72 65 33 76 4a 6c 76 6b 72 75 78 66 72 6d 72 68 49 32 61 6c 63 47 37 78 35 4f 5a 7a 5a 61 36 75 49 65 69 76 4c 57 32 6f 4b 66 4d 72 4e 53 54 32 74 48 4e 74 4e 69 61 73 4b 4f 36 33 38 4c 6a 32 4c 71 38 31 62 72 63 37 4d 50 59 35 65 47 7a 70 71 76 68 36 65 62 4d 7a 74 72 76 72 2f 7a 49 79 4e 37 33 35 50 66 69 42 74 66 41 75 39 50 6b 32 73 76 6f 33 77 66 4e 2f 42 54 55 45 67 45 55 30 68 62 6b 43 66 73 54 32 66 45 63 2b 52 72 63 4a 69 45 58 46 2b 59 6e 46 53 49 69 48 65 6b 67 2b 6a 41 77 38 53 48 2b 37 41 49 78 4f 6a 76 32 45 50 63 61 4b 78 38 65 4f 76 6b 44 2b 30 45 63 47 52 56 4a 48 43 45 58 46 30 30 44 44 44 73 55 4b 79 5a 48 53 42 46 57 4c 31 45 2b 54 7a 56 4a 50 45 35 56 51 47 42 59 4d 6b 42 53 4f 6c Data Ascii: Mn2p/gbGlrn+JiYOmdre3vJlvkruxfrmrhI2alcG7x5OZzZa6uIeivLW2oKfMrNST2tHNtNiasKO638Lj2Lq81brc7MPY5eGzpqvh6ebMztrvr/zIyN735PfiBtfAu9Pk2svo3wfN/BTUEgEU0hbkCfsT2fEc+RrcJiEXF+YnFSIiHekg+jAw8SH+7AIxOjv2EPcaKx8eOvkD+0EcGRVJHCEXF00DDDsUKyZHSBFWL1E+TzVJPE5VQGBYMkBSOl
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 6b 6e 47 6a 70 5a 36 33 69 4a 65 7a 69 4c 71 6d 6b 4c 54 42 65 4b 32 77 78 59 43 46 6d 4d 48 43 6e 38 61 63 6c 63 50 45 77 4c 32 2f 73 61 66 47 76 72 48 55 31 72 65 38 76 4e 43 32 6c 64 75 65 34 4a 6e 52 34 74 6e 52 30 4e 4b 6f 31 4e 33 6b 35 61 76 4b 78 37 37 64 39 4e 43 74 38 73 37 52 2b 2b 72 4c 79 64 76 77 41 4c 33 58 39 65 50 6d 2b 73 4c 54 41 4d 49 44 2b 41 54 57 78 75 62 61 79 4f 59 56 34 41 54 6f 46 74 66 71 35 68 6b 66 2f 4e 73 55 2b 53 45 4e 31 76 72 7a 46 79 51 63 2b 4f 4d 4b 44 2b 59 43 2b 52 4c 71 41 53 6f 67 49 43 49 33 45 77 59 75 43 67 30 76 43 79 41 38 41 68 72 37 52 6a 41 61 41 68 4a 46 4b 67 52 4a 49 77 49 49 43 6a 35 43 46 43 64 55 46 78 5a 4a 47 46 45 5a 58 43 64 53 54 56 39 4f 48 54 42 43 59 55 64 54 4a 54 51 70 50 6d 41 2f 57 44 35 Data Ascii: knGjpZ63iJeziLqmkLTBeK2wxYCFmMHCn8aclcPEwL2/safGvrHU1re8vNC2ldue4JnR4tnR0NKo1N3k5avKx77d9NCt8s7R++rLydvwAL3X9ePm+sLTAMID+ATWxubayOYV4AToFtfq5hkf/NsU+SEN1vrzFyQc+OMKD+YC+RLqASogICI3EwYuCg0vCyA8Ahr7RjAaAhJFKgRJIwIICj5CFCdUFxZJGFEZXCdSTV9OHTBCYUdTJTQpPmA/WD5
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 4c 70 79 64 6e 4a 33 66 5a 46 35 6c 37 65 34 6c 37 6d 41 6d 6f 4f 78 70 35 53 45 67 36 79 39 75 4d 32 73 76 34 32 71 73 5a 57 58 74 38 69 79 71 35 6e 5a 79 35 32 77 7a 37 37 6b 33 75 57 38 36 4e 66 45 33 2b 71 6d 79 65 72 6c 35 4c 4b 7a 77 4e 48 32 36 72 48 6f 31 4c 4b 7a 37 4e 2f 78 30 64 71 35 32 39 44 36 78 64 48 43 42 2b 41 44 33 4d 55 51 2f 63 33 76 41 41 48 4c 37 4e 48 6b 43 76 59 4f 44 2f 30 47 31 2f 58 72 37 75 72 65 31 76 48 63 4a 79 58 30 48 67 45 48 35 42 6f 74 4a 69 55 6a 48 69 6b 69 4c 53 34 6f 42 43 55 4a 4b 54 6a 30 47 54 34 77 2f 45 45 55 51 6a 59 32 4f 43 55 61 4e 7a 6f 4d 52 69 49 4e 47 79 59 4e 4e 43 64 4b 56 31 68 48 4a 6c 68 52 50 6a 55 78 49 54 6f 79 49 43 4a 53 59 6c 74 62 58 56 6b 69 61 55 74 46 61 7a 74 76 54 32 42 70 53 45 6c 4f Data Ascii: LpydnJ3fZF5l7e4l7mAmoOxp5SEg6y9uM2sv42qsZWXt8iyq5nZy52wz77k3uW86NfE3+qmyerl5LKzwNH26rHo1LKz7N/x0dq529D6xdHCB+AD3MUQ/c3vAAHL7NHkCvYOD/0G1/Xr7ure1vHcJyX0HgEH5BotJiUjHikiLS4oBCUJKTj0GT4w/EEUQjY2OCUaNzoMRiINGyYNNCdKV1hHJlhRPjUxIToyICJSYltbXVkiaUtFaztvT2BpSElO
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 44 41 66 5a 47 69 66 4b 4b 38 72 38 4f 44 74 72 6d 2f 74 38 4f 48 7a 37 36 4d 70 61 71 4e 73 74 4b 34 75 70 48 62 74 38 36 39 6d 73 76 69 79 39 4b 66 74 4f 61 7a 35 4c 6a 61 76 72 6d 6d 72 64 2b 71 71 38 44 4a 74 50 62 70 31 4f 65 7a 77 72 66 33 74 64 2f 63 30 39 4c 43 38 64 51 48 78 65 58 30 31 74 6e 39 42 4e 72 6a 33 74 73 52 35 75 62 66 46 77 45 4f 2b 4e 55 63 44 2b 34 47 39 78 49 54 33 41 33 5a 2f 43 50 6b 49 43 6f 6e 4b 76 6f 45 4c 77 4d 63 2b 42 6f 69 37 69 55 45 45 43 38 7a 49 69 72 32 46 67 73 59 45 54 73 71 4d 79 34 31 47 53 41 2b 49 6a 4d 59 4e 79 49 6b 47 51 73 38 48 6b 63 6c 53 44 64 4b 54 7a 67 31 4e 6b 70 5a 4c 54 67 78 55 55 74 57 57 30 52 42 51 6c 5a 6c 4f 55 51 39 58 56 64 4a 4c 32 56 41 63 31 35 67 52 6d 59 76 59 6b 6c 4b 52 46 70 4d 53 Data Ascii: DAfZGifKK8r8ODtrm/t8OHz76MpaqNstK4upHbt869msviy9KftOaz5Ljavrmmrd+qq8DJtPbp1Oezwrf3td/c09LC8dQHxeX01tn9BNrj3tsR5ubfFwEO+NUcD+4G9xIT3A3Z/CPkIConKvoELwMc+Boi7iUEEC8zIir2FgsYETsqMy41GSA+IjMYNyIkGQs8HkclSDdKTzg1NkpZLTgxUUtWW0RBQlZlOUQ9XVdJL2VAc15gRmYvYklKRFpMS
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 51 73 61 53 58 79 72 6d 74 74 35 66 42 72 61 48 43 77 62 2b 6f 79 5a 50 43 75 71 69 30 30 62 32 58 76 4d 6a 43 76 2b 4c 66 78 64 71 30 35 4d 6d 69 34 73 33 4d 76 4d 6a 72 32 75 62 49 33 4e 54 45 72 2f 54 5a 37 75 72 78 32 2f 4c 63 37 2b 4c 31 2b 76 66 6d 2b 76 4c 79 38 64 6a 32 43 65 7a 73 7a 2f 48 66 37 50 37 31 35 51 63 47 39 65 6a 6b 42 76 6a 72 48 77 34 43 44 4f 73 57 41 76 55 58 46 68 54 38 48 75 63 58 44 67 30 42 49 68 73 6d 4b 79 67 56 42 65 38 70 47 68 6e 33 4c 68 77 79 4d 79 73 69 2b 79 39 42 4a 2f 34 2f 4d 7a 4d 70 43 44 30 32 48 54 73 35 4d 7a 45 68 53 54 52 4c 4e 55 30 37 54 6c 74 4d 50 79 30 59 54 45 73 62 56 6b 35 45 51 54 68 66 4e 30 52 71 59 6a 73 34 61 6d 64 41 55 6a 78 57 51 31 46 49 62 30 6c 56 4f 47 6c 64 54 56 46 7a 61 6c 46 76 62 57 Data Ascii: QsaSXyrmtt5fBraHCwb+oyZPCuqi00b2XvMjCv+Lfxdq05Mmi4s3MvMjr2ubI3NTEr/TZ7urx2/Lc7+L1+vfm+vLy8dj2Cezsz/Hf7P715QcG9ejkBvjrHw4CDOsWAvUXFhT8HucXDg0BIhsmKygVBe8pGhn3LhwyMysi+y9BJ/4/MzMpCD02HTs5MzEhSTRLNU07TltMPy0YTEsbVk5EQThfN0RqYjs4amdAUjxWQ1FIb0lVOGldTVFzalFvbW
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 72 73 48 4f 76 37 47 77 77 63 69 6f 79 70 61 35 70 72 54 4a 74 36 79 33 33 73 47 76 30 61 2f 41 74 64 75 77 30 74 4c 49 7a 4f 66 57 79 4e 33 4a 76 39 43 79 31 4d 50 32 35 64 4c 46 31 4f 72 36 35 63 6a 66 2f 4e 37 79 37 65 33 54 39 62 37 69 35 76 33 31 35 74 6e 6e 2f 67 33 36 42 2b 63 4d 38 73 33 4f 30 2b 77 4b 30 76 62 39 45 39 6f 65 37 2f 73 41 47 2f 45 6d 33 68 4d 49 42 66 73 57 2f 69 54 34 45 68 4d 52 41 53 6b 56 42 51 55 6f 49 67 55 63 4f 53 63 2b 4c 69 6f 55 44 42 51 65 47 42 59 52 50 78 73 37 43 43 73 66 54 6b 6f 35 49 53 77 6c 4d 7a 4e 57 4d 55 6b 6e 4f 53 31 50 50 30 39 54 51 44 30 2b 55 6d 45 31 51 44 6c 5a 55 30 55 72 54 6a 74 4a 58 6b 78 42 54 48 4e 57 52 6d 5a 79 62 57 52 49 62 33 42 66 58 57 46 72 59 6d 46 52 65 31 64 33 52 49 5a 59 56 49 61 Data Ascii: rsHOv7Gwwcioypa5prTJt6y33sGv0a/Atduw0tLIzOfWyN3Jv9Cy1MP25dLF1Or65cjf/N7y7e3T9b7i5v315tnn/g36B+cM8s3O0+wK0vb9E9oe7/sAG/Em3hMIBfsW/iT4EhMRASkVBQUoIgUcOSc+LioUDBQeGBYRPxs7CCsfTko5ISwlMzNWMUknOS1PP09TQD0+UmE1QDlZU0UrTjtJXkxBTHNWRmZybWRIb3BfXWFrYmFRe1d3RIZYVIa
2025-03-11 16:27:25 UTC	1369	IN	Data Raw: 73 36 39 79 64 47 34 71 62 53 72 7a 4b 76 64 33 74 72 4a 31 64 32 2b 74 4d 44 41 34 74 48 64 35 64 69 39 33 65 48 59 32 73 65 2b 71 73 58 50 79 63 50 44 2b 4d 7a 35 31 4e 37 54 75 37 6a 72 39 75 4c 69 31 39 59 48 30 66 58 71 79 74 6a 34 32 4f 73 4f 45 74 73 52 41 78 62 4f 41 64 4c 75 43 4e 63 61 38 76 62 79 49 66 51 44 2f 43 66 6c 4b 66 51 64 46 68 77 42 44 4f 62 71 42 68 41 53 4e 43 45 78 4b 67 37 31 42 54 72 33 38 67 30 66 45 55 48 7a 4e 44 6e 38 2f 69 49 61 41 52 77 31 50 69 35 43 44 41 6c 48 49 55 63 4e 51 78 34 66 46 55 73 61 57 6c 49 2b 46 68 67 32 56 46 78 4d 48 43 4e 44 59 56 77 66 49 53 63 39 59 32 68 77 4c 79 38 6f 59 57 74 71 54 79 35 56 51 30 4a 7a 66 56 46 79 50 48 56 2f 67 32 39 56 52 57 49 2f 61 46 6c 2b 51 30 53 46 56 30 78 38 68 34 69 48 Data Ascii: s69ydG4qbSrzKvd3trJ1d2+tMDA4tHd5di93eHY2se+qsXPycPD+Mz51N7Tu7jr9uLi19YH0fXqytj42OsOEtsRAxbOAdLuCNca8vbyIfQD/CflKfQdFhwBDObqBhASNCExKg71BTr38g0fEUHzNDn8/iIaARw1Pi5CDAlHIUcNQx4fFUsaWlI+Fhg2VFxMHCNDYVwfISc9Y2hwLy8oYWtqTy5VQ0JzfVFyPHV/g29VRWI/aFl+Q0SFV0x8h4iH

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:30 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:31 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 11 Mar 2025 16:27:30 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: 1RyInE49bHszp6lQxdW6gZSU4VMUwIT5V1XbvdcQMbBGv2hygWoGZ4NwSLzGdiFyrGe31pY/2KVog+mP1P7TyQ==$KFPZ95hxpfUEt6JwojArkQ== Server: cloudflare CF-RAY: 91ec6b6e4c5c0837-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:31 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:31 UTC	828	OUT	GET /cdn-cgi/challenge-platform/h/g/d/91ec6af6ed81d65b/1741710445108/sT965rpB_3HJAn_ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:31 UTC	200	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:31 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 91ec6b72d9963931-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:31 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 2b 00 00 00 42 08 02 00 00 00 41 c4 b8 05 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR+BAIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:34 UTC	857	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/91ec6af6ed81d65b/1741710445110/b4267656a0a698a3f05054b3d0ce89c2ef786a733912432f134d62d93baaffa0/W2H94TjrtQ2KZEo HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:34 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Tue, 11 Mar 2025 16:27:34 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-11 16:27:34 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 74 43 5a 32 56 71 43 6d 6d 4b 50 77 55 46 53 7a 30 4d 36 4a 77 75 39 34 61 6e 4d 35 45 6b 4d 76 45 30 31 69 32 54 75 71 5f 36 41 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gtCZ2VqCmmKPwUFSz0M6Jwu94anM5EkMvE01i2Tuq_6AAGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-11 16:27:34 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:37 UTC	1193	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 39450 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R cf-chl-ra: 1 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:37 UTC	16384	OUT	Data Raw: 24 41 4e 53 49 77 4b 4f 47 77 6b 32 4e 52 61 7a 36 4b 73 2b 4e 35 54 4b 6f 7a 34 53 6e 63 4c 6f 66 4b 65 7a 62 4c 57 63 77 74 4b 32 35 7a 6e 4c 7a 59 7a 65 7a 24 4c 4c 32 4d 73 63 7a 70 74 7a 4e 4c 77 56 72 7a 62 6b 7a 45 24 6e 4b 7a 4b 4a 7a 2b 6b 4b 79 6f 43 4b 72 50 39 48 6a 63 35 38 67 43 53 2b 41 7a 31 7a 4b 4e 7a 57 7a 48 56 2d 4e 7a 38 53 7a 4f 5a 7a 6e 4e 4b 62 7a 48 4e 6b 7a 66 53 7a 6b 47 4d 6c 53 7a 67 38 7a 6a 73 74 7a 69 32 77 54 5a 62 68 73 4f 53 4d 44 74 24 7a 53 62 35 2d 6a 35 72 4e 53 7a 6a 68 73 5a 54 38 4b 5a 32 72 6b 35 47 69 54 61 7a 35 70 4e 6f 41 7a 75 7a 62 52 43 79 41 53 7a 62 56 6d 7a 6a 70 52 54 53 49 65 7a 77 36 6d 57 64 4e 7a 38 66 70 34 59 24 6b 53 7a 7a 4d 73 6a 63 77 66 39 48 39 74 68 6f 6b 7a 24 75 48 7a 72 53 35 67 4e 4c Data Ascii: $ANSIwKOGwk2NRaz6Ks+N5TKoz4SncLofKezbLWcwtK25znLzYzez$LL2MsczptzNLwVrzbkzE$nKzKJz+kKyoCKrP9Hjc58gCS+Az1zKNzWzHV-Nz8SzOZznNKbzHNkzfSzkGMlSzg8zjstzi2wTZbhsOSMDt$zSb5-j5rNSzjhsZT8KZ2rk5GiTaz5pNoAzuzbRCyASzbVmzjpRTSIezw6mWdNz8fp4Y$kSzzMsjcwf9H9thokz$uHzrS5gNL
2025-03-11 16:27:37 UTC	16384	OUT	Data Raw: 53 64 4f 76 33 56 4a 50 2b 37 4c 36 77 4e 64 4f 48 63 69 5a 63 31 4b 6f 39 72 36 64 74 63 4a 48 69 53 53 47 34 35 6c 7a 31 6d 2b 4e 48 4a 6c 7a 4f 6b 7a 68 50 32 6d 6b 6b 34 4b 63 36 59 66 41 4e 77 4b 6f 5a 30 4c 34 65 2d 37 46 6e 6c 4f 55 30 6f 6d 6b 59 7a 79 65 64 50 6d 68 75 62 77 6f 4c 77 57 59 6b 34 6f 63 77 4c 34 6f 6f 34 6e 4d 43 6b 2b 7a 24 4c 77 67 4e 74 53 48 49 7a 37 4c 63 74 53 6b 35 72 61 32 31 7a 57 30 69 4c 63 53 6a 63 77 41 34 6f 65 49 4a 4b 36 7a 6c 45 74 63 74 56 7a 66 6d 4b 47 35 2d 68 44 53 6e 47 4c 73 4f 6b 38 64 74 35 50 43 31 4c 6f 36 6e 47 59 63 47 64 30 59 70 48 2d 4d 61 55 7a 66 7a 78 51 7a 59 77 6d 32 63 44 43 38 4e 65 4e 74 51 69 50 4b 46 7a 53 6a 49 24 6b 65 4e 59 46 61 35 68 6f 4c 24 74 52 79 53 65 66 24 6b 4b 33 72 48 63 38 Data Ascii: SdOv3VJP+7L6wNdOHciZc1Ko9r6dtcJHiSSG45lz1m+NHJlzOkzhP2mkk4Kc6YfANwKoZ0L4e-7FnlOU0omkYzyedPmhubwoLwWYk4ocwL4oo4nMCk+z$LwgNtSHIz7LctSk5ra21zW0iLcSjcwA4oeIJK6zlEtctVzfmKG5-hDSnGLsOk8dt5PC1Lo6nGYcGd0YpH-MaUzfzxQzYwm2cDC8NeNtQiPKFzSjI$keNYFa5hoL$tRySef$kK3rHc8
2025-03-11 16:27:37 UTC	6682	OUT	Data Raw: 30 4d 5a 43 2d 37 51 71 46 54 52 41 61 51 42 46 54 70 2d 46 70 48 64 54 52 2d 53 33 6e 24 54 51 2d 66 73 30 61 53 64 2d 36 73 71 2b 62 78 2d 34 73 33 4d 54 6b 52 62 51 39 32 54 6f 2d 6c 51 71 68 5a 57 2d 64 73 39 24 5a 52 2d 73 51 6d 30 54 32 2d 6d 73 4d 30 54 54 2d 39 73 39 6e 5a 7a 42 4c 51 33 6e 5a 6f 2d 6d 6a 41 24 5a 4e 42 56 51 71 49 5a 34 2d 71 51 71 43 37 32 2d 4d 51 42 30 54 61 42 30 51 4d 6e 5a 53 42 75 6a 42 35 5a 30 2d 56 68 56 37 54 6c 2d 34 51 30 37 54 5a 2d 43 73 6d 69 54 44 2d 4d 6a 41 46 54 53 42 71 73 41 68 54 51 53 59 51 71 76 54 39 2d 42 6a 33 76 54 6b 42 5a 6a 4d 38 30 41 42 4c 54 41 38 37 43 42 73 73 30 2d 54 63 42 30 54 6d 42 54 4e 42 42 54 4d 45 54 4a 2d 33 54 41 62 5a 55 2d 41 44 39 2d 54 50 42 54 73 33 6f 5a 67 42 36 54 6d 24 54 Data Ascii: 0MZC-7QqFTRAaQBFTp-FpHdTR-S3n$TQ-fs0aSd-6sq+bx-4s3MTkRbQ92To-lQqhZW-ds9$ZR-sQm0T2-msM0TT-9s9nZzBLQ3nZo-mjA$ZNBVQqIZ4-qQqC72-MQB0TaB0QMnZSBujB5Z0-VhV7Tl-4Q07TZ-CsmiTD-MjAFTSBqsAhTQSYQqvT9-Bj3vTkBZjM80ABLTA87CBss0-TcB0TmBTNBBTMETJ-3TAbZU-AD9-TPBTs3oZgB6Tm$T
2025-03-11 16:27:37 UTC	322	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:37 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 27984 Connection: close cf-chl-gen: 7HL/QvsWVRj+oCv3TDmNl02YyEAagFYcZAGt63CXg/t4cHPS1AMLsM6iflAooh9x$ynjapbIHyDHMz5DpR+diKg== Server: cloudflare CF-RAY: 91ec6b97ec13c963-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:37 UTC	1047	IN	Data Raw: 66 37 65 6d 78 34 65 46 76 73 44 43 78 63 36 2b 78 4b 32 6d 70 49 72 47 72 35 65 34 74 37 75 62 76 4c 76 64 33 63 32 2f 6d 72 2f 43 72 5a 69 76 32 4f 50 6b 75 4b 6a 44 31 39 79 70 37 4c 2b 78 78 50 54 66 32 4b 2f 4e 32 63 7a 35 76 4f 76 57 41 50 76 4b 2b 4e 44 66 32 66 63 4b 38 77 7a 61 43 4f 41 4a 36 73 76 6e 7a 51 2f 2b 43 38 37 53 43 64 6e 5a 37 73 34 50 46 2f 4d 4d 32 51 41 63 38 75 30 6b 35 50 45 63 46 75 67 4b 36 41 51 72 44 7a 49 73 37 51 67 50 43 68 49 36 2b 41 33 31 50 44 73 78 4d 66 73 43 2f 54 45 74 41 55 49 33 4e 43 67 4b 41 78 6f 49 4b 45 51 79 4c 45 34 68 49 68 56 51 55 42 4a 54 52 44 77 33 55 46 70 4a 53 31 64 4c 49 69 4e 53 57 46 73 6d 5a 6d 68 69 4e 55 52 4b 59 53 70 53 58 6a 46 44 5a 6d 74 47 63 55 6c 7a 54 31 4a 51 58 31 6b 39 59 46 39 Data Ascii: f7emx4eFvsDCxc6+xK2mpIrGr5e4t7ubvLvd3c2/mr/CrZiv2OPkuKjD19yp7L+xxPTf2K/N2cz5vOvWAPvK+NDf2fcK8wzaCOAJ6svnzQ/+C87SCdnZ7s4PF/MM2QAc8u0k5PEcFugK6AQrDzIs7QgPChI6+A31PDsxMfsC/TEtAUI3NCgKAxoIKEQyLE4hIhVQUBJTRDw3UFpJS1dLIiNSWFsmZmhiNURKYSpSXjFDZmtGcUlzT1JQX1k9YF9
2025-03-11 16:27:37 UTC	1369	IN	Data Raw: 55 79 72 6d 56 32 4d 75 72 6d 4b 43 66 77 70 33 51 77 37 76 68 76 74 65 6d 30 38 62 4e 34 4b 71 73 34 65 2f 6c 73 4d 33 6e 78 4e 62 50 72 4c 6d 32 78 76 62 32 37 74 33 4f 7a 41 4b 37 77 38 62 31 76 77 76 57 76 75 7a 32 2f 67 55 4a 44 39 76 31 34 75 33 79 34 50 50 35 45 4e 67 65 44 78 49 43 49 68 4d 69 34 4e 34 52 47 69 41 6d 48 41 59 73 39 2b 73 52 4d 68 30 4e 45 43 30 42 49 51 4c 75 4b 2f 6e 34 4f 77 34 55 43 42 6c 41 46 76 6b 34 46 54 78 42 42 45 41 59 46 7a 30 66 4d 43 38 2b 4a 51 34 70 4d 77 35 4e 51 42 4a 46 56 30 55 38 57 55 34 72 4e 31 4e 56 54 6d 51 6c 47 54 35 6d 49 6a 35 44 58 30 34 2b 5a 45 49 6b 55 57 6c 65 51 46 4e 52 57 45 6f 31 4f 6e 64 4d 63 58 56 4f 64 56 56 63 59 59 56 53 58 48 74 48 64 47 68 38 53 57 4f 48 54 6c 42 51 58 6f 78 72 69 6d Data Ascii: UyrmV2MurmKCfwp3Qw7vhvtem08bN4Kqs4e/lsM3nxNbPrLm2xvb27t3OzAK7w8b1vwvWvuz2/gUJD9v14u3y4PP5ENgeDxICIhMi4N4RGiAmHAYs9+sRMh0NEC0BIQLuK/n4Ow4UCBlAFvk4FTxBBEAYFz0fMC8+JQ4pMw5NQBJFV0U8WU4rN1NVTmQlGT5mIj5DX04+ZEIkUWleQFNRWEo1OndMcXVOdVVcYYVSXHtHdGh8SWOHTlBQXoxrim
2025-03-11 16:27:37 UTC	1369	IN	Data Raw: 74 4c 53 63 6d 71 47 78 30 75 48 57 73 4c 75 33 77 72 2f 66 72 72 7a 42 79 63 2f 4f 79 50 48 7a 73 75 50 61 75 63 6e 39 31 62 65 2f 2b 76 6e 36 2f 63 41 48 38 72 33 49 32 75 44 63 31 2b 4c 73 45 50 45 53 36 64 49 54 44 65 58 7a 44 42 6e 37 2b 2f 55 5a 41 50 30 55 39 68 63 46 47 77 4c 31 43 52 38 69 41 2b 55 5a 2f 42 30 71 44 67 33 6b 2f 54 59 49 44 42 6b 6c 4b 69 55 32 2b 44 63 30 43 78 77 4c 48 54 41 45 46 68 41 6f 47 42 6f 6a 4b 41 4e 47 44 6b 34 6b 4b 69 34 71 52 42 38 79 55 45 68 4b 57 45 31 61 4c 44 49 62 56 54 31 59 50 56 39 52 4d 6b 5a 6b 59 56 68 70 58 69 63 74 50 47 68 69 4b 32 68 48 50 6e 64 55 5a 6b 5a 50 56 6c 70 58 62 31 35 34 53 33 39 55 65 33 4e 6e 65 45 4a 31 65 49 4a 47 62 6d 4e 47 65 31 70 68 55 55 31 6d 6b 6e 46 35 69 46 70 6f 6e 70 5a Data Ascii: tLScmqGx0uHWsLu3wr/frrzByc/OyPHzsuPaucn91be/+vn6/cAH8r3I2uDc1+LsEPES6dITDeXzDBn7+/UZAP0U9hcFGwL1CR8iA+UZ/B0qDg3k/TYIDBklKiU2+Dc0CxwLHTAEFhAoGBojKANGDk4kKi4qRB8yUEhKWE1aLDIbVT1YPV9RMkZkYVhpXictPGhiK2hHPndUZkZPVlpXb154S39Ue3NneEJ1eIJGbmNGe1phUU1mknF5iFponpZ
2025-03-11 16:27:37 UTC	1369	IN	Data Raw: 65 4c 6c 77 75 6a 45 32 4b 75 72 37 61 6a 4f 79 65 44 49 72 39 57 30 77 39 58 33 37 74 61 32 75 4c 37 32 30 37 33 4f 2b 4d 48 44 42 63 58 65 2b 64 6b 48 41 2b 62 75 31 2b 44 6b 7a 73 7a 69 45 2b 2f 7a 37 4e 58 72 32 4f 72 38 44 74 72 75 37 41 54 35 39 78 49 43 46 42 37 38 47 53 6e 6b 36 52 63 6b 4c 42 45 74 2b 7a 4d 71 37 78 59 68 43 54 49 52 4f 68 62 34 4f 50 63 38 41 55 41 75 45 6a 59 65 47 51 42 4c 4c 42 74 43 4b 77 35 50 50 41 78 45 53 53 49 72 55 7a 6f 4d 56 78 51 30 55 79 73 6f 47 53 41 65 56 47 42 46 49 6d 4e 69 4f 7a 56 69 56 32 30 68 61 31 42 69 58 48 4e 70 4c 32 6c 41 51 53 78 77 5a 46 59 39 53 33 5a 67 63 55 77 2b 62 7a 39 53 65 46 32 48 67 30 6c 36 6a 33 68 63 57 55 31 70 58 33 32 47 6a 48 56 55 68 70 6c 77 6c 56 35 32 6b 59 39 5a 63 48 57 5a Data Ascii: eLlwujE2Kur7ajOyeDIr9W0w9X37ta2uL72073O+MHDBcXe+dkHA+bu1+DkzsziE+/z7NXr2Or8Dtru7AT59xICFB78GSnk6RckLBEt+zMq7xYhCTIROhb4OPc8AUAuEjYeGQBLLBtCKw5PPAxESSIrUzoMVxQ0UysoGSAeVGBFImNiOzViV20ha1BiXHNpL2lAQSxwZFY9S3ZgcUw+bz9SeF2Hg0l6j3hcWU1pX32GjHVUhplwlV52kY9ZcHWZ
2025-03-11 16:27:37 UTC	1369	IN	Data Raw: 50 62 36 37 72 6c 76 63 58 54 38 4d 37 72 39 75 72 6d 78 62 54 76 39 75 76 57 2b 51 4b 35 31 50 73 46 2b 65 62 2b 43 51 62 36 39 75 72 6a 35 41 7a 4b 35 77 44 6e 41 78 50 55 42 4e 63 53 42 78 34 57 39 52 6e 34 39 39 34 68 47 75 44 6c 39 41 55 47 46 51 6e 71 35 2b 34 77 44 79 63 6f 48 7a 49 53 2f 67 51 33 4f 51 62 74 4f 76 6a 2b 4b 41 38 58 49 79 54 36 2f 67 63 49 49 30 45 48 47 55 77 70 4b 30 77 4f 54 6b 56 4a 55 6c 41 79 49 56 49 72 57 46 52 50 4b 45 30 34 50 54 30 75 5a 46 6c 42 55 57 6c 57 4d 69 51 37 49 30 74 70 57 6b 4d 6f 4c 44 4e 4e 58 33 5a 68 65 55 64 61 66 56 4a 34 56 55 42 79 59 32 35 31 5a 57 64 47 56 33 5a 6e 68 56 79 4b 53 32 68 72 53 4a 42 6e 69 56 46 6f 63 70 5a 4c 5a 32 35 62 6c 34 6d 55 66 4a 5a 2f 67 71 4f 4e 5a 58 4b 48 65 48 5a 69 68 Data Ascii: Pb67rlvcXT8M7r9urmxbTv9uvW+QK51PsF+eb+CQb69urj5AzK5wDnAxPUBNcSBx4W9Rn4994hGuDl9AUGFQnq5+4wDycoHzIS/gQ3OQbtOvj+KA8XIyT6/gcII0EHGUwpK0wOTkVJUlAyIVIrWFRPKE04PT0uZFlBUWlWMiQ7I0tpWkMoLDNNX3ZheUdafVJ4VUByY251ZWdGV3ZnhVyKS2hrSJBniVFocpZLZ25bl4mUfJZ/gqONZXKHeHZih
2025-03-11 16:27:37 UTC	1369	IN	Data Raw: 37 36 76 50 46 36 4e 48 6c 75 75 37 7a 33 73 76 6e 32 76 76 30 77 65 36 33 77 67 67 42 41 73 49 47 39 51 49 51 45 50 6f 4a 35 74 50 54 37 4f 66 57 37 42 55 58 30 2b 6b 56 2f 64 34 56 39 77 41 6b 41 41 66 6d 49 68 77 44 41 67 58 70 49 69 6f 49 44 51 45 4c 4c 69 67 72 38 66 63 46 47 79 55 6c 47 77 59 37 49 43 45 78 4e 79 55 4f 2f 43 41 6c 53 51 63 54 4f 68 30 72 50 54 41 61 43 54 4e 4d 48 6b 30 6e 45 45 70 50 4e 78 51 6d 48 69 6b 2f 47 31 34 79 54 55 41 6c 49 6b 49 6f 57 6a 6c 4c 51 45 4d 33 5a 6d 73 37 62 6e 4a 57 64 6d 46 56 57 56 42 4e 55 32 39 38 58 46 5a 4c 53 7a 31 79 56 56 70 66 57 33 70 6c 64 47 70 58 68 45 70 4e 58 59 5a 66 67 32 6c 50 67 49 71 48 57 58 4e 61 64 48 56 38 6d 49 6d 53 6a 48 4a 36 68 6e 74 34 5a 33 4f 72 6c 6f 46 2f 69 48 78 35 73 36 Data Ascii: 76vPF6NHluu7z3svn2vv0we63wggBAsIG9QIQEPoJ5tPT7OfW7BUX0+kV/d4V9wAkAAfmIhwDAgXpIioIDQELLigr8fcFGyUlGwY7ICExNyUO/CAlSQcTOh0rPTAaCTNMHk0nEEpPNxQmHik/G14yTUAlIkIoWjlLQEM3Zms7bnJWdmFVWVBNU298XFZLSz1yVVpfW3pldGpXhEpNXYZfg2lPgIqHWXNadHV8mImSjHJ6hnt4Z3OrloF/iHx5s6
2025-03-11 16:27:38 UTC	1369	IN	Data Raw: 30 39 76 77 79 76 54 65 79 65 4c 30 36 39 33 42 34 75 66 6c 43 65 6e 72 41 4d 58 33 37 74 6e 4e 45 65 45 4b 38 51 49 42 30 66 4c 33 42 4f 58 2b 32 66 45 42 34 42 62 30 2f 67 49 5a 2b 43 6e 31 49 66 73 64 44 69 76 39 49 51 34 76 42 77 2f 73 4a 77 67 70 44 69 73 4d 4c 52 6f 6e 45 55 45 69 4d 78 63 66 4d 44 30 5a 53 52 6f 38 48 53 5a 45 52 43 4d 72 51 45 59 6c 52 54 5a 53 4b 44 4d 75 55 43 70 4e 46 56 45 78 4f 78 6c 66 4e 47 56 43 57 54 6c 6f 59 46 34 38 52 30 35 72 51 30 74 47 5a 30 64 50 4c 57 78 47 61 57 68 72 54 46 64 6f 63 56 47 42 54 6e 52 55 64 55 46 76 57 6c 4e 46 66 46 31 39 59 6f 46 68 6b 59 43 4a 5a 57 36 4d 6a 47 6c 6a 69 49 74 74 6e 56 6d 53 63 5a 46 64 6c 33 4b 56 6b 4a 70 35 6d 58 61 6d 66 35 31 2b 6f 34 47 4b 71 4b 57 46 70 59 71 74 69 6f 4f Data Ascii: 09vwyvTeyeL0693B4uflCenrAMX37tnNEeEK8QIB0fL3BOX+2fEB4Bb0/gIZ+Cn1IfsdDiv9IQ4vBw/sJwgpDisMLRonEUEiMxcfMD0ZSRo8HSZERCMrQEYlRTZSKDMuUCpNFVExOxlfNGVCWTloYF48R05rQ0tGZ0dPLWxGaWhrTFdocVGBTnRUdUFvWlNFfF19YoFhkYCJZW6MjGljiIttnVmScZFdl3KVkJp5mXamf51+o4GKqKWFpYqtioO

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:40 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:40 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 11 Mar 2025 16:27:40 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: ExkTV1ilrDY4B/Yq0UPrQX9P1LbL4FfCsBGgTMWFwCZRVCgbC/eaDigSVnVkQMZ9Vj2s3f1G/GmbS9SMmgdKsg==$ieolhdrPonTPq2VooeirKg== Server: cloudflare CF-RAY: 91ec6baaef32d6fc-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:40 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:42 UTC	1193	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 41908 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R cf-chl-ra: 1 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/h3kvp/0x4AAAAAAAAjq6WYeRDKmebM/light/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:42 UTC	16384	OUT	Data Raw: 24 41 4e 53 49 77 4b 4f 47 77 6b 32 4e 52 61 7a 36 4b 73 2b 4e 35 54 4b 6f 7a 34 53 6e 63 4c 6f 66 4b 65 7a 62 4c 57 63 77 74 4b 32 35 7a 6e 4c 7a 59 7a 65 7a 24 4c 4c 32 4d 73 63 7a 70 74 7a 4e 4c 77 56 72 7a 62 6b 7a 45 24 6e 4b 7a 4b 4a 7a 2b 6b 4b 79 6f 43 4b 72 50 39 48 6a 63 35 38 67 43 53 2b 41 7a 31 7a 4b 4e 7a 57 7a 48 56 2d 4e 7a 38 53 7a 4f 5a 7a 6e 4e 4b 62 7a 48 4e 6b 7a 66 53 7a 6b 47 4d 6c 53 7a 67 38 7a 6a 73 74 7a 69 32 77 54 5a 62 68 73 4f 53 4d 44 74 24 7a 53 62 35 2d 6a 35 72 4e 53 7a 6a 68 73 5a 54 38 4b 5a 32 72 6b 35 47 69 54 61 7a 35 70 4e 6f 41 7a 75 7a 62 52 43 79 41 53 7a 62 56 6d 7a 6a 70 52 54 53 49 65 7a 77 36 6d 57 64 4e 7a 38 66 70 34 59 24 6b 53 7a 7a 4d 73 6a 63 77 66 39 48 39 74 68 6f 6b 7a 24 75 48 7a 72 53 35 67 4e 4c Data Ascii: $ANSIwKOGwk2NRaz6Ks+N5TKoz4SncLofKezbLWcwtK25znLzYzez$LL2MsczptzNLwVrzbkzE$nKzKJz+kKyoCKrP9Hjc58gCS+Az1zKNzWzHV-Nz8SzOZznNKbzHNkzfSzkGMlSzg8zjstzi2wTZbhsOSMDt$zSb5-j5rNSzjhsZT8KZ2rk5GiTaz5pNoAzuzbRCyASzbVmzjpRTSIezw6mWdNz8fp4Y$kSzzMsjcwf9H9thokz$uHzrS5gNL
2025-03-11 16:27:42 UTC	16384	OUT	Data Raw: 53 64 4f 76 33 56 4a 50 2b 37 4c 36 77 4e 64 4f 48 63 69 5a 63 31 4b 6f 39 72 36 64 74 63 4a 48 69 53 53 47 34 35 6c 7a 31 6d 2b 4e 48 4a 6c 7a 4f 6b 7a 68 50 32 6d 6b 6b 34 4b 63 36 59 66 41 4e 77 4b 6f 5a 30 4c 34 65 2d 37 46 6e 6c 4f 55 30 6f 6d 6b 59 7a 79 65 64 50 6d 68 75 62 77 6f 4c 77 57 59 6b 34 6f 63 77 4c 34 6f 6f 34 6e 4d 43 6b 2b 7a 24 4c 77 67 4e 74 53 48 49 7a 37 4c 63 74 53 6b 35 72 61 32 31 7a 57 30 69 4c 63 53 6a 63 77 41 34 6f 65 49 4a 4b 36 7a 6c 45 74 63 74 56 7a 66 6d 4b 47 35 2d 68 44 53 6e 47 4c 73 4f 6b 38 64 74 35 50 43 31 4c 6f 36 6e 47 59 63 47 64 30 59 70 48 2d 4d 61 55 7a 66 7a 78 51 7a 59 77 6d 32 63 44 43 38 4e 65 4e 74 51 69 50 4b 46 7a 53 6a 49 24 6b 65 4e 59 46 61 35 68 6f 4c 24 74 52 79 53 65 66 24 6b 4b 33 72 48 63 38 Data Ascii: SdOv3VJP+7L6wNdOHciZc1Ko9r6dtcJHiSSG45lz1m+NHJlzOkzhP2mkk4Kc6YfANwKoZ0L4e-7FnlOU0omkYzyedPmhubwoLwWYk4ocwL4oo4nMCk+z$LwgNtSHIz7LctSk5ra21zW0iLcSjcwA4oeIJK6zlEtctVzfmKG5-hDSnGLsOk8dt5PC1Lo6nGYcGd0YpH-MaUzfzxQzYwm2cDC8NeNtQiPKFzSjI$keNYFa5hoL$tRySef$kK3rHc8
2025-03-11 16:27:42 UTC	9140	OUT	Data Raw: 30 4d 5a 43 2d 37 51 71 46 54 52 41 61 51 42 46 54 70 2d 46 70 48 64 54 52 2d 53 33 6e 24 54 51 2d 66 73 30 61 53 64 2d 36 73 71 2b 62 78 2d 34 73 33 4d 54 6b 52 62 51 39 32 54 6f 2d 6c 51 71 68 5a 57 2d 64 73 39 24 5a 52 2d 73 51 6d 30 54 32 2d 6d 73 4d 30 54 54 2d 39 73 39 6e 5a 7a 42 4c 51 33 6e 5a 6f 2d 6d 6a 41 24 5a 4e 42 56 51 71 49 5a 34 2d 71 51 71 43 37 32 2d 4d 51 42 30 54 61 42 30 51 4d 6e 5a 53 42 75 6a 42 35 5a 30 2d 56 68 56 37 54 6c 2d 34 51 30 37 54 5a 2d 43 73 6d 69 54 44 2d 4d 6a 41 46 54 53 42 71 73 41 68 54 51 53 59 51 71 76 54 39 2d 42 6a 33 76 54 6b 42 5a 6a 4d 38 30 41 42 4c 54 41 38 37 43 42 73 73 30 2d 54 63 42 30 54 6d 42 54 4e 42 42 54 4d 45 54 4a 2d 33 54 41 62 5a 55 2d 41 44 39 2d 54 50 42 54 73 33 6f 5a 67 42 36 54 6d 24 54 Data Ascii: 0MZC-7QqFTRAaQBFTp-FpHdTR-S3n$TQ-fs0aSd-6sq+bx-4s3MTkRbQ92To-lQqhZW-ds9$ZR-sQm0T2-msM0TT-9s9nZzBLQ3nZo-mjA$ZNBVQqIZ4-qQqC72-MQB0TaB0QMnZSBujB5Z0-VhV7Tl-4Q07TZ-CsmiTD-MjAFTSBqsAhTQSYQqvT9-Bj3vTkBZjM80ABLTA87CBss0-TcB0TmBTNBBTMETJ-3TAbZU-AD9-TPBTs3oZgB6Tm$T
2025-03-11 16:27:43 UTC	135	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:43 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 5084 Connection: close
2025-03-11 16:27:43 UTC	1530	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 2d 73 3a 20 65 44 64 54 76 61 33 6e 5a 41 53 71 39 39 32 52 42 6d 77 64 77 42 79 55 42 30 32 61 4d 68 37 32 57 31 61 48 68 67 67 5a 58 4d 59 6c 43 53 52 52 44 73 57 56 2f 7a 74 65 4b 6c 31 71 68 55 75 5a 37 6d 45 6a 44 48 33 53 39 74 35 50 2f 48 6c 30 6d 6e 4d 62 50 57 45 51 49 4f 72 66 36 70 34 76 72 69 44 6d 37 4f 43 51 36 46 4d 37 4e 39 4a 48 73 77 44 42 58 39 57 4c 41 49 74 32 39 68 74 53 50 50 6f 30 48 6a 67 64 54 6a 69 6f 4b 35 50 6b 4e 4b 32 2f 53 65 4c 62 4b 66 53 72 65 63 72 44 66 4d 5a 4a 70 48 52 4d 2b 63 31 67 43 68 79 78 75 7a 38 48 6b 4f 63 52 30 62 79 70 41 6b 41 64 67 43 77 4c 32 41 67 79 76 54 57 52 36 66 32 57 53 56 6c 5a 33 68 50 6f 2f 4f 74 41 46 73 79 46 6b 35 61 6d 4d 55 47 4a 4f 46 49 76 53 6d 68 53 64 Data Ascii: cf-chl-out-s: eDdTva3nZASq992RBmwdwByUB02aMh72W1aHhggZXMYlCSRRDsWV/zteKl1qhUuZ7mEjDH3S9t5P/Hl0mnMbPWEQIOrf6p4vriDm7OCQ6FM7N9JHswDBX9WLAIt29htSPPo0HjgdTjioK5PkNK2/SeLbKfSrecrDfMZJpHRM+c1gChyxuz8HkOcR0bypAkAdgCwL2AgyvTWR6f2WSVlZ3hPo/OtAFsyFk5amMUGJOFIvSmhSd
2025-03-11 16:27:43 UTC	1073	IN	Data Raw: 66 37 65 6d 78 34 65 46 76 73 44 43 78 63 36 2b 78 4b 32 6d 70 49 72 47 6c 72 4f 34 6b 61 76 51 78 64 44 4d 74 73 36 78 32 37 57 63 70 64 2f 6b 6f 75 47 33 71 62 7a 73 31 39 6e 6a 32 2b 66 4a 35 39 2f 72 77 2f 6a 4b 32 63 6a 35 30 63 62 30 7a 4e 76 56 2f 67 58 75 38 73 59 46 38 67 6a 66 41 4d 73 4e 36 73 76 6e 7a 52 41 45 38 76 54 6b 39 74 44 78 43 65 62 54 46 64 7a 39 37 78 59 66 42 64 34 64 2b 74 6f 59 44 50 6f 56 43 77 77 74 47 53 55 6d 49 66 51 32 37 52 4c 79 39 2f 51 50 4f 67 39 41 44 7a 38 42 51 41 31 42 42 45 55 35 42 41 6f 47 4b 44 67 65 42 30 38 39 49 41 55 6a 50 7a 55 6c 49 30 67 36 53 45 63 74 4a 30 38 64 47 6b 4a 57 47 31 39 53 5a 46 55 70 57 44 39 45 59 7a 74 75 4c 30 56 7a 59 54 39 67 53 7a 52 45 4f 57 64 4c 58 55 59 30 61 33 4e 70 55 55 74 Data Ascii: f7emx4eFvsDCxc6+xK2mpIrGlrO4kavQxdDMts6x27Wcpd/kouG3qbzs19nj2+fJ59/rw/jK2cj50cb0zNvV/gXu8sYF8gjfAMsN6svnzRAE8vTk9tDxCebTFdz97xYfBd4d+toYDPoVCwwtGSUmIfQ27RLy9/QPOg9ADz8BQA1BBEU5BAoGKDgeB089IAUjPzUlI0g6SEctJ08dGkJWG19SZFUpWD9EYztuL0VzYT9gSzREOWdLXUY0a3NpUUt
2025-03-11 16:27:43 UTC	1369	IN	Data Raw: 61 4b 72 32 37 6d 77 34 74 50 78 73 36 2b 77 76 38 44 7a 79 37 58 6f 74 39 76 4b 32 4d 7a 56 77 75 2f 67 33 4e 4c 7a 41 38 66 49 77 75 44 33 32 2b 66 50 42 4d 6e 73 36 4f 33 57 32 41 4d 53 30 68 66 30 41 4f 6a 6f 2b 66 72 56 2b 52 2f 65 33 67 4c 78 39 75 54 72 35 2b 37 74 34 69 2f 73 4e 52 2f 72 38 50 59 6d 37 7a 6f 45 38 68 45 62 43 2f 59 69 46 67 37 32 44 68 30 54 52 45 49 46 41 6b 6f 5a 4e 77 30 70 48 53 63 55 56 43 45 4e 49 6b 4d 59 4c 43 64 59 4f 55 70 62 45 79 30 65 48 68 73 35 5a 52 38 6f 61 79 4e 74 57 79 68 64 4b 30 5a 76 63 58 55 31 4e 48 49 77 4f 54 56 47 4f 6e 63 38 55 6f 42 2b 51 48 43 46 67 55 42 66 50 33 5a 61 59 30 55 2f 53 57 42 50 55 57 46 7a 58 31 32 50 55 45 36 54 56 48 64 58 58 4a 52 32 57 70 35 78 67 31 5a 6b 6f 48 71 70 67 48 6d 4c Data Ascii: aKr27mw4tPxs6+wv8Dzy7Xot9vK2MzVwu/g3NLzA8fIwuD32+fPBMns6O3W2AMS0hf0AOjo+frV+R/e3gLx9uTr5+7t4i/sNR/r8PYm7zoE8hEbC/YiFg72Dh0TREIFAkoZNw0pHScUVCENIkMYLCdYOUpbEy0eHhs5ZR8oayNtWyhdK0ZvcXU1NHIwOTVGOnc8UoB+QHCFgUBfP3ZaY0U/SWBPUWFzX12PUE6TVHdXXJR2Wp5xg1ZkoHqpgHmL
2025-03-11 16:27:43 UTC	1369	IN	Data Raw: 6a 30 79 2f 4c 4f 2b 4d 44 45 7a 72 48 32 39 72 79 78 36 74 6a 61 74 66 4c 51 33 51 6e 66 76 38 66 43 34 77 66 6d 45 66 6f 48 35 4d 55 53 79 2b 72 4a 7a 68 50 79 7a 52 6a 6f 32 74 48 57 47 2f 6e 56 44 2b 50 36 33 76 77 6a 41 79 30 58 37 52 38 78 2f 66 45 63 42 41 67 74 44 42 41 54 42 69 58 32 42 67 67 65 2b 2f 73 74 48 69 30 79 2b 2f 67 2b 4b 44 6f 58 43 6b 51 38 44 45 45 4d 43 44 31 45 54 53 68 52 4a 31 67 78 4f 6b 6c 62 4b 6c 31 41 54 54 41 73 51 52 35 6a 49 78 34 36 53 53 5a 4b 59 53 35 62 51 47 4e 6b 4b 6d 56 54 59 31 56 78 54 55 5a 31 5a 44 4e 66 56 33 70 78 4f 31 74 66 64 33 31 5a 67 47 5a 6b 66 31 68 47 68 32 39 35 53 45 2b 53 62 6c 4a 6d 69 59 2b 58 67 6d 70 6b 6e 4a 61 48 69 31 31 39 63 61 4f 44 6e 34 53 65 6b 58 79 61 59 34 75 4d 70 61 70 39 67 Data Ascii: j0y/LO+MDEzrH29ryx6tjatfLQ3Qnfv8fC4wfmEfoH5MUSy+rJzhPyzRjo2tHWG/nVD+P63vwjAy0X7R8x/fEcBAgtDBATBiX2Bgge+/stHi0y+/g+KDoXCkQ8DEEMCD1ETShRJ1gxOklbKl1ATTAsQR5jIx46SSZKYS5bQGNkKmVTY1VxTUZ1ZDNfV3pxO1tfd31ZgGZkf1hGh295SE+SblJmiY+XgmpknJaHi119caODn4SekXyaY4uMpap9g
2025-03-11 16:27:43 UTC	1273	IN	Data Raw: 36 30 73 53 37 74 39 6f 41 37 72 76 78 76 51 41 44 78 72 6b 45 32 4e 6b 4e 43 77 76 6b 78 38 38 44 7a 4d 6f 42 45 77 37 69 37 39 6a 77 7a 64 4c 54 31 65 6e 33 49 39 76 74 2b 42 7a 32 38 43 50 6e 42 50 51 6e 47 79 63 77 42 7a 4d 70 4e 41 6f 4a 4b 2b 6b 4e 39 79 62 78 4b 54 63 72 43 54 37 33 2f 41 51 79 41 44 34 43 4e 77 51 7a 42 6a 63 37 54 6b 38 44 51 77 6b 51 55 55 38 53 49 6a 46 58 53 69 63 63 47 44 34 70 57 30 38 38 48 54 6c 6e 59 53 63 2f 61 31 63 71 61 69 56 45 50 44 6c 63 53 69 35 78 59 32 59 76 4b 7a 56 54 4c 69 39 76 50 54 35 58 64 31 68 50 58 47 56 68 52 33 61 44 69 55 4b 49 59 6c 39 47 6a 58 78 6c 58 5a 4a 68 6a 56 57 57 57 48 52 56 64 5a 4e 7a 58 59 39 63 63 35 35 58 70 36 68 61 6c 4a 64 69 59 32 79 6e 71 6d 4b 48 61 4a 31 71 6a 62 4e 78 75 61 Data Ascii: 60sS7t9oA7rvxvQADxrkE2NkNCwvkx88DzMoBEw7i79jwzdLT1en3I9vt+Bz28CPnBPQnGycwBzMpNAoJK+kN9ybxKTcrCT73/AQyAD4CNwQzBjc7Tk8DQwkQUU8SIjFXSiccGD4pW088HTlnYSc/a1cqaiVEPDlcSi5xY2YvKzVTLi9vPT5Xd1hPXGVhR3aDiUKIYl9GjXxlXZJhjVWWWHRVdZNzXY9cc55Xp6halJdiY2ynqmKHaJ1qjbNxua

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:45 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/2049037401:1741709580:yb2phmk4wb-azUjx4uhjC-yUMda097WvAVOpxXRh1Wk/91ec6af6ed81d65b/40y9iKHQ_7tOo1vid7X.KL78BQcox7izM2QLExqDrWM-1741710431-1.1.1.1-hwG9owvjLADAH0HJlo8LLX2NB3dAeRIkTm0LSaleBuGNbyzDiaHkv5zHT6eTPn6R HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:27:46 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Tue, 11 Mar 2025 16:27:45 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: prx0qT+Zf4RT0upwDXMAw6/eNIORPZ3PSG/w9iTkfvmVkGSKlFL90aKwOvVys1Sj/ZDOblBNCZlK1HRMalVnsw==$rNH/t+Bz/ejFxrt3sAJOig== Server: cloudflare CF-RAY: 91ec6bcb5d4b0aa1-IAD alt-svc: h3=":443"; ma=86400
2025-03-11 16:27:46 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:45 UTC	199	OUT	GET /rules/rule701850v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-11 16:27:46 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:45 GMT Content-Type: text/xml Content-Length: 1371 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:50 GMT ETag: "0x8DC582BE374A8B3" x-ms-request-id: 7b808b68-701e-005c-4f3a-92bb94000000 x-ms-version: 2018-03-28 x-azure-ref: 20250311T162745Z-r16856dc858qp2qjhC1BL190rw000000048g00000001mdfn x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-11 16:27:46 UTC	1371	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 4d 6f 62 69 6c 65 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 4d 6f 62 69 6c 65 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d 0a 20 20 20 20 3c 46 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701850" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Mobile" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelMobile" S="Medium" /> <F

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report NEW__Review_202551087.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
NEW__Review_202551087.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:45 UTC	199	OUT	GET /rules/rule701851v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-11 16:27:46 UTC	522	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:46 GMT Content-Type: text/xml Content-Length: 1408 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:03 GMT ETag: "0x8DC582BEB94749A" x-ms-request-id: 4484e3e5-601e-00ab-3e9f-9266f4000000 x-ms-version: 2018-03-28 x-azure-ref: 20250311T162745Z-r16856dc858p9qv4hC1BL177xg00000003q0000000016csz x-fd-int-roxy-purgeid: 0 X-Cache-Info: L2_T2 X-Cache: TCP_REMOTE_HIT Accept-Ranges: bytes
2025-03-11 16:27:46 UTC	1408	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 31 38 35 31 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 4d 6f 62 69 6c 65 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="701851" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Excel.Mobile.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTo

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:45 UTC	199	OUT	GET /rules/rule703050v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-11 16:27:46 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:45 GMT Content-Type: text/xml Content-Length: 1391 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:28:00 GMT ETag: "0x8DC582BE9CC7A3E" x-ms-request-id: 9654be7f-401e-0083-419f-92075c000000 x-ms-version: 2018-03-28 x-azure-ref: 20250311T162745Z-17846f7ff65fvhz9hC1BL1d8d0000000079000000000qy94 x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT X-Cache-Info: L1_T2 Accept-Ranges: bytes
2025-03-11 16:27:46 UTC	1391	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 35 30 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 63 65 6c 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 22 20 53 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703050" V="3" DC="SM" EN="Office.Telemetry.Event.Office.Excel.InsightsServices" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExcelInsightsServices" S

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:45 UTC	199	OUT	GET /rules/rule700850v1s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-11 16:27:46 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:46 GMT Content-Type: text/xml Content-Length: 1378 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:38 GMT ETag: "0x8DC582BDC2ACFF4" x-ms-request-id: 874f1b53-301e-0020-243a-926299000000 x-ms-version: 2018-03-28 x-azure-ref: 20250311T162746Z-r16856dc858sbzkbhC1BL1325000000002k000000001hfw6 x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-11 16:27:46 UTC	1378	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 30 38 35 30 22 20 56 3d 22 31 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 70 65 72 69 6d 65 6e 74 61 74 69 6f 6e 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 75 73 54 65 6e 61 6e 74 54 6f 6b 65 6e 45 78 70 65 72 69 6d 65 6e 74 61 74 69 6f 6e 22 20 53 3d 22 4d 65 64 69 75 6d 22 20 2f 3e 0d Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="700850" V="1" DC="SM" EN="Office.Telemetry.Event.Office.Experimentation" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="NexusTenantTokenExperimentation" S="Medium" />

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:27:45 UTC	199	OUT	GET /rules/rule703051v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.svc.static.microsoft
2025-03-11 16:27:46 UTC	515	IN	HTTP/1.1 200 OK Date: Tue, 11 Mar 2025 16:27:46 GMT Content-Type: text/xml Content-Length: 1428 Connection: close Vary: Accept-Encoding Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:27:45 GMT ETag: "0x8DC582BE07B8722" x-ms-request-id: 565332c1-c01e-0046-073a-922db9000000 x-ms-version: 2018-03-28 x-azure-ref: 20250311T162746Z-17846f7ff658jg85hC1BL1h4y800000009kg00000000cc6f x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2025-03-11 16:27:46 UTC	1428	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 37 30 33 30 35 31 22 20 56 3d 22 33 22 20 44 43 3d 22 53 4d 22 20 45 4e 3d 22 4f 66 66 69 63 65 2e 54 65 6c 65 6d 65 74 72 79 2e 45 76 65 6e 74 2e 4f 66 66 69 63 65 2e 45 78 63 65 6c 2e 49 6e 73 69 67 68 74 73 53 65 72 76 69 63 65 73 2e 43 72 69 74 69 63 61 6c 22 20 53 50 3d 22 43 72 69 74 69 63 61 6c 42 75 73 69 6e 65 73 73 49 6d 70 61 63 74 22 20 44 4c 3d 22 41 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 52 49 53 3e 0d 0a 20 20 20 20 3c 52 49 20 4e 3d 22 45 76 65 6e 74 22 20 2f 3e 0d 0a 20 20 3c 2f 52 49 53 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 55 43 53 53 20 54 3d 22 31 22 20 43 3d 22 4e 65 78 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="703051" V="3" DC="SM" EN="Office.Telemetry.Event.Office.Excel.InsightsServices.Critical" SP="CriticalBusinessImpact" DL="A" xmlns=""> <RIS> <RI N="Event" /> </RIS> <S> <UCSS T="1" C="Nex

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:28:06 UTC	549	OUT	OPTIONS /report/v4?s=h%2FuFH%2B7ZZ2cOjLWYMAUUoAPoWKi3lZ8haX%2Ba5wv7u5RNBEmepMimeJYzHXpNq8Zj9DxGaSwRvjrtMgQc65tY4H3rgBSPrFF4HYMZW%2B%2FXOvMMPiXWHA%2B0yZwOKPAIz6srbg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vacilandos.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:28:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Tue, 11 Mar 2025 16:28:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:28:06 UTC	545	OUT	OPTIONS /report/v4?s=V%2Fh6xzQMb6GhdXr3PUpBpi2P5ywTy0nlQwgRUZbWfYvWd9Gu4JpZGLFJFNfGTNUsEuohRj0fsFxERn%2F4hlMJsu6EsCiv%2BidVMryd0GSi93LljejRMEjUP%2BewrrJa08to5Q%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://vacilandos.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:28:07 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Tue, 11 Mar 2025 16:28:06 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:28:09 UTC	525	OUT	POST /report/v4?s=h%2FuFH%2B7ZZ2cOjLWYMAUUoAPoWKi3lZ8haX%2Ba5wv7u5RNBEmepMimeJYzHXpNq8Zj9DxGaSwRvjrtMgQc65tY4H3rgBSPrFF4HYMZW%2B%2FXOvMMPiXWHA%2B0yZwOKPAIz6srbg%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 1765 Content-Type: application/reports+json Origin: https://vacilandos.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:28:09 UTC	1765	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 37 30 30 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 34 30 35 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 34 38 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 35 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 76 61 63 69 6c 61 6e 64 6f 73 2e 63 6f 6d 2f 63 64 6e 2d 63 Data Ascii: [{"age":17000,"body":{"elapsed_time":405,"method":"GET","phase":"application","protocol":"h2","referrer":"","sampling_fraction":1.0,"server_ip":"104.21.48.1","status_code":405,"type":"http.error"},"type":"network-error","url":"https://vacilandos.com/cdn-c
2025-03-11 16:28:09 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 11 Mar 2025 16:28:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:28:09 UTC	521	OUT	POST /report/v4?s=V%2Fh6xzQMb6GhdXr3PUpBpi2P5ywTy0nlQwgRUZbWfYvWd9Gu4JpZGLFJFNfGTNUsEuohRj0fsFxERn%2F4hlMJsu6EsCiv%2BidVMryd0GSi93LljejRMEjUP%2BewrrJa08to5Q%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 2297 Content-Type: application/reports+json Origin: https://vacilandos.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:28:09 UTC	2297	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 39 34 37 35 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 32 34 2c 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 32 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 76 61 63 69 6c 61 6e 64 6f 73 2e 63 6f 6d 2f 3f 26 26 5f 5f 63 66 5f 63 68 6c 5f 74 6b 3d 50 2e 46 30 39 52 65 31 2e 64 5a 53 35 59 43 76 78 50 50 58 70 61 75 36 4d 75 51 53 31 31 56 58 63 56 6e 47 57 47 30 48 44 54 4d 2d 31 37 34 31 37 31 30 34 32 34 2d 31 2e 30 2e 31 2e 31 2d 61 48 38 32 52 30 45 37 46 46 64 4d 50 6d 36 69 38 48 4e 45 34 4a 39 39 71 66 78 74 62 49 78 47 6d 47 30 71 48 54 54 35 49 70 73 22 2c 22 73 Data Ascii: [{"age":19475,"body":{"elapsed_time":724,"method":"POST","phase":"application","protocol":"h2","referrer":"https://vacilandos.com/?&&__cf_chl_tk=P.F09Re1.dZS5YCvxPPXpau6MuQS11VXcVnGWG0HDTM-1741710424-1.0.1.1-aH82R0E7FFdMPm6i8HNE4J99qfxtbIxGmG0qHTT5Ips","s
2025-03-11 16:28:10 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Tue, 11 Mar 2025 16:28:09 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:28:52 UTC	822	OUT	POST /landingv2 HTTP/1.1 Host: www.office.com Connection: keep-alive Content-Length: 399 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://login.live.com Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-11 16:28:52 UTC	399	OUT	Data Raw: 65 72 72 6f 72 5f 64 65 73 63 72 69 70 74 69 6f 6e 3d 54 68 65 2b 70 72 6f 76 69 64 65 64 2b 72 65 71 75 65 73 74 2b 6d 75 73 74 2b 69 6e 63 6c 75 64 65 2b 61 2b 6e 6f 6e 2d 65 6d 70 74 79 2b 25 32 37 6e 6f 6e 63 65 25 32 37 2b 69 6e 70 75 74 2b 70 61 72 61 6d 65 74 65 72 2e 26 65 72 72 6f 72 3d 69 6e 76 61 6c 69 64 5f 72 65 71 75 65 73 74 26 73 74 61 74 65 3d 49 49 59 69 69 75 43 42 44 6c 68 65 62 68 56 71 47 6e 32 59 46 69 55 49 66 33 54 7a 50 2d 4c 64 76 6e 4a 35 37 6c 78 48 64 64 6a 53 77 54 44 64 33 58 2d 54 36 50 4f 70 66 30 63 38 64 44 7a 61 35 50 66 62 64 5a 77 45 41 45 4f 2d 49 68 44 55 6a 6d 50 32 44 75 39 4f 49 68 2d 33 6d 31 6d 4a 56 46 6b 35 34 4e 6c 4d 7a 33 6e 49 39 43 64 39 6d 55 65 62 6a 46 42 38 6c 41 6c 5f 79 57 5f 67 66 77 7a 73 54 76 Data Ascii: error_description=The+provided+request+must+include+a+non-empty+%27nonce%27+input+parameter.&error=invalid_request&state=IIYiiuCBDlhebhVqGn2YFiUIf3TzP-LdvnJ57lxHddjSwTDd3X-T6POpf0c8dDza5PfbdZwEAEO-IhDUjmP2Du9OIh-3m1mJVFk54NlMz3nI9Cd9mUebjFB8lAl_yW_gfwzsTv
2025-03-11 16:28:53 UTC	924	IN	HTTP/1.1 302 Found Content-Type: text/html; charset=utf-8 Location: https://www.office.com/?trysignin=0 Set-Cookie: OH.SID=7d30e125-534d-4628-8b5f-0492230589d9; path=/; secure; samesite=none; httponly Set-Cookie: OH.FLID=a1ac589d-f554-4ef2-a1b2-5b1626cec6db; expires=Wed, 11 Mar 2026 16:28:52 GMT; path=/; secure; samesite=none; httponly Set-Cookie: UserIndex=; expires=Mon, 10 Mar 2025 16:28:52 GMT; path=/; secure; samesite=none; httponly Request-Context: appId= Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge,chrome=1 X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 37B3F6BC81D64FE6B86B21011D4D4775 Ref B: MIA301000104053 Ref C: 2025-03-11T16:28:52Z Date: Tue, 11 Mar 2025 16:28:52 GMT Connection: close Content-Length: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-11 16:28:53 UTC	821	OUT	GET /?trysignin=0 HTTP/1.1 Host: www.office.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://login.live.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: OH.SID=7d30e125-534d-4628-8b5f-0492230589d9; OH.FLID=a1ac589d-f554-4ef2-a1b2-5b1626cec6db
2025-03-11 16:28:53 UTC	1952	IN	HTTP/1.1 200 OK Cache-Control: no-store,no-cache Pragma: no-cache Transfer-Encoding: chunked Content-Type: text/html; charset=utf-8 Strict-Transport-Security: max-age=31536000; includeSubDomains Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block X-Frame-Options: SAMEORIGIN X-UA-Compatible: IE=edge,chrome=1 NEL: {"report_to":"NelOfficeHubUpload1","max_age":3600,"failure_fraction":1.0,"success_fraction":0.01} Report-To: {"group":"NelOfficeHubUpload1","max_age":3600,"endpoints":[{"url":"https://officehub.nel.measure.office.net/api/report?tenantId=unknown&destinationEndpoint=ncu&frontEnd=AFD"}]} Report-To: { "group": "csp-endpoint", "max_age": 86400, "endpoints": [{ "url": "https://csp.microsoft.com/report/Harmony-App-PROD" }]} Content-Security-Policy: default-src 'self';base-uri 'self';script-src 'nonce-pqj3I8UCfBwyZPbWQfmtxg==' 'strict-dynamic' 'report-sample' https:;report-to csp-endpoint;upgrade-insecure-requests;style-src 'self' 'report-sample' .cdn.office.net .microsoft.com res-dev.cdn.officeppe.net 'unsafe-inline' https://www.microsoft.com/;font-src 'self' data: .cdn.office.net res-dev.cdn.officeppe.net data c.s-microsoft.com .microsoft.com;connect-src 'self' https://browser.pipe.aria.microsoft.com https://browser.events.data.microsoft.com .office.com .cdn.office.net res-dev.cdn.officeppe.net https://consentreceiverfd-prod.azurefd.net data:;frame-src https://login.microsoftonline.com https://login.live.com mem.gfx.ms amcdn.msftauth.net amcdn.msauth.net;img-src * data: blob:;worker-src 'self' blob:;child-src 'self' blob:;report-uri https://csp.microsoft.com/report/Harmony-App-PROD;form-action https://login.microsoftonline.com;frame-ancestors 'self'; X-Cache: CONFIG_NOCACHE X-MSEdge-Ref: Ref A: 1C6DC099667C48B2B09960503B1700EF Ref B: MIA301000102019 Ref C: 2025-03-11T16:28:53Z Date: Tue, 11 Mar 2025 16:28:52 GMT Connection: close
2025-03-11 16:28:53 UTC	1106	IN	Data Raw: 34 34 62 0d 0a 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4c 6f 67 69 6e 20 7c 20 4d 69 63 72 6f 73 6f 66 74 20 33 36 35 20 43 6f 70 69 6c 6f 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 69 64 3d 22 76 69 65 77 70 6f 72 74 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 43 6f 6c 6c 61 62 6f 72 61 74 65 20 Data Ascii: 44b<!DOCTYPE html><html dir="ltr" lang="en-US"><head> <title>Login \| Microsoft 365 Copilot</title> <meta id="viewport" name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="description" content="Collaborate
2025-03-11 16:28:53 UTC	1179	IN	Data Raw: 34 39 34 0d 0a 61 77 61 2d 76 65 72 22 20 63 6f 6e 74 65 6e 74 3d 22 35 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 61 77 61 2d 65 6e 76 22 20 63 6f 6e 74 65 6e 74 3d 22 50 52 4f 44 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 65 73 2e 63 64 6e 2e 6f 66 66 69 63 65 2e 6e 65 74 2f 6f 66 66 69 63 65 68 75 62 2f 62 75 6e 64 6c 65 73 2f 75 6e 61 75 74 68 2d 61 31 64 64 64 34 64 61 63 30 2e 63 73 73 22 20 69 6e 74 65 67 72 69 74 79 3d 22 73 68 61 32 35 36 2d 75 42 57 41 4e 51 6a 44 6f 4a 6c 71 44 42 41 Data Ascii: 494awa-ver" content="5" /> <meta name="awa-env" content="PROD" /> <link rel="stylesheet" type="text/css" crossorigin="anonymous" href="https://res.cdn.office.net/officehub/bundles/unauth-a1ddd4dac0.css" integrity="sha256-uBWANQjDoJlqDBA
2025-03-11 16:28:53 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 20 20 0a 20 20 20 20 0a 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 6f 6e 65 72 66 73 74 61 74 69 63 73 2f 6d 61 72 6b 65 74 69 6e 67 73 69 74 65 73 2d 77 63 75 73 2d 70 72 6f 64 2f 77 65 73 74 2d 65 75 72 6f 70 65 61 6e 2f 73 68 65 6c 6c 2f 5f 73 63 72 66 2f 63 73 73 2f 74 68 65 6d 65 73 3d 64 65 66 61 75 6c 74 2e 64 65 76 69 63 65 3d 75 70 6c 65 76 65 6c 5f 77 65 62 5f 70 63 2f 36 30 2d 36 61 39 38 64 37 2f 63 39 2d 62 65 30 31 30 30 2f 61 36 2d 65 39 36 39 65 66 2f 34 33 2d 39 66 32 65 37 63 2f 38 32 2d 38 62 35 34 35 36 2f 61 30 2d 35 64 33 39 31 33 2f 38 34 2d 36 64 34 66 33 33 2f 61 65 2d 66 31 61 63 30 63 3f Data Ascii: 1000 <link rel="stylesheet" href="https://www.microsoft.com/onerfstatics/marketingsites-wcus-prod/west-european/shell/_scrf/css/themes=default.device=uplevel_web_pc/60-6a98d7/c9-be0100/a6-e969ef/43-9f2e7c/82-8b5456/a0-5d3913/84-6d4f33/ae-f1ac0c?
2025-03-11 16:28:53 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 20 3c 61 20 69 64 3d 22 75 68 66 4c 6f 67 6f 22 20 63 6c 61 73 73 3d 22 63 2d 6c 6f 67 6f 20 63 2d 73 67 6c 2d 73 74 6b 2d 75 68 66 4c 6f 67 6f 22 20 69 74 65 6d 70 72 6f 70 3d 22 75 72 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 22 20 61 72 69 61 2d 6c 61 62 65 6c 3d 22 4d 69 63 72 6f 73 6f 66 74 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 22 3a 22 47 6c 6f 62 61 6c 4e 61 76 5f 4c 6f 67 6f 5f 63 6f 6e 74 22 2c 22 63 54 22 3a 22 43 6f 6e 74 61 69 6e 65 72 22 2c 22 69 64 22 3a 22 63 33 63 32 6d 31 72 31 61 31 22 2c 22 73 4e 22 3a 33 2c 22 61 4e 22 3a 22 63 32 6d 31 72 31 61 31 22 7d 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 61 6c Data Ascii: 1000 <a id="uhfLogo" class="c-logo c-sgl-stk-uhfLogo" itemprop="url" href="https://www.microsoft.com" aria-label="Microsoft" data-m='{"cN":"GlobalNav_Logo_cont","cT":"Container","id":"c3c2m1r1a1","sN":3,"aN":"c2m1r1a1"}'> <img al
2025-03-11 16:28:53 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 20 63 6c 61 73 73 3d 22 6a 73 2d 6e 61 76 2d 6d 65 6e 75 20 73 69 6e 67 6c 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 22 3a 22 46 6f 72 20 66 61 6d 69 6c 69 65 73 5f 63 6f 6e 74 22 2c 22 63 54 22 3a 22 43 6f 6e 74 61 69 6e 65 72 22 2c 22 69 64 22 3a 22 63 34 63 31 63 33 63 38 63 32 6d 31 72 31 61 31 22 2c 22 73 4e 22 3a 34 2c 22 61 4e 22 3a 22 63 31 63 33 63 38 63 32 6d 31 72 31 61 31 22 7d 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 73 68 65 6c 6c 6d 65 6e 75 5f 33 22 20 63 6c 61 73 73 3d 22 6a 73 2d 73 75 62 6d 2d 75 68 66 2d 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6d 69 63 72 6f 73 6f 66 74 2d Data Ascii: 1000 class="js-nav-menu single-link" data-m='{"cN":"For families_cont","cT":"Container","id":"c4c1c3c8c2m1r1a1","sN":4,"aN":"c1c3c8c2m1r1a1"}'> <a id="shellmenu_3" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-
2025-03-11 16:28:53 UTC	1832	IN	Data Raw: 37 32 31 0d 0a 3c 61 20 69 64 3d 22 73 68 65 6c 6c 6d 65 6e 75 5f 31 31 22 20 63 6c 61 73 73 3d 22 6a 73 2d 73 75 62 6d 2d 75 68 66 2d 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f 66 74 2e 63 6f 6d 2f 65 6e 2d 75 73 2f 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 65 6e 74 65 72 70 72 69 73 65 2f 6d 69 63 72 6f 73 6f 66 74 33 36 35 2d 70 6c 61 6e 73 2d 61 6e 64 2d 70 72 69 63 69 6e 67 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 22 3a 22 43 61 74 4e 61 76 5f 50 72 69 63 69 6e 67 20 66 6f 72 20 65 6e 74 65 72 70 72 69 73 65 5f 6e 61 76 22 2c 22 69 64 22 3a 22 6e 31 63 33 63 33 63 33 63 38 63 32 6d 31 72 31 61 31 22 2c 22 73 4e 22 3a 31 2c 22 61 4e 22 3a 22 63 33 63 33 63 33 63 38 63 32 6d 31 72 31 61 31 Data Ascii: 721<a id="shellmenu_11" class="js-subm-uhf-nav-link" href="https://www.microsoft.com/en-us/microsoft-365/enterprise/microsoft365-plans-and-pricing" data-m='{"cN":"CatNav_Pricing for enterprise_nav","id":"n1c3c3c3c8c2m1r1a1","sN":1,"aN":"c3c3c3c8c2m1r1a1
2025-03-11 16:28:53 UTC	4047	IN	Data Raw: 66 63 38 0d 0a 22 3e 0a 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 6a 73 2d 6e 61 76 2d 6d 65 6e 75 20 73 69 6e 67 6c 65 2d 6c 69 6e 6b 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 22 3a 22 4d 69 63 72 6f 73 6f 66 74 20 33 36 35 20 43 6f 70 69 6c 6f 74 5f 63 6f 6e 74 22 2c 22 63 54 22 3a 22 43 6f 6e 74 61 69 6e 65 72 22 2c 22 69 64 22 3a 22 63 33 63 34 63 33 63 38 63 32 6d 31 72 31 61 31 22 2c 22 73 4e 22 3a 33 2c 22 61 4e 22 3a 22 63 34 63 33 63 38 63 32 6d 31 72 31 61 31 22 7d 27 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 69 64 3d 22 73 68 65 6c 6c 6d 65 6e 75 5f 31 35 22 20 63 6c 61 73 73 3d 22 6a 73 2d 73 75 62 6d 2d 75 68 66 2d 6e 61 76 2d 6c 69 6e 6b 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 69 63 72 6f 73 6f Data Ascii: fc8"> <li class="js-nav-menu single-link" data-m='{"cN":"Microsoft 365 Copilot_cont","cT":"Container","id":"c3c4c3c8c2m1r1a1","sN":3,"aN":"c4c3c8c2m1r1a1"}'> <a id="shellmenu_15" class="js-subm-uhf-nav-link" href="https://www.microso
2025-03-11 16:28:53 UTC	56	IN	Data Raw: 33 32 0d 0a 6d 69 63 72 6f 73 6f 66 74 2d 33 36 35 2f 70 72 6f 64 75 63 74 73 2d 61 70 70 73 2d 73 65 72 76 69 63 65 73 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 0d 0a Data Ascii: 32microsoft-365/products-apps-services" data-m='{"cN
2025-03-11 16:28:53 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 22 3a 22 43 61 74 4e 61 76 5f 53 65 65 20 61 6c 6c 20 61 70 70 73 20 61 6e 64 20 73 65 72 76 69 63 65 73 5f 6e 61 76 22 2c 22 69 64 22 3a 22 6e 31 63 31 32 63 34 63 33 63 38 63 32 6d 31 72 31 61 31 22 2c 22 73 4e 22 3a 31 2c 22 61 4e 22 3a 22 63 31 32 63 34 63 33 63 38 63 32 6d 31 72 31 61 31 22 7d 27 3e 53 65 65 20 61 6c 6c 20 61 70 70 73 20 61 6e 64 20 73 65 72 76 69 63 65 73 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 3c 2f 75 6c 3e 0a 20 20 20 20 0a 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 66 2d 73 75 62 2d 6d 65 6e 75 20 6a 73 2d 6e 61 76 2d 6d 65 6e 75 20 6e 65 73 74 65 64 2d 6d 65 6e 75 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 22 3a 22 4d 6f 72 65 5f 63 6f Data Ascii: 1000":"CatNav_See all apps and services_nav","id":"n1c12c4c3c8c2m1r1a1","sN":1,"aN":"c12c4c3c8c2m1r1a1"}'>See all apps and services</a> </li> </ul> </li><li class="f-sub-menu js-nav-menu nested-menu" data-m='{"cN":"More_co
2025-03-11 16:28:53 UTC	4104	IN	Data Raw: 31 30 30 30 0d 0a 6e 6e 61 76 22 2c 22 69 64 22 3a 22 6e 6e 31 63 36 63 33 63 38 63 32 6d 31 72 31 61 31 22 2c 22 73 4e 22 3a 31 2c 22 61 4e 22 3a 22 63 36 63 33 63 38 63 32 6d 31 72 31 61 31 22 7d 27 3e 57 68 61 74 e2 80 99 73 20 6e 65 77 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 62 75 74 74 6f 6e 20 69 64 3d 22 75 68 66 2d 6e 61 76 62 74 6e 2d 73 68 65 6c 6c 6d 65 6e 75 5f 33 33 2d 62 75 74 74 6f 6e 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 20 20 20 66 2d 6d 75 6c 74 69 2d 70 61 72 65 6e 74 3d 22 74 72 75 65 22 20 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 22 66 61 6c 73 65 22 20 64 61 74 61 2d 6d 3d 27 7b 22 63 4e 22 3a 22 43 61 74 4e 61 76 5f 57 68 61 74 e2 80 99 73 20 6e 65 77 5f 6e 6f 6e 6e 61 76 22 2c 22 69 64 22 3a 22 6e 6e 32 63 36 63 33 63 38 63 Data Ascii: 1000nnav","id":"nn1c6c3c8c2m1r1a1","sN":1,"aN":"c6c3c8c2m1r1a1"}'>Whats new</span> <button id="uhf-navbtn-shellmenu_33-button" type="button" f-multi-parent="true" aria-expanded="false" data-m='{"cN":"CatNav_Whats new_nonnav","id":"nn2c6c3c8c