Create Interactive Tour

Windows Analysis Report
https://blgwlnauto.com/kylefax/faxdocuments.html

Overview

General Information

Sample URL:	https://blgwlnauto.com/kylefax/faxdocuments.html
Analysis ID:	1640841
Infos:

Detection

HTMLPhisher

Score:	60
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected BlockedWebSite

Yara detected Powershell download and execute

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5488 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,4502375984620957682,8057564348071720540,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6936 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blgwlnauto.com/kylefax/faxdocuments.html" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_174	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
dropped/chromecache_215	JoeSecurity_PowershellDownloadAndExecute	Yara detected Powershell download and execute	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-17T19:23:11.456501+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49817	172.66.0.227	443	TCP
2025-03-17T19:23:11.462385+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49819	172.66.0.227	443	TCP
2025-03-17T19:23:12.069927+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.6	49832	104.18.26.193	443	TCP

Joe Sandbox Signatures

• Phishing
• Compliance
• Networking
• System Summary
• HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_174, type: DROPPED

AI detected suspicious URL

Source: https://blgwlnauto.com

Joe Sandbox AI: The URL 'blgwlnauto.com' appears to be a typosquatting attempt on the brand 'Volkswagen'. The character sequence 'blgwlnauto' can be visually and phonetically confused with 'Volkswagen', especially considering the common abbreviation 'VW' for the brand. The use of 'auto' in the domain further suggests an automotive context, which aligns with Volkswagen's industry. The domain does not include any subdomains or extensions that would suggest a different legitimate purpose unrelated to the brand. The similarity score is high due to the visual and phonetic resemblance, and the likelihood of user confusion is significant, leading to a high spoofed score.

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2115900456.1742235791&gtm=45je53d1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&z=933280726
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2115900456.1742235791&gtm=45je53d1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&z=933280726
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://cloudflareinc.demdex.net/dest5.html?d_nsid=0#https%3A%2F%2Fwww.cloudflare.com
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://s.company-target.com/s/sync?exc=lr
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/ga/rul?tid=G-SQCRB0TXZW&gacid=2115900456.1742235791&gtm=45je53d1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&z=933280726
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=991460287.1742235788;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2?
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: Iframe src: https://td.doubleclick.net/td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=991460287.1742235788;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2?

Source: https://blgwlnauto.com/kylefax/faxdocuments.html	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No favicon

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="author".. found

Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.cloudflare.com/learning/access-management/phishing-attack/	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.68:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.31.78:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.245.23:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.53.123:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.71.105:443 -> 192.168.2.6:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.221.110.145:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.121:443 -> 192.168.2.6:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.65.88:443 -> 192.168.2.6:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.75.116.157:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.46.25:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.6:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.209.97.229:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.71.154:443 -> 192.168.2.6:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.6:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.242.163.237:443 -> 192.168.2.6:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.235.250:443 -> 192.168.2.6:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.140:443 -> 192.168.2.6:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.215:443 -> 192.168.2.6:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.6:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.35.2.123:443 -> 192.168.2.6:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.6:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.6:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.98:443 -> 192.168.2.6:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.6:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.6:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.110:443 -> 192.168.2.6:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.213.58.31:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.41.94:443 -> 192.168.2.6:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.139:443 -> 192.168.2.6:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.7.51:443 -> 192.168.2.6:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.28.144.124:443 -> 192.168.2.6:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.6:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.17:443 -> 192.168.2.6:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.230:443 -> 192.168.2.6:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.230:443 -> 192.168.2.6:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.6:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.6:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.121:443 -> 192.168.2.6:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.17:443 -> 192.168.2.6:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.75:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.194.228:443 -> 192.168.2.6:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.6:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.230:443 -> 192.168.2.6:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.7.82:443 -> 192.168.2.6:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.7:443 -> 192.168.2.6:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.165:443 -> 192.168.2.6:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.166:443 -> 192.168.2.6:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.6:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.6:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.7:443 -> 192.168.2.6:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.194:443 -> 192.168.2.6:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.7:443 -> 192.168.2.6:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.102:443 -> 192.168.2.6:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.6:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.6:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:61849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:61848 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.6:61843 -> 1.1.1.1:53

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49819 -> 172.66.0.227:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49817 -> 172.66.0.227:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.6:49832 -> 104.18.26.193:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 172.217.18.3
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.122.30
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /kylefax/faxdocuments.html HTTP/1.1Host: blgwlnauto.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: blgwlnauto.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://blgwlnauto.com/kylefax/faxdocuments.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: blgwlnauto.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://blgwlnauto.com/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: blgwlnauto.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://blgwlnauto.com/kylefax/faxdocuments.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: blgwlnauto.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/suspendedpage.cgi HTTP/1.1Host: blgwlnauto.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://blgwlnauto.com/kylefax/faxdocuments.htmlAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cgi-sys/suspendedpage.cgi HTTP/1.1Host: blgwlnauto.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /learning/access-management/phishing-attack/ HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://blgwlnauto.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1Host: static.cloudflareinsights.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /webpack-runtime-9510a2e22c3debbfcadd.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/api.js?render=explicit HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /framework-957a522640f43541ca6a.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /app-435b8291d068da48aef5.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1Host: cf-assets.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /img/privacyoptions.svg HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /beacon.js HTTP/1.1Host: performance.radar.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /logger-1.min.js HTTP/1.1Host: cdn.logr-ingest.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/app-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /a06cff934e9579536ce1c10bad21c1d6d7f63ae0-90484db4602d401d94ca.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-49a0a9ee350debcad655.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/phishing-attack/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/018debfb-4917-76f1-8862-8a2f83812baa/en.json HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/1048862057.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3934964512.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/333361657.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /page-data/sq/d/3199558980.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /public/vendor/onetrust/scripttemplates/202407.2.0/assets/otCommonStyles.css HTTP/1.1Host: ot.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /174-242772ef10d8d161ae24.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/83j4o/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/ HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /static/z/i.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195a558-5a7c-7120-8dfb-eba38abc4e70%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742235786346%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A05+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F
Source: global traffic	HTTP traffic detected: GET /f597f8065f97/065ba81630d7/launch-efab6d095ce0.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/s.js?z=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 HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195a558-5a7c-7120-8dfb-eba38abc4e70%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742235786346%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=921e850c7c1718c8&lang=auto HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/83j4o/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /api/v1/marketo/form/2459 HTTP/1.1Host: api.www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/83j4o/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1
Source: global traffic	HTTP traffic detected: GET /extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1742235788247 HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencodedsec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /qualified.js?token=37pXYrro6wCZbsU7 HTTP/1.1Host: js.qualified.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sl.js HTTP/1.1Host: scout-cdn.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742235788904&uuid=0a782dc0-b1fd-4c26-b07c-531a1f46a492&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /li.lms-analytics/insight.min.js HTTP/1.1Host: snap.licdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /scripts/bizible.js HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /munchkin-beta.js HTTP/1.1Host: munchkin.marketo.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1be41a80498a5b73.min.js HTTP/1.1Host: tag.demandbase.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /uwt.js HTTP/1.1Host: static.ads-twitter.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235789600&pid=28851&conversionId=10249833 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDkyNjh9.dguW7jthV1Y1wgRcAJfVrR_xsANK7zX9ZiD1wf0suvY HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=710e171b-0786-42c0-b460-6f82edff68c1&_u=KGDAAEADQAAAAC%7E&z=280957499&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235789:t=1742322189:v=2:sig=AQEUT4cDNRYYa9vcMVkrAyrE-VfcUsMM"
Source: global traffic	HTTP traffic detected: GET /710030.gif?pdata=d=desktop,lc=US,ref=blgwlnauto.com HTTP/1.1Host: di.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dest5.html?d_nsid=0 HTTP/1.1Host: cloudflareinc.demdex.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=39417500058995438360778150707161042992
Source: global traffic	HTTP traffic detected: GET /164/munchkin.js HTTP/1.1Host: munchkin.marketo.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=28851&time=1742235789392&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: *sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://www.cloudflare.comAttribution-Reporting-Eligible: trigger;navigation-sourceAttribution-Reporting-Support: web, not-osSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195a558-5a7c-7120-8dfb-eba38abc4e70%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742235786346%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/cmg/1 HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; AMCV_8AD56F28618A50850A495FB6%40AdobeOrg=179643557%7CMCIDTS%7C20165%7CMCMID%7C44283745478348705660075396246819360266%7CMCAAMLH-1742840589%7C6%7CMCAAMB-1742840589%7C6G1ynYcLPuiQxYZrsz_pkqfLG9yMXBpb2zX5dvJdYQJzPXImdj0y%7CMCOPTOUT-1742242989s%7CNONE%7CvVersion%7C5.5.0; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; _biz_nA=2; _biz_pendingA=%5B%22ipv%3F_biz_r%3Dhttps%253A%252F%252Fblgwlnauto.com%252F%26
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235789600&pid=28851&conversionId=10249833&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; UserMatchHistory=AQLNVBXE7O6wQgAAAZWlWGx6uCQMkgAJx7BzQk0JxeVawa4ed-hd8-QDFnDJnZFc0AGxP6hJv-j1aA; AnalyticsSyncHistory=AQJtORoyWgGhkQAAAZWlWGx62lzhDmipSn5x3RyBwDLNxtahWrDgGoRc9cmdMyUMKEB-9S5NTMrTWw8ppjV1kw; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"
Source: global traffic	HTTP traffic detected: GET /cm/dd?d_uuid=39417500058995438360778150707161042992 HTTP/1.1Host: cm.everesttech.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/enterprise/contact/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195a558-5a7c-7120-8dfb-eba38abc4e70%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742235786346%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_c
Source: global traffic	HTTP traffic detected: GET /rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742235788904&uuid=0a782dc0-b1fd-4c26-b07c-531a1f46a492&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280 HTTP/1.1Host: alb.reddit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fblgwlnauto.com%2F&_biz_h=-1777624096&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789492&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=124116&cdn_o=a&_biz_z=1742235789494 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_tabs_-ykolez%2Fcloudflarecom={%22recordingID%22:%226-0195a558-5a7c-7120-8dfb-eba38abc4e70%22%2C%22sessionID%22:0%2C%22lastActivity%22:1742235786346%2C%22hasActivity%22:false}; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v
Source: global traffic	HTTP traffic detected: GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%2F%3Ffmt%3Djs%26v%3D2%26url%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26time%3D1742235788904%26pid%3D28851%26conversionId%3D13043044%26cookiesTest%3Dtrue%26liSync%3Dtrue HTTP/1.1Host: www.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; UserMatchHistory=AQLNVBXE7O6wQgAAAZWlWGx6uCQMkgAJx7BzQk0JxeVawa4ed-hd8-QDFnDJnZFc0AGxP6hJv-j1aA; AnalyticsSyncHistory=AQJtORoyWgGhkQAAAZWlWGx62lzhDmipSn5x3RyBwDLNxtahWrDgGoRc9cmdMyUMKEB-9S5NTMrTWw8ppjV1kw; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=true HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: GQ8EZgvlDM4WFbxgB3b09Q==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=28851&time=1742235789392&li_adsId=97c07a85-bf50-4699-ad2a-8c0b067f3ba0&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235789:t=1742322189:v=2:sig=AQEUT4cDNRYYa9vcMVkrAyrE-VfcUsMM"
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789499&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=123287&cdn_o=a&_biz_z=1742235789499 HTTP/1.1Host: cdn.bizibly.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /id?d_visid_ver=5.5.0&d_fieldgroup=MC&d_rtbd=json&d_ver=2&d_orgid=8AD56F28618A50850A495FB6%40AdobeOrg&d_nsid=0&ts=1742235788247 HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=39417500058995438360778150707161042992
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=2aa45797-8618-48a9-afcf-60b73c19e526&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e5676468-c608-41bd-8cbf-d9675e39911d&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=2aa45797-8618-48a9-afcf-60b73c19e526&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e5676468-c608-41bd-8cbf-d9675e39911d&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/sync?exc=lr HTTP/1.1Host: s.company-target.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /464526.gif HTTP/1.1Host: id.rlcdn.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z9hojwAAAMmqPwOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=39417500058995438360778150707161042992
Source: global traffic	HTTP traffic detected: GET /px/li_sync?redirect=https%3A%2F%2Fpx.ads.linkedin.com%2Fcollect%3Fv%3D2%26fmt%3Djs%26pid%3D28851%26time%3D1742235789392%26li_adsId%3D97c07a85-bf50-4699-ad2a-8c0b067f3ba0%26url%3Dhttps%253A%252F%252Fwww.cloudflare.com%252Flearning%252Faccess-management%252Fphishing-attack%252F%26liSync%3Dtrue HTTP/1.1Host: www.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; bscookie="v=1&2025031718231198c75ce6-f193-43f0-8a1b-836f9253db0bAQEBKryoYGbkjubvmRn-7TMtYp1vLpH2"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; UserMatchHistory=AQLNVBXE7O6wQgAAAZWlWGx6uCQMkgAJx7BzQk0JxeVawa4ed-hd8-QDFnDJnZFc0AGxP6hJv-j1aA; AnalyticsSyncHistory=AQJtORoyWgGhkQAAAZWlWGx62lzhDmipSn5x3RyBwDLNxtahWrDgGoRc9cmdMyUMKEB-9S5NTMrTWw8ppjV1kw; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1758133391&external_user_id=47eec515-a7c4-4937-ac7a-2d0f766f4868 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaab-source.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /td/ga/rul?tid=G-SQCRB0TXZW&gacid=2115900456.1742235791&gtm=45je53d1v895724479z8890325950za200zb890325950&dma=0&gcs=G111&gcd=13r3r3r3r5l1&npa=0&pscdl=noapi&aip=1&fledge=1&frm=0&tag_exp=102482433~102587591~102717422~102788824~102803278~102813109~102814060~102825837~102879719&z=933280726 HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=47eec515-a7c4-4937-ac7a-2d0f766f4868 HTTP/1.1Host: partners.tremorhub.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /xdc.js?_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_h=-1777624096&cdn_o=a&jsVer=4.25.02.19 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=7238b984d46a4b61baf5b7f990e552f3
Source: global traffic	HTTP traffic detected: GET /r?tid=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJ0IjoxMDkyNjh9.dguW7jthV1Y1wgRcAJfVrR_xsANK7zX9ZiD1wf0suvY HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_44283745478348705660075396246819360266&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789500&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=459314&cdn_o=a&_biz_z=1742235790618 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=7238b984d46a4b61baf5b7f990e552f3
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-2c0826d42ca34d316a578bf6c1a6792a&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235790503&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=473802&cdn_o=a&_biz_z=1742235790618 HTTP/1.1Host: cdn.bizible.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=7238b984d46a4b61baf5b7f990e552f3
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-identity-and-access-management/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C
Source: global traffic	HTTP traffic detected: GET /tap.php?nid=5578&put=47eec515-a7c4-4937-ac7a-2d0f766f4868&v=1181926 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=xAXKmsuCtnuUVn-pGy3awxK99KOlYucU68jgGZRiKDJw9yAEhOv7EA==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=28851&time=1742235789392&li_adsId=97c07a85-bf50-4699-ad2a-8c0b067f3ba0&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1758133391&external_user_id=47eec515-a7c4-4937-ac7a-2d0f766f4868&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9hokNHM6MAALjw7AGgw4QAA; CMPS=3440; CMPRO=3440
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveOrigin: https://www.cloudflare.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: application/signed-exchange;v=b3;q=0.7,/;q=0.8Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D
Source: global traffic	HTTP traffic detected: GET /f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js HTTP/1.1Host: assets.adobedtm.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=710e171b-0786-42c0-b460-6f82edff68c1&_u=KGDAAEADQAAAAC%7E&z=280957499&slf_rd=1 HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A
Source: global traffic	HTTP traffic detected: GET /attribution_trigger?pid=28851&time=1742235789392&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235789600&pid=28851&conversionId=10249833&cookiesTest=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ
Source: global traffic	HTTP traffic detected: GET /ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=3310612a-d4c7-4eeb-b78f-cf11b9d8d8ca HTTP/1.1Host: adobedc.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=39417500058995438360778150707161042992
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1885822282:1742232477:PFI6QdCJRvY1XQ0gqAdOhWIk9BIh1Pakr_3Z5j4OXgc/921e850c7c1718c8/5sdAu.AfeVKw6Y9c5XHECJGrSYluBCENIVT1MOOJc34-1742235788-1.1.1.1-JFanl2ACTzBVjILOpBM6z4.5mTzqRk1t78L9XJoyVhWoCbBonhzPkdLB7QbnXtEI HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiNjc4YTY0MTYtYWFkNS00N2RjLWFhNTEtMjJmZmE0ZDg1OTBhIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndc
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: trigger;navigation-source, event-sourceAttribution-Reporting-Support: web;osX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /i HTTP/1.1Host: scout.salesloft.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=2aa45797-8618-48a9-afcf-60b73c19e526&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e5676468-c608-41bd-8cbf-d9675e39911d&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: t.coConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: muc_ads=99d20edd-5995-48c5-bf60-8f8e7071e2f7; __cf_bm=h7GqH4jcw0328w5pOBfThJGDS_iEJWZEIIsKNZFN6dw-1742235791-1.0.1.1-6KDmwku7nQ63HRJDjVPbsDMsiGq_l47DAQ4f2xQpDnc10TN.hOwVTGHrDolb1Q5KJSfjHhtGDHShZiZmrpel3F1_R0ZLDWPfobpUmZw36_s
Source: global traffic	HTTP traffic detected: GET /1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=2aa45797-8618-48a9-afcf-60b73c19e526&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e5676468-c608-41bd-8cbf-d9675e39911d&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31 HTTP/1.1Host: analytics.twitter.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: guest_id_marketing=v1%3A174223579133006020; guest_id_ads=v1%3A174223579133006020; personalization_id="v1_U/q4Kz7QlEhkeJ4seJwm3w=="; guest_id=v1%3A174223579133006020; __cf_bm=xTM.p36F95RYo9ouJfSvsaPP0WROpJVY8GDjPjTxL9c-1742235791-1.0.1.1-q9jiMSOYFRuB7Z.OPXe2aWbkURrVdhz72y_vUhAe1jEH6FIkJd3YBKT6xJYqCkPJW13GV4PX0.cSGxiT0Capt1MTwrDMfSzupnb0n3ixIVQ
Source: global traffic	HTTP traffic detected: GET /component---src-components-page-page-template-tsx-c7ec2b92ba43b220ad2d.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e1
Source: global traffic	HTTP traffic detected: GET /ipv?_biz_r=https%3A%2F%2Fblgwlnauto.com%2F&_biz_h=-1777624096&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789492&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=0&rnd=124116&cdn_o=a&_biz_z=1742235789494 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=7238b984d46a4b61baf5b7f990e552f3
Source: global traffic	HTTP traffic detected: GET /u?_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789499&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&rnd=123287&cdn_o=a&_biz_z=1742235789499 HTTP/1.1Host: cdn.bizibly.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /component---src-components-learning-center-templates-learning-center-article-template-tsx-49a0a9ee350debcad655.js HTTP/1.1Host: www.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Purpose: prefetchSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.cloudflare.com/learning/access-management/phishing-attack/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044&cookiesTest=true&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ
Source: global traffic	HTTP traffic detected: GET /api/v3/ip.json?referrer=https%3A%2F%2Fblgwlnauto.com%2F&page=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&page_title=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare HTTP/1.1Host: api.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=47eec515-a7c4-4937-ac7a-2d0f766f4868; tuuid_lu=1742235791\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiNjc4YTY0MT
Source: global traffic	HTTP traffic detected: GET /sync?UIDM=47eec515-a7c4-4937-ac7a-2d0f766f4868 HTTP/1.1Host: partners.tremorhub.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tvid=f12310e49ef8473699bd12d90347cfff; tv_UIDM=47eec515-a7c4-4937-ac7a-2d0f766f4868
Source: global traffic	HTTP traffic detected: GET /ibs:dpid=411&dpuuid=Z9hojwAAAMmqPwOJ HTTP/1.1Host: dpm.demdex.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: demdex=39417500058995438360778150707161042992; dpm=39417500058995438360778150707161042992
Source: global traffic	HTTP traffic detected: GET /u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_44283745478348705660075396246819360266&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789500&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=459314&cdn_o=a&_biz_z=1742235790618 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=7238b984d46a4b61baf5b7f990e552f3
Source: global traffic	HTTP traffic detected: GET /u?mapType=mkto&mapValue=id%3A713-XSC-918%26token%3A_mch-cloudflare.com-2c0826d42ca34d316a578bf6c1a6792a&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235790503&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=2&rnd=473802&cdn_o=a&_biz_z=1742235790618 HTTP/1.1Host: cdn.bizible.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _BUID=7238b984d46a4b61baf5b7f990e552f3
Source: global traffic	HTTP traffic detected: GET /page-data/plans/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; __q_state_37pXYrro6wCZbsU7=ey
Source: global traffic	HTTP traffic detected: GET /page-data/learning/access-management/what-is-sase/page-data.json HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e55
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/pat/921e850c7c1718c8/1742235790677/8e0f088034263321804c8629fe4ae2c222c64aff3646966b3c99514df7afa38e/QFiFQpYyAiyE39n HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveCache-Control: max-age=0sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/83j4o/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1;
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CIqH5YzekYwDFQMZogMdUmsZBg;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7
Source: global traffic	HTTP traffic detected: GET /rum?cm_dsp_id=18&expiry=1758133391&external_user_id=47eec515-a7c4-4937-ac7a-2d0f766f4868&C=1 HTTP/1.1Host: dsum-sec.casalemedia.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: CMID=Z9hokNHM6MAALjw7AGgw4QAA; CMPS=3440; CMPRO=3440
Source: global traffic	HTTP traffic detected: GET /bg9s?x-amz-cf-id=xAXKmsuCtnuUVn-pGy3awxK99KOlYucU68jgGZRiKDJw9yAEhOv7EA==&api-version=v3 HTTP/1.1Host: tag-logger.demandbase.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /collect?v=2&fmt=js&pid=28851&time=1742235789392&li_adsId=97c07a85-bf50-4699-ad2a-8c0b067f3ba0&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&liSync=true HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /tap.php?nid=5578&put=47eec515-a7c4-4937-ac7a-2d0f766f4868&v=1181926 HTTP/1.1Host: pixel.rubiconproject.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: khaos=M8DE7H0R-1D-9EAO; audit=1\|tAPjR8wBsUY/hs88JUFjMwZS+9oNXEfx9lIExfR3GcnlGNsBp+KQQZvOqYHyQ4gXkYeswC+rrK6M1KxoLazIt5mwZQnb46mpy8ASk1d7zNwI5aQmCT0AbRAhwA5L+76XvYeWl5nxrlMIIrHY0B7RQgY5cQ5jqWzlcmESKmf2cwrTmoFL5pKQsaZr5ZVxLWDe
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=991460287.1742235788;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/921e850c7c1718c8/1742235790678/gfm1BQPql__MuxD HTTP/1.1Host: challenges.cloudflare.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/83j4o/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5
Source: global traffic	HTTP traffic detected: GET /ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=82b128ae-2ea9-420e-a0df-55ca5dd7d719 HTTP/1.1Host: edge.adobedc.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CIqH5YzekYwDFQMZogMdUmsZBg;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l/dmVuZG9yPW1hcmlwb3NhJnAxPXVrd2N2ei5vcmcmdG9rZW49NU84UjBtNXdQcW9ydVJOVHhEQUdieWZhaGJPRGY0S1ZyamdGWFRtMQ== HTTP/1.1Host: segments.company-target.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-type: application/jsonsec-ch-ua-mobile: ?0Accept: /Origin: https://www.cloudflare.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=47eec515-a7c4-4937-ac7a-2d0f766f4868; tuuid_lu=1742235791\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/d/921e850c7c1718c8/1742235790678/gfm1BQPql__MuxD HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiNjc4YTY0MTYtYWFkNS00N2RjLWFhNTEtMjJmZmE0ZDg1OTBhIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndctr_8AD56F28618A50850A495FB6_AdobeOrg_identity=CiY0NDI4Mzc0NTQ3ODM0ODcwNTY2MDA3NTM5NjI0NjgxOTM2MDI2NlIRCO7a4araMhgBKgRJUkwxMAPwAe7a4araMg==; kndctr_8AD56F28618A50850A495FB6
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CIqH5YzekYwDFQMZogMdUmsZBg;src=9309168;type=a_pag0;cat=3_page;ord=4424629484656;npa=0;auiddc=;u1=page_load;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=49995684;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /*X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /l/dmVuZG9yPW1hcmlwb3NhJnAxPXVrd2N2ei5vcmcmdG9rZW49NU84UjBtNXdQcW9ydVJOVHhEQUdieWZhaGJPRGY0S1ZyamdGWFRtMQ== HTTP/1.1Host: segments.company-target.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: tuuid=47eec515-a7c4-4937-ac7a-2d0f766f4868; tuuid_lu=1742235791\|ix:0\|mctv:0\|rp:0
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: c2mk8pPSkF/fiLF/3MCVMA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/g/flow/ov1/1885822282:1742232477:PFI6QdCJRvY1XQ0gqAdOhWIk9BIh1Pakr_3Z5j4OXgc/921e850c7c1718c8/5sdAu.AfeVKw6Y9c5XHECJGrSYluBCENIVT1MOOJc34-1742235788-1.1.1.1-JFanl2ACTzBVjILOpBM6z4.5mTzqRk1t78L9XJoyVhWoCbBonhzPkdLB7QbnXtEI HTTP/1.1Host: challenges.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiNjc4YTY0MTYtYWFkNS00N2RjLWFhNTEtMjJmZmE0ZDg1OTBhIiwiY29va2llRG9tYWluIjoiY2xvdWRmbGFyZS5jb20ifQ==; kndc
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: ea38zhDOoexjH2dGJX5yVw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: rbAXW6QvlIvVF/DKu1Kh/w==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=991460287.1742235788;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=991460287.1742235788;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=991460287.1742235788;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: trigger, event-source;navigation-sourceAttribution-Reporting-Support: web=osX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /activity;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=991460287.1742235788;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /td/fls/rul/activityi;fledge=1;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=991460287.1742235788;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=9;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: td.doubleclick.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=991460287.1742235788;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Attribution-Reporting-Eligible: trigger, event-sourceAttribution-Reporting-Support: not-os, webX-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /static/z/t HTTP/1.1Host: www.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; _lr_hb_-ykolez%2Fcloudflarecom={%22heartbeat%22:1742235786347}; _lr_uf_-ykolez=37c26cec-ad9e-43b4-b819-b5dda5fa8b1e; OptanonConsent=isGpcEnabled=0&datestamp=Mon+Mar+17+2025+14%3A23%3A06+GMT-0400+(Eastern+Daylight+Time)&version=202407.2.0&browserGpcFlag=0&isIABGlobal=false&hosts=&consentId=22fb4577-0ab6-4c67-9d0b-24fd350df1f9&interactionCount=0&isAnonUser=1&landingPath=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&groups=SSPD_BG%3A1%2CC0004%3A1%2CC0002%3A1%2CC0003%3A1%2CC0001%3A1; cfz_facebook-pixel=%7B%22OwdI_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.2073063156%22%2C%22e%22%3A1773771788904%7D%2C%22VVgx_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.1267968590%22%2C%22e%22%3A1773771788904%7D%2C%22bHox_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.282301885%22%2C%22e%22%3A1773771788904%7D%2C%22elKW_fb-pixel%22%3A%7B%22v%22%3A%22fb.2.1742235788904.969548028%22%2C%22e%22%3A1773771788904%7D%7D; cfz_reddit=%7B%22fZaD_reddit_uuid%22%3A%7B%22v%22%3A%221742235788904.0a782dc0-b1fd-4c26-b07c-531a1f46a492%22%2C%22e%22%3A1773771788904%7D%7D; _gcl_au=1.1.991460287.1742235788; cfzs_amplitude=%7B%22TTin_session_id%22%3A%7B%22v%22%3A%221742235789600%22%7D%7D; cfzs_google-analytics_v4=%7B%22nzcr_conversionCounter%22%3A%7B%22v%22%3A%221%22%7D%7D; cfz_amplitude=%7B%22TTin_event_id%22%3A%7B%22v%22%3A%222%22%2C%22e%22%3A1773771789600%7D%2C%22TTin_device_id%22%3A%7B%22v%22%3A%22c3836a7f-2a2b-4f53-9894-769db9fb13fa%22%2C%22e%22%3A1773771789600%7D%7D; cfz_google-analytics_v4=%7B%22nzcr_engagementDuration%22%3A%7B%22v%22%3A%220%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_engagementStart%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4sid%22%3A%7B%22v%22%3A%22844612750%22%2C%22e%22%3A1742237589600%7D%2C%22nzcr_session_counter%22%3A%7B%22v%22%3A%221%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_ga4%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr__z_ga_audiences%22%3A%7B%22v%22%3A%22710e171b-0786-42c0-b460-6f82edff68c1%22%2C%22e%22%3A1773771789600%7D%2C%22nzcr_let%22%3A%7B%22v%22%3A%221742235789600%22%2C%22e%22%3A1773771789600%7D%7D; AMCVS_8AD56F28618A50850A495FB6%40AdobeOrg=1; _biz_uid=7238b984d46a4b61baf5b7f990e552f3; __q_state_37pXYrro6wCZbsU7=eyJ1dWlkIjoiNjc4YTY0MT
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235819575&pid=28851&conversionId=20071137 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CI-pqZnekYwDFXsJogMdhToQxA;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=991460287.1742235788;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /activity;dc_pre=CJCzqpnekYwDFf0bogMdWukNvQ;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=991460287.1742235788;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7; receive-cookie-deprecation=1
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=991460287.1742235788;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7
Source: global traffic	HTTP traffic detected: GET /activity;register_conversion=1;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=991460287.1742235788;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=10;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2? HTTP/1.1Host: ad.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: ar_debug=1; IDE=AHWqTUnqRSR7tz4PJ24MuMnw-XNaCgmghrYSAAM53eKHxiaVAjTfWW1VxKm-OEt7
Source: global traffic	HTTP traffic detected: GET /collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235819575&pid=28851&conversionId=20071137 HTTP/1.1Host: px.ads.linkedin.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: lidc="b=VGST03:s=V:r=V:a=V:p=V:g=3435:u=1:x=1:i=1742235790:t=1742322190:v=2:sig=AQHpjeKehAv7ldPtsMwpHc0gtDCFXqXv"; li_sugr=1162559e-8069-4c31-b588-793c025fa2f0; bcookie="v=2&47a77a5a-371e-47a5-8528-f4d3a3960f9a"; __cf_bm=qFN3fBll1ofTRt9epp.Xv2FABopO0Q8yRXY2p73HxtM-1742235791-1.0.1.1-fQEQHjwqvStfQtZnGD6Eis_GW_b_3AIAvKz7h27xtO.PompSWwKWR3XEdRzd2cSDL_yd1foErlorHq1QaAw8bVLaXwazYTo4xKEGfbgRglI; UserMatchHistory=AQK5hEc40Zy3BQAAAZWlWG9nYe5P1rC53wAE8rDhVdIbdRM1qiU9ECRgBJfkX-M38lCTwTOJwRjz4g; AnalyticsSyncHistory=AQJRKsX1SERxLwAAAZWlWG9nX8QpO78MGfbX07ogqc-WY1otE8JNGD_n8fTU4dnl9rNIy2i6D9uSSeJYBzNlCQ; ar_debug=1
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CI-pqZnekYwDFXsJogMdhToQxA;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJCzqpnekYwDFf0bogMdWukNvQ;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8X-Client-Data: CO6MywE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.cloudflare.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CI-pqZnekYwDFXsJogMdhToQxA;src=9309168;type=a_pri_pv;cat=0p_qual;ord=346087869706;npa=0;auiddc=;u1=FL%20-%20Brand%20-%20GLOBAL%20-%20Quality%20Visit;u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1441913328;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /*X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ddm/fls/z/dc_pre=CJCzqpnekYwDFf0bogMdWukNvQ;src=9309168;type=a_eng0;cat=3_timer;ord=9704170243732;npa=0;auiddc=;u1=timer_event%20(30%20Sec);u2=www.cloudflare.com;u3=%2Flearning%2Faccess-management%2Fphishing-attack%2F;u4=en-US;u5=1742235787859;u6=US;u7=false;u8=undefined;u9=undefined;u10=undefined;u12=undefined;ps=1;pcor=1238842720;uaa=x86;uab=64;uafvl=Chromium%3B134.0.6998.36%7CNot%253AA-Brand%3B24.0.0.0%7CGoogle%2520Chrome%3B134.0.6998.36;uamb=0;uam=;uap=Windows;uapv=10.0.0;uaw=0;pscdl=noapi;frm=0;_tu=Kg;gtm=45fe53d1v9164255219z8890325950za201zb895724479;gcs=G111;gcd=13r3r3r3r5l1;dma=0;dc_fmt=5;tag_exp=102482433~102587591~102717422~102788824~102813109~102814060~102825837~102879719;epver=2 HTTP/1.1Host: adservice.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /*X-Client-Data: CO6MywE=Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: YxS6NlK6YXxAacFa3R08rw==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=false HTTP/1.1Host: ws6.qualified.comConnection: UpgradePragma: no-cacheCache-Control: no-cacheUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Upgrade: websocketOrigin: https://www.cloudflare.comSec-WebSocket-Version: 13Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Sec-WebSocket-Key: 3iF2r4ZpBsaC1NQA8oziUA==Sec-WebSocket-Extensions: permessage-deflate; client_max_window_bitsSec-WebSocket-Protocol: actioncable-v1-json, actioncable-unsupported
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301 HTTP/1.1Host: r.logr-ingest.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: chromecache_221.3.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-b4ccdea1-0fae-4ab1-9603-8a06c548f1ad%5C%22))%7D%22%2C%22order-id%22%3A%22b4ccdea1-0fae-4ab1-9603-8a06c548f1ad%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-620c231a-a4f3-4cd2-975d-6ce59257b4af%5C%22))%7D%22%2C%22order-id%22%3A%22620c231a-a4f3-4cd2-975d-6ce59257b4af%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742235788904&uuid=0a782dc0-b1fd-4c26-b07c-531a1f46a492&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}ca
Source: chromecache_221.3.dr	String found in binary or memory: -->`;document.body.appendChild(d);};{\n!function(e,t,n,s,u,a){e.twq\|\|(s=e.twq=function(){s.exe?s.exe.apply(s,arguments):s.queue.push(arguments);\n},s.version='1.1',s.queue=[],u=t.createElement(n),u.async=!0,u.src='https://static.ads-twitter.com/uwt.js',\na=t.getElementsByTagName(n)[0],a.parentNode.insertBefore(u,a))}(window,document,'script');\n// Insert Twitter Advertiser ID\ntwq('config','nvldc', {\n restricted_data_use: 'restrict_optimization' // or 'off'\n});\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{\n(function() {\n var didInit = false;\n function initMunchkin() {\n if(didInit === false) {\n didInit = true;\n Munchkin.init('713-XSC-918');\n }\n }\n var s = document.createElement('script');\n s.type = 'text/javascript';\n s.async = true;\n s.src = '//munchkin.marketo.net/munchkin-beta.js';\n s.onreadystatechange = function() {\n if (this.readyState == 'complete' \|\| this.readyState == 'loaded') {\n initMunchkin();\n }\n };\n s.onload = initMunchkin;\n document.getElementsByTagName('head')[0].appendChild(s);\n})();\n};{const d = document.createElement('div');d.innerHTML = ``;document.body.appendChild(d);};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22type%22%3A%22text%2Fjavascript%22%2C%22src%22%3A%22https%3A%2F%2Fcdn.bizible.com%2Fscripts%2Fbizible.js%22%2C%22async%22%3A%22%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-b4ccdea1-0fae-4ab1-9603-8a06c548f1ad%5C%22))%7D%22%2C%22order-id%22%3A%22b4ccdea1-0fae-4ab1-9603-8a06c548f1ad%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);};{const d = document.createElement('div');d.innerHTML = `<!-- Qualified -->\n\n\n<!-- End Qualified -->`;document.body.appendChild(d);};{\n(function(w,q){w['QualifiedObject']=q;w[q]=w[q]\|\|function(){\n(w[q].q=w[q].q\|\|[]).push(arguments)};})(window,'qualified')\n\n};{const el = document.createElement('script');Object.entries(JSON.parse(decodeURIComponent(`%7B%22async%22%3A%22%22%2C%22src%22%3A%22https%3A%2F%2Fjs.qualified.com%2Fqualified.js%3Ftoken%3D37pXYrro6wCZbsU7%22%2C%22onload%22%3A%22%7Bdocument.dispatchEvent(new%20Event(%5C%22loaded-620c231a-a4f3-4cd2-975d-6ce59257b4af%5C%22))%7D%22%2C%22order-id%22%3A%22620c231a-a4f3-4cd2-975d-6ce59257b4af%22%7D`))).forEach(([k, v]) => {el.setAttribute(k, v);});document.head.appendChild(el);}})(window,document)"],"f":[["https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044",{"credentials":"include","keepalive":true,"mode":"no-cors"}],["https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742235788904&uuid=0a782dc0-b1fd-4c26-b07c-531a1f46a492&integration=reddit&opt_out=0&v=rdt_65e23bc4&sh=1024&sw=1280",{"mode":"no-cors","keepalive":true,"credentials":"include"}]]})})(window,document)}ca
Source: chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	String found in binary or memory: return f}BG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)
Source: chromecache_159.3.dr	String found in binary or memory: var QF=function(a,b,c,d,e){var f=MC("fsl",c?"nv.mwt":"mwt",0),g;g=c?MC("fsl","nv.ids",[]):MC("fsl","ids",[]);if(!g.length)return!0;var k=RC(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);Q(121);if(m==="https://www.facebook.com/tr/")return Q(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!zB(k,BB(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: blgwlnauto.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.cloudflareinsights.com
Source: global traffic	DNS traffic detected: DNS query: cf-assets.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: performance.radar.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: ot.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: assets.adobedtm.com
Source: global traffic	DNS traffic detected: DNS query: api.www.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: px.ads.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: alb.reddit.com
Source: global traffic	DNS traffic detected: DNS query: tag.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: snap.licdn.com
Source: global traffic	DNS traffic detected: DNS query: scout-cdn.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: static.ads-twitter.com
Source: global traffic	DNS traffic detected: DNS query: munchkin.marketo.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizible.com
Source: global traffic	DNS traffic detected: DNS query: js.qualified.com
Source: global traffic	DNS traffic detected: DNS query: r.logr-ingest.com
Source: global traffic	DNS traffic detected: DNS query: stats.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: scout.salesloft.com
Source: global traffic	DNS traffic detected: DNS query: cloudflareinc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: adobedc.demdex.net
Source: global traffic	DNS traffic detected: DNS query: di.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: cm.everesttech.net
Source: global traffic	DNS traffic detected: DNS query: cdn.bizibly.com
Source: global traffic	DNS traffic detected: DNS query: www.linkedin.com
Source: global traffic	DNS traffic detected: DNS query: ws6.qualified.com
Source: global traffic	DNS traffic detected: DNS query: app.qualified.com
Source: global traffic	DNS traffic detected: DNS query: t.co
Source: global traffic	DNS traffic detected: DNS query: api.company-target.com
Source: global traffic	DNS traffic detected: DNS query: analytics.twitter.com
Source: global traffic	DNS traffic detected: DNS query: s.company-target.com
Source: global traffic	DNS traffic detected: DNS query: id.rlcdn.com
Source: global traffic	DNS traffic detected: DNS query: analytics.google.com
Source: global traffic	DNS traffic detected: DNS query: td.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: dsum-sec.casalemedia.com
Source: global traffic	DNS traffic detected: DNS query: partners.tremorhub.com
Source: global traffic	DNS traffic detected: DNS query: pixel.rubiconproject.com
Source: global traffic	DNS traffic detected: DNS query: tag-logger.demandbase.com
Source: global traffic	DNS traffic detected: DNS query: 713-xsc-918.mktoresp.com
Source: global traffic	DNS traffic detected: DNS query: ad.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: edge.adobedc.net
Source: global traffic	DNS traffic detected: DNS query: segments.company-target.com
Source: global traffic	DNS traffic detected: DNS query: adservice.google.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=eysiYReuZSCXewCadvsjqSxZR4UKNRHNDdntYC93e%2BhqcwphqYfhOo1dOn99474cbehxip9Q88NWiKdjiFMHptUur6EC7%2BLEU0Vh72AQFMyTQRpvANRuf8NLPjYu1fyGHw%3D%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 408Content-Type: application/reports+jsonOrigin: https://blgwlnauto.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 17 Mar 2025 18:22:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eysiYReuZSCXewCadvsjqSxZR4UKNRHNDdntYC93e%2BhqcwphqYfhOo1dOn99474cbehxip9Q88NWiKdjiFMHptUur6EC7%2BLEU0Vh72AQFMyTQRpvANRuf8NLPjYu1fyGHw%3D%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 921e84943fcbc33a-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 17 Mar 2025 18:23:04 GMTContent-Type: text/html; charset=UTF-8Content-Length: 7702Connection: closeaccept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcf-mitigated: challengecritical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UAcross-origin-embedder-policy: require-corpcross-origin-opener-policy: same-origincross-origin-resource-policy: same-originorigin-agent-cluster: ?1permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()referrer-policy: same-originserver-timing: chlray;desc="921e84f3ee3bed71"x-content-options: nosniffx-frame-options: SAMEORIGIN
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 17 Mar 2025 18:23:09 GMTContent-Type: application/json; charset=UTF-8Content-Length: 24Connection: closeAccess-Control-Allow-Origin: https://www.cloudflare.comAccess-Control-Allow-Credentials: trueAccess-Control-Allow-Headers: Content-Type,AcceptAccess-Control-Allow-Methods: GET,POST,OPTIONSX-Robots-Tag: noindexReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RL%2FAQ1OH9RbHiVP4VTpumM3JQhccKN1kpuw3nSthlvyCInYa12EIODddvdvbvLpXiyDiwcGjP6NHtfxNRNPD%2BNsj3RCLY3haijS4WjTzNFpDc6gtAGV2JXE0aHkTWWxcueXLOZd787I%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 921e85118d9d42e5-EWRalt-svc: h3=":443"; ma=86400
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 3310612a-d4c7-4eeb-b78f-cf11b9d8d8cavary: Origindate: Mon, 17 Mar 2025 18:23:12 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-request-id: 82b128ae-2ea9-420e-a0df-55ca5dd7d719vary: Origindate: Mon, 17 Mar 2025 18:23:16 GMTx-konductor: 25.3.4:8abf704d4x-adobe-edge: IRL1;6server: jagcontent-length: 0strict-transport-security: max-age=31536000; includeSubDomainscache-control: no-cache, no-store, max-age=0, no-transform, privatex-xss-protection: 1; mode=blockx-content-type-options: nosniffconnection: close

Source: chromecache_159.3.dr	String found in binary or memory: https://ad.doubleclick.net
Source: chromecache_205.3.dr, chromecache_159.3.dr	String found in binary or memory: https://ade.googlesyndication.com
Source: chromecache_164.3.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_221.3.dr	String found in binary or memory: https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742235788904&uuid=0a782dc0-b1fd-4c2
Source: chromecache_227.3.dr, chromecache_162.3.dr	String found in binary or memory: https://api.www.cloudflare.com/api/v1
Source: chromecache_186.3.dr	String found in binary or memory: https://app.qualified.com
Source: chromecache_152.3.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.js
Source: chromecache_193.3.dr	String found in binary or memory: https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti
Source: chromecache_133.3.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a
Source: chromecache_202.3.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaa
Source: chromecache_220.3.dr	String found in binary or memory: https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js
Source: chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_180.3.dr, chromecache_126.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60
Source: chromecache_190.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b
Source: chromecache_180.3.dr, chromecache_126.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/3aiXyraQa82SPHcEOgsxLq/ace1025cc5204f2ca8885646b8b
Source: chromecache_129.3.dr, chromecache_132.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8
Source: chromecache_129.3.dr, chromecache_132.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab
Source: chromecache_190.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264
Source: chromecache_223.3.dr, chromecache_130.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480
Source: chromecache_223.3.dr, chromecache_130.3.dr	String found in binary or memory: https://cf-assets.www.cloudflare.com/slt3lc6tev37/mJZqOomHta2MLLB73P8Hs/9378861761815b3adf7bcb7734d6
Source: chromecache_181.3.dr, chromecache_135.3.dr	String found in binary or memory: https://developers.marketo.com/MunchkinLicense.pdf
Source: chromecache_150.3.dr	String found in binary or memory: https://dsum-sec.casalemedia.com/rum?cm_dsp_id=18&expiry=1758133391&external_user_id=47eec51
Source: chromecache_190.3.dr	String found in binary or memory: https://github.com/jonsuh/hamburgers
Source: chromecache_215.3.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_164.3.dr	String found in binary or memory: https://google.com
Source: chromecache_164.3.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_190.3.dr	String found in binary or memory: https://jonsuh.com/hamburgers
Source: chromecache_186.3.dr	String found in binary or memory: https://js.qualified.com
Source: chromecache_164.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_150.3.dr	String found in binary or memory: https://partners.tremorhub.com/sync?UIDM=47eec515-a7c4-4937-ac7a-2d0f766f4868
Source: chromecache_150.3.dr	String found in binary or memory: https://pixel.rubiconproject.com/tap.php?nid=5578&put=47eec515-a7c4-4937-ac7a-2d0f766f4868&v
Source: chromecache_221.3.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Fac
Source: chromecache_221.3.dr	String found in binary or memory: https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif
Source: chromecache_186.3.dr	String found in binary or memory: https://schedule.qualified.com
Source: chromecache_126.3.dr	String found in binary or memory: https://schema.org/Answer
Source: chromecache_190.3.dr	String found in binary or memory: https://schema.org/FAQPage
Source: chromecache_126.3.dr	String found in binary or memory: https://schema.org/Question
Source: chromecache_221.3.dr	String found in binary or memory: https://scout-cdn.salesloft.com/sl.js
Source: chromecache_137.3.dr, chromecache_196.3.dr	String found in binary or memory: https://scout.us4.salesloft.com
Source: chromecache_221.3.dr	String found in binary or memory: https://snap.licdn.com/li.lms-analytics/insight.min.js
Source: chromecache_147.3.dr	String found in binary or memory: https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/
Source: chromecache_221.3.dr	String found in binary or memory: https://static.ads-twitter.com/uwt.js
Source: chromecache_164.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_164.3.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_122.3.dr, chromecache_169.3.dr	String found in binary or memory: https://suspended.hawkhost.com/
Source: chromecache_221.3.dr	String found in binary or memory: https://tag.demandbase.com/1be41a80498a5b73.min.js
Source: chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_180.3.dr, chromecache_126.3.dr	String found in binary or memory: https://unctad.org/page/data-protection-and-privacy-legislation-worldwide
Source: chromecache_227.3.dr, chromecache_162.3.dr	String found in binary or memory: https://www.cloudflare.com
Source: chromecache_174.3.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_174.3.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: chromecache_180.3.dr, chromecache_126.3.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/what-is-browser-isolation/
Source: chromecache_186.3.dr	String found in binary or memory: https://www.cloudflare.com/lp/multi-channel-phishing-demo?utm_medium=banner
Source: chromecache_151.3.dr, chromecache_199.3.dr	String found in binary or memory: https://www.cloudflare.com/saas/)
Source: chromecache_164.3.dr	String found in binary or memory: https://www.google.com
Source: chromecache_205.3.dr, chromecache_159.3.dr	String found in binary or memory: https://www.google.com/gmp/conversion;
Source: chromecache_164.3.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_164.3.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_205.3.dr, chromecache_159.3.dr	String found in binary or memory: https://www.googletagmanager.com/dclk/ns/v1.js
Source: chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/
Source: chromecache_164.3.dr	String found in binary or memory: https://www.merchant-center-analytics.goog

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61860
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 49921 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61844
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61854
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61857
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 61851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49929 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49930 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49928 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49924 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49930
Source: unknown	Network traffic detected: HTTP traffic on port 49925 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49929
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49928
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49925
Source: unknown	Network traffic detected: HTTP traffic on port 61853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49924
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49921
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 61865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.68:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.97.3:443 -> 192.168.2.6:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49722 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.80.73:443 -> 192.168.2.6:49721 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.6:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.31.78:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.124.96:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.64.1:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49766 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.245.23:443 -> 192.168.2.6:49764 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.123.96:443 -> 192.168.2.6:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.194.53.123:443 -> 192.168.2.6:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.6:49783 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.16.71.105:443 -> 192.168.2.6:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.140:443 -> 192.168.2.6:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 88.221.110.145:443 -> 192.168.2.6:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.121:443 -> 192.168.2.6:49784 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.23.65.88:443 -> 192.168.2.6:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 146.75.116.157:443 -> 192.168.2.6:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.46.25:443 -> 192.168.2.6:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.6:49786 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.6:49785 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49788 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 3.209.97.229:443 -> 192.168.2.6:49793 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.164:443 -> 192.168.2.6:49789 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 74.125.71.154:443 -> 192.168.2.6:49790 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.6:49797 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.6:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.242.163.237:443 -> 192.168.2.6:49796 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49800 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.94.41:443 -> 192.168.2.6:49806 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.16.235.250:443 -> 192.168.2.6:49798 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.129.140:443 -> 192.168.2.6:49808 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.146.215:443 -> 192.168.2.6:49812 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.16.5:443 -> 192.168.2.6:49815 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.17.5:443 -> 192.168.2.6:49814 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49809 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.35.2.123:443 -> 192.168.2.6:49810 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.6:49817 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.6:49819 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.96.71.22:443 -> 192.168.2.6:49820 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.98:443 -> 192.168.2.6:49818 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.244.174.68:443 -> 192.168.2.6:49822 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.26.193:443 -> 192.168.2.6:49832 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.110:443 -> 192.168.2.6:49829 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.6:49830 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.213.58.31:443 -> 192.168.2.6:49833 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.206.41.94:443 -> 192.168.2.6:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.139:443 -> 192.168.2.6:49834 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.7.51:443 -> 192.168.2.6:49841 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.28.144.124:443 -> 192.168.2.6:49851 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.100:443 -> 192.168.2.6:49852 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49855 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.42.14:443 -> 192.168.2.6:49854 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.17:443 -> 192.168.2.6:49853 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.230:443 -> 192.168.2.6:49860 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.230:443 -> 192.168.2.6:49859 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.159.140.229:443 -> 192.168.2.6:49865 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.66.0.227:443 -> 192.168.2.6:49867 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49864 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.121:443 -> 192.168.2.6:49866 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.17:443 -> 192.168.2.6:49869 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.66.102.75:443 -> 192.168.2.6:49870 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.161.194.228:443 -> 192.168.2.6:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49879 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.11.106:443 -> 192.168.2.6:49878 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.27.193:443 -> 192.168.2.6:49884 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.181.230:443 -> 192.168.2.6:49881 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.7.82:443 -> 192.168.2.6:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.7:443 -> 192.168.2.6:49876 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 69.173.144.165:443 -> 192.168.2.6:49880 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.166:443 -> 192.168.2.6:49889 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.6:49893 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.194:443 -> 192.168.2.6:49892 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.7:443 -> 192.168.2.6:49891 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.194:443 -> 192.168.2.6:49897 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 18.245.86.7:443 -> 192.168.2.6:49898 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.102:443 -> 192.168.2.6:49920 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.230:443 -> 192.168.2.6:49922 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.198.23.205:443 -> 192.168.2.6:49934 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:61849 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.6:61848 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5488_243383751

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5488_243383751

Jump to behavior

Source: classification engine

Classification label: mal60.phis.evad.win@29/193@164/64

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,4502375984620957682,8057564348071720540,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://blgwlnauto.com/kylefax/faxdocuments.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,4502375984620957682,8057564348071720540,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2148 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

HIPS / PFW / Operating System Protection Evasion

Yara detected Powershell download and execute

Source: Yara match

File source: dropped/chromecache_215, type: DROPPED

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://blgwlnauto.com/kylefax/faxdocuments.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://blgwlnauto.com/cgi-sys/suspendedpage.cgi	0%	Avira URL Cloud	safe
https://blgwlnauto.com/cdn-cgi/styles/cf.errors.css	0%	Avira URL Cloud	safe
https://blgwlnauto.com/favicon.ico	0%	Avira URL Cloud	safe
https://suspended.hawkhost.com/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod-default.lb.logrocket.network	104.198.23.205	true	false	high
static.cloudflareinsights.com	104.16.80.73	true	false	high
pixel.rubiconproject.net.akadns.net	69.173.144.139	true	false	high
segments.company-target.com	18.245.86.7	true	false	high
scout-cdn.salesloft.com.cdn.cloudflare.net	104.16.71.105	true	false	high
s.dsp-prod.demandbase.com	34.96.71.22	true	false	high
e10776.b.akamaiedge.net	2.23.65.88	true	false	high
scout.us1.salesloft.com	3.209.97.229	true	false	high
adservice.google.com	142.250.185.194	true	false	high
platform.twitter.map.fastly.net	146.75.116.157	true	false	high
stats.g.doubleclick.net	74.125.71.154	true	false	high
ot.www.cloudflare.com	104.16.123.96	true	false	high
l-0005.l-msedge.net	13.107.42.14	true	false	high
tag.demandbase.com	18.245.46.25	true	false	high
t.co	172.66.0.227	true	false	high
performance.radar.cloudflare.com	104.18.31.78	true	false	high
www.google.com	142.250.185.68	true	false	high
demdex.net.ssl.sc.omtrdc.net	63.140.62.27	true	false	high
api.www.cloudflare.com	104.16.123.96	true	false	high
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	54.194.53.123	true	false	high
partners-1864332697.us-east-1.elb.amazonaws.com	18.213.58.31	true	false	high
cf-assets.www.cloudflare.com	104.16.123.96	true	false	high
id.rlcdn.com	35.244.174.68	true	false	high
tag-logger.demandbase.com	108.138.7.51	true	false	high
a798.dscd.akamai.net	2.19.11.121	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
s.twitter.com	172.66.0.227	true	false	high
cm.everesttech.net.akadns.net	52.16.235.250	true	false	high
ad.doubleclick.net	142.250.185.230	true	false	high
js.qualified.com	104.18.16.5	true	false	high
ws6.qualified.com	104.18.17.5	true	false	high
ax-0001.ax-msedge.net	150.171.27.10	true	false	high
di.rlcdn.com	35.244.174.68	true	false	high
www.linkedin.com.cdn.cloudflare.net	172.64.146.215	true	false	high
www.cloudflare.com	104.16.123.96	true	false	high
cdn.logr-ingest.com	104.21.64.1	true	false	high
reddit.map.fastly.net	151.101.1.140	true	false	high
dsum-sec.casalemedia.com	104.18.26.193	true	false	high
e7808.dscg.akamaiedge.net	2.19.245.23	true	false	high
blgwlnauto.com	188.114.97.3	true	true	unknown
challenges.cloudflare.com	104.18.95.41	true	false	high
adobedc.net.ssl.sc.omtrdc.net	63.140.62.17	true	false	high
api.company-target.com	18.66.102.98	true	false	high
analytics.google.com	142.250.185.110	true	false	high
td.doubleclick.net	142.250.186.66	true	false	high
app.qualified.com	104.18.16.5	true	false	high
713-xsc-918.mktoresp.com	192.28.144.124	true	false	high
a1916.dscg2.akamai.net	88.221.110.145	true	false	high
alb.reddit.com	unknown	unknown	false	high
static.ads-twitter.com	unknown	unknown	false	high
scout.salesloft.com	unknown	unknown	false	high
scout-cdn.salesloft.com	unknown	unknown	false	high
cm.everesttech.net	unknown	unknown	false	high
adobedc.demdex.net	unknown	unknown	false	high
s.company-target.com	unknown	unknown	false	high
assets.adobedtm.com	unknown	unknown	false	high
pixel.rubiconproject.com	unknown	unknown	false	high
px.ads.linkedin.com	unknown	unknown	false	high
munchkin.marketo.net	unknown	unknown	false	high
r.logr-ingest.com	unknown	unknown	false	high
partners.tremorhub.com	unknown	unknown	false	high
cdn.bizibly.com	unknown	unknown	false	high
cloudflareinc.demdex.net	unknown	unknown	false	high
cdn.bizible.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high
www.linkedin.com	unknown	unknown	false	high
analytics.twitter.com	unknown	unknown	false	high
snap.licdn.com	unknown	unknown	false	high
edge.adobedc.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	false		high
https://static.cloudflareinsights.com/beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015	false		high
https://www.cloudflare.com/page-data/learning/access-management/what-is-identity-and-access-management/page-data.json	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/orchestrate/chl_api/v1?ray=921e850c7c1718c8&lang=auto	false		high
https://id.rlcdn.com/464526.gif	false		high
https://blgwlnauto.com/cgi-sys/suspendedpage.cgi	true	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/component---src-components-page-page-template-tsx-c7ec2b92ba43b220ad2d.js	false		high
https://blgwlnauto.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://cloudflareinc.demdex.net/dest5.html?d_nsid=0	false		high
https://app.qualified.com/w/1/37pXYrro6wCZbsU7/events/trace	false		high
https://ot.www.cloudflare.com/public/vendor/onetrust/scripttemplates/202407.2.0/otBannerSdk.js	false		high
https://www.cloudflare.com/static/z/i.js	false		high
https://cdn.bizible.com/u?mapType=ecid&mapValue=8AD56F28618A50850A495FB6%40AdobeOrg_44283745478348705660075396246819360266&_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_l=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&_biz_t=1742235789500&_biz_i=What%20is%20a%20phishing%20attack%3F%20%7C%20Cloudflare&_biz_n=1&rnd=459314&cdn_o=a&_biz_z=1742235790618	false		high
https://ws6.qualified.com/cable?wv=9&token=37pXYrro6wCZbsU7&vu=678a6416-aad5-47dc-aa51-22ffa4d8590a&wu=f01c38cf-aa12-4c68-bbdb-ea6cbc9a6e00&ca=2025-03-17T18%3A23%3A09.636Z&tz=America%2FNew_York&bis=5&referrer=https%3A%2F%2Fblgwlnauto.com%2F&pv=1&fv=2025-03-17-6fd1b7ecaa&iml=false&bl=en-US&ic=false	false		high
https://www.google.com/ads/ga-audiences?t=sr&aip=1&_r=4&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=710e171b-0786-42c0-b460-6f82edff68c1&_u=KGDAAEADQAAAAC%7E&z=280957499&slf_rd=1	false		high
https://pixel.rubiconproject.com/tap.php?nid=5578&put=47eec515-a7c4-4937-ac7a-2d0f766f4868&v=1181926	false		high
https://blgwlnauto.com/cdn-cgi/styles/cf.errors.css	true	Avira URL Cloud: safe	unknown
https://www.cloudflare.com/page-data/sq/d/3934964512.json	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://cdn.logr-ingest.com/logger-1.min.js	false		high
https://www.cloudflare.com/page-data/plans/page-data.json	false		high
https://scout.salesloft.com/i	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv/83j4o/0x4AAAAAAAnv2jFa1hO0Znbl/light/fbE/new/normal/auto/	false		high
https://tag.demandbase.com/1be41a80498a5b73.min.js	false		high
https://munchkin.marketo.net/munchkin-beta.js	false		high
https://stats.g.doubleclick.net/g/collect?t=dc&aip=1&_r=3&v=1&_v=j86&tid=G-PGV1K2BN4M&cid=710e171b-0786-42c0-b460-6f82edff68c1&_u=KGDAAEADQAAAAC%7E&z=280957499	false		high
https://713-xsc-918.mktoresp.com/webevents/visitWebPage?_mchNc=1742235790308&_mchCn=&_mchId=713-XSC-918&_mchTk=_mch-cloudflare.com-2c0826d42ca34d316a578bf6c1a6792a&_mchHo=www.cloudflare.com&_mchPo=&_mchRu=%2Flearning%2Faccess-management%2Fphishing-attack%2F&_mchPc=https%3A&_mchVr=164&_mchEcid=8AD56F28618A50850A495FB6%40AdobeOrg%3A6%3A44283745478348705660075396246819360266&_mchHa=&_mchRe=https%3A%2F%2Fblgwlnauto.com%2F&_mchQp=	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png	false		high
https://www.cloudflare.com/page-data/plans/enterprise/contact/page-data.json	false		high
https://px.ads.linkedin.com/collect?v=2&fmt=js&pid=28851&time=1742235789392&li_adsId=97c07a85-bf50-4699-ad2a-8c0b067f3ba0&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&liSync=true	false		high
https://api.www.cloudflare.com/api/v1/marketo/form/2459	false		high
https://tag-logger.demandbase.com/bg9s?x-amz-cf-id=xAXKmsuCtnuUVn-pGy3awxK99KOlYucU68jgGZRiKDJw9yAEhOv7EA==&api-version=v3	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC55904e5e1abc4d38a5f1ac3dea0edaab-source.min.js	false		high
https://www.cloudflare.com/img/learning/security/threats/phishing-attack/diagram-phishing-attack.png	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/pat/921e850c7c1718c8/1742235790677/8e0f088034263321804c8629fe4ae2c222c64aff3646966b3c99514df7afa38e/QFiFQpYyAiyE39n	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1885822282:1742232477:PFI6QdCJRvY1XQ0gqAdOhWIk9BIh1Pakr_3Z5j4OXgc/921e850c7c1718c8/5sdAu.AfeVKw6Y9c5XHECJGrSYluBCENIVT1MOOJc34-1742235788-1.1.1.1-JFanl2ACTzBVjILOpBM6z4.5mTzqRk1t78L9XJoyVhWoCbBonhzPkdLB7QbnXtEI	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/d/921e850c7c1718c8/1742235790678/gfm1BQPql__MuxD	false		high
https://www.cloudflare.com/a06cff934e9579536ce1c10bad21c1d6d7f63ae0-90484db4602d401d94ca.js	false		high
https://blgwlnauto.com/kylefax/faxdocuments.html	true		unknown
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235819575&pid=28851&conversionId=20071137	false		high
https://analytics.twitter.com/1/i/adsct?bci=4&dv=America%2FNew_York%26en-US%2Cen%26Google%20Inc.%26Win32%26255%261280%261024%264%2624%261280%26984%260%26na&eci=3&event=%7B%7D&event_id=2aa45797-8618-48a9-afcf-60b73c19e526&integration=advertiser&p_id=Twitter&p_user_id=0&pl_id=e5676468-c608-41bd-8cbf-d9675e39911d&restricted_data_use=restrict_optimization&tw_document_href=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&tw_iframe_status=0&txn_id=nvldc&type=javascript&version=2.3.31	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement.min.js	false		high
https://scout-cdn.salesloft.com/sl.js	false		high
https://static.ads-twitter.com/uwt.js	false		high
https://di.rlcdn.com/710030.gif?pdata=d=desktop,lc=US,ref=blgwlnauto.com	false		high
https://www.cloudflare.com/174-242772ef10d8d161ae24.js	false		high
https://edge.adobedc.net/ee/irl1/v1/interact?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=82b128ae-2ea9-420e-a0df-55ca5dd7d719	false		high
https://cdn.bizible.com/xdc.js?_biz_u=7238b984d46a4b61baf5b7f990e552f3&_biz_h=-1777624096&cdn_o=a&jsVer=4.25.02.19	false		high
https://www.cloudflare.com/static/z/s.js?z=JTdCJTIyZXhlY3V0ZWQlMjIlM0ElNUIlNUQlMkMlMjJ0JTIyJTNBJTIyV2hhdCUyMGlzJTIwYSUyMHBoaXNoaW5nJTIwYXR0YWNrJTNGJTIwJTdDJTIwQ2xvdWRmbGFyZSUyMiUyQyUyMnglMjIlM0EwLjY3NjgxMTEwNjgwNzM0NjglMkMlMjJ3JTIyJTNBMTI4MCUyQyUyMmglMjIlM0ExMDI0JTJDJTIyaiUyMiUzQTg5NyUyQyUyMmUlMjIlM0ExMjgwJTJDJTIybCUyMiUzQSUyMmh0dHBzJTNBJTJGJTJGd3d3LmNsb3VkZmxhcmUuY29tJTJGbGVhcm5pbmclMkZhY2Nlc3MtbWFuYWdlbWVudCUyRnBoaXNoaW5nLWF0dGFjayUyRiUyMiUyQyUyMnIlMjIlM0ElMjJodHRwcyUzQSUyRiUyRmJsZ3dsbmF1dG8uY29tJTJGJTIyJTJDJTIyayUyMiUzQTI0JTJDJTIybiUyMiUzQSUyMlVURi04JTIyJTJDJTIybyUyMiUzQTI0MCUyQyUyMnElMjIlM0ElNUIlNUQlN0Q=	false		high
https://adobedc.demdex.net/ee/v1/identity/acquire?configId=715c679b-19c8-4402-8093-423571ad58c4&requestId=3310612a-d4c7-4eeb-b78f-cf11b9d8d8ca	false		high
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/cmg/1	false		high
https://www.cloudflare.com/page-data/app-data.json	false		high
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&u=fe774ab3-e39f-4821-9e42-601ed80eb9e6&is=1&rs=0%2Cu	false		high
https://app.qualified.com/w/1/37pXYrro6wCZbsU7/visitor_events	false		high
https://px.ads.linkedin.com/wa/	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_ActivityMap.min.js	false		high
https://www.cloudflare.com/cdn-cgi/rum?	false		high
https://www.cloudflare.com/page-data/sq/d/3199558980.json	false		high
https://performance.radar.cloudflare.com/beacon.js	false		high
https://px.ads.linkedin.com/collect/?fmt=js&v=2&url=https%3A%2F%2Fwww.cloudflare.com%2Flearning%2Faccess-management%2Fphishing-attack%2F&time=1742235788904&pid=28851&conversionId=13043044&cookiesTest=true	false		high
https://r.logr-ingest.com/i?a=ykolez%2Fcloudflarecom&r=6-0195a558-5a7c-7120-8dfb-eba38abc4e70&t=261f1060-ee1b-4330-b789-067c384c3d84&s=0&rs=0%2Ct&ct=81.22142398828301	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/6d3ddf5fffa8/RC392ad6d4bbf94c7283b4eda6cbf689a0-source.min.js	false		high
https://s.company-target.com/s/sync?exc=lr	false		high
https://www.cloudflare.com/page-data/learning/access-management/what-is-sase/page-data.json	false		high
https://ot.www.cloudflare.com/public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json	false		high
https://js.qualified.com/qualified.js?token=37pXYrro6wCZbsU7	false		high
https://a.nel.cloudflare.com/report/v4?s=RL%2FAQ1OH9RbHiVP4VTpumM3JQhccKN1kpuw3nSthlvyCInYa12EIODddvdvbvLpXiyDiwcGjP6NHtfxNRNPD%2BNsj3RCLY3haijS4WjTzNFpDc6gtAGV2JXE0aHkTWWxcueXLOZd787I%3D	false		high
https://www.cloudflare.com/component---src-components-learning-center-templates-learning-center-article-template-tsx-49a0a9ee350debcad655.js	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png	false		high
https://cm.everesttech.net/cm/dd?d_uuid=39417500058995438360778150707161042992	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_164.3.dr	false		high
https://alb.reddit.com/rp.gif?event=PageVisit&id=t2_1upmecjq&ts=1742235788904&uuid=0a782dc0-b1fd-4c2	chromecache_221.3.dr	false		high
https://px.ads.linkedin.com/collect/?pid=28851&fmt=gif	chromecache_221.3.dr	false		high
https://unctad.org/page/data-protection-and-privacy-legislation-worldwide	chromecache_180.3.dr, chromecache_126.3.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6i8d186tH2iueYvgwVRaJf/ab27fd31033bdd31aea69065480	chromecache_223.3.dr, chromecache_130.3.dr	false		high
https://www.cloudflare.com/saas/)	chromecache_151.3.dr, chromecache_199.3.dr	false		high
https://assets.adobedtm.com/extensions/EPc7341b33570d4c988798fc9f0093d4b2/AppMeasurement_Module_Acti	chromecache_193.3.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/4sfL2iS6H10uq2waT6ehym/ad18b77fa469ce07f23d22e19ab	chromecache_129.3.dr, chromecache_132.3.dr	false		high
https://www.google.com	chromecache_164.3.dr	false		high
https://schema.org/FAQPage	chromecache_190.3.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/42XkFj9Uywkm8Jahf62RtP/0563d91cc1fa54da2bf2c50bad8	chromecache_129.3.dr, chromecache_132.3.dr	false		high
https://www.cloudflare.com/learning/access-management/what-is-browser-isolation/	chromecache_180.3.dr, chromecache_126.3.dr	false		high
https://www.google.com/gmp/conversion;	chromecache_205.3.dr, chromecache_159.3.dr	false		high
https://scout.us4.salesloft.com	chromecache_137.3.dr, chromecache_196.3.dr	false		high
https://schema.org/Answer	chromecache_126.3.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264	chromecache_190.3.dr	false		high
https://www.cloudflare.com	chromecache_227.3.dr, chromecache_162.3.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/17RhepZZwxiD452Hs0gKFk/5324e2c81dcdef79c74efea2c60	chromecache_180.3.dr, chromecache_126.3.dr	false		high
https://cct.google/taggy/agent.js	chromecache_205.3.dr, chromecache_159.3.dr, chromecache_164.3.dr	false		high
https://www.cloudflare.com/5xx-error-landing	chromecache_174.3.dr	false		high
https://developers.marketo.com/MunchkinLicense.pdf	chromecache_181.3.dr, chromecache_135.3.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_164.3.dr	false		high
https://github.com/js-cookie/js-cookie	chromecache_215.3.dr	false		high
https://suspended.hawkhost.com/	chromecache_122.3.dr, chromecache_169.3.dr	false	Avira URL Cloud: safe	unknown
https://staging.mrk.cfdata.org/mrk/redwood-blade-repository/	chromecache_147.3.dr	false		high
https://cf-assets.www.cloudflare.com/slt3lc6tev37/3aiXyraQa82SPHcEOgsxLq/ace1025cc5204f2ca8885646b8b	chromecache_180.3.dr, chromecache_126.3.dr	false		high
https://js.qualified.com	chromecache_186.3.dr	false		high
https://assets.adobedtm.com/f597f8065f97/065ba81630d7/launch-efab6d095ce0.js	chromecache_220.3.dr	false		high
https://www.cloudflare.com/lp/multi-channel-phishing-demo?utm_medium=banner	chromecache_186.3.dr	false		high
https://app.qualified.com	chromecache_186.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
18.66.102.98	api.company-target.com	United States	3	MIT-GATEWAYSUS	false
192.28.144.124	713-xsc-918.mktoresp.com	United States	15224	OMNITUREUS	false
54.161.194.228	unknown	United States	14618	AMAZON-AESUS	false
142.250.185.100	unknown	United States	15169	GOOGLEUS	false
104.16.80.73	static.cloudflareinsights.com	United States	13335	CLOUDFLARENETUS	false
104.198.23.205	prod-default.lb.logrocket.network	United States	15169	GOOGLEUS	false
172.64.146.215	www.linkedin.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
2.19.245.23	e7808.dscg.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
108.138.7.82	unknown	United States	16509	AMAZON-02US	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.16.124.96	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.140.229	unknown	United States	13335	CLOUDFLARENETUS	false
69.173.144.165	unknown	United States	26667	RUBICONPROJECTUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.184.230	unknown	United States	15169	GOOGLEUS	false
34.96.71.22	s.dsp-prod.demandbase.com	United States	15169	GOOGLEUS	false
142.250.184.194	unknown	United States	15169	GOOGLEUS	false
142.250.185.110	analytics.google.com	United States	15169	GOOGLEUS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
63.140.62.17	adobedc.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
2.19.11.106	unknown	European Union	719	ELISA-ASHelsinkiFinlandEU	false
13.107.42.14	l-0005.l-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
104.16.71.105	scout-cdn.salesloft.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
104.18.16.5	js.qualified.com	United States	13335	CLOUDFLARENETUS	false
188.114.97.3	blgwlnauto.com	European Union	13335	CLOUDFLARENETUS	true
142.250.185.230	ad.doubleclick.net	United States	15169	GOOGLEUS	false
34.242.163.237	unknown	United States	16509	AMAZON-02US	false
142.250.185.194	adservice.google.com	United States	15169	GOOGLEUS	false
104.18.31.78	performance.radar.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
54.194.53.123	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
35.244.174.68	id.rlcdn.com	United States	15169	GOOGLEUS	false
142.250.186.102	unknown	United States	15169	GOOGLEUS	false
88.221.110.145	a1916.dscg2.akamai.net	European Union	20940	AKAMAI-ASN1EU	false
18.66.102.75	unknown	United States	3	MIT-GATEWAYSUS	false
146.75.116.157	platform.twitter.map.fastly.net	Sweden	30051	SCCGOVUS	false
52.16.235.250	cm.everesttech.net.akadns.net	United States	16509	AMAZON-02US	false
216.58.212.166	unknown	United States	15169	GOOGLEUS	false
74.125.71.154	stats.g.doubleclick.net	United States	15169	GOOGLEUS	false
108.138.7.51	tag-logger.demandbase.com	United States	16509	AMAZON-02US	false
104.18.94.41	unknown	United States	13335	CLOUDFLARENETUS	false
69.173.144.139	pixel.rubiconproject.net.akadns.net	United States	26667	RUBICONPROJECTUS	false
104.21.64.1	cdn.logr-ingest.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.230	unknown	United States	15169	GOOGLEUS	false
63.140.62.27	demdex.net.ssl.sc.omtrdc.net	United States	15224	OMNITUREUS	false
2.23.65.88	e10776.b.akamaiedge.net	European Union	16625	AKAMAI-ASUS	false
52.206.41.94	unknown	United States	14618	AMAZON-AESUS	false
18.245.46.25	tag.demandbase.com	United States	16509	AMAZON-02US	false
3.209.97.229	scout.us1.salesloft.com	United States	14618	AMAZON-AESUS	false
104.18.27.193	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.26.193	dsum-sec.casalemedia.com	United States	13335	CLOUDFLARENETUS	false
151.101.1.140	reddit.map.fastly.net	United States	54113	FASTLYUS	false
2.19.11.121	a798.dscd.akamai.net	European Union	719	ELISA-ASHelsinkiFinlandEU	false
104.18.17.5	ws6.qualified.com	United States	13335	CLOUDFLARENETUS	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	unknown	United States	15169	GOOGLEUS	false
151.101.129.140	unknown	United States	54113	FASTLYUS	false
18.213.58.31	partners-1864332697.us-east-1.elb.amazonaws.com	United States	14618	AMAZON-AESUS	false
18.245.86.7	segments.company-target.com	United States	16509	AMAZON-02US	false
63.35.2.123	unknown	United States	16509	AMAZON-02US	false
172.66.0.227	t.co	United States	13335	CLOUDFLARENETUS	false
104.16.123.96	ot.www.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.66	td.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.6
192.168.2.17

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1640841
Start date and time:	2025-03-17 19:21:42 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://blgwlnauto.com/kylefax/faxdocuments.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.evad.win@29/193@164/64
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.206, 142.250.185.195, 64.233.167.84, 142.250.186.46, 142.250.184.238, 216.58.206.78, 172.217.18.14, 199.232.214.172, 172.217.16.142, 142.250.185.104, 142.250.185.74, 142.250.184.234, 216.58.212.138, 142.250.185.138, 142.250.186.170, 142.250.181.234, 142.250.185.234, 142.250.186.138, 172.217.18.106, 216.58.206.74, 142.250.185.106, 142.250.185.202, 172.217.18.10, 142.250.184.202, 142.250.186.106, 142.250.185.170, 142.250.185.200, 142.250.185.238, 217.20.57.36, 142.250.186.110, 172.217.16.195, 34.104.35.123, 142.250.185.174, 142.250.184.227, 142.250.80.110, 173.194.7.38, 217.20.57.18, 23.199.214.10, 4.245.163.56, 150.171.27.10
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, redirector.gvt1.com, edgedl.me.gvt1.com, r1.sn-p5qddn76.gvt1.com, www.googletagmanager.com, r1---sn-p5qddn76.gvt1.com, bat.bing.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://blgwlnauto.com/kylefax/faxdocuments.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	127
Entropy (8bit):	4.722592291393955
Encrypted:	false
SSDEEP:	3:qVvzLKHjJMzVJu+1zWNVYlzLBAeKWZIc1tvxL0Hac4NGL:qFzLeMRJVCNOZLBAEI6dx434QL
MD5:	42343C51690259234C0D8A8064A80A27
SHA1:	0294C5B6FCD8D912F09B89DE5766DD8494960305
SHA-256:	BB2AF32936E3611121419F6C9763637E0ECCA85CF9059B5F1F9B26A280C0831E
SHA-512:	C49AC98AB460769EE5759CBEFAE74E636BA64EDC296369BABB51D0C37F13880CC59CB3374447D450AE3382F68DA93C37C3DE728CE1D5940791177451A50817B4
Malicious:	false
Reputation:	low
URL:	https://blgwlnauto.com/cgi-sys/suspendedpage.cgi
Preview:	<html>.<head>. <meta http-equiv="refresh" content="0; url=https://suspended.hawkhost.com/"/>.</head>.<body>.</body>.</html>.

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 17, 2025 19:22:46.907063007 CET	192.168.2.6	1.1.1.1	0x4d71	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:22:46.907191038 CET	192.168.2.6	1.1.1.1	0x58f2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 17, 2025 19:22:48.155483007 CET	192.168.2.6	1.1.1.1	0x84ff	Standard query (0)	blgwlnauto.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:22:48.155875921 CET	192.168.2.6	1.1.1.1	0x163c	Standard query (0)	blgwlnauto.com	65	IN (0x0001)	false
Mar 17, 2025 19:22:49.052908897 CET	192.168.2.6	1.1.1.1	0xde36	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:22:49.053339958 CET	192.168.2.6	1.1.1.1	0x581f	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:22:49.977046967 CET	192.168.2.6	1.1.1.1	0x5059	Standard query (0)	blgwlnauto.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:22:49.977224112 CET	192.168.2.6	1.1.1.1	0x98f1	Standard query (0)	blgwlnauto.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:01.181652069 CET	192.168.2.6	1.1.1.1	0xc406	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:01.181830883 CET	192.168.2.6	1.1.1.1	0xfb1f	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.298039913 CET	192.168.2.6	1.1.1.1	0x2b88	Standard query (0)	static.cloudflareinsights.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.298218012 CET	192.168.2.6	1.1.1.1	0x6a7b	Standard query (0)	static.cloudflareinsights.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.298866034 CET	192.168.2.6	1.1.1.1	0x987	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.299030066 CET	192.168.2.6	1.1.1.1	0x4bcc	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.557687044 CET	192.168.2.6	1.1.1.1	0xdde3	Standard query (0)	www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.558041096 CET	192.168.2.6	1.1.1.1	0xfcdf	Standard query (0)	www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.928320885 CET	192.168.2.6	1.1.1.1	0x2def	Standard query (0)	performance.radar.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.928611994 CET	192.168.2.6	1.1.1.1	0x2194	Standard query (0)	performance.radar.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.929246902 CET	192.168.2.6	1.1.1.1	0x77ae	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.929533958 CET	192.168.2.6	1.1.1.1	0x6780	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.931502104 CET	192.168.2.6	1.1.1.1	0x50b7	Standard query (0)	ot.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.931636095 CET	192.168.2.6	1.1.1.1	0xc9af	Standard query (0)	ot.www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:02.932921886 CET	192.168.2.6	1.1.1.1	0x2e49	Standard query (0)	cf-assets.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:02.933407068 CET	192.168.2.6	1.1.1.1	0xe66	Standard query (0)	cf-assets.www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:05.100090027 CET	192.168.2.6	1.1.1.1	0x1eb7	Standard query (0)	cdn.logr-ingest.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:05.100254059 CET	192.168.2.6	1.1.1.1	0xae02	Standard query (0)	cdn.logr-ingest.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:05.134977102 CET	192.168.2.6	1.1.1.1	0xb62e	Standard query (0)	ot.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:05.135162115 CET	192.168.2.6	1.1.1.1	0x56f	Standard query (0)	ot.www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:07.044275999 CET	192.168.2.6	1.1.1.1	0x4790	Standard query (0)	assets.adobedtm.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:07.044562101 CET	192.168.2.6	1.1.1.1	0x9470	Standard query (0)	assets.adobedtm.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:07.089747906 CET	192.168.2.6	1.1.1.1	0xc8af	Standard query (0)	api.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:07.089982986 CET	192.168.2.6	1.1.1.1	0x4ca5	Standard query (0)	api.www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:08.474772930 CET	192.168.2.6	1.1.1.1	0xdd0a	Standard query (0)	api.www.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:08.474915981 CET	192.168.2.6	1.1.1.1	0x1857	Standard query (0)	api.www.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:08.945528984 CET	192.168.2.6	1.1.1.1	0xd5dd	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:08.945683956 CET	192.168.2.6	1.1.1.1	0x4a5f	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.039855003 CET	192.168.2.6	1.1.1.1	0x12e9	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.040014982 CET	192.168.2.6	1.1.1.1	0xa104	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.040393114 CET	192.168.2.6	1.1.1.1	0x3bc2	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.040548086 CET	192.168.2.6	1.1.1.1	0x5358	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.040855885 CET	192.168.2.6	1.1.1.1	0x5d4b	Standard query (0)	tag.demandbase.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.040986061 CET	192.168.2.6	1.1.1.1	0xd9d	Standard query (0)	tag.demandbase.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.041332006 CET	192.168.2.6	1.1.1.1	0xc59a	Standard query (0)	snap.licdn.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.041451931 CET	192.168.2.6	1.1.1.1	0xbe53	Standard query (0)	snap.licdn.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.041758060 CET	192.168.2.6	1.1.1.1	0x418	Standard query (0)	scout-cdn.salesloft.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.041884899 CET	192.168.2.6	1.1.1.1	0xcf62	Standard query (0)	scout-cdn.salesloft.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.042224884 CET	192.168.2.6	1.1.1.1	0x6d3d	Standard query (0)	static.ads-twitter.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.042355061 CET	192.168.2.6	1.1.1.1	0x49b5	Standard query (0)	static.ads-twitter.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.042648077 CET	192.168.2.6	1.1.1.1	0x25cb	Standard query (0)	munchkin.marketo.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.042772055 CET	192.168.2.6	1.1.1.1	0x119e	Standard query (0)	munchkin.marketo.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.043226004 CET	192.168.2.6	1.1.1.1	0x4d0f	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.043390989 CET	192.168.2.6	1.1.1.1	0xdb13	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.043764114 CET	192.168.2.6	1.1.1.1	0xe638	Standard query (0)	js.qualified.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.043910980 CET	192.168.2.6	1.1.1.1	0x6b90	Standard query (0)	js.qualified.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.214870930 CET	192.168.2.6	1.1.1.1	0x9b5a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.215145111 CET	192.168.2.6	1.1.1.1	0x2662	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.567156076 CET	192.168.2.6	1.1.1.1	0x5757	Standard query (0)	r.logr-ingest.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.567306042 CET	192.168.2.6	1.1.1.1	0x768c	Standard query (0)	r.logr-ingest.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.692600012 CET	192.168.2.6	1.1.1.1	0x513e	Standard query (0)	stats.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.692790985 CET	192.168.2.6	1.1.1.1	0xc5ee	Standard query (0)	stats.g.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.819211960 CET	192.168.2.6	1.1.1.1	0x6730	Standard query (0)	scout.salesloft.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.819854021 CET	192.168.2.6	1.1.1.1	0x1928	Standard query (0)	scout.salesloft.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.847774982 CET	192.168.2.6	1.1.1.1	0x7eb2	Standard query (0)	cloudflareinc.demdex.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.848098993 CET	192.168.2.6	1.1.1.1	0x72a0	Standard query (0)	cloudflareinc.demdex.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.853050947 CET	192.168.2.6	1.1.1.1	0xf3b8	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.853226900 CET	192.168.2.6	1.1.1.1	0xa7df	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:09.974586964 CET	192.168.2.6	1.1.1.1	0x31dc	Standard query (0)	di.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:09.974828959 CET	192.168.2.6	1.1.1.1	0xc215	Standard query (0)	di.rlcdn.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.038666964 CET	192.168.2.6	1.1.1.1	0xe414	Standard query (0)	cm.everesttech.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.038839102 CET	192.168.2.6	1.1.1.1	0x370c	Standard query (0)	cm.everesttech.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.346307039 CET	192.168.2.6	1.1.1.1	0x9d73	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.346482992 CET	192.168.2.6	1.1.1.1	0x181	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.507941961 CET	192.168.2.6	1.1.1.1	0x198	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.508214951 CET	192.168.2.6	1.1.1.1	0xea0f	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.509063959 CET	192.168.2.6	1.1.1.1	0xc27	Standard query (0)	alb.reddit.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.509308100 CET	192.168.2.6	1.1.1.1	0x2c06	Standard query (0)	alb.reddit.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.509748936 CET	192.168.2.6	1.1.1.1	0x47ed	Standard query (0)	dpm.demdex.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.509900093 CET	192.168.2.6	1.1.1.1	0x7e34	Standard query (0)	dpm.demdex.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.547631979 CET	192.168.2.6	1.1.1.1	0xda44	Standard query (0)	www.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.548451900 CET	192.168.2.6	1.1.1.1	0x4c0	Standard query (0)	www.linkedin.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.614304066 CET	192.168.2.6	1.1.1.1	0x7762	Standard query (0)	ws6.qualified.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.616705894 CET	192.168.2.6	1.1.1.1	0x6865	Standard query (0)	ws6.qualified.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.617913008 CET	192.168.2.6	1.1.1.1	0x971f	Standard query (0)	app.qualified.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.618360996 CET	192.168.2.6	1.1.1.1	0xfae0	Standard query (0)	app.qualified.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.656086922 CET	192.168.2.6	1.1.1.1	0xa792	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.656395912 CET	192.168.2.6	1.1.1.1	0x21d8	Standard query (0)	t.co	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.722657919 CET	192.168.2.6	1.1.1.1	0x86b8	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.723045111 CET	192.168.2.6	1.1.1.1	0xc103	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.747023106 CET	192.168.2.6	1.1.1.1	0x3e91	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.747488976 CET	192.168.2.6	1.1.1.1	0xef1c	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:10.748254061 CET	192.168.2.6	1.1.1.1	0x3cc9	Standard query (0)	s.company-target.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:10.748420954 CET	192.168.2.6	1.1.1.1	0x27ae	Standard query (0)	s.company-target.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.010576963 CET	192.168.2.6	1.1.1.1	0x1962	Standard query (0)	id.rlcdn.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.010772943 CET	192.168.2.6	1.1.1.1	0x5076	Standard query (0)	id.rlcdn.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.304037094 CET	192.168.2.6	1.1.1.1	0x378f	Standard query (0)	analytics.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.304529905 CET	192.168.2.6	1.1.1.1	0xca7d	Standard query (0)	analytics.google.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.310210943 CET	192.168.2.6	1.1.1.1	0x1f99	Standard query (0)	td.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.310522079 CET	192.168.2.6	1.1.1.1	0x7e8	Standard query (0)	td.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.423432112 CET	192.168.2.6	1.1.1.1	0x8010	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.423574924 CET	192.168.2.6	1.1.1.1	0x6a1f	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.424689054 CET	192.168.2.6	1.1.1.1	0xcf3b	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.424983978 CET	192.168.2.6	1.1.1.1	0x83eb	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.445637941 CET	192.168.2.6	1.1.1.1	0x5a02	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.445910931 CET	192.168.2.6	1.1.1.1	0x8eeb	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.590650082 CET	192.168.2.6	1.1.1.1	0x649a	Standard query (0)	scout.salesloft.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.590929031 CET	192.168.2.6	1.1.1.1	0x6ab7	Standard query (0)	scout.salesloft.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:11.753487110 CET	192.168.2.6	1.1.1.1	0xb58	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:11.753663063 CET	192.168.2.6	1.1.1.1	0x6d7d	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:12.389353037 CET	192.168.2.6	1.1.1.1	0x43cd	Standard query (0)	713-xsc-918.mktoresp.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:12.389596939 CET	192.168.2.6	1.1.1.1	0x512d	Standard query (0)	713-xsc-918.mktoresp.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:12.507519960 CET	192.168.2.6	1.1.1.1	0x472a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:12.507977009 CET	192.168.2.6	1.1.1.1	0x731e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:12.685550928 CET	192.168.2.6	1.1.1.1	0x24ae	Standard query (0)	adobedc.demdex.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:12.685719013 CET	192.168.2.6	1.1.1.1	0xbae5	Standard query (0)	adobedc.demdex.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:12.688340902 CET	192.168.2.6	1.1.1.1	0x7cd0	Standard query (0)	px.ads.linkedin.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:12.688592911 CET	192.168.2.6	1.1.1.1	0x3885	Standard query (0)	px.ads.linkedin.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:12.852473974 CET	192.168.2.6	1.1.1.1	0x491c	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:12.852915049 CET	192.168.2.6	1.1.1.1	0xb715	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.193075895 CET	192.168.2.6	1.1.1.1	0xf28d	Standard query (0)	cdn.bizible.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.193197966 CET	192.168.2.6	1.1.1.1	0x80c5	Standard query (0)	cdn.bizible.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.247395992 CET	192.168.2.6	1.1.1.1	0xef90	Standard query (0)	cdn.bizibly.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.247508049 CET	192.168.2.6	1.1.1.1	0x3f7	Standard query (0)	cdn.bizibly.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.250005007 CET	192.168.2.6	1.1.1.1	0x947f	Standard query (0)	t.co	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.250206947 CET	192.168.2.6	1.1.1.1	0xc659	Standard query (0)	t.co	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.256522894 CET	192.168.2.6	1.1.1.1	0x90dd	Standard query (0)	analytics.twitter.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.256756067 CET	192.168.2.6	1.1.1.1	0x9378	Standard query (0)	analytics.twitter.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.304553986 CET	192.168.2.6	1.1.1.1	0x701e	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.304680109 CET	192.168.2.6	1.1.1.1	0x7b04	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.316777945 CET	192.168.2.6	1.1.1.1	0x829e	Standard query (0)	api.company-target.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.316967010 CET	192.168.2.6	1.1.1.1	0xf907	Standard query (0)	api.company-target.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.412197113 CET	192.168.2.6	1.1.1.1	0xb295	Standard query (0)	partners.tremorhub.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.412375927 CET	192.168.2.6	1.1.1.1	0x5459	Standard query (0)	partners.tremorhub.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.469562054 CET	192.168.2.6	1.1.1.1	0x209a	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.469749928 CET	192.168.2.6	1.1.1.1	0xa33b	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.665118933 CET	192.168.2.6	1.1.1.1	0x2e55	Standard query (0)	pixel.rubiconproject.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.665309906 CET	192.168.2.6	1.1.1.1	0x9e00	Standard query (0)	pixel.rubiconproject.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.758369923 CET	192.168.2.6	1.1.1.1	0x215a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.758780003 CET	192.168.2.6	1.1.1.1	0xa288	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.848319054 CET	192.168.2.6	1.1.1.1	0xd9b3	Standard query (0)	dsum-sec.casalemedia.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.848556995 CET	192.168.2.6	1.1.1.1	0x6383	Standard query (0)	dsum-sec.casalemedia.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:13.882709980 CET	192.168.2.6	1.1.1.1	0xecf7	Standard query (0)	tag-logger.demandbase.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:13.882908106 CET	192.168.2.6	1.1.1.1	0x5a03	Standard query (0)	tag-logger.demandbase.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:14.292457104 CET	192.168.2.6	1.1.1.1	0x7a6a	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:14.292784929 CET	192.168.2.6	1.1.1.1	0xa5db	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:14.844104052 CET	192.168.2.6	1.1.1.1	0xb88b	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:14.844321966 CET	192.168.2.6	1.1.1.1	0xb084	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:15.760701895 CET	192.168.2.6	1.1.1.1	0xfe7c	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:15.761486053 CET	192.168.2.6	1.1.1.1	0xe0a2	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:15.770665884 CET	192.168.2.6	1.1.1.1	0xe111	Standard query (0)	edge.adobedc.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:15.771595955 CET	192.168.2.6	1.1.1.1	0xbc84	Standard query (0)	edge.adobedc.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:16.840106010 CET	192.168.2.6	1.1.1.1	0x2be9	Standard query (0)	adservice.google.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:16.840359926 CET	192.168.2.6	1.1.1.1	0xa73d	Standard query (0)	adservice.google.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:16.976634026 CET	192.168.2.6	1.1.1.1	0xf673	Standard query (0)	segments.company-target.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:16.976824045 CET	192.168.2.6	1.1.1.1	0xd1ab	Standard query (0)	segments.company-target.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:40.106456995 CET	192.168.2.6	1.1.1.1	0x9698	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:40.106955051 CET	192.168.2.6	1.1.1.1	0xab79	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:40.137789965 CET	192.168.2.6	1.1.1.1	0xda36	Standard query (0)	ad.doubleclick.net	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:40.138005972 CET	192.168.2.6	1.1.1.1	0xb0f0	Standard query (0)	ad.doubleclick.net	65	IN (0x0001)	false
Mar 17, 2025 19:23:41.840732098 CET	192.168.2.6	1.1.1.1	0x784e	Standard query (0)	r.logr-ingest.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:41.840924025 CET	192.168.2.6	1.1.1.1	0x1cce	Standard query (0)	r.logr-ingest.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:49.063688040 CET	192.168.2.6	1.1.1.1	0x42ff	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:49.064194918 CET	192.168.2.6	1.1.1.1	0xf35b	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Mar 17, 2025 19:23:49.064714909 CET	192.168.2.6	1.1.1.1	0x3be7	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 17, 2025 19:23:49.064887047 CET	192.168.2.6	1.1.1.1	0xa4e6	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:48 UTC	689	OUT	GET /kylefax/faxdocuments.html HTTP/1.1 Host: blgwlnauto.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:49 UTC	554	IN	HTTP/1.1 403 Forbidden Date: Mon, 17 Mar 2025 18:22:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=eysiYReuZSCXewCadvsjqSxZR4UKNRHNDdntYC93e%2BhqcwphqYfhOo1dOn99474cbehxip9Q88NWiKdjiFMHptUur6EC7%2BLEU0Vh72AQFMyTQRpvANRuf8NLPjYu1fyGHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84943fcbc33a-EWR
2025-03-17 18:22:49 UTC	815	IN	Data Raw: 31 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11da<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 63 Data Ascii: es/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementById('c
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 Data Ascii: <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form action="
2025-03-17 18:22:49 UTC	1025	IN	Data Raw: 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 38 2e 34 36 2e 31 32 33 2e 31 38 39 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d Data Ascii: er-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">8.46.123.189</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm
2025-03-17 18:22:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:49 UTC	587	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: blgwlnauto.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://blgwlnauto.com/kylefax/faxdocuments.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:49 UTC	411	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:22:49 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Fri, 14 Mar 2025 21:23:45 GMT ETag: "67d49e61-5df3" Server: cloudflare CF-RAY: 921e84951ca34362-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Mon, 17 Mar 2025 20:22:49 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-03-17 18:22:49 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2025-03-17 18:22:49 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:49 UTC	541	OUT	OPTIONS /report/v4?s=eysiYReuZSCXewCadvsjqSxZR4UKNRHNDdntYC93e%2BhqcwphqYfhOo1dOn99474cbehxip9Q88NWiKdjiFMHptUur6EC7%2BLEU0Vh72AQFMyTQRpvANRuf8NLPjYu1fyGHw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://blgwlnauto.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:49 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Mon, 17 Mar 2025 18:22:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:49 UTC	654	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: blgwlnauto.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://blgwlnauto.com/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:49 UTC	409	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:22:49 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Tue, 11 Mar 2025 18:12:02 GMT ETag: "67d07cf2-1c4" Server: cloudflare CF-RAY: 921e8499b872aa2a-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Mon, 17 Mar 2025 20:22:49 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-03-17 18:22:49 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:50 UTC	516	OUT	POST /report/v4?s=eysiYReuZSCXewCadvsjqSxZR4UKNRHNDdntYC93e%2BhqcwphqYfhOo1dOn99474cbehxip9Q88NWiKdjiFMHptUur6EC7%2BLEU0Vh72AQFMyTQRpvANRuf8NLPjYu1fyGHw%3D%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 408 Content-Type: application/reports+json Origin: https://blgwlnauto.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:50 UTC	408	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 30 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 38 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 67 77 6c 6e 61 75 74 6f 2e 63 6f 6d 2f 6b 79 Data Ascii: [{"age":0,"body":{"elapsed_time":889,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","url":"https://blgwlnauto.com/ky
2025-03-17 18:22:50 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Mon, 17 Mar 2025 18:22:49 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:50 UTC	487	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CO6MywE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:50 UTC	1303	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:22:50 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_kwkf_8wu54BWosfIP7suw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-17 18:22:50 UTC	87	IN	Data Raw: 33 37 33 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 66 69 6c 69 70 20 63 68 79 74 69 6c 20 63 6f 6e 63 75 73 73 69 6f 6e 22 2c 22 67 74 61 20 36 20 72 6f 63 6b 73 74 61 72 20 67 61 6d 65 73 22 2c 22 75 73 61 61 20 64 61 74 61 20 62 72 65 61 63 68 20 73 65 74 74 6c Data Ascii: 373)]}'["",["filip chytil concussion","gta 6 rockstar games","usaa data breach settl
2025-03-17 18:22:50 UTC	803	IN	Data Raw: 65 6d 65 6e 74 20 63 6c 61 69 6d 22 2c 22 77 68 65 65 6c 20 6f 66 20 74 69 6d 65 20 6e 65 77 20 65 70 69 73 6f 64 65 73 20 72 65 6c 65 61 73 65 20 64 61 74 65 22 2c 22 6f 68 69 6f 20 74 6f 72 6e 61 64 6f 20 77 61 74 63 68 22 2c 22 69 6e 64 69 61 20 6d 61 73 74 65 72 73 20 63 72 69 63 6b 65 74 20 73 63 6f 72 65 63 61 72 64 22 2c 22 70 6f 77 65 72 62 61 6c 6c 20 6a 61 63 6b 70 6f 74 22 2c 22 63 61 74 63 68 20 6d 61 73 74 65 72 79 20 61 72 63 68 65 6e 20 70 6f 6b 65 6d 6f 6e 20 67 6f 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 Data Ascii: ement claim","wheel of time new episodes release date","ohio tornado watch","india masters cricket scorecard","powerball jackpot","catch mastery archen pokemon go"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groups
2025-03-17 18:22:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:50 UTC	616	OUT	GET /favicon.ico HTTP/1.1 Host: blgwlnauto.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://blgwlnauto.com/kylefax/faxdocuments.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:51 UTC	930	IN	HTTP/1.1 302 Found Date: Mon, 17 Mar 2025 18:22:51 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close location: https://blgwlnauto.com/cgi-sys/suspendedpage.cgi Cache-Control: no-cache, no-store, must-revalidate, max-age=0 alt-svc: h3=":443"; ma=86400 x-turbo-charged-by: LiteSpeed cf-cache-status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tP7od1aG05fwqW8iiKi8Kh7yrdARAHpihqefmCmWa%2BFXdAgqaHOuu5VRQYF3g4EGKVanqgXChO2qlJEmndXM7YjnWW%2Bin%2B7dGmTYwAoxlM0IG77JjOD68kUhfDCIfaiv8g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e849dfb5bde9c-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2194&min_rtt=2194&rtt_var=1097&sent=7&recv=8&lost=0&retrans=1&sent_bytes=4206&recv_bytes=1188&delivery_rate=72553&cwnd=126&unsent_bytes=0&cid=90cfca1068dc2fe1&ts=925&x=0"
2025-03-17 18:22:51 UTC	439	IN	Data Raw: 33 30 33 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 32 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 3c 2f 73 74 Data Ascii: 303<!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 302 Found</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!important}}</st
2025-03-17 18:22:51 UTC	339	IN	Data Raw: 20 20 20 20 3c 64 69 76 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 20 77 69 64 74 68 3a 38 30 30 70 78 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 34 30 30 70 78 3b 20 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 20 74 6f 70 3a 20 33 30 25 3b 20 6c 65 66 74 3a 35 30 25 3b 22 3e 0a 20 20 20 20 20 20 20 20 3c 68 31 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 3a 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 31 35 30 70 78 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 30 70 78 3b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 22 3e 33 30 32 3c 2f 68 31 3e 0a 3c 68 32 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 22 3e 46 6f 75 6e 64 0d Data Ascii: <div style="text-align: center; width:800px; margin-left: -400px; position:absolute; top: 30%; left:50%;"> <h1 style="margin:0; font-size:150px; line-height:150px; font-weight:bold;">302</h1><h2 style="margin-top:20px;font-size: 30px;">Found
2025-03-17 18:22:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:51 UTC	630	OUT	GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: blgwlnauto.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://blgwlnauto.com/kylefax/faxdocuments.html Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:52 UTC	831	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:22:52 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nAezEDs8yPj9x8645T2qQsBvLs8ivGK8dn4KUtKgvgY0vRkFHbAtUcLiFQ0EPS4MBtKM5hTRRimNJ88pBa6d3IOBEoAN2%2FSHeL7HuXEbpUu%2BBqhOW7yB%2F%2BNiIgJMFVPy9Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84a79eb9b4c6-EWR server-timing: cfL4;desc="?proto=TCP&rtt=1698&min_rtt=1698&rtt_var=849&sent=5&recv=7&lost=0&retrans=1&sent_bytes=4210&recv_bytes=1202&delivery_rate=185455&cwnd=141&unsent_bytes=0&cid=8d5f16dc1785106c&ts=1111&x=0"
2025-03-17 18:22:52 UTC	133	IN	Data Raw: 37 66 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 73 70 65 6e 64 65 64 2e 68 61 77 6b 68 6f 73 74 2e 63 6f 6d 2f 22 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 7f<html><head> <meta http-equiv="refresh" content="0; url=https://suspended.hawkhost.com/"/></head><body></body></html>
2025-03-17 18:22:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:22:53 UTC	403	OUT	GET /cgi-sys/suspendedpage.cgi HTTP/1.1 Host: blgwlnauto.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:22:54 UTC	824	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:22:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close vary: Accept-Encoding alt-svc: h3=":443"; ma=86400 x-turbo-charged-by: LiteSpeed cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xx5yAcaw4BqoojtAvZ7IBEE6MxsbRzXpz3Kl90Q%2BJoDyB1bzXFcGfMTGMfQqNrHCWZndTAFCzph0BlExDdynTF2SJ9cmwG8IOKhivgT9qO2sdZFY7Tdzd2jWi20YD4w6IA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84b0abbc3d85-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2236&min_rtt=2184&rtt_var=856&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2834&recv_bytes=975&delivery_rate=1336996&cwnd=69&unsent_bytes=0&cid=80f0a48b834003c2&ts=1009&x=0"
2025-03-17 18:22:54 UTC	133	IN	Data Raw: 37 66 0d 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 73 75 73 70 65 6e 64 65 64 2e 68 61 77 6b 68 6f 73 74 2e 63 6f 6d 2f 22 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 7f<html><head> <meta http-equiv="refresh" content="0; url=https://suspended.hawkhost.com/"/></head><body></body></html>
2025-03-17 18:22:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:01 UTC	751	OUT	GET /learning/access-management/phishing-attack/ HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://blgwlnauto.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:01 UTC	1354	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:01 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate Set-Cookie: _cfms_willow=enable; Max-Age=1209600; Domain=.www.cloudflare.com; Path=/; Secure; SameSite=Strict Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US x-RM: GW X-XSS-Protection: 1; mode=block Set-Cookie: __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av; path=/; expires=Mon, 17-Mar-25 18:53:01 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Kjq7c71czjGaKeWzOfAtfkBUtH6a7pCFk2iONRmCP%2FZSMHsPgx8SE1Eu2dOS5Z65NbCPN9Ue%2FgI99Imj1Xw3UCyed%2Fpp1OCSCDAH%2FguI7Bi9WdFYGEKanhf3oy7etgueOlLUuw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84e3ef7ab734-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:01 UTC	15	IN	Data Raw: 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 Data Ascii: f<!DOCTYPE ht
2025-03-17 18:23:01 UTC	5	IN	Data Raw: 6d 6c 3e 0d 0a Data Ascii: ml>
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 75 73 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 72 65 64 77 6f 6f 64 3d 7b 22 63 6f 6e 73 65 6e 74 47 72 6f 75 70 73 22 3a 7b 22 43 30 30 30 31 22 3a 74 72 75 65 2c 22 43 30 30 30 32 22 3a 74 72 75 65 2c 22 43 30 30 30 33 22 3a 74 72 75 65 2c 22 43 30 30 30 34 22 3a 74 72 75 65 7d 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 53 22 2c 22 63 6f 6c 6f 22 3a 22 45 57 52 22 2c 22 75 73 65 72 22 3a 6e 75 6c 6c 2c 22 72 76 31 22 3a 22 75 6f 69 22 2c 22 6c 6f 63 61 6c 65 22 3a 22 65 6e 2d 55 53 22 7d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0a 20 20 20 20 20 20 76 61 72 20 4f 6e 65 54 72 Data Ascii: 7ff2<html lang="en-us"><head><script>window.redwood={"consentGroups":{"C0001":true,"C0002":true,"C0003":true,"C0004":true},"country":"US","colo":"EWR","user":null,"rv1":"uoi","locale":"en-US"}</script> <script type="text/javascript"> var OneTr
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 61 72 65 2d 63 6e 2e 63 6f 6d 27 29 20 7b 0a 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 29 20 7b 0a 20 20 20 20 20 20 20 20 69 66 20 28 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 20 27 65 6e 2d 75 73 27 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 20 3d 20 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 27 6c 61 6e 67 50 72 65 66 65 72 65 6e 63 65 27 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 73 70 Data Ascii: are-cn.com') { if (localStorage.getItem('langPreference')) { if (localStorage.getItem('langPreference').toLowerCase() != 'en-us') { const langPreference = localStorage.getItem('langPreference').toLowerCase(); const sp
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 20 74 6f 20 7a 68 2d 63 6e 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 64 69 72 65 63 74 50 61 74 68 20 3d 20 67 65 74 50 61 74 68 46 72 6f 6d 4c 6f 63 61 6c 65 28 6d 61 79 62 65 4c 6f 63 61 6c 65 2c 20 72 65 71 75 65 73 74 65 64 4c 61 6e 67 43 6f 64 65 2c 20 73 70 6c 69 74 50 61 74 68 53 74 72 69 6e 67 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 72 65 64 69 72 65 63 74 50 61 74 68 20 26 26 20 21 69 67 6e 6f 72 65 4c 69 73 74 2e 69 6e 63 6c 75 64 65 73 28 6d 61 79 62 65 4c 6f 63 61 6c 65 29 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 27 20 2b 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 6f 73 74 6e 61 6d 65 Data Ascii: to zh-cn const redirectPath = getPathFromLocale(maybeLocale, requestedLangCode, splitPathString); if (redirectPath && !ignoreList.includes(maybeLocale)) { window.location.replace('https://' + window.location.hostname
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 50 56 70 2f 64 35 34 61 38 34 39 34 39 30 39 31 61 65 64 32 31 35 36 30 30 62 34 32 62 62 34 37 65 64 33 65 2f 73 65 63 75 72 69 74 79 2d 6c 63 2e 70 6e 67 22 20 64 61 74 61 2d 67 61 74 73 62 79 2d 68 65 61 64 3d 22 74 72 75 65 22 2f 3e 3c 6d 65 74 61 20 69 64 3d 22 74 77 69 74 74 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 50 68 69 73 68 69 6e 67 20 61 74 74 61 63 6b 73 20 69 6e 76 6f 6c 76 65 64 20 74 72 69 63 6b 69 6e 67 20 61 20 76 69 63 74 69 6d 20 69 6e 74 6f 20 74 61 6b 69 6e 67 20 73 6f 6d 65 20 61 63 74 69 6f 6e 20 74 68 61 74 20 62 65 6e 65 66 69 74 73 20 74 68 65 20 61 74 74 61 63 6b 65 72 2e 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 Data Ascii: PVp/d54a84949091aed215600b42bb47ed3e/security-lc.png" data-gatsby-head="true"/><meta id="twitter-description" name="twitter:description" content="Phishing attacks involved tricking a victim into taking some action that benefits the attacker. Learn how to
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 68 20 73 70 61 6e 2e 66 77 37 7b 63 6f 6c 6f 72 3a 23 66 36 33 7d 2e 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 20 74 61 62 6c 65 20 74 64 20 70 2e 62 6c 61 63 6b 2e 66 33 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 70 61 64 64 69 6e 67 3a 32 65 6d 20 30 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 73 74 69 63 6b 79 2d 72 69 63 68 2d 74 65 78 74 2d 72 65 6e 64 65 72 65 72 7b 6d 61 78 2d 68 65 69 67 68 74 3a 37 30 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 73 63 72 6f 6c 6c 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 69 63 6b 79 3b 74 6f 70 3a 31 35 Data Ascii: argin-bottom:0}.rich-text-renderer table th span.fw7{color:#f63}.rich-text-renderer table td p.black.f3{margin-bottom:0;padding:2em 0}@media screen and (min-width:1000px){.sticky-rich-text-renderer{max-height:700px;overflow-y:scroll;position:sticky;top:15
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 73 75 70 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 35 70 78 7d 2e 66 65 61 74 75 72 65 2d 63 61 72 64 20 2e 6f 6c 2d 74 65 78 74 5f 5f 74 65 78 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 34 72 65 6d 7d 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 2d 73 68 61 64 6f 77 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 34 70 78 20 31 30 70 78 20 23 30 30 30 30 30 30 31 66 7d 2e 65 6c 65 6d 65 6e 74 2d 72 65 73 6f 75 72 63 65 2d 63 61 72 64 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 36 35 70 78 7d 2e 65 6c 65 6d 65 6e 74 2d Data Ascii: x}.feature-card .ol-text__sup{font-size:1.2rem;margin-bottom:15px}.feature-card .ol-text__text{font-size:2.5rem;line-height:2.4rem}}.element-resource-card-shadow{box-shadow:0 4px 10px #0000001f}.element-resource-card{height:100%;min-height:165px}.element-
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 61 75 74 6f 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 30 30 30 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 7d 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 65 72 20 2e 73 6c 69 64 65 7b 6d 61 72 67 69 6e 3a 32 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 35 30 70 78 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 31 70 78 29 7b 2e 62 6c 61 64 65 2d 63 61 72 64 2d 63 61 72 6f 75 73 65 6c 2d 77 72 61 70 70 Data Ascii: -card-carousel-wrapper{background-size:auto}}@media (min-width:1000px){.blade-card-carousel-wrapper{background-size:cover}}.blade-card-carousel-wrapper .slide{margin:24px!important}@media (min-width:750px) and (max-width:1001px){.blade-card-carousel-wrapp
2025-03-17 18:23:01 UTC	1369	IN	Data Raw: 70 3a 6e 6f 77 72 61 70 3b 6f 72 64 65 72 3a 31 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 77 72 61 70 70 65 72 3e 64 69 76 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 34 38 70 78 7d 2e 62 6c 61 64 65 2d 66 75 6c 6c 2d 77 69 64 74 68 2d 68 65 72 6f 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 20 2e 66 65 61 74 75 72 65 73 2d 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 2d 72 65 76 65 72 73 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 38 70 78 7d 2e 62 Data Ascii: p:nowrap;order:1}.blade-full-width-hero-background-image-wrapper .features-wrapper>div{max-width:none;padding-top:48px}.blade-full-width-hero-background-image-wrapper .features-image-wrapper{display:flex;flex-direction:column-reverse;margin-bottom:48px}.b

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:02 UTC	934	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:02 UTC	914	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:02 GMT Content-Type: image/webp Content-Length: 28858 Connection: close Accept-Ranges: bytes ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=S0GelMR2UbJmFgN%2BNBRcasiJ691ZXw16EkkhLlKLko14FJ1n%2FgNu0bYbHM1w%2BZNy6XvLjFInxLFaglQo4epY7bmtfIxOmzW%2FxsnlLFoNBT%2F116YKzdXUvSCvXiS1gauo%2B7%2FzmQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84e7aaaa8cb4-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:02 UTC	455	IN	Data Raw: 52 49 46 46 b2 70 00 00 57 45 42 50 56 50 38 4c a6 70 00 00 2f 72 c8 19 11 8f e4 2a b6 6d a7 59 08 c2 08 fe 55 f0 0f 29 b7 a5 c7 02 83 b6 91 1c f9 3b e0 27 f8 58 1e c5 b5 dd 65 dc b6 6d 20 76 8f bb 71 6e ff 61 ee 95 b6 4e dc d6 da f6 24 0f 39 c3 47 49 cd 00 8e a7 9d b5 f3 b8 88 0b e4 58 92 73 4a 30 35 1b 0a e4 7f 3a e7 1d 63 fb 5d 43 57 c0 35 e7 4d 3b 87 8a 7b ae d9 21 2e c8 f1 c0 03 39 72 e4 c8 66 1b 6c e8 68 ee 63 53 75 97 49 da 62 11 f3 50 19 72 85 8a 4b 45 a8 15 ec 4d 2d e4 ba 54 84 5a a1 a3 89 da 2c b1 e8 6c 72 85 ce 66 8e 90 6d 18 43 d9 f4 80 42 cc 83 c2 7d 1e 8e fe 13 73 ff 3b 3b b9 f5 62 6a 4e 31 ce fe de 37 58 51 61 45 89 05 13 7a cc a8 31 a1 c1 88 16 03 56 0c e8 d1 a3 c3 80 16 23 1a 4c a8 31 63 41 8b 05 25 56 14 d8 8e 77 1d f6 f8 6d d8 b0 21 10 Data Ascii: RIFFpWEBPVP8Lp/r*mYU);'Xem vqnaN$9GIXsJ05:c]CW5M;{!.9rflhcSuIbPrKEM-TZ,lrfmCB}s;;bjN17XQaEz1V#L1cA%Vwm!
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 28 82 2a f8 32 95 6f bd 8c c6 ff ff e5 38 ad 1e f6 7d 2b 69 b9 cf be d0 d0 86 10 6e 09 a1 97 d0 a4 21 e4 d9 ea da be f5 f8 e2 49 31 e2 da c4 35 d7 72 d3 24 0d b4 21 0b 49 cb 2b 84 2c 24 2f f2 2f 8f ce f9 fd 7e e7 a7 23 cd 48 d6 98 d1 e8 8c 74 a4 91 ac 88 fe 53 a0 6d ab 6e 1b 1d a4 ca fa fa c1 4c 23 02 88 87 9e 64 ab cb 92 6d bb 8d 24 49 0b e9 15 a9 a9 d6 62 54 bd 94 1e 75 6f 39 ab 9d 7c 00 69 74 02 04 1d 55 ed 5e e1 e6 91 22 22 fa 4f 01 92 24 41 6d 54 87 8c 40 c8 b1 b3 67 fd a1 59 d8 86 86 81 0f 6f b7 6d 67 a9 ad 6d db 7f 67 4f 44 99 ea 82 bf 6c c6 e8 19 30 59 e5 e0 d8 af 29 f4 48 82 51 88 e8 3f 25 48 92 24 49 91 55 cf 3d 80 65 b2 87 4b 0d 95 91 1d cd 7c 76 6d c7 e1 5e f8 4f fa 4f fa 4f fa 4f fa 4f fa cf 0b ff b9 39 c4 1f 66 ec 07 a1 c2 9f ac b5 2f fc c7 Data Ascii: (*2o8}+in!I15r$!I+,$//~#HtSmnL#dm$IbTuo9\|itU^""O$AmT@gYomgmgODl0Y)HQ?%H$IU=eK\|vm^OOOOO9f/
2025-03-17 18:23:02 UTC	1246	IN	Data Raw: ae 1c 15 69 c1 a0 48 29 dc 2b e7 59 40 9f 6e a7 00 d5 a3 ab 1c 3b e3 94 3d 96 72 8a 10 eb 8e 10 4f 70 72 21 12 63 0c da 94 51 27 37 28 26 15 97 91 a4 2e 45 b1 5b 63 94 27 3b 76 06 6e 1c 29 45 70 86 a8 88 2b c8 58 3a 8d e0 77 35 df 3c 1e a0 4f 45 dc e2 58 d2 7f 5e f8 4f fa 4f fa 4f fa 4f fa 8f 2e fd 1f 5f cd ff f8 e3 c9 b4 1a b2 9d 72 be fd 9a 05 47 53 57 43 b3 74 6f ce 88 e3 87 62 38 96 ea c3 59 71 fc 32 1d 8a ed 03 e7 c6 31 de b2 32 1c fa 1f f5 f3 47 82 ac cf 32 bb b5 74 3a 2e e5 ba c6 68 14 32 8c 02 ae 22 ae 9c 21 34 c5 16 12 de 99 cf 6a 8c 46 21 c3 28 e0 22 a2 f9 35 4b 8e 7a 8b 0b 36 a3 e7 d3 a4 0c 1e 1f e7 73 41 d1 85 79 42 b6 85 34 68 15 47 96 98 49 71 34 0a 19 26 af b6 5b 46 23 0b 67 0a df 6d 95 2d 32 c7 4c a6 0d ec 5e dd 7a 72 ed 5c e1 a7 2d 32 56 Data Ascii: iH)+Y@n;=rOpr!cQ'7(&.E[c';vn)Ep+X:w5<OEX^OOOO._rGSWCtob8Yq212G2t:.h2"!4jF!("5Kz6sAyB4hGIq4&[F#gm-2L^zr\-2V
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: b0 f7 1c 20 16 d0 07 24 cf 04 c9 85 e8 82 8a 94 54 48 a1 46 15 de 4b 75 c1 20 19 58 1f f5 ea 10 09 b3 81 a0 bb 2b 72 bb cd 81 b1 0d 04 ed 36 03 dc 0c 06 76 9c 3c a6 2f 75 73 fe 06 47 9b f3 57 e9 fe 2c 63 73 26 20 34 89 62 aa fa bd 9a 3b e8 b3 36 7b 17 83 b1 12 14 ec 66 52 98 e7 4f 7e 08 1c 7a 3c ab 77 e2 2e 9a c0 b0 92 08 a6 fa ae 64 b3 17 d8 8f 4f e2 2c 36 6d 60 68 12 c0 8c 99 cf 32 7f d4 3e 8e ad 58 09 0e b3 49 5f 9e 3f 1d 65 fc ae 7c 12 53 d1 04 07 7b 37 d1 4b f5 83 6f 46 03 7b 5a c4 51 cc 04 88 6e 82 97 aa f5 d5 0a a4 4f e3 27 ca 20 31 9b 70 24 18 db f1 6d 81 71 dc 44 37 48 d8 32 a1 cb 4e a3 50 44 24 7f 6a 27 53 c1 ed 58 5b e7 0a 02 e6 8f e3 25 da 40 71 2b 91 4b 95 53 23 2f f5 b7 b4 e8 cb 74 f2 03 75 d1 a7 41 c2 95 0e 5b 3b 9f c4 65 4c 5a ab 69 15 2b Data Ascii: $THFKu X+r6v</usGW,cs& 4b;6{fRO~z<w.dO,6m`h2>XI_?e\|S{7KoF{ZQnO' 1p$mqD7H2NPD$j'SX[%@q+KS#/tuA[;eLZi+
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 39 6f 89 8e 42 97 bb 0a ec 19 b0 b2 76 d8 74 7f 40 19 1c 93 87 d7 52 c9 f9 bc 81 93 91 0c f3 f0 13 a9 cb 35 ab 06 64 9c 9b d8 8b 27 cc b9 2b 2c fc c2 9b 87 f4 5c 37 cc ba 3f 88 6c 44 5e e7 62 ea b3 93 d5 e8 1f 8c 62 20 91 13 ad aa 01 99 e4 26 fe e2 07 e6 32 a4 3f 71 d5 07 c2 58 25 c8 b7 71 07 dd 70 c1 ae 85 d0 f0 f4 0d bf 79 1b 18 44 34 cc 87 72 16 8c ff 3d 9c 3d 14 83 f1 8c 59 a3 ec 53 ae 9b 52 91 71 65 ab 1b 16 dd 1f 54 06 fb 25 2e a7 be bb 0b f2 ec 08 06 5a d0 54 9b 6a 40 be 36 71 18 cf b9 ab 3d 7f cc c1 af bc 49 3a 3f e9 86 45 f7 07 94 c1 49 79 9d d4 7f ae 03 1b 89 5e a0 87 d3 1a 4d aa 01 79 64 62 31 a6 ec 55 90 3e 63 18 e7 2e b8 12 6f b0 66 ed a0 32 38 c4 58 f9 d8 ef 3c f1 de 60 19 1c 8d 5e 10 62 29 1a 28 c9 cf ca 2f 4d 24 e3 9b 29 e4 3e 7e 18 8a 4c Data Ascii: 9oBvt@R5d'+,\7?lD^bb &2?qX%qpyD4r==YSRqeT%.ZTj@6q=I:?EIy^Mydb1U>c.of28X<`^b)(/M$)>~L
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 51 10 6a 2e cf 87 58 ab 3c c8 85 4f c6 0d 4e 94 eb c3 03 7f 22 1d af 3b 7f fa f8 49 3d 82 15 e9 59 99 57 d1 49 bf b1 18 62 5b 13 7b 62 2c 68 2d 18 1c 95 1b 96 ae 0b 57 25 4e 44 36 be c9 30 ed f7 b4 32 23 b0 d2 17 95 43 6c be 46 89 6e 7d f8 9d 0b 2d c0 13 5d 3f 63 91 4f 15 97 fc 29 ca b3 32 af da 0e 8e 3b e1 34 71 e1 1e d2 53 d2 86 36 82 b4 e2 15 5d b8 20 af 19 b5 20 54 02 42 93 f0 e1 44 3e 7c 46 ad 55 1e b9 2c fb 34 47 88 6c 7d d8 9f 7e 75 33 d9 ef bc d0 5f 62 80 d3 af 5e 5b 50 cf 32 31 45 37 84 1a 22 b6 b2 8b 21 bb e9 56 11 9c 05 cf eb c2 19 69 c9 c8 05 a1 12 10 aa 93 ba 52 75 3f f8 b5 2c fe 57 30 91 ad 0f 0a 7a 2c f8 0b 7d da 14 df 35 85 22 27 11 1c 9e 58 cc fc bd 5d 01 5f 49 f9 83 a2 30 51 8e 0f e9 8f 7c b5 00 6f e8 c1 35 79 4e e4 42 4a 3c 61 38 59 a7 Data Ascii: Qj.X<ON";I=YWIb[{b,h-W%ND602#ClFn}-]?cO)2;4qS6] TBD>\|FU,4Gl}~u3_b^[P21E7"!ViRu?,W0z,}5"'X]_I0Q\|o5yNBJ<a8Y
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: e2 51 0b 41 b1 f0 4f 5d 81 2f ce 5d 63 78 85 f6 11 ee c5 57 7a 5b b5 a1 b7 58 4c c5 b0 fd 0e 3e d1 0d f4 02 04 3e d6 18 4f dc cd 06 e7 4c f0 4f ec dd 0d 2f 70 45 a1 bd e9 d7 2f c1 af 8a 7d a7 12 3f 37 17 56 f4 a6 91 27 da f1 03 f2 31 0b d0 18 47 dc cd 57 26 38 ae dc 5f 20 ee fc 95 eb a4 29 97 cf ee c6 6f f4 a7 44 10 dd 0d df f4 02 e9 7f 34 d1 1e b3 32 db 27 e7 06 fa 86 06 2b 8a 33 17 2e 5f 03 16 7d 3b bb 74 fe cc 6e c2 ed 0c 96 10 22 56 c4 37 9d f8 16 ee 9f 3d 8f fa 98 7b 23 5d 18 28 6c 7d 7d 92 7a 2b 2c 9e 3e 07 de af 71 e8 7d 85 95 18 22 2e 78 38 3f 6b c4 2f b0 0c bf 9a c8 8f d9 bc d5 f7 b6 71 d7 04 d0 1d dd bb 9b d1 ed 1c 37 26 41 44 6c 02 f1 e5 70 14 03 60 cc da 7c 5f e3 66 40 8d 51 7a ea f0 1e b6 57 47 8d 49 16 11 7f d0 92 58 e2 66 fc de bc dd bf 36 Data Ascii: QAO]/]cxWz[XL>>OLO/pE/}?7V'1GW&8_ )oD42'+3._};tn"V7={#](l}}z+,>q}".x8?k/q7&ADlp`\|_f@QzWGIXf6
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 24 d7 3c 96 d0 73 d5 7d b6 2e 05 62 d9 87 91 b8 bd eb c7 45 1a 25 d7 ae 3e 84 d0 35 7e 51 af b3 d6 c3 48 ec b7 52 fc b2 4d 5a 7e bf e7 75 d7 3f d9 3f ea 7b ca c8 6c 4d 14 bf f1 e3 f2 0e 27 fc dc 79 26 fd 42 df 9a 88 ea ca 96 79 ea 86 2e e2 27 a7 16 3b a2 7d f8 f1 f8 73 1e 69 f3 96 26 87 b6 14 5d de a9 89 40 37 fd 61 b0 79 8f 9f 9f fe 6a 22 ad 5b 5b d4 e4 32 c9 de 5b e4 62 02 4c 4d 00 2e fe dd d3 41 c5 7d 0b 4f 89 ac 2b cd b3 dc 97 a4 85 26 71 a6 ee c6 ae a1 0a 17 e9 17 c8 d9 92 44 46 aa 9b 69 87 f2 5f b5 ba 4b 70 37 4b 56 f1 ef 2c f0 5c fd d0 6d 04 16 df 59 a0 5d f7 ae c2 8f 27 97 05 29 ba 54 0f 7f 2c 1f 71 2f 0d 8b b8 6a 5e 34 93 d2 bf f8 c9 5a 0d 5c 6d 85 a2 d8 a9 ef 99 ed 38 dc 0b ff 49 ff 49 ff 49 ff 49 ff 49 ff 49 ff 49 ff 49 ff 49 ff 49 ff 49 ff 79 Data Ascii: $<s}.bE%>5~QHRMZ~u??{lM'y&By.';}si&]@7ayj"[[2[bLM.A}O+&qDFi_Kp7KV,\mY]')T,q/j^4Z\m8IIIIIIIIIIIy
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: aa c2 be 50 dd 55 a0 ed 8f ef d0 21 9d 8d e4 2a 9c e0 51 53 a8 51 1c ac 61 1d 1d 10 b7 64 50 b7 9c 23 8a 88 9c 84 2b a6 82 2a 44 a0 e3 96 44 be 78 10 a6 45 f8 f1 43 5f 08 67 d6 62 6b a2 28 6e 09 52 88 d1 f3 4a f6 58 a6 8e 49 11 6f e6 09 57 1c 60 5c e5 90 80 26 a3 f1 78 77 23 1c 62 0d 1c 19 5c 5a da ad 60 28 a2 40 7f 39 e4 56 91 62 71 92 94 a1 3a b1 0c 29 c7 d2 60 15 94 a4 0d 46 52 74 74 ce 60 28 ee 2a 2e 37 36 de 83 37 65 e4 8a 11 a0 d5 54 6a 20 47 6d 0c 59 94 56 f8 5f bd 14 cb 33 cd a1 71 12 47 fa ab 53 38 ee 2e 1a 4d 86 c5 f8 5d 59 d0 52 68 a5 3a 46 52 74 74 09 af f8 40 69 57 c1 36 36 ad d8 8e c3 bd f0 9f f4 9f f4 9f f4 9f f4 9f f4 9f f4 9f 17 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe 93 fe e3 6e 9c 3c 7e ec b0 e8 Data Ascii: PU!QSQadP#+DDxEC_gbk(nRJXIoW`\&xw#b\Z`(@9Vbq:)`FRtt`(*.767eTj GmYV_3qGS8.M]YRh:FRtt@iW66n<~
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 22 7c 6f e3 df 41 f4 cb 25 d8 b8 c0 c2 9b 85 58 fb 58 fc ca 51 89 eb 3c 05 a4 de 10 61 19 cd 8c 1e 4e a8 f0 74 11 7f 2a 5a 24 dc 1a ef 71 48 da 10 5f ff 1a 5b 53 8f 0f 38 e4 8f d6 19 9e c4 c3 df bc c3 c0 0d fd ea f5 dd 58 c8 95 be c4 d8 67 ef 26 d6 aa 20 3b cb d8 b3 31 76 c8 04 e2 79 65 de 79 c9 2b 1f c5 41 7a 46 c3 4a f6 08 1a e4 12 6e fa e5 8e b2 e9 76 79 2b 13 d7 60 a0 90 70 c8 53 5e 52 9f 26 6c 8f 85 f3 c1 c8 b2 5c 4b b2 e9 97 3b 2e f1 b6 36 fd f5 38 52 83 2d 97 5e 17 eb 4d 7b 97 87 49 10 9a a2 92 70 d3 2f 77 4a 3e 79 16 d6 9e a7 50 df 49 87 fc ce 46 75 5a d1 e3 cd 94 87 71 10 9a a2 92 74 d3 2f b7 47 3a f3 6a 96 9e f5 1c ac f7 c4 91 e9 87 a9 22 2f 0b 07 81 31 71 2d 38 ad 5f ba 9b 58 d3 2f 77 40 3a 8e 40 97 3e 3d 2b 6d 2b 8e 84 63 da 7b dc 68 6d d8 80 Data Ascii: "\|oA%XXQ<aNt*Z$qH_[S8Xg& ;1vyey+AzFJnvy+`pS^R&l\K;.68R-^M{Ip/wJ>yPIFuZqt/G:j"/1q-8_X/w@:@>=+m+c{hm

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:02 UTC	907	OUT	GET /slt3lc6tev37/2fMg89go9MegG1EDg39mNy/5a42817cd388ae352f77f56e53b1ff81/card-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:02 UTC	859	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:02 GMT Content-Type: image/webp Content-Length: 2784 Connection: close CF-Ray: 921e84eac9484259-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 330886 Cache-Control: max-age=604800 Content-Disposition: inline; filename="card-new.webp" ETag: "f4eb2a2f745f8799e3e6f6478ab2305d" Last-Modified: Wed, 21 Aug 2024 18:12:19 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3908 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fBfbJqJB4er6URw9qnvZJpZ%2FfYatJTWcIjs4IaOStSQHEBVcEFDpQIuaFfUfJjPI3%2Bz%2FSntcGAMFmfTOq0P8%2B42RHHpgKYWcr9gYZOoZo0sCW4An7%2FWLqWmcH93GcpHOXFTA%2FruxWKjWawvVLcU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:02 UTC	510	IN	Data Raw: 52 49 46 46 d8 0a 00 00 57 45 42 50 56 50 38 4c cc 0a 00 00 2f 36 41 2b 10 19 45 6d db 40 ca 3b e5 cf 78 27 82 88 fe a7 7c aa 82 85 6c 14 b4 6d c3 18 44 f9 b3 ed 0e 03 c2 6c a3 22 ec 79 fe 64 87 22 16 4c f1 ce 70 ea bf c2 b6 6d 90 c2 78 8f a0 19 e1 43 91 fa 33 06 70 5d b2 c4 db 6d db 7a db d6 b6 36 41 8a ce ff ff 15 f9 b8 7e 5e 5e 31 59 8a 8c 97 89 f1 32 99 8f 1d ea 22 3b 0d 2d aa 38 6c db 46 92 e8 fb af ff 76 07 23 c8 91 24 29 92 3c 97 05 da 83 e7 e9 2f 0f 63 38 a8 ad 2d 68 ae 0d 8c 40 83 11 61 24 d8 9a e8 12 08 0d a4 89 26 70 11 fe 08 44 20 02 2d da 76 eb b6 91 d4 76 3c 12 20 5f 00 97 97 20 f3 fc 2e 2c 00 7e ef fe 1e ec 73 ed ff 7b b5 84 2d e7 15 30 38 8b 81 e5 29 58 9f 32 c2 35 00 98 bf 01 57 80 14 31 0d 91 16 d0 06 a2 b4 b8 3e 4f ad 30 26 00 fe d7 cb Data Ascii: RIFFWEBPVP8L/6A+Em@;x'\|lmDl"yd"LpmxC3p]mz6A~^^1Y2";-8lFv#$)</c8-h@a$&pD -vv< _ .,~s{-08)X25W1>O0&
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: dd b1 26 92 6a b1 d5 84 d9 ec f5 9c 41 af 57 ae 52 21 e0 de 8e 8a 39 f8 ce f4 93 98 03 b1 27 be e9 17 05 01 a9 49 f7 14 ed db 98 2d 4d ff 30 bb 7e a5 8e da de 49 92 02 08 58 cc 89 33 22 e1 5d 62 29 d1 a2 06 92 a0 26 89 a5 bd 80 de 28 84 7b 53 45 e6 b6 61 65 ad a9 f8 9d dc 3b 00 a7 b6 6d 4d b3 14 64 36 ed a4 fa da c2 6b b4 e5 d4 d6 96 da 4c a5 94 3d 50 83 bd 15 d5 bf 10 4d a7 97 2e ea 1f 03 f5 81 fb 36 c4 ec ca 6c ca 7e d0 64 df 0e b1 62 f3 e4 90 4b 3e 33 ab 4e bb 7a d2 2e 34 ad 64 ca 75 38 c6 2d 7e 64 9e ec a6 a8 99 4a 14 7b a6 3a fb 66 d8 0d d8 d5 8c 2c a2 d2 66 0e 85 db b0 ec 3e a9 b8 29 84 b5 85 cd 16 5f 85 09 90 21 c8 15 11 61 94 da ef 2e c3 9a 39 15 9f fe c8 e9 9e 46 35 89 01 bd 19 e1 47 f7 de b0 98 21 a9 0d 80 89 34 2c 64 d3 e0 35 9a 65 37 43 1b 3a Data Ascii: &jAWR!9'I-M0~IX3"]b)&({SEae;mMd6kL=PM.6l~dbK>3Nz.4du8-~dJ{:f,f>)_!a.9F5G!4,d5e7C:
2025-03-17 18:23:02 UTC	905	IN	Data Raw: 6c 60 1e 6f cd 45 8e cd 08 f7 ad 21 48 ba 99 f2 39 3f 8f ef 0b 1e 2d c1 58 af 79 a5 ee 8c e6 e8 dc e1 e3 fb 07 68 f5 51 e8 4d 29 50 c5 8d 14 83 f9 f1 fa be 80 76 d4 e6 06 20 aa e8 dd 06 53 30 d8 7c 97 51 32 c2 77 f3 56 c5 0d 93 cf 16 24 af fb c1 18 1f ba 96 74 cb e4 73 ed 38 2e 71 bc c2 7c b0 5f ea bc 18 58 82 79 dc 8f 23 cc 0f 4d a1 2a cc 78 18 3d ab 09 14 fd 82 2f 30 d0 0f 9a 11 e4 23 06 dd d5 12 7e bf 35 67 19 cc 30 22 fd 68 1e 29 34 39 bb b1 4b f8 38 c7 a5 39 4b b0 9f 65 24 28 b2 d4 f5 02 0c 3f ce cd 17 67 39 8b 72 0a ea bf 7c 6e 46 73 9c e2 d2 9c 04 18 30 bb 17 e7 e8 91 18 c4 aa f3 e3 e3 1c 0f 80 1b ec fd 16 be b7 45 0c d6 71 3c be 3e d6 7d 83 d8 54 dc 2e 5b 80 c7 f9 f2 26 f7 a8 bf 9e 61 9a 71 9f 71 79 fd f8 fa 3a 0b 11 f5 55 b2 65 14 91 08 f6 71 2a Data Ascii: l`oE!H9?-XyhQM)Pv S0\|Q2wV$ts8.q\|_Xy#Mx=/0#~5g0"h)49K89Ke$(?g9r\|nFs0Eq<>}T.[&aqqy:Ueq

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:02 UTC	883	OUT	GET /img/privacyoptions.svg HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:02 UTC	894	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:02 GMT Content-Type: image/svg+xml Transfer-Encoding: chunked Connection: close ETag: W/"5a8d3dae7c1ddd64826cea94a93139d4" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SHwD%2BCglxYdJn2jVjfdjVN8nKwZiyl2h%2FLg71L2jcObXMpF%2BgtCnGegeCnGgFKGr9RBofg0yWw9y6GSfQ2OXSC2l5V4Qq5MTP89udHUhNX0cBaWw4mVbGzgR4HRMgeB53k3D7g%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84eaca3e429d-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:02 UTC	475	IN	Data Raw: 37 30 31 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 32 34 2e 33 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 Data Ascii: 701<?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 24.3.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px
2025-03-17 18:23:02 UTC	1325	IN	Data Raw: 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 09 2e 73 74 32 7b 66 69 6c 6c 3a 23 46 46 46 46 46 46 3b 7d 0a 09 2e 73 74 33 7b 66 69 6c 6c 3a 23 30 30 36 36 46 46 3b 7d 0a 3c 2f 73 74 79 6c 65 3e 0a 3c 67 3e 0a 09 3c 67 20 69 64 3d 22 66 69 6e 61 6c 2d 2d 2d 64 65 63 2e 31 31 2d 32 30 32 30 5f 31 5f 22 3e 0a 09 09 3c 67 20 69 64 3d 22 5f 78 33 30 5f 32 30 38 2d 6f 75 72 2d 74 6f 67 67 6c 65 5f 32 5f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 2d 31 32 37 35 2e 30 30 30 30 30 30 2c 20 2d 32 30 30 2e 30 30 30 30 30 30 29 22 3e 0a 09 09 09 3c 67 20 69 64 3d 22 46 69 6e 61 6c 2d 43 6f 70 79 2d 32 5f 32 5f 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 31 32 37 35 2e 30 30 30 30 30 30 2c 20 32 30 30 2e 30 30 30 30 30 30 Data Ascii: ll:#0066FF;}.st2{fill:#FFFFFF;}.st3{fill:#0066FF;}</style><g><g id="final---dec.11-2020_1_"><g id="_x30_208-our-toggle_2_" transform="translate(-1275.000000, -200.000000)"><g id="Final-Copy-2_2_" transform="translate(1275.000000, 200.000000
2025-03-17 18:23:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:02 UTC	909	OUT	GET /slt3lc6tev37/6bNeiYhSx0RGvbzxS5Fi8c/3ff83bcc36e86e85170201f8264b2c1c/banner-new.png HTTP/1.1 Host: cf-assets.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:02 UTC	857	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:02 GMT Content-Type: image/webp Content-Length: 2238 Connection: close CF-Ray: 921e84eac9ce8c35-EWR CF-Cache-Status: HIT Accept-Ranges: bytes Age: 270433 Cache-Control: max-age=604800 Content-Disposition: inline; filename="banner-new.webp" ETag: "a9df8b6f62f4aeb1b4699a2ae4b291bb" Last-Modified: Thu, 22 Aug 2024 13:46:01 GMT Vary: Accept Cf-Bgj: imgq:85,h2pri Cf-Polished: origFmt=png, origSize=3127 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bysx5tG7jY4NPssXU4VZZFvupn2BCM3PeVym5vjXDVVWNdg4O1hPXCLYGlg6QbcS0d%2B8LgtXED%2Bcvz9CqoAXhVrzx4xv0fFUFNKYODzkZIf1ouu5n7c9tAVb%2F4Qr0yMXQPn%2BG0lR7glOlEUP56w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:02 UTC	512	IN	Data Raw: 52 49 46 46 b6 08 00 00 57 45 42 50 56 50 38 4c aa 08 00 00 2f 99 82 15 10 19 45 6d db 40 ca 3b e3 8f f8 1e 82 88 fe 4f 80 3c 36 b1 09 c4 86 4c da 26 fe 6d af d7 14 08 04 92 11 f2 a7 1b 65 10 fa 2f 24 48 b0 39 45 8e 59 a1 1f 18 05 25 49 92 e3 48 92 1b 7a 99 ff bf 62 8e f3 bc 7d 18 22 45 00 64 82 11 0e f6 8d 61 db b6 61 e8 b5 ff 5f 5c 4c 90 23 49 52 24 79 2e 0b b4 07 cf d3 5f 1e c6 70 50 5b 5b d0 5c 1b 18 81 06 fb 23 cc 04 5b 13 5c 02 a4 81 34 c1 04 2e 02 11 88 60 04 48 90 e4 c6 6d 24 e7 8e 52 0b 70 b1 5c 40 b9 de 62 11 04 e1 f7 ee 6f ec 13 fd 7f c3 92 90 e0 0c 08 3e cf 40 1e f8 c9 4f 70 3f 30 d0 5f b7 02 77 8a b3 66 70 30 d4 46 7c c7 2a 66 07 e0 8f 5e d6 3f bd 16 65 df 14 ed cd 51 1e d4 66 b1 c3 c8 d8 ce df fc 54 f1 7c 3d fd d9 db 2d 85 6d d6 07 8c 15 31 Data Ascii: RIFFWEBPVP8L/Em@;O<6L&me/$H9EY%IHzb}"Edaa_\L#IR$y._pP[[\#[\4.`Hm$Rp\@bo>@Op?0_wfp0F\|*f^?eQfT\|=-m1
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 65 52 a2 e9 55 14 0a 3f 50 7a 37 b5 69 9c f7 27 fd e0 2e 16 45 65 d2 82 1d 3a ff 9d a4 02 a4 0a 39 b0 c6 01 80 22 e9 01 ee 6e 0d 6e 5c 24 ab e5 4c b1 44 71 81 27 f1 4a 17 e1 8b f1 19 20 15 c6 c0 4d 80 8a e2 2b 06 b2 40 0c 14 2b 1b 50 05 30 70 91 37 90 3e e4 80 20 28 4a d3 59 00 c9 d7 54 72 eb 08 49 47 8c 74 08 03 25 e4 a6 76 99 3c 37 15 37 3e 29 f4 9e 03 e0 82 cd 02 28 91 57 85 51 3a 7b 26 03 70 b4 28 c0 44 14 20 b3 09 05 2e 82 00 f5 84 31 50 44 f7 36 65 7f 15 e6 b4 ce c6 66 b5 88 e9 07 ca 91 0e 58 da f4 32 df 9e 36 ef 42 d3 e7 f5 c0 e4 63 01 41 00 be 12 0d cc 6d a7 8a da 74 76 29 db 81 19 bb 03 81 1e c9 80 25 64 42 fe 1e d1 81 9b 11 05 92 26 0e d8 d0 26 90 00 ad a2 36 9b 5d bd 0c f4 44 9e 5c 37 fe c0 c4 81 09 c7 03 99 c2 0f 54 31 31 e6 ba 26 85 0d 19 ad Data Ascii: eRU?Pz7i'.Ee:9"nn\$LDq'J M+@+P0p7> (JYTrIGt%v<77>)(WQ:{&p(D .1PD6efX26BcAmtv)%dB&&6]D\7T11&
2025-03-17 18:23:02 UTC	357	IN	Data Raw: 7d 2f 10 84 d4 9f 2b 53 bf 0e de ae fc 82 af 43 05 08 02 65 80 89 4c 20 29 92 09 6b 92 20 64 64 f6 62 1a 80 b0 7b e6 83 d9 41 11 28 dd ae 2e cc c5 f7 26 f7 15 c5 08 03 36 f8 49 fb a3 be 00 16 1c 2a 00 51 cc a0 20 d7 44 37 41 40 b0 45 b6 83 fa 57 a7 0f 09 e9 b6 ce 09 9f 3b 34 c4 c5 81 ac 8d 4e 51 9d 3b 92 9b 9f e1 9f fb 31 6e 1e d2 14 e9 3c 26 b4 01 e6 ac b0 e4 02 57 a0 07 a0 18 28 ad b8 a4 f6 e4 56 75 60 72 80 9b 01 05 6a 33 67 4d 82 c1 d7 17 32 bc e9 3f 7f 6a 46 fb 7f 2e c8 97 ce 3c 70 bd 36 60 0a 0a 9c 04 d2 26 5b 6e 14 92 86 15 e8 91 1b 21 68 28 02 4f ac 02 b0 4c a4 6d a7 8a 36 44 87 fb d3 58 25 b7 00 c9 dc 48 47 e0 e1 8c 35 ac 90 4c d0 c1 4f 70 04 4c 4f ab 37 5d ad ed a8 e2 2f 4e c8 39 32 10 48 ef 2d 80 91 25 03 89 31 83 1a ef f1 59 89 61 4d 10 fe bb Data Ascii: }/+SCeL )k ddb{A(.&6I*Q D7A@EW;4NQ;1n<&W(Vu`rj3gM2?jF.<p6`&[n!h(OLm6DX%HG5LOpLO7]/N92H-%1YaM

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:02 UTC	864	OUT	GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:02 UTC	758	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:02 GMT Content-Type: application/javascript Content-Length: 12332 Connection: close Last-Modified: Tue, 11 Mar 2025 18:12:36 GMT ETag: "67d07d14-302c" Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GrlRNStPj158CrzUDOuP7zwmd4ogL50L%2B4tHEFQMPMJ147EOsj9e%2BbunuX9FxmXa68D6kBWTb8QxZoFBDIHqGGdwFWMtCQ7qoS3ZXkAx4TJqSGzd3ZMYZX4EGlJ9fV%2BoYj2v6A%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84eada8542b3-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Wed, 19 Mar 2025 18:23:02 GMT Cache-Control: max-age=172800 Cache-Control: public Accept-Ranges: bytes
2025-03-17 18:23:02 UTC	611	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 72 65 74 75 72 6e 22 63 66 2d 6d 61 72 6b 65 72 2d 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2e 74 6f 53 74 72 69 6e 67 28 29 2e 73 6c 69 63 65 28 32 29 7d 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 28 6e 3d 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 7c 7c 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 6e 2c 5b 63 6f 6e 73 6f 6c 65 2c 22 5b 52 4f 43 4b 45 54 20 4c 4f 41 44 45 52 5d 20 22 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3b 76 61 72 20 6e 7d 66 75 6e 63 Data Ascii: !function(){"use strict";function t(){return"cf-marker-"+Math.random().toString().slice(2)}function e(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];(n=console.warn\|\|console.log).call.apply(n,[console,"[ROCKET LOADER] "].concat(t));var n}func
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 63 28 74 29 7b 72 65 74 75 72 6e 20 61 28 74 2c 22 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 69 66 28 65 28 29 2c 74 29 72 65 74 75 72 6e 20 74 2e 63 61 6c 6c 28 74 68 69 73 2c 6e 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 75 28 74 2c 65 29 7b 74 2e 6f 6e 6c 6f 61 64 3d 73 28 74 2e 6f 6e 6c 6f 61 64 2c 65 29 2c 74 2e 6f 6e 65 72 72 6f 72 3d 73 28 74 2e 6f 6e 65 72 72 6f 72 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 74 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 22 73 63 72 69 70 74 22 29 3b 65 2e 61 73 79 6e 63 3d 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 2c 65 2e Data Ascii: c(t){return a(t,"")}function s(t,e){return function(n){if(e(),t)return t.call(this,n)}}function u(t,e){t.onload=s(t.onload,e),t.onerror=s(t.onerror,e)}function p(t){var e=document.createElementNS(t.namespaceURI,"script");e.async=t.hasAttribute("async"),e.
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 66 28 21 65 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 54 29 3b 72 65 74 75 72 6e 7b 6e 6f 6e 63 65 3a 6e 5b 30 5d 2c 68 61 6e 64 6c 65 72 50 72 65 66 69 78 4c 65 6e 67 74 68 3a 2b 6e 5b 31 5d 2c 62 61 69 6c 6f 75 74 3a 21 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 65 66 65 72 22 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 29 7b 76 61 72 20 65 3d 42 2b 74 2e 6e 6f 6e 63 65 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 22 2b 65 2b 22 5d 22 29 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 65 29 2c 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 Data Ascii: f(!e)return null;var n=e.split(T);return{nonce:n[0],handlerPrefixLength:+n[1],bailout:!t.hasAttribute("defer")}}function g(t){var e=B+t.nonce;Array.prototype.forEach.call(document.querySelectorAll("["+e+"]"),function(n){n.removeAttribute(e),Array.prototyp
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 31 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 32 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 33 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 34 22 3a 21 30 2c 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 31 2e 35 22 3a 21 30 2c 22 74 65 78 74 2f 6a 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 6c 69 76 65 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 65 63 6d 61 73 63 72 69 70 74 22 3a 21 30 2c 22 74 65 78 74 2f 78 2d 6a 61 76 61 73 63 72 69 70 74 22 3a 21 30 2c 6d 6f 64 75 6c 65 3a 21 30 7d 2c 6b 3d 76 6f 69 64 20 30 21 3d 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 Data Ascii: :!0,"text/javascript1.1":!0,"text/javascript1.2":!0,"text/javascript1.3":!0,"text/javascript1.4":!0,"text/javascript1.5":!0,"text/jscript":!0,"text/livescript":!0,"text/x-ecmascript":!0,"text/x-javascript":!0,module:!0},k=void 0!==document.createElement("
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 6f 74 79 70 65 2e 68 61 73 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 29 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 74 68 69 73 2e 6e 6f 6e 63 65 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 4e 6f 6e 63 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 2e 74 79 70 65 2e 73 75 62 73 74 72 28 74 68 69 73 2e 6e 6f 6e 63 65 2e 6c 65 6e 67 74 68 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 6b 65 4e 6f 6e 45 78 65 63 75 74 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 74 79 70 65 3d 74 68 69 73 2e 6e 6f 6e 63 65 2b 74 2e 74 79 70 65 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 50 65 6e 64 69 6e 67 44 Data Ascii: otype.hasNonce=function(t){return 0===(t.getAttribute("type")\|\|"").indexOf(this.nonce)},t.prototype.removeNonce=function(t){t.type=t.type.substr(this.nonce.length)},t.prototype.makeNonExecutable=function(t){t.type=this.nonce+t.type},t.prototype.isPendingD
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 79 70 65 2e 65 6e 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 69 6e 73 65 72 74 69 6f 6e 50 6f 69 6e 74 4d 61 72 6b 65 72 3d 74 2c 74 68 69 73 2e 62 75 66 66 65 72 3d 22 22 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 6e 5d 3b 72 65 74 75 72 6e 20 65 2e 77 72 69 74 65 28 74 2c 21 31 29 7d 2c 64 6f 63 75 6d 65 6e 74 2e 77 72 69 74 65 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 74 5b 6e 5d Data Ascii: ype.enable=function(t){var e=this;this.insertionPointMarker=t,this.buffer="",document.write=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]=arguments[n];return e.write(t,!1)},document.writeln=function(){for(var t=[],n=0;n<arguments.length;n++)t[n]
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 2e 77 72 69 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3b 6e 26 26 69 28 6e 29 26 26 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 61 73 79 6e 63 22 29 3f 28 72 3d 65 3f 5f 3a 4c 29 2e 63 61 6c 6c 2e 61 70 70 6c 79 28 72 2c 5b 64 6f 63 75 6d 65 6e 74 5d 2e 63 6f 6e 63 61 74 28 74 29 29 3a 74 68 69 73 2e 62 75 66 66 65 72 2b 3d 74 2e 6d 61 70 28 53 74 72 69 6e 67 29 2e 6a 6f 69 6e 28 65 3f 22 5c 6e 22 3a 22 22 29 3b 76 61 72 20 72 7d 2c 74 7d 28 29 2c 6a 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 69 6d 75 6c 61 74 65 64 52 65 61 64 79 53 74 61 74 65 3d 22 6c 6f 61 64 69 6e 67 22 2c Data Ascii: .write=function(t,e){var n=document.currentScript;n&&i(n)&&n.hasAttribute("async")?(r=e?_:L).call.apply(r,[document].concat(t)):this.buffer+=t.map(String).join(e?"\n":"");var r},t}(),j=function(){function t(){var t=this;this.simulatedReadyState="loading",
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 6e 50 72 6f 78 69 65 73 3d 21 30 7d 2c 30 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 75 70 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 50 72 6f 78 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 45 76 65 6e 74 54 61 72 67 65 74 3f 5b 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 5d 3a 5b 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 5d 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d 65 74 68 6f 64 73 28 65 29 7d 29 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 61 74 63 68 45 76 65 6e 74 54 61 72 67 65 74 4d Data Ascii: nProxies=!0},0)},t.prototype.setupEventListenerProxy=function(){var t=this;("undefined"!=typeof EventTarget?[EventTarget.prototype]:[Node.prototype,Window.prototype]).forEach(function(e){return t.patchEventTargetMethods(e)})},t.prototype.patchEventTargetM
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 61 74 6f 72 22 2c 7b 76 61 6c 75 65 3a 6e 65 77 20 6a 7d 29 2c 74 2e 5f 5f 72 6f 63 6b 65 74 4c 6f 61 64 65 72 4c 6f 61 64 50 72 6f 67 72 65 73 73 53 69 6d 75 6c 61 74 6f 72 7d 28 29 2c 57 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 3d 74 2c 74 68 69 73 2e 73 65 74 74 69 6e 67 73 3d 65 2c 74 68 69 73 2e 70 72 65 6c 6f 61 64 48 69 6e 74 73 3d 5b 5d 7d 72 65 74 75 72 6e 20 74 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 73 65 72 74 50 72 65 6c 6f 61 64 48 69 6e 74 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 74 68 69 73 2e 73 63 72 69 70 74 53 74 61 63 6b 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 61 28 65 2c 74 2e 73 65 Data Ascii: ator",{value:new j}),t.__rocketLoaderLoadProgressSimulator}(),W=function(){function t(t,e){this.scriptStack=t,this.settings=e,this.preloadHints=[]}return t.prototype.insertPreloadHints=function(){var t=this;this.scriptStack.forEach(function(e){if(a(e,t.se
2025-03-17 18:23:02 UTC	769	IN	Data Raw: 65 53 63 72 69 70 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 2e 73 63 72 69 70 74 2c 72 3d 74 2e 70 6c 61 63 65 68 6f 6c 64 65 72 2c 6f 3d 74 2e 65 78 74 65 72 6e 61 6c 2c 69 3d 74 2e 61 73 79 6e 63 2c 61 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 63 6f 6e 74 61 69 6e 73 28 72 29 29 72 65 74 75 72 6e 20 65 28 22 50 6c 61 63 65 68 6f 6c 64 65 72 20 66 6f 72 20 73 63 72 69 70 74 20 5c 6e 22 2b 6e 2e 6f 75 74 65 72 48 54 4d 4c 2b 22 5c 6e 20 77 61 73 20 64 65 74 61 63 68 65 64 20 66 72 6f 6d 20 64 6f 63 75 6d 65 6e 74 2e 22 2c 22 53 63 72 69 70 74 20 77 69 6c 6c 20 6e 6f 74 20 62 65 20 65 78 65 63 75 74 65 64 2e 22 29 2c 6e 75 6c 6c 3b 76 61 72 20 63 3d 74 68 69 73 2e 73 65 74 74 69 6e 67 73 2e 62 6c Data Ascii: eScript=function(t){var n=t.script,r=t.placeholder,o=t.external,i=t.async,a=r.parentNode;if(!document.contains(r))return e("Placeholder for script \n"+n.outerHTML+"\n was detached from document.","Script will not be executed."),null;var c=this.settings.bl

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:02 UTC	631	OUT	GET /beacon.min.js/vcd15cbe7772f49c399c6a5babf22c1241717689176015 HTTP/1.1 Host: static.cloudflareinsights.com Connection: keep-alive Origin: https://www.cloudflare.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:02 UTC	373	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:02 GMT Content-Type: text/javascript;charset=UTF-8 Content-Length: 19948 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=86400 ETag: W/"2024.6.1" Last-Modified: Thu, 06 Jun 2024 15:52:56 GMT Cross-Origin-Resource-Policy: cross-origin Server: cloudflare CF-RAY: 921e84eaeb496a5b-EWR
2025-03-17 18:23:02 UTC	996	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 33 34 33 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 6e 3d 30 3b 6e 3c 32 35 36 3b 2b 2b 6e 29 74 5b 6e 5d 3d 28 6e 2b 32 35 36 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2e 73 75 62 73 74 72 28 31 29 3b 65 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 76 61 72 20 72 3d 6e 7c 7c 30 2c 69 3d 74 3b 72 65 74 75 72 6e 5b 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 69 5b 65 5b 72 2b 2b 5d 5d 2c 22 2d 22 2c 69 5b 65 5b 72 2b Data Ascii: !function(){var e={343:function(e){"use strict";for(var t=[],n=0;n<256;++n)t[n]=(n+256).toString(16).substr(1);e.exports=function(e,n){var r=n\|\|0,i=t;return[i[e[r++]],i[e[r++]],i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r++]],i[e[r++]],"-",i[e[r+
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 3b 69 66 28 61 5b 36 5d 3d 31 35 26 61 5b 36 5d 7c 36 34 2c 61 5b 38 5d 3d 36 33 26 61 5b 38 5d 7c 31 32 38 2c 74 29 66 6f 72 28 76 61 72 20 63 3d 30 3b 63 3c 31 36 3b 2b 2b 63 29 74 5b 6f 2b 63 5d 3d 61 5b 63 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 69 28 61 29 7d 7d 2c 31 36 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 68 69 73 26 26 74 68 69 73 2e 5f 5f 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 3d 31 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 Data Ascii: ;if(a[6]=15&a[6]\|64,a[8]=63&a[8]\|128,t)for(var c=0;c<16;++c)t[o+c]=a[c];return t\|\|i(a)}},168:function(e,t,n){"use strict";var r=this&&this.__assign\|\|function(){return r=Object.assign\|\|function(e){for(var t,n=1,r=arguments.length;n<r;n++)for(var i in t=arg
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 72 63 68 50 61 72 61 6d 73 29 7b 76 61 72 20 79 3d 6e 65 77 20 55 52 4c 53 65 61 72 63 68 50 61 72 61 6d 73 28 67 2e 72 65 70 6c 61 63 65 28 2f 5e 5b 5e 5c 3f 5d 2b 5c 3f 3f 2f 2c 22 22 29 29 2c 68 3d 79 2e 67 65 74 28 22 74 6f 6b 65 6e 22 29 3b 68 26 26 28 70 2e 74 6f 6b 65 6e 3d 68 29 3b 76 61 72 20 54 3d 79 2e 67 65 74 28 22 73 70 61 22 29 3b 70 2e 73 70 61 3d 6e 75 6c 6c 3d 3d 3d 54 7c 7c 22 74 72 75 65 22 3d 3d 3d 54 7d 7d 70 26 26 22 6d 75 6c 74 69 22 21 3d 3d 70 2e 6c 6f 61 64 26 26 28 70 2e 6c 6f 61 64 3d 22 73 69 6e 67 6c 65 22 29 2c 77 69 6e 64 6f 77 2e 5f 5f 63 66 42 65 61 63 6f 6e 3d 70 7d 69 66 28 73 26 26 70 26 26 70 2e 74 6f 6b 65 6e 29 7b 76 61 72 20 77 2c 53 2c 62 3d 21 31 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 Data Ascii: rchParams){var y=new URLSearchParams(g.replace(/^[^\?]+\??/,"")),h=y.get("token");h&&(p.token=h);var T=y.get("spa");p.spa=null===T\|\|"true"===T}}p&&"multi"!==p.load&&(p.load="single"),window.__cfBeacon=p}if(s&&p&&p.token){var w,S,b=!1;document.addEventList
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 2e 74 69 6d 69 6e 67 73 56 32 3d 7b 7d 2c 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 3d 32 2c 64 2e 64 74 3d 6d 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 2c 64 65 6c 65 74 65 20 64 2e 74 69 6d 69 6e 67 73 2c 74 28 6d 5b 30 5d 2c 64 2e 74 69 6d 69 6e 67 73 56 32 29 29 7d 31 3d 3d 3d 64 2e 76 65 72 73 69 6f 6e 73 2e 74 69 6d 69 6e 67 73 26 26 74 28 63 2c 64 2e 74 69 6d 69 6e 67 73 29 2c 74 28 75 2c 64 2e 6d 65 6d 6f 72 79 29 7d 65 6c 73 65 20 4f 28 64 29 3b 72 65 74 75 72 6e 20 64 2e 66 69 72 73 74 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 70 61 69 6e 74 22 29 2c 64 2e 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 3d 6b 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 29 2c 70 26 26 28 70 2e 69 63 Data Ascii: .timingsV2={},d.versions.timings=2,d.dt=m[0].deliveryType,delete d.timings,t(m[0],d.timingsV2))}1===d.versions.timings&&t(c,d.timings),t(u,d.memory)}else O(d);return d.firstPaint=k("first-paint"),d.firstContentfulPaint=k("first-contentful-paint"),p&&(p.ic
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 65 72 65 64 3a 21 30 7d 7d 3b 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 3f 52 28 29 3a 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 73 65 74 54 69 6d 65 6f 75 74 28 52 29 7d 29 29 3b 76 61 72 20 41 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4c 26 26 30 3d 3d 3d 76 2e 66 69 6c 74 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 69 64 3d 3d 3d 6c 7d 29 29 2e 6c 65 6e 67 74 68 7d 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 2e 70 75 73 68 28 7b 69 64 3a 6c 2c 75 72 6c 3a 65 2c 74 73 3a 28 6e 65 77 20 44 61 74 65 29 2e 67 65 74 54 69 6d 65 Data Ascii: ered:!0}};"complete"===window.document.readyState?R():window.addEventListener("load",(function(){window.setTimeout(R)}));var A=function(){return L&&0===v.filter((function(e){return e.id===l})).length},_=function(e){v.push({id:l,url:e,ts:(new Date).getTime
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 72 63 65 4c 6f 61 64 54 69 6d 65 2c 45 2e 6c 63 70 2e 65 72 64 3d 63 2e 65 6c 65 6d 65 6e 74 52 65 6e 64 65 72 44 65 6c 61 79 2c 45 2e 6c 63 70 2e 69 74 3d 6e 75 6c 6c 3d 3d 3d 28 69 3d 63 2e 6c 63 70 52 65 73 6f 75 72 63 65 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 69 3f 76 6f 69 64 20 30 3a 69 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 2c 45 2e 6c 63 70 2e 66 70 3d 6e 75 6c 6c 3d 3d 3d 28 61 3d 6e 75 6c 6c 3d 3d 3d 28 6f 3d 63 2e 6c 63 70 45 6e 74 72 79 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 6f 3f 76 6f 69 64 20 30 3a 6f 2e 65 6c 65 6d 65 6e 74 29 7c 7c 76 6f 69 64 20 30 3d 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 66 65 74 63 68 70 72 69 6f 72 69 74 79 22 29 29 3b 62 72 65 61 6b 3b 63 61 73 65 22 49 4e 50 22 Data Ascii: rceLoadTime,E.lcp.erd=c.elementRenderDelay,E.lcp.it=null===(i=c.lcpResourceEntry)\|\|void 0===i?void 0:i.initiatorType,E.lcp.fp=null===(a=null===(o=c.lcpEntry)\|\|void 0===o?void 0:o.element)\|\|void 0===a?void 0:a.getAttribute("fetchpriority"));break;case"INP"
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 64 65 64 42 6f 64 79 53 69 7a 65 26 26 28 72 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 3d 6e 5b 30 5d 2e 64 65 63 6f 64 65 64 42 6f 64 79 53 69 7a 65 29 2c 65 2e 64 74 3d 6e 5b 30 5d 2e 64 65 6c 69 76 65 72 79 54 79 70 65 29 2c 74 28 72 2c 65 2e 74 69 6d 69 6e 67 73 56 32 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 65 29 7b 76 61 72 20 74 3b 69 66 28 22 66 69 72 73 74 2d 63 6f 6e 74 65 6e 74 66 75 6c 2d 70 61 69 6e 74 22 3d 3d 3d 65 26 26 45 2e 66 63 70 26 26 45 2e 66 63 70 2e 76 61 6c 75 65 29 72 65 74 75 72 6e 20 45 2e 66 63 70 2e 76 61 6c 75 65 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 73 2e 67 65 74 45 6e 74 72 69 65 73 42 79 54 79 70 65 29 7b 76 61 72 20 6e 3d 6e 75 6c 6c 3d 3d 3d 28 74 3d 73 2e 67 65 74 45 6e 74 72 69 Data Ascii: dedBodySize&&(r.decodedBodySize=n[0].decodedBodySize),e.dt=n[0].deliveryType),t(r,e.timingsV2)}}function k(e){var t;if("first-contentful-paint"===e&&E.fcp&&E.fcp.value)return E.fcp.value;if("function"==typeof s.getEntriesByType){var n=null===(t=s.getEntri
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 76 65 6e 74 54 79 70 65 3d 7b 7d 29 29 5b 72 2e 4c 6f 61 64 3d 31 5d 3d 22 4c 6f 61 64 22 2c 72 5b 72 2e 41 64 64 69 74 69 6f 6e 61 6c 3d 32 5d 3d 22 41 64 64 69 74 69 6f 6e 61 6c 22 2c 72 5b 72 2e 57 65 62 56 69 74 61 6c 73 56 32 3d 33 5d 3d 22 57 65 62 56 69 74 61 6c 73 56 32 22 2c 28 6e 3d 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 7c 7c 28 74 2e 46 65 74 63 68 50 72 69 6f 72 69 74 79 3d 7b 7d 29 29 2e 48 69 67 68 3d 22 68 69 67 68 22 2c 6e 2e 4c 6f 77 3d 22 6c 6f 77 22 2c 6e 2e 41 75 74 6f 3d 22 61 75 74 6f 22 7d 2c 31 30 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 Data Ascii: ventType={}))[r.Load=1]="Load",r[r.Additional=2]="Additional",r[r.WebVitalsV2=3]="WebVitalsV2",(n=t.FetchPriority\|\|(t.FetchPriority={})).High="high",n.Low="low",n.Auto="auto"},104:function(e,t){!function(e){"use strict";var t,n,r,i,o,a=function(){return w
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 30 3f 72 3d 22 70 72 65 72 65 6e 64 65 72 22 3a 64 6f 63 75 6d 65 6e 74 2e 77 61 73 44 69 73 63 61 72 64 65 64 3f 72 3d 22 72 65 73 74 6f 72 65 22 3a 6e 2e 74 79 70 65 26 26 28 72 3d 6e 2e 74 79 70 65 2e 72 65 70 6c 61 63 65 28 2f 5f 2f 67 2c 22 2d 22 29 29 29 2c 7b 6e 61 6d 65 3a 65 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 3d 3d 3d 74 3f 2d 31 3a 74 2c 72 61 74 69 6e 67 3a 22 67 6f 6f 64 22 2c 64 65 6c 74 61 3a 30 2c 65 6e 74 72 69 65 73 3a 5b 5d 2c 69 64 3a 22 76 33 2d 22 2e 63 6f 6e 63 61 74 28 44 61 74 65 2e 6e 6f 77 28 29 2c 22 2d 22 29 2e 63 6f 6e 63 61 74 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 38 39 39 39 39 39 39 39 39 39 39 39 39 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2b 31 65 31 32 29 2c 6e 61 76 69 67 61 74 69 6f 6e 54 79 70 65 3a 72 7d 7d 2c Data Ascii: 0?r="prerender":document.wasDiscarded?r="restore":n.type&&(r=n.type.replace(/_/g,"-"))),{name:e,value:void 0===t?-1:t,rating:"good",delta:0,entries:[],id:"v3-".concat(Date.now(),"-").concat(Math.floor(8999999999999*Math.random())+1e12),navigationType:r}},
2025-03-17 18:23:02 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 2c 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 70 72 65 72 65 6e 64 65 72 69 6e 67 63 68 61 6e 67 65 22 2c 62 2c 21 30 29 7d 2c 43 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 3c 30 26 26 28 77 3d 53 28 29 2c 45 28 29 2c 6c 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 65 74 54 69 6d 65 6f 75 74 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 3d 53 28 29 2c 45 28 29 7d 29 2c 30 29 7d 29 29 29 2c 7b 67 65 74 20 66 69 72 73 74 48 69 64 64 65 6e 54 69 6d 65 28 29 7b 72 65 74 75 72 6e 20 77 7d 7d 7d 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 64 6f 63 75 6d 65 6e 74 2e 70 Data Ascii: function(){removeEventListener("visibilitychange",b,!0),removeEventListener("prerenderingchange",b,!0)},C=function(){return w<0&&(w=S(),E(),l((function(){setTimeout((function(){w=S(),E()}),0)}))),{get firstHiddenTime(){return w}}},P=function(e){document.p

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	685	OUT	GET /img/learning/security/threats/phishing-attack/diagram-phishing-attack.png HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:03 UTC	964	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Type: image/png Content-Length: 34038 Connection: close Accept-Ranges: bytes Cache-Control: public, max-age=0, must-revalidate ETag: "f881ce0909c7585c5f12986f7499f9db" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B%2FAb0rT8%2FMthP3fxFyanax7XHaP6QHJaVt7DMwWOOKmykgYTaDJLzHbwAv9ml%2Bg6uAiBIkHHSpv4klG%2Fu6hrNcRbaPmU%2BmxU40jmbrrzgBxxR7yHLTYPWAIVXG%2BJsQ1wdYszhg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84ecbb9fb731-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:03 UTC	405	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 08 73 00 00 04 68 08 03 00 00 00 bb 00 fa da 00 00 01 b6 50 4c 54 45 ff ff ff 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 8a c5 e3 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 71 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 f0 f0 df df e0 c5 c4 c6 be bd bf ab ac ae 99 9c 9e 9f a1 a3 cb ca cb f7 f8 f8 ff Data Ascii: PNGIHDRshPLTEqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqq
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: e7 e8 8d 8b 8c b6 b3 b4 de dc dc ca c7 c7 7e 7c 7c 88 86 86 fd fd fe f5 f4 f4 dc db dc c9 c7 c6 a6 a3 a3 86 84 84 f5 f4 f4 71 71 71 71 71 71 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 e6 e8 e9 54 2b 19 33 00 00 00 92 74 52 4e 53 00 bb ff 44 22 77 88 dd ee 11 66 99 aa cc 55 33 20 40 50 80 60 90 e0 ff 10 a0 30 f0 d0 70 b0 c0 20 70 c0 a0 60 30 80 b0 90 d0 10 f0 e0 40 50 40 30 60 80 c0 ff f0 b0 50 20 e0 a0 10 d0 90 ff ff ff ff ff ff ff ff ff 70 ff ff ff ff ff 40 a0 d0 ff f0 c0 60 ff 10 b0 30 e0 ff 20 80 50 70 90 ff ff ff ff ff ff ff ff ff ff ff ff c4 f3 ff 88 98 f8 fd ff ff 3d b2 ff ff ff ff ff ff fc 2e 88 e6 f3 ff ff ff ff ff dc d8 97 40 ff 30 c0 20 80 10 60 90 e1 90 d0 0d 00 00 82 5d 49 44 41 54 78 01 ec d6 05 01 00 30 0c 00 a0 Data Ascii: ~\|\|qqqqqqT+3tRNSD"wfU3 @P`0p p`0@P@0`P p@`0 Pp=.@0 `]IDATx0
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: dc 39 46 f7 de 0e 9e 21 c7 01 51 27 68 be 2b bb 72 08 52 ab eb da de d6 39 44 44 44 a4 8c d0 05 67 3e 16 3e cd f7 81 73 9a 57 68 76 ac 6e 9d a3 64 58 ec 43 9f 69 fc d2 39 68 6d 61 40 dc 09 9c 93 af 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 04 ab dd 64 f0 f3 15 e1 30 7f 1b 0c 54 83 0d 60 5f f6 1c 75 0e db ea 36 b3 b2 70 ea 5e ee 1c 63 8d 0a 02 82 4e 30 51 b9 2d 10 a6 56 d7 b5 a9 73 bc 89 88 88 c8 0a 53 fc 24 8b 67 60 d9 be 0f 76 07 18 7d 37 db a0 a9 30 03 07 df ec d6 39 6c 00 f6 da 4d 3c 7f ee 3e fd 7a 0f a9 3b 1f 06 b7 2a 0a 08 3a 41 f1 0c fc c3 9e 5d e0 48 12 02 00 14 a5 dd 5d a8 f6 fb 9f 72 dd 97 11 32 30 fa 5e 3c 55 58 8c 9f 30 e8 75 c3 ef 84 48 cd fa 4b ea 6c 9a 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3e 8c e5 6a bd f9 Data Ascii: 9F!Q'h+rR9DDDg>>sWhvndXCi9hma@Vsd0T`_u6p^cN0Q-VsS$g`v}709lM<>z;*:A]H]r20^<UX0uHKl>j
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 28 ed f7 73 ac 73 0e 9b de d0 00 dd 57 59 63 1a 29 e0 e8 1c 84 d0 39 e8 1c e4 69 9c 11 e7 74 88 68 c3 ee e5 1d 71 3e 64 6b f8 6d bf d2 39 52 00 63 c5 62 e7 b8 f9 3a 2d 0d df 6d 71 d1 ea 69 e7 b0 e9 0d 17 dd 68 80 ce 34 2a 01 68 64 24 9d 83 10 3a 07 9d 83 3c c4 1e b3 9c de 8e 3b b1 9c 5f df 31 cf 51 b6 86 de 3e 91 bd 5f fe 3e 87 2f c9 b1 cc 39 2a 00 99 9f 1b 7f de 8a af 8e 3a 87 4d 6f 70 70 97 7f 03 f6 79 2b 76 24 9d 83 10 3a 07 9d 83 3c cc 19 cb f8 78 7b fd 73 96 2b bb f3 f1 d7 7e e9 c1 6d 3e 57 b6 ee e4 93 4c 6b e8 d2 2d eb 06 4f d0 16 0b 9d 23 03 d0 7e 9d be 74 68 fd 53 5d 1b 00 85 c4 ab ad 73 4c a7 37 e4 40 3d 7d cb 24 73 c3 93 6d 33 6d d4 8c a4 73 10 42 e7 a0 73 90 47 d8 e3 d9 1c 65 6b 64 05 46 96 3b 87 62 a4 6e a3 ce e1 69 86 7a 33 b7 c8 24 5e 6d 9d Data Ascii: (ssWYc)9ithq>dkm9Rcb:-mqih4hd$:<;_1Q>_>/9:Moppy+v$:<x{s+~m>WLk-O#~thS]sL7@=}$sm3msBsGekdF;bniz3$^m
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 25 3f db 5e e3 ad ae 7e 58 9d 1d 5f ec f3 56 bb a4 2b a8 ff ac 2a 76 db 20 00 85 cd 11 b1 b3 41 f2 fd 49 67 31 e9 ad 63 93 68 0e 59 60 1a dd e0 b9 ec c6 0e b7 9d 1e 9c 58 3d 9c 9c f3 16 6b db a4 25 a8 df 56 95 7b a8 13 80 b2 e6 08 cb df ac 4c b0 9e 26 a4 6f 57 02 68 0e 49 50 32 46 cb 24 df 5a aa b4 16 c7 b1 25 c8 54 c7 8e 9e d1 01 77 55 0f dc 10 80 b2 e6 88 48 1f 3f 44 13 ac a7 88 f4 6f 8a a1 39 c0 e7 0f 65 85 a2 16 c9 71 75 62 49 b8 fc 85 e8 d0 dc 7d d5 0b 35 02 50 d5 1c 61 f9 31 8b 10 eb 23 2c 9d 09 01 34 07 f8 fc a1 ac 90 f3 7f 72 9c fe b0 24 1d 22 3a f4 f6 f3 3d 09 ee eb ea a2 a6 56 7d f3 48 00 8a 9a 23 22 5b 0c e2 8f f6 10 91 7e 20 13 42 73 80 8c b2 31 72 25 df 27 c7 fe b1 25 ed f2 17 a2 43 67 ef d3 1c 3f 49 9d a7 ea 1f ae 09 40 4d 73 04 a5 83 81 26 Data Ascii: %?^~X_V+*v AIg1chY`X=k%V{L&oWhIP2F$Z%TwUH?Do9equbI}5Pa1#,4r$":=V}H#"[~ Bs1r%'%Cg?I@Ms&
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 8a 68 38 c5 3e a5 c2 51 22 34 87 07 30 40 8a 31 52 fe e1 47 9f e5 1c 96 6c 73 1c f0 77 3b 04 fa 36 87 f3 e8 b0 d7 72 a0 39 10 1d 2a 9a 43 c1 fb 91 68 70 2a f4 66 4a fc 7e 34 87 4b 60 d6 f0 b3 b2 2f 9e ad 1c 59 12 fe 22 9a 43 62 88 f4 0e fc e9 55 b2 39 1c bd 99 b5 ff a8 5c 73 34 ee c0 e7 fe e3 3f d5 45 87 f2 e6 50 af fb f2 73 34 07 2c 18 be 56 2a f8 61 0b a9 e5 56 73 1c f1 0f 55 f0 a7 3b e9 e6 b0 4b 42 7e 2d 87 64 73 5c 57 41 2b ce a3 03 cd 81 e6 c0 cd 8a 4f cd a1 39 c0 97 cd 61 0f 69 c8 ae e5 40 73 20 3a 34 6d 0e dc ad a8 87 9b 15 dc ae 28 68 0e f1 58 f6 bf aa a0 7d 73 d0 cf 66 74 5c 4b ac e5 78 22 34 07 a2 c3 b7 33 a4 68 0e c0 cd 8a 50 2a e8 df 1c 36 fd 9b 03 cd 61 7f 7a 45 b8 ef bb 96 a3 5a 7b 46 73 a0 39 7c f1 56 56 bd 28 9a 43 02 6e 56 70 bb 82 e6 00 Data Ascii: h8>Q"40@1RGlsw;6r9ChpfJ~4K`/Y"CbU9\s4?EPs4,VaVsU;KB~-ds\WA+O9ai@s :4m(hX}sft\Kx"43hP6azEZ{Fs9\|VV(CnVp
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 38 e8 70 eb 98 63 8b f4 82 e6 b0 df be 4a a8 ff 6c 90 04 fb e5 2d 9a 03 d4 35 07 25 bb 1c 3b 04 99 5b a8 4d 98 09 53 68 0e 24 87 c4 20 85 50 58 98 2b 19 de c9 cc 88 e2 19 68 ac 24 eb c1 14 e9 2f b7 8e 39 16 49 43 68 8e 57 72 db 13 9a 03 94 37 87 dd 00 21 97 97 73 74 6e 99 08 13 02 68 8e 31 53 28 0d 32 4d 91 27 5b 3a 97 9d f7 a2 37 cc 32 09 83 4e 94 98 a4 cc 76 45 fe e9 8a cc a3 95 55 d2 0f 9a a3 a6 a2 0a 1a 0f 68 0e 50 dc 1c 51 26 24 a2 6a 9a 23 d8 39 14 a6 09 cd 31 66 e6 8c 81 94 66 d2 d4 a2 b0 60 66 8a 86 2a f3 d9 99 3c b5 5a c8 0e f8 cb ca a4 cc 0a ff 70 7a 62 0d e1 88 e3 98 43 43 f6 07 e8 55 a8 bf a2 39 40 6d 73 50 8c 09 21 0f 9a 23 c5 84 30 9a 63 cc 94 87 28 01 71 da 21 a4 17 cc d9 79 c3 55 c5 cc dc 4c 99 da 14 06 09 0e 21 43 ca 6c 6f ba 30 46 7a bc Data Ascii: 8pcJl-5%;[MSh$ PX+h$/9IChWr7!stnh1S(2M'[:72NvEUhPQ&$j#91ff`f*<ZpzbCCU9@msP!#0c(q!yUL!Clo0Fz
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 5d 1c a9 00 00 cd 71 8d a7 e7 64 4c 2b 11 9a 63 72 c8 8e 5a 4b 01 00 9a e3 6a 8b 4f de ca 41 73 c0 df d5 22 8b 65 c2 01 80 e6 18 cb 6c 9d 8c e3 b0 91 cb d0 1c 48 b3 63 63 be be ba ea 9c 00 00 cd 31 9a cd 2a 19 c1 7e 29 43 d0 1c 28 bf 76 77 b4 79 91 0a 00 d0 1c 23 db 1d 92 6b 6d 37 42 73 20 a6 3b da 2f 39 df a0 37 00 d0 1c b7 b2 5c 27 d7 38 cc 24 12 cd 81 b4 ab ac f9 32 da a3 7a 01 00 9a e3 86 36 8b 7d 12 6b 3d 93 eb d0 1c 28 0b b5 8d f9 b7 ea a3 7a 27 03 00 00 cd 11 5b 1d 71 b3 8e c3 5c 46 41 73 c0 79 cd ff 49 79 b4 56 0b 2f 11 00 80 e6 88 b4 7c 4e 86 da ce 24 0e cd 01 0d 1f 0b 71 be 50 6b cd a7 68 6c ae 5d 19 9c bb e4 ad 17 00 a0 39 6e 67 b7 dd 27 97 5b bf 3c 49 2c 9a 03 6a 4e ea 3c 2b 25 c4 f9 4e 2b 6b 6f d5 1a 47 cd fc b9 2f fe b6 cc e3 05 00 68 8e 9b Data Ascii: ]qdL+crZKjOAs"elHcc1*~)C(vwy#km7Bs ;/97\'8$2z6}k=(z'[q\FAsyIyV/\|N$qPkhl]9ng'[<I,jN<+%N+koG/h
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 c0 10 37 87 f2 9b 01 70 8e 88 a1 ff 15 ef 02 99 03 40 3f fe a5 5d 1c ae f1 4d 27 73 fc 3d 00 a6 b8 19 1b 8b 6b 17 be c4 aa bc 22 bf eb 75 30 c6 77 b3 cc f1 d7 00 a8 b1 ea cb 46 1f ab 2a 73 fc 1e f4 71 37 fe 35 99 03 80 25 56 73 2b 87 fc 9e d9 0a d4 b8 eb fa c6 85 b9 da 5e fa f3 32 07 80 e1 ca 18 37 87 e7 ef 06 cd 4d 3f bf 0b 5e 76 88 7f 5c 1b 19 b9 ee 97 fe 88 cc 01 40 8d 9b ae 35 5a 79 e0 d3 9a 3e 24 a7 b8 19 bb 46 16 38 7f ac b5 f3 1f 9b 39 00 0c 57 ae b1 ea cb 43 b9 e9 c3 67 e6 e0 79 6c d4 61 f7 b1 d6 ba 3f 2b 73 00 18 ae 9c 1b a3 95 87 72 d3 87 cf 2c c9 be c6 87 c2 9a 5b 4b 32 c7 9f 0a 30 5c e9 bb 97 9a f8 cf 37 7d 48 96 b8 99 4a ff fd df 7f 5d 63 ab bd b4 3a d6 21 56 b5 96 9d 63 3d c4 cd 54 af cd cc 31 ec 36 cc cc f5 12 ff d7 d5 79 Data Ascii: 7p@?]M's=k"u0wF*sq75%Vs+^27M?^v\@5Zy>$F89WCgyla?+sr,[K20\7}HJ]c:!Vc=T16y
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 37 87 7a 2c ab c6 d2 75 ad b9 4b 5d 03 42 b7 0b 07 f5 1c ab a1 f6 cd 02 3d 75 39 7b f7 f7 37 5c 6a fd d4 bd b2 00 86 2b 63 69 67 8e 76 cb 6e 37 fd af ca 1c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 63 ef 5e d6 93 68 ba 36 8e af 8b f9 77 0e 1a 4d 34 31 09 20 ab 25 6c c2 ae a1 03 05 c3 4c 18 69 e2 93 3c ea ec 8b ef 7e 73 ee af 5a 80 a0 49 ba a0 2b 5a 74 fe bf 63 e0 ea eb a6 6a d5 ba 4f 8a d5 d7 56 b5 78 22 00 00 00 de 95 ce ea 4d 5d d5 ac 9f 95 04 00 00 c0 9b 6a bd a6 b7 8b ea 55 01 00 00 f0 e0 e4 34 d2 fb 44 f5 92 64 03 00 00 50 Data Ascii: 7z,uK]B=u9{7\j+cigvn7c^h6wM41 %lLi<~sZI+ZtcjOVx"M]jU4DdP

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	840	OUT	GET /webpack-runtime-9510a2e22c3debbfcadd.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:03 UTC	901	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close ETag: W/"a2c50d49fa3dc40df6d0fe5fea830265" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Q6j9v%2B9Om2UxLqVY204oMfgwddVXka0ZjbRo6aAv0%2B77fKz5oVS9jpO9E5PYHvru9zSpOe1RGygxHPMi4ITORRAKFxMzpIbIOwiD7XJvzY16VsEs3pfop89AjIrIjw5bveZew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84ee9add440e-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:03 UTC	468	IN	Data Raw: 31 38 65 33 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 6f 2c 63 3d 7b 7d 2c 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 73 28 65 29 7b 76 61 72 20 74 3d 61 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 74 29 72 65 74 75 72 6e 20 74 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 6e 3d 61 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 63 5b 65 5d 2e 63 61 6c 6c 28 6e 2e 65 78 70 6f 72 74 73 2c 6e 2c 6e 2e 65 78 70 6f 72 74 73 2c 73 29 2c 6e 2e 6c 6f 61 64 65 64 3d 21 30 2c 6e 2e 65 78 70 6f 72 74 73 7d 73 2e 6d 3d 63 2c 65 3d 5b 5d 2c 73 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 2c 6f 29 7b 69 66 28 21 6e 29 7b 76 Data Ascii: 18e3!function(){"use strict";var e,t,n,r,o,c={},a={};function s(e){var t=a[e];if(void 0!==t)return t.exports;var n=a[e]={id:e,loaded:!1,exports:{}};return c[e].call(n.exports,n,n.exports,s),n.loaded=!0,n.exports}s.m=c,e=[],s.O=function(t,n,r,o){if(!n){v
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 69 63 65 28 69 2d 2d 2c 31 29 3b 76 61 72 20 64 3d 72 28 29 3b 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 74 3d 64 29 7d 7d 72 65 74 75 72 6e 20 74 7d 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 69 3d 65 2e 6c 65 6e 67 74 68 3b 69 3e 30 26 26 65 5b 69 2d 31 5d 5b 32 5d 3e 6f 3b 69 2d 2d 29 65 5b 69 5d 3d 65 5b 69 2d 31 5d 3b 65 5b 69 5d 3d 5b 6e 2c 72 2c 6f 5d 7d 2c 73 2e 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 7d 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 73 2e 64 28 74 2c 7b 61 3a 74 7d 29 2c 74 7d 2c 6e 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f Data Ascii: ice(i--,1);var d=r();void 0!==d&&(t=d)}}return t}o=o\|\|0;for(var i=e.length;i>0&&e[i-1][2]>o;i--)e[i]=e[i-1];e[i]=[n,r,o]},s.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return s.d(t,{a:t}),t},n=Object.getPrototypeO
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 2c 32 38 35 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 64 65 6d 6f 2d 70 61 67 65 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 61 72 69 61 2d 6c 61 62 65 6c 73 2d 74 73 78 22 2c 32 39 37 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 70 61 67 65 2d 70 61 67 65 2d 74 65 6d 70 6c 61 74 65 2d 74 73 78 22 2c 33 30 39 3a 22 38 64 32 36 37 37 38 34 38 61 64 63 31 38 36 61 37 66 61 34 66 38 33 38 65 61 66 38 61 34 36 30 31 33 35 61 32 32 66 34 22 2c 33 32 38 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d 2d 73 72 63 2d 63 6f 6d 70 6f 6e 65 6e 74 73 2d 72 65 73 6f 75 72 63 65 2d 68 75 62 2d 72 65 73 6f 75 72 63 65 2d 68 75 62 2d 74 73 78 22 2c 33 34 32 3a 22 63 6f 6d 70 6f 6e 65 6e 74 2d 2d Data Ascii: ,285:"component---src-components-demo-pages-aria-labels-aria-labels-tsx",297:"component---src-components-page-page-template-tsx",309:"8d2677848adc186a7fa4f838eaf8a460135a22f4",328:"component---src-components-resource-hub-resource-hub-tsx",342:"component--
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 66 64 64 63 65 34 36 64 30 64 64 37 66 33 22 2c 31 32 34 3a 22 33 31 36 33 37 64 38 61 62 38 62 31 35 34 38 37 65 34 63 31 22 2c 31 36 36 3a 22 36 64 35 32 39 31 64 33 34 37 33 35 32 65 32 62 65 65 62 38 22 2c 31 37 34 3a 22 32 34 32 37 37 32 65 66 31 30 64 38 64 31 36 31 61 65 32 34 22 2c 32 32 33 3a 22 31 65 62 32 30 30 36 35 34 37 34 36 65 31 33 66 30 32 34 33 22 2c 32 35 33 3a 22 39 30 34 38 34 64 62 34 36 30 32 64 34 30 31 64 39 34 63 61 22 2c 32 37 38 3a 22 63 64 39 64 34 34 30 39 39 31 31 35 65 30 32 30 37 35 34 62 22 2c 32 38 35 3a 22 39 35 66 61 34 32 64 39 36 36 32 62 34 35 64 30 31 61 34 37 22 2c 32 39 37 3a 22 63 37 65 63 32 62 39 32 62 61 34 33 62 32 32 30 61 64 32 64 22 2c 33 30 31 3a 22 36 39 32 34 36 30 66 61 31 32 32 65 37 30 61 37 63 63 Data Ascii: fddce46d0dd7f3",124:"31637d8ab8b15487e4c1",166:"6d5291d347352e2beeb8",174:"242772ef10d8d161ae24",223:"1eb200654746e13f0243",253:"90484db4602d401d94ca",278:"cd9d44099115e020754b",285:"95fa42d9662b45d01a47",297:"c7ec2b92ba43b220ad2d",301:"692460fa122e70a7cc
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 22 29 2c 69 3d 30 3b 69 3c 64 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 75 3d 64 5b 69 5d 3b 69 66 28 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 29 3d 3d 6f 2b 6e 29 7b 61 3d 75 3b 62 72 65 61 6b 7d 7d 61 7c 7c 28 66 3d 21 30 2c 28 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 29 2e 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 2c 61 2e 74 69 6d 65 6f 75 74 3d 31 32 30 2c 73 2e 6e 63 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 73 2e 6e 63 29 2c 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 77 65 62 70 61 63 6b 22 2c 6f 2b 6e Data Ascii: "),i=0;i<d.length;i++){var u=d[i];if(u.getAttribute("src")==e\|\|u.getAttribute("data-webpack")==o+n){a=u;break}}a\|\|(f=!0,(a=document.createElement("script")).charset="utf-8",a.timeout=120,s.nc&&a.setAttribute("nonce",s.nc),a.setAttribute("data-webpack",o+n
2025-03-17 18:23:03 UTC	435	IN	Data Raw: 2b 74 2c 74 29 7d 7d 2c 73 2e 4f 2e 6a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 3d 3d 3d 65 5b 74 5d 7d 3b 76 61 72 20 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 6f 2c 63 3d 6e 5b 30 5d 2c 61 3d 6e 5b 31 5d 2c 66 3d 6e 5b 32 5d 2c 64 3d 30 3b 69 66 28 63 2e 73 6f 6d 65 28 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 5b 74 5d 7d 29 29 29 7b 66 6f 72 28 72 20 69 6e 20 61 29 73 2e 6f 28 61 2c 72 29 26 26 28 73 2e 6d 5b 72 5d 3d 61 5b 72 5d 29 3b 69 66 28 66 29 76 61 72 20 69 3d 66 28 73 29 7d 66 6f 72 28 74 26 26 74 28 6e 29 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 6f 3d 63 5b 64 5d 2c 73 2e 6f 28 65 2c 6f 29 26 26 65 5b 6f 5d 26 26 65 5b 6f 5d 5b 30 5d 28 29 2c 65 5b 6f 5d 3d Data Ascii: +t,t)}},s.O.j=function(t){return 0===e[t]};var t=function(t,n){var r,o,c=n[0],a=n[1],f=n[2],d=0;if(c.some((function(t){return 0!==e[t]}))){for(r in a)s.o(a,r)&&(s.m[r]=a[r]);if(f)var i=f(s)}for(t&&t(n);d<c.length;d++)o=c[d],s.o(e,o)&&e[o]&&e[o][0](),e[o]=
2025-03-17 18:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	568	OUT	GET /turnstile/v0/api.js?render=explicit HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:03 UTC	386	IN	HTTP/1.1 302 Found Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 921e84eec8263453-EWR alt-svc: h3=":443"; ma=86400

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://blgwlnauto.com/kylefax/faxdocuments.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Windows Analysis Report
https://blgwlnauto.com/kylefax/faxdocuments.html

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	834	OUT	GET /framework-957a522640f43541ca6a.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:03 UTC	909	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close ETag: W/"d711fa5a10b8d800843871fd03aeef22" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2B4PG%2FOvsd%2BWZw8qMswRLR1UpN0uIQFWd5UVeLZe6v34jrTqa7fxBB%2FFTR9%2F44Dg9g5Ym7njUHtaH6pKNDKQaEsWjcxUn7nFJG9E8ciqSnpiDPY5dzFNtFemHYwujMIcm%2FBl5Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84eedfa90f3a-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:03 UTC	460	IN	Data Raw: 37 63 32 34 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 66 72 61 6d 65 77 6f 72 6b 2d 39 35 37 61 35 32 32 36 34 30 66 34 33 35 34 31 63 61 36 61 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 39 33 5d 2c 7b 32 36 39 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 3d 74 28 36 39 32 35 29 3b 66 75 6e 63 74 69 Data Ascii: 7c24/! For license information please see framework-957a522640f43541ca6a.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[593],{2694:function(e,n,t){"use strict";var r=t(6925);functi
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 72 6f 70 54 79 70 65 73 2e 63 68 65 63 6b 50 72 6f 70 54 79 70 65 73 28 29 20 74 6f 20 63 61 6c 6c 20 74 68 65 6d 2e 20 52 65 61 64 20 6d 6f 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 66 62 2e 6d 65 2f 75 73 65 2d 63 68 65 63 6b 2d 70 72 6f 70 2d 74 79 70 65 73 22 29 3b 74 68 72 6f 77 20 75 2e 6e 61 6d 65 3d 22 49 6e 76 61 72 69 61 6e 74 20 56 69 6f 6c 61 74 69 6f 6e 22 2c 75 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 65 2e 69 73 52 65 71 75 69 72 65 64 3d 65 3b 76 61 72 20 74 3d 7b 61 72 72 61 79 3a 65 2c 62 69 67 69 6e 74 3a 65 2c 62 6f 6f 6c 3a 65 2c 66 75 6e 63 3a 65 2c 6e 75 6d 62 65 72 3a 65 2c 6f 62 6a 65 63 74 3a 65 2c 73 74 72 69 6e 67 3a 65 2c 73 79 6d 62 6f 6c 3a 65 2c 61 6e 79 3a 65 2c 61 72 72 61 79 4f 66 3a 6e 2c 65 Data Ascii: ropTypes.checkPropTypes() to call them. Read more at http://fb.me/use-check-prop-types");throw u.name="Invariant Violation",u}}function n(){return e}e.isRequired=e;var t={array:e,bigint:e,bool:e,func:e,number:e,object:e,string:e,symbol:e,any:e,arrayOf:n,e
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 30 32 46 46 5c 75 30 33 37 30 2d 5c 75 30 33 37 44 5c 75 30 33 37 46 2d 5c 75 31 46 46 46 5c 75 32 30 30 43 2d 5c 75 32 30 30 44 5c 75 32 30 37 30 2d 5c 75 32 31 38 46 5c 75 32 43 30 30 2d 5c 75 32 46 45 46 5c 75 33 30 30 31 2d 5c 75 44 37 46 46 5c 75 46 39 30 30 2d 5c 75 46 44 43 46 5c 75 46 44 46 30 2d 5c 75 46 46 46 44 5c 2d 2e 30 2d 39 5c 75 30 30 42 37 5c 75 30 33 30 30 2d 5c 75 30 33 36 46 5c 75 32 30 33 46 2d 5c 75 32 30 34 30 5d 2a 24 2f 2c 70 3d 7b 7d 2c 6d 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 68 28 65 2c 6e 2c 74 2c 72 2c 6c 2c 61 2c 6f 29 7b 74 68 69 73 2e 61 63 63 65 70 74 73 42 6f 6f 6c 65 61 6e 73 3d 32 3d 3d 3d 6e 7c 7c 33 3d 3d 3d 6e 7c 7c 34 3d 3d 3d 6e 2c 74 68 69 73 2e 61 74 74 72 69 62 75 74 65 4e 61 6d 65 3d 72 2c 74 68 69 73 2e 61 Data Ascii: 02FF\u0370-\u037D\u037F-\u1FFF\u200C-\u200D\u2070-\u218F\u2C00-\u2FEF\u3001-\uD7FF\uF900-\uFDCF\uFDF0-\uFFFD\-.0-9\u00B7\u0300-\u036F\u203F-\u2040]*$/,p={},m={};function h(e,n,t,r,l,a,o){this.acceptsBooleans=2===n\|\|3===n\|\|4===n,this.attributeName=r,this.a
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 33 2c 21 30 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 63 6f 6c 73 22 2c 22 72 6f 77 73 22 2c 22 73 69 7a 65 22 2c 22 73 70 61 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 36 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 72 6f 77 53 70 61 6e 22 2c 22 73 74 61 72 74 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e Data Ascii: ].forEach((function(e){v[e]=new h(e,3,!0,e,null,!1,!1)})),["capture","download"].forEach((function(e){v[e]=new h(e,4,!1,e,null,!1,!1)})),["cols","rows","size","span"].forEach((function(e){v[e]=new h(e,6,!1,e,null,!1,!1)})),["rowSpan","start"].forEach((fun
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 61 62 69 63 2d 66 6f 72 6d 20 62 61 73 65 6c 69 6e 65 2d 73 68 69 66 74 20 63 61 70 2d 68 65 69 67 68 74 20 63 6c 69 70 2d 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 20 63 6f 6c 6f 72 2d 69 6e 74 65 72 70 6f 6c 61 74 69 6f 6e 2d 66 69 6c 74 65 72 73 20 63 6f 6c 6f 72 2d 70 72 6f 66 69 6c 65 20 63 6f 6c 6f 72 2d 72 65 6e 64 65 72 69 6e 67 20 64 6f 6d 69 6e 61 6e 74 2d 62 61 73 65 6c 69 6e 65 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 20 66 69 6c 6c 2d 6f 70 61 63 69 74 79 20 66 69 6c 6c 2d 72 75 6c 65 20 66 6c 6f 6f 64 2d 63 6f 6c 6f 72 20 66 6c 6f 6f 64 2d 6f 70 61 63 69 74 79 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 20 66 6f 6e 74 2d 73 69 7a 65 20 66 6f 6e 74 2d 73 69 7a 65 2d 61 64 6a 75 Data Ascii: abic-form baseline-shift cap-height clip-path clip-rule color-interpolation color-interpolation-filters color-profile color-rendering dominant-baseline enable-background fill-opacity fill-rule flood-color flood-opacity font-family font-size font-size-adju
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 67 2c 79 29 3b 76 5b 6e 5d 3d 6e 65 77 20 68 28 6e 2c 31 2c 21 31 2c 65 2c 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 58 4d 4c 2f 31 39 39 38 2f 6e 61 6d 65 73 70 61 63 65 22 2c 21 31 2c 21 31 29 7d 29 29 2c 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 63 72 6f 73 73 4f 72 69 67 69 6e 22 5d 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 5b 65 5d 3d 6e 65 77 20 68 28 65 2c 31 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 29 2c 76 2e 78 6c 69 6e 6b 48 72 65 66 3d 6e 65 77 20 68 28 22 78 6c 69 6e 6b 48 72 65 66 22 2c 31 2c 21 31 2c 22 78 6c 69 6e 6b 3a 68 72 65 66 22 2c 22 68 74 74 70 3a 2f 2f 77 Data Ascii: unction(e){var n=e.replace(g,y);v[n]=new h(n,1,!1,e,"http://www.w3.org/XML/1998/namespace",!1,!1)})),["tabIndex","crossOrigin"].forEach((function(e){v[e]=new h(e,1,!1,e.toLowerCase(),null,!1,!1)})),v.xlinkHref=new h("xlinkHref",1,!1,"xlink:href","http://w
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 61 63 65 3b 45 72 72 6f 72 2e 70 72 65 70 61 72 65 53 74 61 63 6b 54 72 61 63 65 3d 76 6f 69 64 20 30 3b 74 72 79 7b 69 66 28 6e 29 69 66 28 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 7d 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 22 70 72 6f 70 73 22 2c 7b 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 45 72 72 6f 72 28 29 7d 7d 29 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 52 65 66 6c 65 63 74 26 26 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 29 7b 74 72 79 7b 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 6e 2c 5b 5d 29 7d 63 61 74 63 68 28 73 29 7b 76 61 72 20 72 3d 73 7d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 Data Ascii: ace;Error.prepareStackTrace=void 0;try{if(n)if(n=function(){throw Error()},Object.defineProperty(n.prototype,"props",{set:function(){throw Error()}}),"object"==typeof Reflect&&Reflect.construct){try{Reflect.construct(n,[])}catch(s){var r=s}Reflect.constru
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 73 65 20 54 3a 72 65 74 75 72 6e 22 53 75 73 70 65 6e 73 65 4c 69 73 74 22 7d 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 29 73 77 69 74 63 68 28 65 2e 24 24 74 79 70 65 6f 66 29 7b 63 61 73 65 20 50 3a 72 65 74 75 72 6e 28 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 43 6f 6e 73 75 6d 65 72 22 3b 63 61 73 65 20 43 3a 72 65 74 75 72 6e 28 65 2e 5f 63 6f 6e 74 65 78 74 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 22 43 6f 6e 74 65 78 74 22 29 2b 22 2e 50 72 6f 76 69 64 65 72 22 3b 63 61 73 65 20 4e 3a 76 61 72 20 6e 3d 65 2e 72 65 6e 64 65 72 3b 72 65 74 75 72 6e 28 65 3d 65 2e 64 69 73 70 6c 61 79 4e 61 6d 65 29 7c 7c 28 65 3d 22 22 21 3d 3d 28 65 3d 6e 2e 64 69 73 70 6c 61 79 4e 61 6d 65 7c 7c 6e 2e Data Ascii: se T:return"SuspenseList"}if("object"==typeof e)switch(e.$$typeof){case P:return(e.displayName\|\|"Context")+".Consumer";case C:return(e._context.displayName\|\|"Context")+".Provider";case N:var n=e.render;return(e=e.displayName)\|\|(e=""!==(e=n.displayName\|\|n.
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 61 72 20 6e 3d 65 2e 74 79 70 65 3b 72 65 74 75 72 6e 28 65 3d 65 2e 6e 6f 64 65 4e 61 6d 65 29 26 26 22 69 6e 70 75 74 22 3d 3d 3d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 28 22 63 68 65 63 6b 62 6f 78 22 3d 3d 3d 6e 7c 7c 22 72 61 64 69 6f 22 3d 3d 3d 6e 29 7d 66 75 6e 63 74 69 6f 6e 20 51 28 65 29 7b 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 7c 7c 28 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 57 28 65 29 3f 22 63 68 65 63 6b 65 64 22 3a 22 76 61 6c 75 65 22 2c 74 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 29 2c 72 3d 22 22 2b 65 5b 6e 5d 3b 69 66 28 21 Data Ascii: ar n=e.type;return(e=e.nodeName)&&"input"===e.toLowerCase()&&("checkbox"===n\|\|"radio"===n)}function Q(e){e._valueTracker\|\|(e._valueTracker=function(e){var n=W(e)?"checked":"value",t=Object.getOwnPropertyDescriptor(e.constructor.prototype,n),r=""+e[n];if(!
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 74 79 70 65 3f 6e 75 6c 6c 21 3d 6e 2e 63 68 65 63 6b 65 64 3a 6e 75 6c 6c 21 3d 6e 2e 76 61 6c 75 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 6e 29 7b 6e 75 6c 6c 21 3d 28 6e 3d 6e 2e 63 68 65 63 6b 65 64 29 26 26 62 28 65 2c 22 63 68 65 63 6b 65 64 22 2c 6e 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 5a 28 65 2c 6e 29 7b 47 28 65 2c 6e 29 3b 76 61 72 20 74 3d 48 28 6e 2e 76 61 6c 75 65 29 2c 72 3d 6e 2e 74 79 70 65 3b 69 66 28 6e 75 6c 6c 21 3d 74 29 22 6e 75 6d 62 65 72 22 3d 3d 3d 72 3f 28 30 3d 3d 3d 74 26 26 22 22 3d 3d 3d 65 2e 76 61 6c 75 65 7c 7c 65 2e 76 61 6c 75 65 21 3d 74 29 26 26 28 65 2e 76 61 6c 75 65 3d 22 22 2b 74 29 3a 65 2e 76 61 6c 75 65 21 3d 3d 22 22 2b 74 26 26 28 65 2e 76 61 6c 75 65 3d 22 22 2b 74 29 3b 65 6c 73 65 20 69 66 28 Data Ascii: type?null!=n.checked:null!=n.value}}function G(e,n){null!=(n=n.checked)&&b(e,"checked",n,!1)}function Z(e,n){G(e,n);var t=H(n.value),r=n.type;if(null!=t)"number"===r?(0===t&&""===e.value\|\|e.value!=t)&&(e.value=""+t):e.value!==""+t&&(e.value=""+t);else if(

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	810	OUT	GET /public/vendor/onetrust/scripttemplates/otSDKStub.js HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:03 UTC	733	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Type: application/javascript Content-Length: 21230 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "c26259f649def56fbb3b494c9ae5b5a1" X-Robots-Tag: noindex Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rHqJ0qRT0A%2B3u4QN%2BoWjM%2Fd0VW%2F9%2FVPl8belycOBGrh%2BWMnt5BdJcDgfHFFtlHhjlwqX3nd%2B7H2yMTQpqx5r8G5%2BJjFQoQKADnt2MdE%2BeXEdW1E6xU9WjYt7tX8IPmSB2Q8zItU8Sg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84eec9e590c2-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:03 UTC	636	IN	Data Raw: 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 61 2c 6f 2c 70 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 6f 73 74 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 67 65 6e 56 65 6e 64 6f 72 73 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 76 65 6e 64 6f 72 73 53 65 72 76 69 63 65 44 61 74 61 3d 5b 5d 2c 74 68 69 73 2e 49 41 42 43 6f 6f 6b 69 65 56 61 6c 75 65 3d 22 22 2c 74 68 69 73 2e 6f 6e 65 54 72 75 73 74 49 41 42 43 6f 6f 6b 69 65 Data Ascii: var OneTrustStub=function(t){"use strict";var a,o,p=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this.optanonHostData=[],this.genVendorsData=[],this.vendorsServiceData=[],this.IABCookieValue="",this.oneTrustIABCookie
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 72 69 70 74 22 2c 74 68 69 73 2e 62 61 6e 6e 65 72 53 63 72 69 70 74 4e 61 6d 65 3d 22 6f 74 42 61 6e 6e 65 72 53 64 6b 2e 6a 73 22 2c 74 68 69 73 2e 6d 6f 62 69 6c 65 4f 6e 6c 69 6e 65 55 52 4c 3d 5b 5d 2c 74 68 69 73 2e 69 73 4d 69 67 72 61 74 65 64 55 52 4c 3d 21 31 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 43 43 54 49 44 3d 22 5b 5b 4f 6c 64 43 43 54 49 44 5d 5d 22 2c 74 68 69 73 2e 6d 69 67 72 61 74 65 64 44 6f 6d 61 69 6e 49 64 3d 22 5b 5b 4e 65 77 44 6f 6d 61 69 6e 49 64 5d 5d 22 2c 74 68 69 73 2e 75 73 65 72 4c 6f 63 61 74 69 6f 6e 3d 7b 63 6f 75 6e 74 72 79 3a 22 22 2c 73 74 61 74 65 3a 22 22 7d 7d 3b 28 6d 3d 67 3d 67 7c 7c 7b 7d 29 5b 6d 2e 44 61 79 73 3d 31 5d 3d 22 44 61 79 73 22 2c 6d 5b 6d 2e 57 65 65 6b 73 3d 37 5d 3d 22 57 65 65 6b 73 22 Data Ascii: ript",this.bannerScriptName="otBannerSdk.js",this.mobileOnlineURL=[],this.isMigratedURL=!1,this.migratedCCTID="[[OldCCTID]]",this.migratedDomainId="[[NewDomainId]]",this.userLocation={country:"",state:""}};(m=g=g\|\|{})[m.Days=1]="Days",m[m.Weeks=7]="Weeks"
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 6c 79 66 69 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 2c 6f 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3b 72 65 74 75 72 6e 20 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 69 66 28 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 6f 2e 61 70 70 6c 79 28 74 68 69 73 2c 5b 74 2c 65 5d 29 2c 22 73 74 79 6c 65 22 21 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7c 7c 65 7c 7c 74 68 69 73 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 73 74 79 6c 65 22 29 2c 22 73 74 79 6c 65 22 3d 3d 3d 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 26 26 65 29 7b 74 68 69 73 Data Ascii: lyfill=function(){var a=t,o=Element.prototype.setAttribute;return Element.prototype.setAttribute=function(t,e){if("style"!==t.toLowerCase()&&o.apply(this,[t,e]),"style"!==t.toLowerCase()\|\|e\|\|this.removeAttribute("style"),"style"===t.toLowerCase()&&e){this
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 2e 4c 4f 43 41 54 4f 52 5f 4e 41 4d 45 2b 22 5d 22 29 5b 30 5d 3b 74 26 26 74 2e 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 7d 2c 74 68 69 73 2e 65 78 65 63 75 74 65 47 70 70 41 70 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 74 3d 5b 5d 2c 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 65 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 65 5d 3b 76 61 72 20 69 3d 6e 75 6c 6c 3d 3d 28 69 3d 73 2e 77 69 6e 29 3f 76 6f 69 64 20 30 3a 69 2e 5f 5f 67 70 70 3b 69 66 28 69 2e 71 75 65 75 65 3d 69 2e 71 75 65 75 65 7c 7c 5b 5d 2c 69 2e 65 76 65 6e 74 73 3d 69 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 21 74 2e 6c 65 6e 67 74 68 7c 7c 31 3d 3d 3d 74 2e 6c 65 6e 67 74 68 26 26 22 71 75 Data Ascii: .LOCATOR_NAME+"]")[0];t&&t.parentElement.removeChild(t)},this.executeGppApi=function(){for(var t=[],e=0;e<arguments.length;e++)t[e]=arguments[e];var i=null==(i=s.win)?void 0:i.__gpp;if(i.queue=i.queue\|\|[],i.events=i.events\|\|[],!t.length\|\|1===t.length&&"qu
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 29 7b 73 2e 61 64 64 46 72 61 6d 65 28 74 29 7d 2c 35 29 29 2c 21 6e 7d 2c 74 68 69 73 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 69 2c 6e 3d 73 2e 77 69 6e 2e 5f 5f 67 70 70 3b 72 65 74 75 72 6e 20 6e 2e 65 76 65 6e 74 73 3d 6e 2e 65 76 65 6e 74 73 7c 7c 5b 5d 2c 6e 75 6c 6c 21 3d 28 69 3d 6e 29 26 26 69 2e 6c 61 73 74 49 64 7c 7c 28 6e 2e 6c 61 73 74 49 64 3d 30 29 2c 6e 2e 6c 61 73 74 49 64 2b 2b 2c 6e 2e 65 76 65 6e 74 73 2e 70 75 73 68 28 7b 69 64 3a 6e 2e 6c 61 73 74 49 64 2c 63 61 6c 6c 62 61 63 6b 3a 74 2c 70 61 72 61 6d 65 74 65 72 3a 65 7d 29 2c 7b 65 76 65 6e 74 4e 61 6d 65 3a 22 6c 69 73 74 65 6e 65 72 52 65 67 69 73 74 65 72 65 64 22 2c 6c 69 73 74 65 6e 65 72 49 64 3a 6e 2e 6c Data Ascii: ){s.addFrame(t)},5)),!n},this.addEventListener=function(t,e){var i,n=s.win.__gpp;return n.events=n.events\|\|[],null!=(i=n)&&i.lastId\|\|(n.lastId=0),n.lastId++,n.events.push({id:n.lastId,callback:t,parameter:e}),{eventName:"listenerRegistered",listenerId:n.l
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 6e 63 65 22 29 7c 7c 6e 75 6c 6c 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 66 65 74 63 68 42 61 6e 6e 65 72 53 44 4b 44 65 70 65 6e 64 65 6e 63 79 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 73 65 74 44 6f 6d 61 69 6e 44 61 74 61 46 69 6c 65 55 52 4c 28 29 2c 74 68 69 73 2e 63 72 6f 73 73 4f 72 69 67 69 6e 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 72 6f 73 73 6f 72 69 67 69 6e 22 29 7c 7c 6e 75 6c 6c 2c 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 3d 22 74 72 75 65 22 3d 3d 3d 70 2e 73 74 75 62 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 70 72 65 76 69 65 77 2d 6d 6f 64 65 22 29 2c 74 68 69 73 2e 6f 74 46 65 74 63 68 28 70 2e Data Ascii: nce")\|\|null},h.prototype.fetchBannerSDKDependency=function(){this.setDomainDataFileURL(),this.crossOrigin=p.stubScriptElement.getAttribute("crossorigin")\|\|null,this.previewMode="true"===p.stubScriptElement.getAttribute("data-preview-mode"),this.otFetch(p.
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 29 7c 7c 74 2e 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 3f 28 65 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 3b 22 29 5b 31 5d 2c 74 68 69 73 2e 73 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 65 2c 69 29 2c 74 68 69 73 2e 61 64 64 42 61 6e 6e 65 72 53 44 4b 53 63 72 69 70 74 28 74 29 29 3a 74 68 69 73 2e 67 65 74 47 65 6f 4c 6f 63 61 74 69 6f 6e 28 74 29 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 6e 64 6c 65 42 75 6c 6b 44 6f 6d 61 69 6e 4d 67 6d 74 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 77 69 6e 64 6f 77 2e 73 65 73 Data Ascii: .readCookieParam(p.optanonCookieName,p.geolocationCookiesParam))\|\|t.SkipGeolocation?(e=i.split(";")[0],i=i.split(";")[1],this.setGeoLocation(e,i),this.addBannerSDKScript(t)):this.getGeoLocation(t)},h.prototype.handleBulkDomainMgmt=function(t,e){window.ses
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 65 2c 6e 2c 61 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 21 31 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 6e 75 6c 6c 29 3b 76 61 72 20 6f 3d 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 26 26 77 69 6e 64 6f 77 2e 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 6f 74 50 72 65 76 69 65 77 44 61 74 61 22 29 3b 69 66 28 6e 65 77 20 52 65 67 45 78 70 28 22 5e 66 69 6c 65 3a 2f 2f 22 2c 22 69 22 29 2e 74 65 73 74 28 74 29 29 74 68 69 73 2e 6f 74 46 65 74 63 68 4f 66 66 6c 69 6e 65 46 69 6c 65 28 74 2c 69 29 3b 65 6c 73 65 20 69 66 28 30 3c 3d 74 2e 69 6e 64 65 78 4f 66 28 22 2f 63 6f 6e 73 65 6e 74 2f 22 29 26 26 74 68 69 73 2e 70 72 65 76 69 65 77 4d 6f 64 65 26 26 6f 29 7b 6f 3d 4a 53 4f 4e 2e 70 61 Data Ascii: e,n,a){void 0===e&&(e=!1),void 0===n&&(n=null);var o=window.sessionStorage&&window.sessionStorage.getItem("otPreviewData");if(new RegExp("^file://","i").test(t))this.otFetchOfflineFile(t,i);else if(0<=t.indexOf("/consent/")&&this.previewMode&&o){o=JSON.pa
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 6f 26 26 30 3c 6f 2e 6c 65 6e 67 74 68 3f 6f 5b 30 5d 3a 6e 75 6c 6c 3b 66 6f 72 28 76 61 72 20 73 3d 61 2e 73 74 61 74 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 72 3d 61 2e 63 6f 75 6e 74 72 79 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 75 3d 30 3b 75 3c 74 2e 52 75 6c 65 53 65 74 2e 6c 65 6e 67 74 68 3b 75 2b 2b 29 69 66 28 21 30 3d 3d 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 47 6c 6f 62 61 6c 29 6e 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 65 6c 73 65 7b 76 61 72 20 6c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 53 74 61 74 65 73 3b 69 66 28 6c 5b 72 5d 26 26 30 3c 3d 6c 5b 72 5d 2e 69 6e 64 65 78 4f 66 28 73 29 29 7b 69 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 3b 62 72 65 61 6b 7d 30 3c 3d 74 2e 52 75 6c 65 53 65 74 5b 75 5d 2e 43 6f 75 6e 74 72 Data Ascii: o&&0<o.length?o[0]:null;for(var s=a.state.toLowerCase(),r=a.country.toLowerCase(),u=0;u<t.RuleSet.length;u++)if(!0===t.RuleSet[u].Global)n=t.RuleSet[u];else{var l=t.RuleSet[u].States;if(l[r]&&0<=l[r].indexOf(s)){i=t.RuleSet[u];break}0<=t.RuleSet[u].Countr
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 70 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 2c 70 2e 67 65 6f 6c 6f 63 61 74 69 6f 6e 43 6f 6f 6b 69 65 73 50 61 72 61 6d 29 2e 73 70 6c 69 74 28 22 3b 22 29 5b 30 5d 3b 74 3f 74 68 69 73 2e 69 73 42 6f 6f 6c 65 61 6e 28 74 29 3f 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 22 74 72 75 65 22 3d 3d 3d 74 3a 70 2e 6f 6e 65 54 72 75 73 74 49 41 42 67 64 70 72 41 70 70 6c 69 65 73 47 6c 6f 62 61 6c 6c 79 3d 30 3c 3d 70 2e 45 55 43 4f 55 4e 54 52 49 45 53 2e 69 6e 64 65 78 4f 66 28 74 29 3a 70 2e 69 73 53 74 75 62 52 65 61 64 79 3d 21 31 7d 2c 68 2e 70 72 6f 74 6f 74 79 70 65 2e 69 73 Data Ascii: unction(){var t=this.readCookieParam(p.optanonCookieName,p.geolocationCookiesParam).split(";")[0];t?this.isBoolean(t)?p.oneTrustIABgdprAppliesGlobally="true"===t:p.oneTrustIABgdprAppliesGlobally=0<=p.EUCOUNTRIES.indexOf(t):p.isStubReady=!1},h.prototype.is

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	828	OUT	GET /app-435b8291d068da48aef5.js HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:03 UTC	968	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"4166dd20ca3a3646f8e3aeabebe52cf9" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nUg2lI04uq5Spw%2Fg%2BkM1%2Bh0ECrEIiIqAB%2FkgKl1B5qwhM89vaUkwlqyyd6a3dGAeT673%2FZVByE5FX3K2rZrM8EmKJlnC%2FEbgutc%2FJkxE3W%2Bbv2VlXDtYhysSoD%2BpuiQdFWe%2FfQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84eedff34384-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 37 66 66 32 0d 0a 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 61 70 70 2d 34 33 35 62 38 32 39 31 64 30 36 38 64 61 34 38 61 65 66 35 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 63 6c 6f 75 64 66 6c 61 72 65 5f 6d 72 6b 65 6e 67 5f 72 65 64 77 6f 6f 64 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 35 32 34 5d 2c 7b 33 38 31 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 74 2c 7b 5a 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: 7ff2/! For license information please see app-435b8291d068da48aef5.js.LICENSE.txt /(self.webpackChunk_cloudflare_mrkeng_redwood=self.webpackChunk_cloudflare_mrkeng_redwood\|\|[]).push([[524],{38157:function(e,t,n){"use strict";n.d(t,{Z:function(){retur
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 61 6d 65 3a 6f 2c 73 74 79 6c 65 3a 6e 3f 6c 3a 76 6f 69 64 20 30 7d 2c 74 29 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 73 72 63 2c 6e 3d 65 2e 63 75 73 74 6f 6d 65 72 43 6f 64 65 2c 6f 3d 65 2e 61 64 55 72 6c 2c 6c 3d 65 2e 63 6f 6e 74 72 6f 6c 73 2c 63 3d 76 6f 69 64 20 30 21 3d 3d 6c 26 26 6c 2c 6d 3d 65 2e 6d 75 74 65 64 2c 70 3d 76 6f 69 64 20 30 21 3d 3d 6d 26 26 6d 2c 66 3d 65 2e 61 75 74 6f 70 6c 61 79 2c 68 3d 76 6f 69 64 20 30 21 3d 3d 66 26 26 66 2c 67 3d 65 2e 6c 6f 6f 70 2c 5f 3d 76 6f 69 64 20 30 21 3d 3d 67 26 26 67 2c 76 3d 65 2e 70 72 65 6c 6f 61 64 2c 79 3d 76 6f 69 64 20 30 3d 3d 3d 76 3f 22 6d 65 74 61 64 61 74 61 22 3a 76 2c 62 3d 65 2e 70 72 69 6d 61 72 79 43 6f 6c 6f 72 2c 45 3d 65 2e 6c 65 74 74 65 72 Data Ascii: ame:o,style:n?l:void 0},t)},m=function(e){var t=e.src,n=e.customerCode,o=e.adUrl,l=e.controls,c=void 0!==l&&l,m=e.muted,p=void 0!==m&&m,f=e.autoplay,h=void 0!==f&&f,g=e.loop,_=void 0!==g&&g,v=e.preload,y=void 0===v?"metadata":v,b=e.primaryColor,E=e.letter
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 6c 65 74 74 65 72 62 6f 78 43 6f 6c 6f 72 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 75 29 2c 6d 26 26 22 73 74 61 72 74 54 69 6d 65 3d 22 2b 6d 2c 6e 26 26 22 6d 75 74 65 64 3d 74 72 75 65 22 2c 6f 26 26 22 70 72 65 6c 6f 61 64 3d 22 2b 6f 2c 61 26 26 22 6c 6f 6f 70 3d 74 72 75 65 22 2c 69 26 26 22 61 75 74 6f 70 6c 61 79 3d 74 72 75 65 22 2c 21 73 26 26 22 63 6f 6e 74 72 6f 6c 73 3d 66 61 6c 73 65 22 5d 2e 66 69 6c 74 65 72 28 42 6f 6f 6c 65 61 6e 29 2e 6a 6f 69 6e 28 22 26 22 29 3b 72 65 74 75 72 6e 28 30 2c 72 2e 75 73 65 4d 65 6d 6f 29 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 3f 22 68 74 74 70 73 3a 2f 2f 63 75 73 74 6f 6d 65 72 2d 22 2b 66 2b 22 2e 63 6c 6f 75 64 66 6c 61 72 65 73 74 72 65 61 6d 2e 63 6f Data Ascii: letterboxColor="+encodeURIComponent(u),m&&"startTime="+m,n&&"muted=true",o&&"preload="+o,a&&"loop=true",i&&"autoplay=true",!s&&"controls=false"].filter(Boolean).join("&");return(0,r.useMemo)((function(){return f?"https://customer-"+f+".cloudflarestream.co
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 74 65 22 2c 75 65 2c 72 65 29 2c 73 28 22 76 6f 6c 75 6d 65 63 68 61 6e 67 65 22 2c 75 65 2c 6f 65 29 2c 73 28 22 77 61 69 74 69 6e 67 22 2c 75 65 2c 61 65 29 2c 73 28 22 73 74 72 65 61 6d 2d 61 64 73 74 61 72 74 22 2c 75 65 2c 69 65 29 2c 73 28 22 73 74 72 65 61 6d 2d 61 64 65 6e 64 22 2c 75 65 2c 73 65 29 2c 73 28 22 73 74 72 65 61 6d 2d 61 64 74 69 6d 65 6f 75 74 22 2c 75 65 2c 6c 65 29 2c 73 28 22 72 65 73 69 7a 65 22 2c 75 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 75 65 2e 63 75 72 72 65 6e 74 29 7b 76 61 72 20 74 3d 75 65 2e 63 75 72 72 65 6e 74 2c 6e 3d 74 2e 76 69 64 65 6f 48 65 69 67 68 74 2c 72 3d 74 2e 76 69 64 65 6f 57 69 64 74 68 3b 70 65 28 7b 76 69 64 65 6f 48 65 69 67 68 74 3a 6e 2c 76 69 64 65 6f 57 69 64 74 68 3a 72 7d 29 2c Data Ascii: te",ue,re),s("volumechange",ue,oe),s("waiting",ue,ae),s("stream-adstart",ue,ie),s("stream-adend",ue,se),s("stream-adtimeout",ue,le),s("resize",ue,(function(e){if(ue.current){var t=ue.current,n=t.videoHeight,r=t.videoWidth;pe({videoHeight:n,videoWidth:r}),
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 41 44 49 4e 47 5f 32 3d 22 68 65 61 64 69 6e 67 2d 32 22 2c 65 2e 48 45 41 44 49 4e 47 5f 33 3d 22 68 65 61 64 69 6e 67 2d 33 22 2c 65 2e 48 45 41 44 49 4e 47 5f 34 3d 22 68 65 61 64 69 6e 67 2d 34 22 2c 65 2e 48 45 41 44 49 4e 47 5f 35 3d 22 68 65 61 64 69 6e 67 2d 35 22 2c 65 2e 48 45 41 44 49 4e 47 5f 36 3d 22 68 65 61 64 69 6e 67 2d 36 22 2c 65 2e 4f 4c 5f 4c 49 53 54 3d 22 6f 72 64 65 72 65 64 2d 6c 69 73 74 22 2c 65 2e 55 4c 5f 4c 49 53 54 3d 22 75 6e 6f 72 64 65 72 65 64 2d 6c 69 73 74 22 2c 65 2e 4c 49 53 54 5f 49 54 45 4d 3d 22 6c 69 73 74 2d 69 74 65 6d 22 2c 65 2e 48 52 3d 22 68 72 22 2c 65 2e 51 55 4f 54 45 3d 22 62 6c 6f 63 6b 71 75 6f 74 65 22 2c 65 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 3d 22 65 6d 62 65 64 64 65 64 2d 65 6e 74 72 79 Data Ascii: ADING_2="heading-2",e.HEADING_3="heading-3",e.HEADING_4="heading-4",e.HEADING_5="heading-5",e.HEADING_6="heading-6",e.OL_LIST="ordered-list",e.UL_LIST="unordered-list",e.LIST_ITEM="list-item",e.HR="hr",e.QUOTE="blockquote",e.EMBEDDED_ENTRY="embedded-entry
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 3f 65 3a 7b 64 65 66 61 75 6c 74 3a 65 7d 7d 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 56 31 5f 4d 41 52 4b 53 3d 74 2e 56 31 5f 4e 4f 44 45 5f 54 59 50 45 53 3d 74 2e 54 45 58 54 5f 43 4f 4e 54 41 49 4e 45 52 53 3d 74 2e 48 45 41 44 49 4e 47 53 3d 74 2e 43 4f 4e 54 41 49 4e 45 52 53 3d 74 2e 56 4f 49 44 5f 42 4c 4f 43 4b 53 3d 74 2e 54 41 42 4c 45 5f 42 4c 4f 43 4b 53 3d 74 2e 4c 49 53 54 5f 49 54 45 4d 5f 42 4c 4f 43 4b 53 3d 74 2e 54 4f 50 5f 4c 45 56 45 4c 5f 42 4c 4f 43 4b 53 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 Data Ascii: efault\|\|function(e){return e&&e.__esModule?e:{default:e}};Object.defineProperty(t,"__esModule",{value:!0}),t.V1_MARKS=t.V1_NODE_TYPES=t.TEXT_CONTAINERS=t.HEADINGS=t.CONTAINERS=t.VOID_BLOCKS=t.TABLE_BLOCKS=t.LIST_ITEM_BLOCKS=t.TOP_LEVEL_BLOCKS=void 0;var a
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 5d 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 6e 5b 75 2e 42 4c 4f 43 4b 53 2e 54 41 42 4c 45 5f 48 45 41 44 45 52 5f 43 45 4c 4c 5d 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 6e 29 2c 74 2e 48 45 41 44 49 4e 47 53 3d 5b 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 31 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 32 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 33 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 34 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 35 2c 75 2e 42 4c 4f 43 4b 53 2e 48 45 41 44 49 4e 47 5f 36 5d 2c 74 2e 54 45 58 54 5f 43 4f 4e 54 41 49 4e 45 52 53 3d 72 28 5b 75 2e 42 4c 4f 43 4b 53 2e 50 41 52 41 47 52 41 50 48 5d 2c 74 2e 48 45 41 44 49 4e 47 53 Data Ascii: ]=[u.BLOCKS.PARAGRAPH],n[u.BLOCKS.TABLE_HEADER_CELL]=[u.BLOCKS.PARAGRAPH],n),t.HEADINGS=[u.BLOCKS.HEADING_1,u.BLOCKS.HEADING_2,u.BLOCKS.HEADING_3,u.BLOCKS.HEADING_4,u.BLOCKS.HEADING_5,u.BLOCKS.HEADING_6],t.TEXT_CONTAINERS=r([u.BLOCKS.PARAGRAPH],t.HEADINGS
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 74 3d 3d 3d 65 5b 72 5b 6e 5d 5d 29 72 65 74 75 72 6e 21 30 7d 72 65 74 75 72 6e 21 31 7d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 69 73 54 65 78 74 3d 74 2e 69 73 42 6c 6f 63 6b 3d 74 2e 69 73 49 6e 6c 69 6e 65 3d 76 6f 69 64 20 30 2c 74 2e 69 73 49 6e 6c 69 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 64 2e 49 4e 4c 49 4e 45 53 2c 65 2e 6e 6f 64 65 54 79 70 65 29 7d 2c 74 2e 69 73 42 6c 6f 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 28 75 2e 42 4c 4f 43 4b 53 2c 65 2e 6e 6f 64 65 54 79 70 65 29 7d 2c 74 2e 69 73 54 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 74 65 78 Data Ascii: t===e[r[n]])return!0}return!1}Object.defineProperty(t,"__esModule",{value:!0}),t.isText=t.isBlock=t.isInline=void 0,t.isInline=function(e){return n(d.INLINES,e.nodeType)},t.isBlock=function(e){return n(u.BLOCKS,e.nodeType)},t.isText=function(e){return"tex
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 74 2c 22 49 4e 4c 49 4e 45 53 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 49 4e 4c 49 4e 45 53 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 4d 41 52 4b 53 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 6d 29 2e 64 65 66 61 75 6c 74 7d 7d 29 2c 6f 28 70 2c 74 29 2c 6f 28 66 2c 74 29 2c 6f 28 68 2c 74 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 45 4d 50 54 59 5f 44 4f 43 55 4d 45 4e 54 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 28 67 29 2e 64 65 66 61 Data Ascii: t,"INLINES",{enumerable:!0,get:function(){return d.INLINES}}),Object.defineProperty(t,"MARKS",{enumerable:!0,get:function(){return i(m).default}}),o(p,t),o(f,t),o(h,t),Object.defineProperty(t,"EMPTY_DOCUMENT",{enumerable:!0,get:function(){return i(g).defa
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: 65 6e 74 28 22 68 34 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 48 45 41 44 49 4e 47 5f 35 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 35 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 48 45 41 44 49 4e 47 5f 36 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 68 36 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 45 4d 42 45 44 44 45 44 5f 45 4e 54 52 59 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 2c 6e 75 6c 6c 2c 74 29 7d 2c 79 5b 4d 2e 45 4d 42 45 44 44 45 44 5f 52 45 53 4f 55 52 43 45 5d 3d 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: ent("h4",null,t)},y[M.HEADING_5]=function(e,t){return a.createElement("h5",null,t)},y[M.HEADING_6]=function(e,t){return a.createElement("h6",null,t)},y[M.EMBEDDED_ENTRY]=function(e,t){return a.createElement("div",null,t)},y[M.EMBEDDED_RESOURCE]=function(e

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:03 UTC	872	OUT	GET /favicon.ico HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:03 UTC	911	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:03 GMT Content-Type: image/vnd.microsoft.icon Transfer-Encoding: chunked Connection: close ETag: W/"ffb25f3edc5c56acfdf7e7cdffcb217c" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1ViT6%2BPlxdR72YqUJzrBurx54BuloiBNQDpB6PxCiqF9jYpbhW140lvm2EU%2BK6QTSVJHrW2BcpCbL4UjjZncItXI6wwDpq3OF%2BXxmd%2Bqjr%2Bnh4miASZ%2Fl9tLCPDJtWA8QuHxzw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84ef7e5cfbfb-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:03 UTC	458	IN	Data Raw: 39 62 35 0d 0a 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 09 67 49 44 41 54 78 5e ed 9c 0d b0 54 55 1d c0 cf b9 5f fb fd 7c 5f fb f0 21 8f 8f 92 04 b3 52 9f cc 18 90 28 53 d6 a4 98 cd 40 84 f6 01 8a 41 08 53 69 8d 59 7e 94 d9 c8 a7 90 23 98 33 45 c1 34 a0 39 45 4a d9 d0 68 81 02 35 bd 1a 13 1a 34 23 44 94 07 cb 7b 6f df be dd bd bb 7b bf ce bf ff b9 8f 47 4f e2 c1 dd bd bb fb f6 c9 d9 99 c3 79 bb f7 ff f9 fb 9f 7b f7 9e b3 e7 42 88 78 09 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 82 80 20 20 08 08 02 ef 25 Data Ascii: 9b5PNGIHDR``w8pHYs+gIDATx^TU_\|_!R(S@ASiY~#3E49EJh54#D{o{GOy{Bx %
2025-03-17 18:23:03 UTC	1369	IN	Data Raw: e0 4f ab e6 0a 90 5a 37 ad 45 01 d6 41 fa 3a c7 fa 4b ad 08 6d 59 23 e1 89 ed 0f 4a 9f 7f ea a1 22 b4 ca 22 5a 53 05 48 ad 9d 76 b1 62 1b 07 88 de a5 96 25 bb 22 8d 84 2e 9b b1 55 9e bd f9 96 22 d5 7c 89 4b be b4 cb a8 8c f0 27 a8 76 e1 df c3 05 9f a7 92 ff e7 ae 79 ec d7 f3 1f 2b 63 5a e7 34 55 13 05 48 ac bc ba 4e 61 c6 ab a0 77 9f 33 e0 4a 0b e4 f6 ef 5c 06 bf fd ca fc 4a fb 19 b0 5f 13 05 88 06 95 3f 92 4c 57 ac 5a 49 9f d5 0f 00 d1 f7 ed fe 19 6c 5b 38 a9 1a f1 0c 7b 01 72 1b ae 5d 0c c9 b7 db ab 91 ac 67 1f a6 4e 0a 9d 6f be ec 59 de 87 e0 b0 16 a0 73 e5 d4 20 64 d3 4f f8 88 bf 62 aa 4e d7 c1 66 78 fa 73 df ad 98 83 93 86 87 b5 00 b1 00 dd 00 b9 61 9f 8c 0e c9 38 f7 f6 a1 87 cd 8d b3 82 95 2c 82 52 09 e3 89 55 d7 5c 1c 0d ca 53 35 4d 99 44 a8 14 b6 Data Ascii: OZ7EA:KmY#J""ZSHvb%".U"\|K'vy+cZ4UHNaw3J\J_?LWZIl[8{r]gNoYs dObNfxsa8,RU\S5MD
2025-03-17 18:23:03 UTC	665	IN	Data Raw: c7 70 a4 0f 8c 78 de f3 b3 83 30 13 cf 22 13 9d f7 d9 44 7a ed a2 fb 3b 4a 4a 18 fe 7e 6f 0b 91 c9 14 b4 3f 0e 0b d0 82 0f 86 c4 f1 2c 6b 61 96 5d 8f 0f 8a 34 82 a5 6b 2c 9f 6a a5 66 f6 ac bb ba b5 b1 1f de e8 16 a0 6f cd 15 db e5 4c f2 c6 8a d1 af 45 c3 78 0d 53 e3 6d 7b b1 52 37 45 ef dc 7d ce ad 19 f0 97 65 71 42 d9 0a 2b d9 77 0b 64 8f 06 ca 91 92 dc 3c f9 1d 9a 58 3d b5 35 a2 1f eb ac e4 e8 2f 47 b0 15 b3 11 ac 23 52 43 c3 47 c2 8b 5e da 37 94 0f d8 f9 85 2d 66 f7 b1 79 e5 66 44 63 e3 88 72 41 88 cd b1 b3 25 9d 89 15 63 52 55 c3 38 c1 64 7a 68 2f fa 8c 9e ee d7 f9 fd ec 7a 60 d6 ab 66 d7 d1 8a 6c 95 87 42 37 de 83 84 9a 96 54 35 e1 5a 74 96 4e 44 f4 1f 4f bf 74 70 68 6c fb 4d 4d 4e 21 73 d0 c9 a5 2b 02 df f5 65 e9 44 32 0a d6 25 b5 c8 a4 da 31 c9 14 Data Ascii: px0"Dz;JJ~o?,ka]4k,jfoLExSm{R7E}eqB+wd<X=5/G#RCG^7-fyfDcrA%cRU8dzh/z`flB7T5ZtNDOtphlMMN!s+eD2%1
2025-03-17 18:23:03 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:04 UTC	567	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:04 UTC	471	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 921e84f29f084291-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6a 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 6a 65 7c 7c 28 6a 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var je;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(je\|\|(je={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 Data Ascii: xecute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirect
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 Data Ascii: rams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugS
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c Data Ascii: language,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 74 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: l(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&te(p,v.prototype),p},Oe.apply(null,a
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 Data Ascii: r));function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 Data Ascii: height="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verti

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:04 UTC	670	OUT	GET /public/vendor/onetrust/consent/b1e05d49-f072-4bae-9116-bdb78af15448/b1e05d49-f072-4bae-9116-bdb78af15448.json HTTP/1.1 Host: ot.www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:04 UTC	1031	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:04 GMT Content-Type: application/json Content-Length: 5370 Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate ETag: "58546ca5d4eb4f4a13ab1bb5353b1bd2" X-Robots-Tag: noindex Set-Cookie: __cf_bm=aUKcpQmOF2A2_DvAg8W.k7n.He7FZnjf.PIyoag63rw-1742235784-1.0.1.1-zujCXd23OASkpH.X0i7XlnYJdu0Ym7SfuUPrdbvXbhWqHph9oN.6pOl2ctgnzqLlClQ8lCe4PFU92.G0sizoteK6rP5yGqcG8faIVwog0YQ_5DyJsONuDQ5D_xf379G.; path=/; expires=Mon, 17-Mar-25 18:53:04 GMT; domain=.www.cloudflare.com; HttpOnly; Secure; SameSite=None Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uIjEndjFdRPyPb6rqck99CfFt6a25hi5BGtru83EeJDb12MLcBpowMJ%2Bg1g4mkJyhRnZR%2BmGlKW64U5XGCMbGtSP98n2K2kpWzwGRrymubDS6FHIUx41raXwXqgOLMEwliCzk7BfNg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84f34e8d4211-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:04 UTC	338	IN	Data Raw: 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 53 61 6d 65 53 69 74 65 4e 6f 6e 65 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 43 6f 6f 6b 69 65 56 32 43 53 50 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 4c 4f 43 41 4c 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 32 30 32 34 30 37 2e 32 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 62 31 65 30 35 64 34 39 2d 66 30 37 32 2d 34 62 Data Ascii: {"CookieSPAEnabled":true,"CookieSameSiteNoneEnabled":false,"CookieV2CSPEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"202407.2.0","OptanonDataJSON":"b1e05d49-f072-4b
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 65 6e 74 70 75 62 2f 76 31 2f 67 65 6f 2f 6c 6f 63 61 74 69 6f 6e 22 2c 22 42 75 6c 6b 44 6f 6d 61 69 6e 43 68 65 63 6b 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 63 6f 6f 6b 69 65 73 2d 64 61 74 61 2e 6f 6e 65 74 72 75 73 74 2e 69 6f 2f 62 61 6e 6e 65 72 73 64 6b 2f 76 31 2f 64 6f 6d 61 69 6e 67 72 6f 75 70 63 68 65 63 6b 22 2c 22 52 75 6c 65 53 65 74 22 3a 5b 7b 22 49 64 22 3a 22 30 31 38 64 65 62 66 62 2d 34 63 61 34 2d 37 35 33 37 2d 39 39 32 64 2d 34 34 37 38 36 61 66 62 36 36 66 39 22 2c 22 4e 61 6d 65 22 3a 22 45 55 20 6f 6e 6c 79 22 2c 22 43 6f 75 6e 74 72 69 65 73 22 3a 5b 22 6e 6f 22 2c 22 64 65 22 2c 22 62 65 22 2c 22 66 69 22 2c 22 70 74 22 2c 22 62 67 22 2c 22 64 6b 22 2c 22 6c 74 22 2c 22 6c 75 22 2c 22 68 72 22 2c 22 6c 76 22 2c 22 66 72 22 Data Ascii: entpub/v1/geo/location","BulkDomainCheckUrl":"https://cookies-data.onetrust.io/bannersdk/v1/domaingroupcheck","RuleSet":[{"Id":"018debfb-4ca4-7537-992d-44786afb66f9","Name":"EU only","Countries":["no","de","be","fi","pt","bg","dk","lt","lu","hr","lv","fr"
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 62 6c 22 2c 22 62 6d 22 2c 22 62 6e 22 2c 22 62 6f 22 2c 22 73 61 22 2c 22 62 71 22 2c 22 73 62 22 2c 22 73 63 22 2c 22 62 72 22 2c 22 73 64 22 2c 22 62 73 22 2c 22 62 74 22 2c 22 62 76 22 2c 22 73 67 22 2c 22 73 68 22 2c 22 62 77 22 2c 22 73 6a 22 2c 22 62 79 22 2c 22 62 7a 22 2c 22 73 6c 22 2c 22 73 6e 22 2c 22 73 6f 22 2c 22 63 61 22 2c 22 73 72 22 2c 22 73 73 22 2c 22 63 63 22 2c 22 63 64 22 2c 22 73 74 22 2c 22 73 76 22 2c 22 63 66 22 2c 22 63 67 22 2c 22 73 78 22 2c 22 63 68 22 2c 22 63 69 22 2c 22 73 79 22 2c 22 73 7a 22 2c 22 63 6b 22 2c 22 63 6c 22 2c 22 63 6d 22 2c 22 63 6f 22 2c 22 74 63 22 2c 22 63 72 22 2c 22 74 64 22 2c 22 74 66 22 2c 22 63 75 22 2c 22 63 76 22 2c 22 74 67 22 2c 22 63 77 22 2c 22 74 68 22 2c 22 63 78 22 2c 22 74 6a 22 2c 22 Data Ascii: bl","bm","bn","bo","sa","bq","sb","sc","br","sd","bs","bt","bv","sg","sh","bw","sj","by","bz","sl","sn","so","ca","sr","ss","cc","cd","st","sv","cf","cg","sx","ch","ci","sy","sz","ck","cl","cm","co","tc","cr","td","tf","cu","cv","tg","cw","th","cx","tj","
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 2c 22 64 65 66 61 75 6c 74 22 3a 22 7a 68 22 2c 22 65 6e 22 3a 22 65 6e 22 7d 2c 22 42 61 6e 6e 65 72 50 75 73 68 65 73 44 6f 77 6e 22 3a 66 61 6c 73 65 2c 22 44 65 66 61 75 6c 74 22 3a 66 61 6c 73 65 2c 22 47 6c 6f 62 61 6c 22 3a 66 61 6c 73 65 2c 22 54 79 70 65 22 3a 22 47 44 50 52 22 2c 22 55 73 65 47 6f 6f 67 6c 65 56 65 6e 64 6f 72 73 22 3a 66 61 6c 73 65 2c 22 56 61 72 69 61 6e 74 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 73 74 45 6e 64 54 69 6d 65 22 3a 6e 75 6c 6c 2c 22 56 61 72 69 61 6e 74 73 22 3a 5b 5d 2c 22 54 65 6d 70 6c 61 74 65 4e 61 6d 65 22 3a 22 47 44 50 52 20 54 65 6d 70 6c 61 74 65 20 2d 20 41 64 61 70 74 65 64 20 46 6f 72 20 43 68 69 6e 61 22 2c 22 43 6f 6e 64 69 74 69 6f 6e 73 22 3a 5b 5d 2c 22 47 43 45 6e 61 62 6c 65 22 Data Ascii: ,"default":"zh","en":"en"},"BannerPushesDown":false,"Default":false,"Global":false,"Type":"GDPR","UseGoogleVendors":false,"VariantEnabled":false,"TestEndTime":null,"Variants":[],"TemplateName":"GDPR Template - Adapted For China","Conditions":[],"GCEnable"
2025-03-17 18:23:04 UTC	925	IN	Data Raw: 22 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 63 6f 6f 6b 69 65 6c 61 77 2e 6f 72 67 2f 76 65 6e 64 6f 72 6c 69 73 74 2f 67 6f 6f 67 6c 65 44 61 74 61 2e 6a 73 6f 6e 22 7d 2c 22 53 63 72 69 70 74 44 79 6e 61 6d 69 63 4c 6f 61 64 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 54 65 6e 61 6e 74 46 65 61 74 75 72 65 73 22 3a 7b 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 46 6f 63 75 73 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 52 65 6a 65 63 74 41 6c 6c 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 50 43 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 47 65 6f 6c 6f 63 61 74 69 6f 6e 4a 73 6f 6e 41 70 69 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 54 43 46 32 31 22 3a 74 72 75 65 2c 22 43 6f 6f 6b 69 65 56 32 42 61 6e 6e 65 72 4c 6f 67 6f 22 Data Ascii: ":"https://cdn.cookielaw.org/vendorlist/googleData.json"},"ScriptDynamicLoadEnabled":false,"TenantFeatures":{"CookieV2BannerFocus":true,"CookieV2RejectAll":true,"CookieV2GPC":true,"CookieV2GeolocationJsonApi":true,"CookieV2TCF21":true,"CookieV2BannerLogo"

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:04 UTC	549	OUT	GET /beacon.js HTTP/1.1 Host: performance.radar.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:04 UTC	1326	IN	HTTP/1.1 403 Forbidden Date: Mon, 17 Mar 2025 18:23:04 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 7702 Connection: close accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cf-mitigated: challenge critical-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA cross-origin-embedder-policy: require-corp cross-origin-opener-policy: same-origin cross-origin-resource-policy: same-origin origin-agent-cluster: ?1 permissions-policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=() referrer-policy: same-origin server-timing: chlray;desc="921e84f3ee3bed71" x-content-options: nosniff x-frame-options: SAMEORIGIN
2025-03-17 18:23:04 UTC	809	IN	Data Raw: 63 66 2d 63 68 6c 2d 6f 75 74 3a 20 43 75 70 50 2b 54 52 30 64 64 54 30 59 63 73 75 42 76 70 38 39 50 4a 4c 6a 4d 4d 64 57 58 50 52 52 69 75 61 75 54 47 39 79 35 4b 2f 78 57 6f 52 49 6b 61 50 41 50 64 66 77 2f 57 71 47 59 42 64 79 2b 4b 65 66 6f 78 70 56 30 4d 2b 65 6d 71 32 62 2b 31 58 6d 7a 46 37 33 4e 55 78 43 4b 2f 71 78 4b 70 71 42 43 45 78 70 39 6f 78 45 56 39 44 52 35 44 63 76 35 31 38 51 6a 4d 79 41 44 4b 35 36 73 33 65 32 55 35 6a 71 79 70 47 6a 2f 42 59 57 43 48 67 63 77 3d 3d 24 57 74 2f 4b 77 33 38 4c 59 7a 6a 31 43 63 51 69 67 68 4a 67 5a 77 3d 3d 0d 0a 43 61 63 68 65 2d 43 6f 6e 74 72 6f 6c 3a 20 70 72 69 76 61 74 65 2c 20 6d 61 78 2d 61 67 65 3d 30 2c 20 6e 6f 2d 73 74 6f 72 65 2c 20 6e 6f 2d 63 61 63 68 65 2c 20 6d 75 73 74 2d 72 65 76 61 Data Ascii: cf-chl-out: CupP+TR0ddT0YcsuBvp89PJLjMMdWXPRRiuauTG9y5K/xWoRIkaPAPdfw/WqGYBdy+KefoxpV0M+emq2b+1XmzF73NUxCK/qxKpqBCExp9oxEV9DR5Dcv518QjMyADK56s3e2U5jqypGj/BYWCHgcw==$Wt/Kw38LYzj1CcQighJgZw==Cache-Control: private, max-age=0, no-store, no-cache, must-reva
2025-03-17 18:23:04 UTC	603	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 4a 75 73 74 20 61 20 6d 6f 6d 65 6e 74 2e 2e 2e 3c 2f 74 69 74 6c 65 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 45 64 67 65 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: <!DOCTYPE html><html lang="en-US"><head><title>Just a moment...</title><meta http-equiv="Content-Type" content="text/html; charset=UTF-8"><meta http-equiv="X-UA-Compatible" content="IE=Edge"><meta name="robots" content="noindex,nofollow"><meta name="viewp
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 76 68 7d 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 3a 38 72 65 6d 20 61 75 74 6f 3b 6d 61 78 2d 77 69 64 74 68 3a 36 30 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 2e 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 69 64 74 68 20 3c 3d 20 37 32 30 70 78 29 7b 2e 6d 61 69 6e 2d 63 6f 6e 74 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 72 65 6d 7d 7d 2e 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 2e 32 35 72 65 6d 7d 40 6d 65 64 69 61 20 28 77 Data Ascii: y{display:flex;flex-direction:column;height:100vh;min-height:100vh}.main-content{margin:8rem auto;max-width:60rem;padding-left:1.5rem}@media (width <= 720px){.main-content{margin-top:4rem}}.h2{font-size:1.5rem;font-weight:500;line-height:2.25rem}@media (w
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 69 70 74 3e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 76 49 64 3a 20 27 33 27 2c 63 5a 6f 6e 65 3a 20 22 70 65 72 66 6f 72 6d 61 6e 63 65 2e 72 61 64 61 72 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 22 2c 63 54 79 70 65 3a 20 27 6e 6f 6e 2d 69 6e 74 65 72 61 63 74 69 76 65 27 2c 63 52 61 79 3a 20 27 39 32 31 65 38 34 66 33 65 65 33 62 65 64 37 31 27 2c 63 48 3a 20 27 71 63 36 61 31 4c 31 57 33 36 57 2e 54 6b 6d 50 4f 73 39 70 57 62 44 59 32 4a 69 36 55 70 48 30 4d 31 62 61 72 4a 4b 45 33 42 77 2d 31 37 34 32 32 33 35 37 38 34 2d 31 2e 32 2e 31 2e 31 2d 57 2e 4f 6a 4b 78 71 48 67 54 78 76 6c 37 38 7a 64 65 6d 62 2e 38 38 62 6f 6d 55 45 72 61 6b 72 64 7a 6c 44 6d 6e 59 74 59 6c 74 57 47 79 4e 6c 64 Data Ascii: ipt>(function(){window._cf_chl_opt={cvId: '3',cZone: "performance.radar.cloudflare.com",cType: 'non-interactive',cRay: '921e84f3ee3bed71',cH: 'qc6a1L1W36W.TkmPOs9pWbDY2Ji6UpH0M1barJKE3Bw-1742235784-1.2.1.1-W.OjKxqHgTxvl78zdemb.88bomUErakrdzlDmnYtYltWGyNld
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 51 59 35 4a 73 5f 53 4f 5f 6e 55 52 46 4b 6b 30 55 65 71 34 6b 65 74 50 79 58 62 30 51 79 32 50 7a 33 43 52 53 73 47 51 6a 44 44 73 47 6b 54 42 55 6b 4f 62 59 4c 4a 55 72 77 47 70 33 4e 4d 48 51 51 64 7a 69 68 5f 47 46 51 61 69 61 43 6c 34 58 70 31 79 6a 78 69 70 50 6a 68 32 61 4f 55 61 50 71 32 41 71 59 6c 35 36 51 34 4c 5f 2e 71 6a 6a 72 57 74 63 36 6b 51 6c 35 44 33 72 53 62 5a 39 6f 46 69 65 45 4f 44 4b 65 42 42 46 4c 64 7a 2e 55 6d 39 43 33 59 53 76 39 4e 4d 59 67 45 36 4e 5f 6c 30 4e 72 75 5f 47 6a 52 6c 59 4c 41 6f 5a 69 64 37 66 70 47 77 58 52 36 36 56 59 58 6c 5a 56 55 35 4b 35 63 74 53 6d 4f 6e 52 5f 69 56 5f 4d 6c 58 6b 6b 38 4e 56 4c 39 6d 59 4b 6c 33 4e 6d 4d 41 77 67 42 39 69 50 4c 72 4d 49 59 67 69 4e 75 41 66 64 30 43 54 64 39 5a 74 76 69 Data Ascii: QY5Js_SO_nURFKk0Ueq4ketPyXb0Qy2Pz3CRSsGQjDDsGkTBUkObYLJUrwGp3NMHQQdzih_GFQaiaCl4Xp1yjxipPjh2aOUaPq2AqYl56Q4L_.qjjrWtc6kQl5D3rSbZ9oFieEODKeBBFLdz.Um9C3YSv9NMYgE6N_l0Nru_GjRlYLAoZid7fpGwXR66VYXlZVU5K5ctSmOnR_iV_MlXkk8NVL9mYKl3NmMAwgB9iPLrMIYgiNuAfd0CTd9Ztvi
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 69 47 73 74 67 61 61 45 74 6e 64 61 4d 51 46 6d 71 45 49 6c 49 4d 62 73 4b 63 63 4c 63 4f 38 58 5f 48 37 4a 4c 5f 43 37 59 6c 72 42 70 4a 41 72 69 4d 61 46 6d 32 75 56 6a 74 72 79 59 61 53 32 39 43 56 35 33 4f 37 66 47 54 4b 7a 4e 41 4e 4a 6c 69 5a 56 57 61 39 6f 58 52 52 47 75 4b 4f 37 65 58 69 53 31 67 77 32 32 56 53 59 78 63 74 59 63 4b 59 6c 44 39 45 4c 74 55 4d 78 49 51 76 32 35 42 4f 69 41 6d 66 65 44 58 70 4e 31 71 61 75 76 6a 51 32 59 79 41 49 39 4c 77 48 41 77 67 47 6a 77 33 34 54 38 4d 35 75 72 58 66 4e 53 4e 76 55 56 44 32 72 58 39 77 35 33 58 4a 78 56 43 65 6c 4f 61 30 6c 44 48 37 76 54 57 4e 4d 55 52 44 41 51 4e 39 46 58 4c 75 4e 69 74 46 57 62 31 6c 51 37 31 54 6c 6c 6b 6d 2e 34 63 54 6f 70 62 6b 30 46 5f 42 31 57 4b 63 39 44 45 63 78 6b 61 Data Ascii: iGstgaaEtndaMQFmqEIlIMbsKccLcO8X_H7JL_C7YlrBpJAriMaFm2uVjtryYaS29CV53O7fGTKzNANJliZVWa9oXRRGuKO7eXiS1gw22VSYxctYcKYlD9ELtUMxIQv25BOiAmfeDXpN1qauvjQ2YyAI9LwHAwgGjw34T8M5urXfNSNvUVD2rX9w53XJxVCelOa0lDH7vTWNMURDAQN9FXLuNitFWb1lQ71Tllkm.4cTopbk0F_B1WKc9DEcxka
2025-03-17 18:23:04 UTC	1369	IN	Data Raw: 43 4e 6e 50 62 66 48 35 37 68 6c 6c 4a 74 58 62 38 42 32 4e 34 66 69 38 61 76 51 2e 4b 5a 46 76 55 65 4f 5f 51 73 58 57 53 58 6e 61 48 7a 5f 74 4b 4d 44 6e 33 5f 55 69 35 61 4c 59 36 37 75 78 33 41 36 77 58 41 74 7a 70 44 37 42 70 7a 4b 5f 5f 48 2e 45 7a 30 48 62 5a 5a 51 6d 73 57 48 30 66 68 44 67 59 6b 62 75 51 44 55 67 57 4e 39 53 61 57 57 56 77 6e 75 2e 30 73 73 42 44 32 37 75 36 5f 58 65 67 49 4a 79 41 4e 43 37 2e 4c 35 47 49 78 61 6c 2e 61 65 44 6d 51 65 65 68 6b 69 56 33 6a 32 68 6f 45 54 46 42 51 70 42 54 66 67 71 74 39 45 6b 4e 6a 48 4c 73 5f 36 75 53 77 51 61 70 4a 77 57 38 6f 37 71 46 4a 4f 53 55 5f 44 42 61 6d 30 73 35 5a 37 79 67 61 5f 63 38 42 51 7a 64 6b 47 6f 42 5f 55 76 37 38 69 4d 61 61 45 44 6b 6c 4b 51 42 72 47 39 64 68 36 77 73 53 68 Data Ascii: CNnPbfH57hllJtXb8B2N4fi8avQ.KZFvUeO_QsXWSXnaHz_tKMDn3_Ui5aLY67ux3A6wXAtzpD7BpzK__H.Ez0HbZZQmsWH0fhDgYkbuQDUgWN9SaWWVwnu.0ssBD27u6_XegIJyANC7.L5GIxal.aeDmQeehkiV3j2hoETFBQpBTfgqt9EkNjHLs_6uSwQapJwW8o7qFJOSU_DBam0s5Z7yga_c8BQzdkGoB_Uv78iMaaEDklKQBrG9dh6wsSh
2025-03-17 18:23:04 UTC	254	IN	Data Raw: 78 34 6d 4b 50 38 51 2d 31 37 34 32 32 33 35 37 38 34 2d 31 2e 30 2e 31 2e 31 2d 6a 38 31 62 74 4f 30 74 5a 73 58 4c 33 42 6e 43 31 4a 56 33 6b 37 44 38 47 6c 2e 65 30 76 55 56 46 65 34 52 58 6d 5a 35 7a 46 51 22 20 2b 20 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 2e 63 4f 67 55 48 61 73 68 29 3b 63 70 6f 2e 6f 6e 6c 6f 61 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 28 6e 75 6c 6c 2c 20 6e 75 6c 6c 2c 20 6f 67 55 29 3b 7d 7d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 27 68 65 61 64 27 29 5b 30 5d 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 63 70 6f 29 3b 7d 28 29 29 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: x4mKP8Q-1742235784-1.0.1.1-j81btO0tZsXL3BnC1JV3k7D8Gl.e0vUVFe4RXmZ5zFQ" + window._cf_chl_opt.cOgUHash);cpo.onload = function() {history.replaceState(null, null, ogU);}}document.getElementsByTagName('head')[0].appendChild(cpo);}());</script></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:05 UTC	900	OUT	POST /cdn-cgi/rum? HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive Content-Length: 1629 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" content-type: application/json sec-ch-ua-mobile: ?0 Accept: / Origin: https://www.cloudflare.com Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:05 UTC	1629	OUT	Data Raw: 7b 22 6d 65 6d 6f 72 79 22 3a 7b 22 74 6f 74 61 6c 4a 53 48 65 61 70 53 69 7a 65 22 3a 31 30 30 30 39 35 34 38 2c 22 75 73 65 64 4a 53 48 65 61 70 53 69 7a 65 22 3a 35 38 39 33 31 35 32 2c 22 6a 73 48 65 61 70 53 69 7a 65 4c 69 6d 69 74 22 3a 32 32 34 38 31 34 36 39 34 34 7d 2c 22 72 65 73 6f 75 72 63 65 73 22 3a 5b 5d 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 62 6c 67 77 6c 6e 61 75 74 6f 2e 63 6f 6d 2f 22 2c 22 65 76 65 6e 74 54 79 70 65 22 3a 31 2c 22 66 69 72 73 74 50 61 69 6e 74 22 3a 31 32 32 30 2c 22 66 69 72 73 74 43 6f 6e 74 65 6e 74 66 75 6c 50 61 69 6e 74 22 3a 31 32 32 30 2c 22 73 74 61 72 74 54 69 6d 65 22 3a 31 37 34 32 32 33 35 37 38 30 34 38 39 2e 33 2c 22 76 65 72 73 69 6f 6e 73 22 3a 7b 22 66 6c 22 3a 22 32 30 32 35 Data Ascii: {"memory":{"totalJSHeapSize":10009548,"usedJSHeapSize":5893152,"jsHeapSizeLimit":2248146944},"resources":[],"referrer":"https://blgwlnauto.com/","eventType":1,"firstPaint":1220,"firstContentfulPaint":1220,"startTime":1742235780489.3,"versions":{"fl":"2025
2025-03-17 18:23:05 UTC	375	IN	HTTP/1.1 204 No Content Date: Mon, 17 Mar 2025 18:23:05 GMT Connection: close access-control-allow-origin: https://www.cloudflare.com access-control-allow-methods: POST,OPTIONS access-control-max-age: 86400 vary: Origin access-control-allow-credentials: true Server: cloudflare CF-RAY: 921e84f97db74261-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:05 UTC	820	OUT	GET /page-data/app-data.json HTTP/1.1 Host: www.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.cloudflare.com/learning/access-management/phishing-attack/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: _cfms_willow=enable; __cf_bm=oZYed63ZT0IsWNT0njpBTqDiiTezf_cI5GM1RmcCrVY-1742235781-1.0.1.1-4zEs.m7_syA7syFVbTk0AIU0P7Ox5CEGVZssqeeC104qT.zfEK.bG9uXCVQAzmIXFuX0Ziylw0x.0l.E3efqu.HHkadBi_w5rO5_Todb85WVlFX.oEjijAboQy2j60Av
2025-03-17 18:23:05 UTC	977	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:05 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cache-Control: public, max-age=0, must-revalidate ETag: W/"de6e5589c9882402959c207b0b2f7fca" Strict-Transport-Security: max-age=31536000; includeSubDomains Permissions-Policy: geolocation=(), camera=(), microphone=() Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-GWW-LOC: EN-US X-PGS-LOC: EN-US X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oaekxwYVauAJA%2FsJujy%2Fk%2FhX6%2FR90sCAHzx7oi1AEJEojqSA3LlGMuk8Pa%2B0srVG6JEea%2FEYYNfU29XXyij0pl0IdN%2FdZ6HE%2BTeiR05q1yH7u%2Ffr6V%2BgqlAdBmY5YLKCYgmRtA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84fc4eba1dcc-EWR alt-svc: h3=":443"; ma=86400
2025-03-17 18:23:05 UTC	56	IN	Data Raw: 33 32 0d 0a 7b 22 77 65 62 70 61 63 6b 43 6f 6d 70 69 6c 61 74 69 6f 6e 48 61 73 68 22 3a 22 61 32 36 61 30 61 33 30 38 35 37 66 35 39 65 33 64 30 64 61 22 7d 0a 0d 0a Data Ascii: 32{"webpackCompilationHash":"a26a0a30857f59e3d0da"}
2025-03-17 18:23:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 18:23:05 UTC	577	OUT	GET /logger-1.min.js HTTP/1.1 Host: cdn.logr-ingest.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.cloudflare.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 18:23:05 UTC	1236	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 18:23:05 GMT Content-Type: text/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * Cache-Control: public, max-age=14400 cross-origin-resource-policy: cross-origin etag: W/"9a697f2f7b5a5ed3c09f079c31d949086e7d95dda725fa0822f8b3792ee6a559-br" last-modified: Mon, 17 Mar 2025 17:19:41 GMT strict-transport-security: max-age=31556926 x-served-by: cache-lga21925-LGA x-cache: HIT x-cache-hits: 1 x-timer: S1742232136.200438,VS0,VE68 vary: x-fh-requested-host, accept-encoding alt-svc: h3=":443"; ma=86400 CF-Cache-Status: HIT Age: 36 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ms8vJIvHupdV43%2FiUb6r1Su%2BHTYkCpG8gFIyTintQdGB%2BKF8VJziuFAn%2FFRlSmWMF07a%2FgQdKuHUvfk6Jc4HZsnH1MBauPA0%2B4jkclQOJkp97bIazCNMF0yocUZix5Y4R16HGazu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921e84fc585f97d2-EWR server-timing: cfL4;desc="?proto=TCP&rtt=2139&min_rtt=1963&rtt_var=1090&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1149&delivery_rate=864416&cwnd=75&unsent_bytes=0&cid=79c6eac7d1998e1c&ts=149&x=0"
2025-03-17 18:23:05 UTC	133	IN	Data Raw: 37 62 35 62 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 7b 31 32 37 30 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 6e 3d 72 28 36 34 38 33 36 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 65 6e 63 6f 64 65 3d Data Ascii: 7b5b!function(){var e={12706:function(e,t,r){"use strict";var n=r(64836);Object.defineProperty(t,"__esModule",{value:!0}),t.encode=
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 70 28 65 29 29 7d 2c 74 2e 65 6e 63 6f 64 65 41 73 54 61 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 70 28 65 29 7d 2c 74 2e 64 65 63 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 65 3c 30 29 72 65 74 75 72 6e 20 6e 28 65 29 3b 76 61 72 20 74 3d 6e 65 77 20 41 72 72 61 79 28 65 2e 6c 65 6e 67 74 68 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 20 69 6e 20 74 3f 74 5b 65 5d 3a 74 5b 65 5d 3d 6e 28 65 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 74 29 7b 69 66 28 74 3c 30 29 7b 69 66 28 Data Ascii: function(e){return JSON.stringify(p(e))},t.encodeAsTable=function(e){return p(e)},t.decode=function(e){return function(e){if("number"==typeof e&&e<0)return n(e);var t=new Array(e.length);function r(e){return e in t?t[e]:t[e]=n(e)}function n(t){if(t<0){if(
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 69 6f 6e 20 6e 28 65 29 7b 73 77 69 74 63 68 28 28 30 2c 6f 2e 64 65 66 61 75 6c 74 29 28 65 29 29 7b 63 61 73 65 22 75 6e 64 65 66 69 6e 65 64 22 3a 72 65 74 75 72 6e 20 69 3b 63 61 73 65 22 6e 75 6d 62 65 72 22 3a 69 66 28 69 73 4e 61 4e 28 65 29 29 72 65 74 75 72 6e 20 73 3b 69 66 28 21 69 73 46 69 6e 69 74 65 28 65 29 29 72 65 74 75 72 6e 20 65 3c 30 3f 63 3a 75 7d 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 72 3f 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 72 2e 67 65 74 28 65 29 29 26 26 28 6e 3d 74 2e 70 75 73 68 28 65 29 2d 31 2c 72 2e 73 65 74 28 65 2c 6e 29 29 3a 28 6e 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 29 3c 30 26 26 28 6e 3d 74 2e 70 75 73 68 28 65 29 2d 31 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 29 7b 76 61 72 20 74 3d 65 3b 69 66 28 65 26 26 Data Ascii: ion n(e){switch((0,o.default)(e)){case"undefined":return i;case"number":if(isNaN(e))return s;if(!isFinite(e))return e<0?c:u}var n;return r?void 0===(n=r.get(e))&&(n=t.push(e)-1,r.set(e,n)):(n=t.indexOf(e))<0&&(n=t.push(e)-1),n}function f(e){var t=e;if(e&&
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 6e 65 77 20 52 65 67 45 78 70 28 65 5b 30 5d 2c 65 5b 31 5d 29 7d 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 65 74 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 41 72 72 61 79 2e 66 72 6f 6d 26 26 66 28 22 53 65 74 22 2c 7b 64 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 5b 6f 62 6a 65 63 74 20 53 65 74 5d 22 3d 3d 3d 64 2e 63 61 6c 6c 28 65 29 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 2c 72 65 63 6f 6e 73 74 72 75 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 6e 65 77 20 53 65 74 3b 65 2e 66 6f 72 45 61 63 68 28 74 68 69 73 2e 61 Data Ascii: struct:function(e){return e&&new RegExp(e[0],e[1])}}),"function"==typeof Set&&"function"==typeof Array.from&&f("Set",{deconstruct:function(e){if("[object Set]"===d.call(e))return Array.from(e)},reconstruct:function(e){if(!e)return new Set;e.forEach(this.a
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6e 3d 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 7b 7d 29 2e 61 73 73 65 74 43 61 70 74 75 72 65 2c 6f 3d 76 6f 69 64 20 30 3d 3d 3d 6e 3f 7b 7d 3a 6e 3b 28 30 2c 61 2e 64 65 66 61 75 6c 74 29 28 74 68 69 73 2c 65 29 2c 74 68 69 73 2e 63 61 70 74 75 72 65 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 74 72 79 3d 28 30 2c 75 2e 70 72 6f 74 65 63 74 46 75 6e 63 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 69 66 28 22 6e 61 76 69 67 61 74 69 6f 6e 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 29 72 2e 5f 61 64 64 52 65 73 6f 75 Data Ascii: nction(){function e(t){var r=this,n=(arguments.length>1&&void 0!==arguments[1]?arguments[1]:{}).assetCapture,o=void 0===n?{}:n;(0,a.default)(this,e),this.capturePerformanceEntry=(0,u.protectFunc)((function(e){if(e)if("navigation"===e.entryType)r._addResou
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 29 28 6e 2c 22 62 6c 6f 62 3a 22 29 29 7b 76 61 72 20 6f 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 6f 2e 68 72 65 66 3d 6e 3b 76 61 72 20 69 2c 61 3d 7b 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3a 74 2c 6e 61 6d 65 3a 6f 2e 68 72 65 66 2c 73 74 61 72 74 54 69 6d 65 3a 44 61 74 65 2e 6e 6f 77 28 29 7d 2c 73 3d 28 72 2e 5f 6c 6f 67 67 65 72 2e 67 65 74 43 6f 6e 66 69 67 28 22 6c 72 2e 6e 65 74 77 6f 72 6b 2e 50 65 72 66 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 29 7c 7c 7b 7d 29 2e 72 65 71 75 65 73 74 53 61 6e 69 74 69 7a 65 72 2c 63 3d 76 6f 69 64 20 30 3d 3d 3d 73 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 3a 73 3b 74 72 79 7b 69 3d 63 28 6c 28 6c 28 7b 7d 2c 61 29 2c 7b 7d 2c 7b 75 72 6c Data Ascii: )(n,"blob:")){var o=document.createElement("a");o.href=n;var i,a={initiatorType:t,name:o.href,startTime:Date.now()},s=(r._logger.getConfig("lr.network.PerfResourceEvent")\|\|{}).requestSanitizer,c=void 0===s?function(e){return e}:s;try{i=c(l(l({},a),{},{url
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 5b 7b 6b 65 79 3a 22 73 65 74 50 65 72 66 6f 72 6d 61 6e 63 65 53 74 61 74 75 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 68 69 73 2e 5f 69 73 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 61 62 6c 65 64 3d 65 2c 74 68 69 73 2e 5f 62 72 6f 77 73 65 72 4c 6f 61 64 54 69 6d 65 3d 74 7d 7d 2c 7b 6b 65 79 3a 22 73 65 74 44 6f 6d 53 74 61 74 75 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3d 21 31 3d 3d 3d 74 68 69 73 2e 5f 69 73 44 69 73 61 62 6c 65 64 26 26 21 30 3d 3d 3d 74 68 69 73 2e 5f 69 73 50 65 72 66 6f 72 6d 61 6e 63 65 45 6e 61 62 6c 65 64 26 26 65 2c 74 68 69 73 2e 5f 69 73 44 6f 6d 45 6e 61 62 6c 65 64 3f 74 68 69 73 2e 5f 73 63 68 65 64 75 6c 65 43 6c 6f Data Ascii: [{key:"setPerformanceStatus",value:function(e,t){this._isPerformanceEnabled=e,this._browserLoadTime=t}},{key:"setDomStatus",value:function(e){this._isDomEnabled=!1===this._isDisabled&&!0===this._isPerformanceEnabled&&e,this._isDomEnabled?this._scheduleClo
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 63 6c 6f 73 65 64 52 65 71 75 65 73 74 73 3d 74 7d 7d 2c 7b 6b 65 79 3a 22 5f 61 64 64 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3f 61 72 67 75 6d 65 6e 74 73 5b 31 5d 3a 32 30 30 2c 6e 3d 22 6e 61 76 69 67 61 74 69 6f 6e 22 3d 3d 3d 65 2e 65 6e 74 72 79 54 79 70 65 3f 22 6e 61 76 69 67 61 74 69 6f 6e 22 3a 65 2e 69 6e 69 74 69 61 74 6f 72 54 79 70 65 3b 74 68 69 73 2e 5f 6c 6f 67 67 65 72 2e 61 64 64 45 76 65 6e 74 28 22 6c 72 2e 6e 65 74 77 6f 72 6b 2e 50 65 72 66 52 65 73 6f 75 72 63 65 45 76 65 6e 74 22 2c 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: closedRequests=t}},{key:"_addResourceEvent",value:function(e){var t=this,r=arguments.length>1&&void 0!==arguments[1]?arguments[1]:200,n="navigation"===e.entryType?"navigation":e.initiatorType;this._logger.addEvent("lr.network.PerfResourceEvent",(function(
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 64 52 65 71 75 65 73 74 73 3d 5b 5d 2c 74 68 69 73 2e 5f 63 6c 6f 73 69 6e 67 4c 6f 6f 70 54 69 6d 65 72 26 26 28 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 74 68 69 73 2e 5f 63 6c 6f 73 69 6e 67 4c 6f 6f 70 54 69 6d 65 72 29 2c 74 68 69 73 2e 5f 63 6c 6f 73 69 6e 67 4c 6f 6f 70 54 69 6d 65 72 3d 6e 75 6c 6c 29 7d 7d 5d 29 2c 65 7d 28 29 3b 74 2e 64 65 66 61 75 6c 74 3d 64 7d 2c 36 36 30 34 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 55 54 4d 5f 50 41 52 41 4d 5f 4b 45 59 3d 74 2e 55 54 4d 5f 50 41 52 41 4d 45 54 45 52 5f 54 4f 5f 45 56 45 4e 54 5f 4b 45 59 5f 4d 41 Data Ascii: dRequests=[],this._closingLoopTimer&&(clearTimeout(this._closingLoopTimer),this._closingLoopTimer=null)}}]),e}();t.default=d},66044:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.UTM_PARAM_KEY=t.UTM_PARAMETER_TO_EVENT_KEY_MA
2025-03-17 18:23:05 UTC	1369	IN	Data Raw: 35 32 36 38 29 29 2c 75 3d 6e 28 72 28 38 31 39 32 36 29 29 2c 63 3d 6e 28 72 28 36 33 35 36 29 29 2c 6c 3d 6e 28 72 28 35 38 35 37 35 29 29 2c 66 3d 6e 28 72 28 36 33 32 33 31 29 29 2c 64 3d 72 28 37 35 33 37 33 29 2c 70 3d 72 28 38 30 38 37 31 29 7d 2c 38 31 39 32 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 64 65 66 61 75 6c 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6e 2e 61 64 64 4c 69 73 74 65 6e 65 72 29 28 22 63 6f 70 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 64 65 61 64 43 6c 69 63 6b 73 4d 6f 6e 69 74 6f 72 2e Data Ascii: 5268)),u=n(r(81926)),c=n(r(6356)),l=n(r(58575)),f=n(r(63231)),d=r(75373),p=r(80871)},81926:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.default=function(e){return(0,n.addListener)("copy",(function(){e._deadClicksMonitor.